Privacy Policy

Effective Date: April 21, 2026

This Privacy Policy ("Policy") describes how Oktant ("Oktant," "we," "our," or "us") collects, uses, discloses, and otherwise processes your personal information when you use our website, mobile applications, and services (collectively, the "Services"). This Policy forms part of our Terms of Service.

You must be at least 18 years old to use Oktant. Do not use the Services if you are under 18. If we become aware that an individual under 18 has provided us with personal information, we will take steps to remove the data and delete that individual's account.

1. Personal Information We Collect

Information You Provide Directly

• Account & Profile: Email address, display name, and account plan details (e.g., Pathfinder, Navigator etc).
• Quest & Resonance Data: Season data, quest logs, rites, pulses, resonance scores, and progress metrics — the core data used to track your personal growth journey.
• Reflections & Journals: Personal reflections, observations, and journal entries you choose to record. This data may contain sensitive personal information.
• Crew Relationships: Connections you establish with other Oktant users (crew members) and related activity.
• Communications: Any information you provide when contacting our support team.
• Payment Information: If you subscribe to a Premium plan, payment is processed by the Apple App Store or Google Play. We do not directly collect or store your payment card details.

Information Collected Automatically

• Device & Usage Data: Device type, operating system, browser type, IP address, session duration, app usage patterns, and crash reports — collected via Firebase Analytics and the Meta (Facebook) SDK.
• Advertising Identifiers: On Android, we may collect your Google Advertising ID (GAID); on iOS, we may collect your Identifier for Advertisers (IDFA), subject to your App Tracking Transparency consent. These identifiers are used by Firebase Analytics and the Meta (Facebook) SDK for attribution and conversion measurement. You can reset or opt out of your advertising ID through your device settings.
• Website Analytics & Tracking Pixels: On our website, we use Google Analytics, Google Tags, and the Meta Pixel to collect technical data about browsing patterns, traffic sources, page views, and conversion events (such as sign-up click-throughs). The Meta Pixel may place cookies on your browser to measure the effectiveness of our advertising on Meta platforms (Facebook, Instagram).
• In-App Event Tracking (Meta SDK): Within our mobile and web applications, we use the Meta (Facebook) SDK to track custom events such as registration completions, subscription events, content views, and other in-app interactions. This data is sent to Meta to measure advertising performance and optimize ad delivery. No personal content (such as journal entries, reflections, or resonance scores) is shared through these events.

Information from Third Parties

• RevenueCat: Subscription status, plan tier, and billing-cycle information to manage your Premium subscription.
• Firebase (Google): Authentication data, cloud storage references, and analytics events.
• Google Analytics: Aggregated traffic and conversion data for our website and app.
• Meta Platforms (Facebook): Advertising attribution data, conversion event data, and campaign performance metrics via the Meta Pixel and Facebook SDK.

2. Sensitive Data

Your personal reflections, journal entries, and resonance assessments may contain sensitive personal information. We treat this data with extra care:

• All resonance data, reflections, and journals are kept private within the ecosystem.
• This data is not shared with other users, including your crew members.
• This data is not sold to third parties.
• This data is used solely to provide you with your resonance scores, progress tracking, and personal insights.

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing the Services: Managing your account, processing quest data, calculating resonance scores and percentages, and delivering the core app experience.
• Communications: Sending quest reminders, achievement notifications, product updates and responding to your support requests.
• Service Improvement: Analyzing aggregated, non-identifying usage data to improve app performance, fix bugs, and develop new features.
• Subscription Management: Managing your subscription status and plan tier via RevenueCat.
• Analytics & Attribution: Using device advertising identifiers (such as the Google Advertising ID) in conjunction with Firebase Analytics and the Meta (Facebook) SDK to measure the effectiveness of our marketing campaigns, attribute app installs to advertising sources, and track conversion events. On our website, the Meta Pixel tracks page views, content views, and sign-up click-throughs. Within our apps, the Facebook SDK tracks custom events such as registrations, subscriptions, and feature usage. This data helps us understand how users discover Oktant and optimize our advertising spend.
• Security: Detecting, preventing, and responding to fraud, unauthorized access, and other security issues.
• Legal Compliance: Complying with applicable laws and responding to legally valid requests from authorities.
• Future Advertising: We reserve the right to use data for advertising purposes within the app in the future. If and when this changes, we will update this Policy and notify you in advance. You will have the ability to manage your advertising preferences.

4. How We Share Your Information

We do not sell your personal data. Currently, we do not monetize your data outside of subscription revenue.

We share your information only with the following categories of recipients:

• Firebase (Google): For authentication, cloud data storage, and analytics.
• RevenueCat: For subscription and billing management.
• Google Analytics: For website and app usage analytics.
• Google Ads: Advertising identifiers and conversion event data may be shared with Google Ads to measure the effectiveness of our advertising campaigns and attribute app installs to ad interactions.
• Meta Platforms, Inc. (Facebook/Instagram): We share event-level data with Meta through the Meta Pixel (on our website) and the Facebook SDK (in our mobile and web apps). This includes page views, conversion events (e.g., registrations, subscriptions), device identifiers, and technical data such as IP address and browser/device information. Meta uses this data to measure advertising effectiveness, optimize ad delivery, and build advertising audiences. We do not share personal content such as journal entries, reflections, or resonance scores with Meta. For more information on how Meta processes this data, see Meta's Privacy Policy.
• Law Enforcement: When required by applicable South African or international law to respond to legally valid requests.
• Business Transactions: If Oktant is acquired, merged, or undergoes a business transaction, your information may be transferred to the successor entity in accordance with applicable law.

If our data sharing practices change (for example, to support in-app advertising), we will update this Policy and notify users before the change takes effect.

5. Your Privacy Rights

Depending on your location, you may have the following rights under data protection laws such as POPIA (South Africa) or GDPR (European Economic Area):

• Right to Access: Confirm whether we process your personal information and obtain a copy.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal information, subject to legal obligations.
• Right to Restrict Processing: Request limitation of how we process your personal information in certain circumstances.
• Right to Opt-Out: Opt out of marketing communications at any time via the "unsubscribe" link in our emails.
• Right against Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Appeal: If we deny a privacy rights request, you have the right to appeal by contacting us at [email protected] with "APPEAL" in the subject line.
• Advertising ID Controls: You can reset or limit the use of your advertising ID through your device settings. On Android, go to Settings → Privacy → Ads. On iOS, go to Settings → Privacy & Security → Tracking. Opting out or resetting your advertising ID will limit our ability to associate your activity with previous analytics data.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

6. Data Deletion

You can delete your account and user data at any time through the app's built-in deletion process: Profile → Account Settings → Delete User Data. When you delete your account:

• Your profile details (display name, preferences) are removed.
• All quest data, season data, resonance scores, reflections, and journal entries are permanently erased.
• All crew relationships and associated activity are cleared.
• Your email address is hashed (SHA-256) and retained solely to identify previously existing accounts, ensuring that free trial offers are not extended to returning users. The hashed value cannot be reversed to recover your email address.

Account deletion is irreversible. Once your data is deleted, it cannot be recovered. Please note that deleting your account or the Oktant app does not automatically cancel your subscription — you must cancel separately through the Apple App Store or Google Play Store.

7. Data Security

We maintain reasonable technical, organizational, and administrative safeguards designed to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit and at rest via Firebase's built-in security measures.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your personal information.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We also retain information as necessary to:

• Comply with our legal obligations.
• Resolve disputes and enforce our agreements.
• Maintain business records as required by applicable law.

When determining retention periods, we consider the amount, nature, and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure; and applicable legal requirements.

When you delete your account, your personal data is removed as described in the Data Deletion section above. Only a hashed (irreversible) version of your email is retained.

9. International Data Transfers

Oktant uses Firebase (Google Cloud) infrastructure hosted in US-Central. As a result, your personal information may be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those in your country of residence.

When we transfer your personal information outside of South Africa, we do so in accordance with the Protection of Personal Information Act (POPIA) and take appropriate steps to ensure your information is adequately protected. By using the Services, you acknowledge and consent to the transfer of your information to the United States.

10. South African Users (POPIA)

For users located in South Africa, the Processing of Personal Information Act, 2013 (POPIA) governs the processing of your personal information. Under POPIA:

• We process your personal information based on your consent (given when you create an account and agree to these terms) and where processing is necessary to perform the Services.
• You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.
• Our Information Officer can be reached at [email protected].

11. Artificial Intelligence

Oktant does not currently use artificial intelligence or machine learning to process your personal data. If we implement AI-powered features in the future to assist the user experience, we will update this Policy accordingly and notify you before any such processing begins.

Should AI features be introduced, any output or recommendations generated by such technology may contain errors or inaccuracies and should not be relied upon as sole guidance for important decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page and, where appropriate, via in-app notification or email. Continued use of the Services after notification constitutes acceptance of the updated Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us:

• By email: [email protected]