Privacy, in plain view.

1. Information we collect

Account and identity information

We collect the identifiers needed to create, authenticate, secure, and maintain your account. This may include an email address, username, account identifier, display name, authentication or session information and, if you choose password sign-in, a password verifier derived using a one-way cryptographic process. OSM does not store your readable password.

Password reset and private recovery information

If you use password sign-in, we may process a temporary password-reset code sent to your email address. Reset codes expire and are stored only in protected form. If you choose to keep a private recovery copy of certain account information, that copy is encrypted using information derived from your password. Resetting your password permanently deletes that encrypted recovery copy because the previous password can no longer unlock it.

Profile and discovery information

We collect information you choose to add to your profile or use for discovery, such as your display name, profile photo, biography, age, city or general region, relationship intentions, interests, profile tags, appearance or style preferences and discovery settings.

Birth and astrology information

If you use Arkana or SoulMap features, we collect the birth date, birth time, birth place and birth-location coordinates you provide, along with the astrological chart, SoulMap, interpretations, compatibility results and related preferences generated from that information. You choose whether to provide this information and whether certain Arkana information is shared with another user.

Location information

With your permission, OSM may access device location to support nearby discovery and location-aware features. The app may use precise device location to determine a coarser city, region or country. OSM’s discovery service is designed to publish coarse location information rather than a continuously visible precise location. Birth-location coordinates provided for astrology features are separate from your current device location. You can change location permission in iOS Settings; disabling it may limit nearby discovery.

Messages and other user content

We collect content you send or upload through OSM, including messages, profile photos, invitation previews, Arkana conversations and information you choose to share with other users. Some content may also remain stored on your device.

Relationships, safety and activity information

We collect information necessary to operate social and safety features, including invitations and responses, matches or relationships, blocks, account-deletion state, online or discoverable status, last-seen timestamps and relevant feature interactions.

Reports and moderation

If you report a user or message, we collect the report identifier, reporter and reported-account identifiers, report category and reason, the reported message identifier, the screen or feature where the report originated and—when reporting a message—an excerpt of up to 500 characters from the reported message. This information is used only for safety, moderation, abuse prevention, investigation, enforcement, legal compliance and related appeals.

Device, push, security and diagnostic information

We may collect device and app information needed to operate and protect OSM, such as push-notification tokens, app environment and bundle information, request timestamps, IP address, authentication events, rate-limit events, service-health information and security or error logs. OSM does not use this information for advertising tracking.

2. How we use information

We use collected information to create and secure accounts; provide password sign-in and account recovery; provide profiles, discovery, invitations, relationships, messaging, blocking and notifications; generate requested Arkana, SoulMap, astrology and compatibility features; personalize discovery; process reports and enforce safety rules; prevent fraud and abuse; maintain service reliability; and comply with law and protect legal rights.

3. When we disclose information

Other users

Information you place on your visible profile, discovery card, invitations, messages and content you intentionally share may be visible to other OSM users according to your settings and actions. Blocking or changing discovery settings limits future visibility but may not remove content another user previously received or stored.

Service providers

We use service providers to host infrastructure, store data, deliver push notifications, send transactional emails, process app requests and support requested features. These providers may process information only to perform services for OSM and must protect it consistently with this policy and applicable law. Current infrastructure includes Apple services for app distribution and push delivery, Render-hosted OSM and Arkana services, and Resend for transactional emails such as password-reset codes.

Safety and legal reasons

We may preserve or disclose information when reasonably necessary to comply with law or valid legal process; respond to emergencies; investigate abuse, fraud, security incidents or violations; protect the rights and safety of users or others; or establish, exercise or defend legal claims.

Business transfers

If OSM is involved in a merger, financing, acquisition, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and notice requirements.

4. Data retention

Account, profile, relationship and server-hosted message information is generally kept while your account is active and removed or de-identified following a valid deletion request, subject to legal and safety exceptions. Password credentials are removed when an account is permanently deleted. Password-reset codes expire and are removed after their limited validity period. An encrypted private recovery copy is removed if you reset your password or permanently delete your account.

Push tokens are kept until invalidated, replaced, disabled or no longer associated with an active account. Open moderation reports are kept while review is pending, and report records and supporting evidence may be retained for up to 24 months after resolution. Operational and security logs are ordinarily retained for up to 90 days unless needed longer for an incident. Limited information may remain in encrypted backups until normal rotation. Deleting the app does not by itself delete server-hosted information.

5. Your choices and rights

You can edit profile and discovery information; control discovery, sharing, notifications and device permissions; block another user; withdraw optional Arkana sharing consent; and delete your account using the Delete Account control in OSM Settings. You may contact us to request access, correction, deletion or a copy of personal information, or to object to or restrict certain processing where applicable.

Identity verification

We may need to verify your identity before completing a privacy request. Some information may be retained where an exception described in this policy applies. Depending on where you live, you may have a right to appeal our response or complain to your local data-protection authority.

6. Security

We use administrative, technical and organizational safeguards intended to protect information, including authenticated service access, role-restricted operational access, encrypted network transport, rate limiting, security logging and access controls. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

7. Children

OSM is not intended for children under 18. We do not knowingly permit anyone under 18 to create an account. If you believe a person under 18 has provided personal information, contact us so we can investigate and delete it where appropriate.

8. International processing

OSM and its service providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we use appropriate safeguards for international transfers.

9. Changes to this policy

We may update this policy as OSM changes. We will update the date above and provide additional notice when required by law or when a change materially affects your privacy choices.

10. Contact us