Privacy Policy

Last updated: July 31, 2026 · Roselight is operated by Be'ing Here LLC (West Chester, Pennsylvania, USA).

The short version

We collect only what the app needs to work: your email, an optional first name, a password if you set one (stored only as a hash — we can't read it), and the things you choose to keep or send us. No ads, no trackers, no analytics, no selling of data. Ever. Everything below just spells that out.

What we collect

When you create an account we store your email address, and your first name if you give one. If you set a password, we store only a scrambled hash of it — never the password itself. If you ask us for a charm, that request is saved so we can build it. If you write to us through the contact form, your message is emailed to us. That's the list.

Creating an account also signs you up for our member emails — what's new each month and a few notes when you start — and every one of them carries a one-click unsubscribe.

Your journal

On a free account, your journal lives in your browser's local storage on your own device — it is not sent to us and we cannot see it. Clearing your browser data removes it, which is why the journal has an export button; we recommend using it.

If you join The Practice or The Deep Practice, your journal syncs to our database so it can travel with you across devices. That means your entries are stored with us. You can export them any time with the journal's export button, delete any entry, or delete your whole account (below) — and they're gone.

The AI that helps weave readings

When you ask the cards a question, your question and the cards you drew (never your name or email) are sent to an AI service — Groq — to help write your reading. On The Deep Practice, the Monthly Weave also sends the journal notes you ask it to read. Under Groq's terms, what we send isn't kept and isn't used to train their models. Every reading also carries a plain note that it was woven with the help of AI.

One cookie, no trackers

Signing in sets one cookie — rl_session — which keeps you signed in and does nothing else. It is strictly necessary for the app to work, which is why you don't see a cookie banner here: there are no tracking cookies, no analytics, and no ad pixels to ask you about. The app also uses local storage on your device for your daily-card value, your free-tier journal, and offline caching — none of it identifies you to us.

Who helps us run Roselight

A few companies process data on our behalf, and only to run the app: Supabase (our database), Resend (sends our emails), Stripe (payments — handled on Stripe's own pages, we never see or store your card number), Groq (the AI above), and Vercel (hosts the site). Their servers are in the United States, so your data is processed there. None of them may use your information for their own purposes.

How long we keep things

Account data stays until you delete your account. Journal entries stay until you delete them — or your account. If you unsubscribe from email, we keep your address on a do-not-email list so we never write to you again; that's the one thing deletion keeps, on purpose.

Your rights

You can export your journal any time with the export button. You can delete your account yourself on your account page — it removes your account, your journal, and your requests, and stops all email. And you can always write to us at roselightcards@be-inghere.com to ask what we hold about you, correct it, or have us delete it. We honor these promptly.

Children

Roselight is for ages 16 and up, and is not directed at children. Our physical decks are sold to adults — including the ones made to be gifted to a child.

Contact

Be'ing Here LLC · roselightcards@be-inghere.com

If this policy changes, the date above changes with it — and we will never quietly weaken it. For how Roselight itself is offered — readings, memberships, and purchases — see our Terms of Use & Sale.