Last updated: October 31, 2026

Ascended Social Privacy Policy

Effective May 24, 2026 Third Eye Cyborg, LLC Last updated October 30, 2026

How Third Eye Cyborg, LLC collects, uses, stores, and shares information across the Ascended Social platform — written in plain language so you can make informed choices.

1. Overview

This Privacy Policy explains how Third Eye Cyborg, LLC ("we", "us", "Ascended Social") collects, uses, stores, and shares information when you use the Ascended Social platform — including the website, web app, mobile app, in-game experiences, and related APIs.

Ascended Social is a spiritual social network. Because of that, the content people share with us is often more sensitive than what is shared on a typical social platform. We disclose those practices in plain language below so you can make informed choices before submitting content.

2. The categories of data we collect

Account & identity data. Email address, display name, avatar, authentication identifiers (managed via Clerk), and basic profile preferences.

Spiritual and personal content. Posts, comments, manifestations, intentions, ritual notes, tarot and I-Ching readings, divination history, oracle consultations, in-game choices in As Above So Below and The Cosmos, and the language you use to describe your spiritual life. This content can reveal religious or philosophical beliefs, so we treat it as sensitive and apply heightened obligations to it under GDPR Article 9 and equivalent laws.

Mood and intention tags. Mood is an optional tag that you pick from a fixed list to describe the tone of a post. It describes the post. It is not a health record or a medical or psychological assessment. Mood and intention tags are shown with the post to anyone who can see that post (public posts are visible to signed-in members). People can use them to search, and community moderators and we may see them when reviewing content. We don't use AI to choose, suggest or change your mood tag. We don't send mood or intention tags to our analytics provider (PostHog), and we don't share them through federation. If you use AI-assisted mode, the content of your posts may be processed by our AI moderation providers (such as OpenAI) to check it against our rules. In AI-assisted mode, if you add an intention to a public post, AI may also check whether it fits the post using your intention and the post's text (or a video's transcript). AI never writes or changes it. Those requests don't include your user ID. In Human Community mode, mood and intention tags aren't sent to AI providers. Community reviewers or we review them instead. Tags are kept until you delete the post or your account.

Health information. We don't ask for or use information about your physical or mental health. If you choose to share health information in your own posts, it is treated as the content you chose to publish: it is visible to the people who can see that post, and it is subject to moderation like any other content. We don't use it to infer anything about your health.

Cosmos tool inputs and results. If you use an authenticated Cosmos tool, we may process the birth date, birth time, name, question, dream text, compatibility details, or place name needed by that tool. Place names are resolved through Roxy Location to obtain latitude, longitude, and an IANA timezone; users are not asked to provide raw coordinates. Cosmos history is opt-in: a result is saved only when you choose "Save result."

Ask Cosmos conversations and voice. Private chat messages are stored with the conversation so you can return to them, and a matched tool result is saved to Cosmos history only when you choose "Save result." Voice audio is sent to OpenAI to transcribe dictated questions or, in a live voice conversation, streamed to OpenAI so Cosmos can answer out loud. We don't keep the audio as a recording; the text of what you and Cosmos said becomes part of the conversation. OpenAI may keep it for up to 30 days to check for abuse and doesn't use it to train its models. Text sent for Speak playback is processed to generate private, uncached audio and is not used to name a conversation.

Before using Cosmos Tools, read the public preview and user guide. They explain the fourteen domains, server-side Roxy processing, opt-in history, deletion controls, and the limits of interpretive results.

Communications, chats, and messaging. Direct messages, group chats, and private network chat (text, images, audio, and video), including the report snapshot when someone in the conversation reports a message.

When you email our support, safety or copyright addresses, we keep your message in our inbox and record the sender, recipient, subject, date and a short excerpt in our admin tools so we can track and respond to it. We don't store attachments in our admin tools. Records are cleared on a set schedule after the matter is closed.

Social graph & engagement. Follows, sparks (likes), bookmarks, networks, whispers, and call/live session participation. Network project-board timesheets store who clocked in or out on a card, start and end times, optional notes, and which manager created or edited an entry.

Media uploads. Images, audio, and video files you upload. Public uploads may include moderation metadata from automated checks. Private Whisper and private-chat attachments are not sent to AI vendors.

Device & usage data. IP address, device and browser characteristics, referring URLs, country (via Cloudflare CF-IPCountry headers for jurisdiction routing), and basic telemetry about how you interact with the product.

Hosting and server logs. Our application host, Replit, keeps server-side request logs. Those logs can include your IP address, the page or API you requested, status codes, and response times. We use them for security and operations under our legitimate interest. They are not used for advertising.

Billing data. Web subscriptions are sold by Link, LLC, through Stripe Managed Payments, as merchant of record; energy packs on the web are sold by Polar as merchant of record; app purchases are processed by Apple or Google through RevenueCat. We do not receive or store full payment-card numbers.

Creator Partner Program. If you join the Creator Partner Program, our payout provider Stripe (Stripe Connect) collects your identity, bank account and tax details (including Form W-9 and your taxpayer identification number) to verify you and pay you. Stripe may issue Form 1099. We keep records of your payouts, statements, adjustments and the engagement used to calculate your share, and we use that engagement data to calculate shares and to detect fraud and artificial engagement. We keep payout and tax records for 7 years after your last payout, even if you delete your account, as tax law requires. The program is open only to US citizens or residents.

Compliance data. Privacy requests, consent choices, do-not-sell/share elections, jurisdiction signals, and audit-trail evidence required to demonstrate compliance.

3. How we use your data

We use the data above to: operate the platform; authenticate you; moderate content; recommend posts, books, and people; render avatars and game state; send transactional and (where you have opted in) marketing emails; bill subscriptions; investigate abuse; and meet our legal obligations.

In product Settings, users can choose an AI execution mode (auto, prefer_local, prefer_cloud, or local_only) to control how AI-assisted features are routed. In local_only mode, some generation features may be unavailable when local capability is not yet supported; the app surfaces clear guidance so users can switch modes if needed. On compatible Apple devices, local routing can use on-device Foundation Models where available. Public-content moderation remains active in all modes (including local_only). Private Whispers and private chats are never sent to AI; see section 3a.

3a. Content moderation, human review, and federation

Content moderation. Public content (posts, comments, public Whispers, public network chat, public Lives and calls) is moderated. If Use AI Features is on, it's checked by OpenAI's moderation API and Cloudflare, and flagged items may be analysed by an OpenAI model to help our moderators. If Use AI Features is off, or you choose Local Only, people review it instead. For now, images you post publicly and checks during public video calls and Lives may still use automated tools. Public Lives are recorded through Cloudflare Stream. We review child-safety reports and they are never sent to AI.

You can upload your own sigil image if you own it or have the right to use it. Uploaded sigils are held for review before anyone else can see them. In Human Community mode, a person reviews them and they're never sent to AI providers. In AI-assisted mode, they're checked by the same automated image tools we use for post images (OpenAI's moderation API and Cloudflare) before review. Copyright complaints about uploaded sigils use our DMCA Policy and in-app copyright reporting.

Private messages. We don't review or run AI checks on the content of private Whispers or private network chats (text, images, audio or video), in either mode. An Ascended Social moderator sees a private message only if someone in the conversation reports it. The report includes the messages they select and up to 10 messages before and after for context. We use limited non-content signals, such as message volume, blocks and reports, to fight spam and abuse. If we find child sexual abuse material, we're legally required to report it to the National Center for Missing & Exploited Children (NCMEC) and preserve it. We may also disclose content when the law requires it or to protect someone from imminent harm.

Federation is planned, but it has no launch date and isn't available today, and plans can change. When federation launches, public content delivered to Ascended Social and private communication with Ascended Social-hosted users would remain subject to our rules and moderation; private exchanges solely among users of independent self-hosted services that never pass through Ascended Social may be outside our moderation, and those operators and users would be responsible for their own rules and legal compliance. Ascended Social does not currently send your content or account data to other servers through federation, and other servers cannot follow or receive your content through Ascended Social. Before any federation feature launches, we will update this Privacy Policy to explain what data would be shared, with whom, how deletion would work, and what choices you have, and we will notify you before the change takes effect. Private messages involving Ascended Social-hosted users aren't proactively reviewed or checked by AI; they're reviewed by an Ascended Social moderator only when someone in the conversation reports them, or where the law requires.

4. Recommendations and vector embeddings

To power the Ascended Social recommendation engine and search, we generate vector embeddings — numerical representations — of posts and other public content. These embeddings capture the meaning of your content so we can suggest spiritually adjacent posts, books, and people.

When you delete a post, the corresponding embedding and indexed copy are removed from the recommendation and search stores in the same operation. When you delete your account, all embeddings tied to your content are removed as part of your account purge. See Delete your account for in-app steps, request-based deletion, and what we retain.

You can opt out of personalized recommendations at any time from the in-app Privacy Center; non-personalized fallback content is served instead.

5. Third-party processors and data flows

We share the minimum data required with the following processors, each bound by a data-processing agreement:

• Clerk — authentication and identity (email, user ID, session metadata), including sending sign-in and verification emails.
• PostHog — product analytics (anonymized event stream, only when you have given statistics consent).
• OneSignal — push-notification delivery, notification token/identifier management, and delivery analytics required to route notifications to your device, and delivery of transactional emails (such as account, purchase, moderation and policy-change notices) to your email address.
• RoxyAPI — server-side calculations and interpretive directory responses for Cosmos tools. We send only the fields required by the selected operation, never send the Ascended Social provider key to a client, and do not expose raw Roxy responses as a public API.
• Sentry — crash diagnostics, error monitoring, and performance telemetry used to detect, investigate, and fix reliability issues.
• Link, LLC, through Stripe Managed Payments — web subscription billing as merchant of record.
• RevenueCat & Polar — app subscription entitlement state (RevenueCat) and web energy pack sales as merchant of record (Polar), receipts. Purchases in our iOS and Android apps are processed by Apple or Google, and we receive purchase status through RevenueCat.
• Cloudflare — CDN, Turnstile bot defense, media storage, and edge workers (recommendations, public-content moderation, and triggering scheduled posts at their publish time, which stores only the scheduled post's ID and due time).
• Mapbox — map tiles and place search for location features you choose to use.
• Meshy — 3D avatar generation when you use Avatar Studio's generative path.
• Flashboard (getflashboard.com) — used only by us to review and manage records in our production database (access-controlled, admin login required).
• Zernio — social media management for our official channels (posts we publish and messages you send to our official social accounts).
• Neon — managed Postgres database hosting.
• Replit — application hosting.
• Expo / EAS — mobile app builds and over-the-air updates.
• GitHub — source code hosting and development tooling (used only by us).
• OpenAI — moderation of public content and AI features you choose to use; never private messages. Content sent through the API is not used to train OpenAI's models. We also send OpenAI a one-way hashed account identifier so it can detect abuse; it doesn't include your name or email.
• Slack (Salesforce, Inc.): receives the feedback you send us in the app (the feedback type, title, message, platform, and a feedback reference number) so we can read and respond to it. We don't add your name, email, or account ID to what we send Slack, so please leave them out of your message too.

We do not sell your personal information. We honor "Do Not Sell or Share My Personal Information" requests submitted through the Privacy Center.

6. Data retention

We keep your data only as long as we need it. Default retention windows are:

• Posts, comments, sparks, bookmarks: retained while your account is active. Hard-deleted within 30 days of you deleting them or your account.
• Oracle, tarot, and divination histories: retained for up to 24 months from creation, then automatically purged unless you have asked us to keep them longer.
• Cosmos profiles and saved results: retained while your account is active unless you delete them sooner. Deleting a saved profile or history item removes it from your account; account deletion removes these records as part of the account cascade.
• Private Cosmos conversations: retained while your account is active unless you delete the conversation sooner. Transient voice recordings are discarded after transcription; saved transcripts remain subject to conversation deletion and account deletion.
• Inactive accounts: accounts with no sign-in or activity for 36 consecutive months are flagged for deletion; you receive an email warning before purge.
• Session and authentication tokens: deleted at expiry (typically minutes to days).
• Emails to our support, safety or copyright addresses: admin-tool excerpts and subjects are cleared 90 days after the matter is closed, and sender addresses after 1 year (3 years for copyright notices, to keep repeat-infringer records).
• We clear the content of feedback stored in our own systems 12 months after it is delivered to us, or sooner if you delete your account or ask us to. Copies already delivered to Slack aren't removed by that process and are kept under our Slack retention settings. Please don't include personal details in feedback you don't want kept. Questions or requests: support@ascended.social.
• Compliance audit evidence: retained for up to 7 years to satisfy regulatory record-keeping obligations.
• Billing records: retained for 7 years for tax and accounting purposes.
• Creator Partner Program payout and tax records: retained for 7 years after your last payout for tax and accounting purposes, even if you delete your account.
• Hosting and server logs kept by Replit: 30 days, then deleted, unless a longer period is needed for an active security investigation or a legal obligation.

Backups. When you delete your account or ask us to erase your data, we remove it from the live service. Copies may remain in our encrypted backups for up to 30 days until they are automatically overwritten. We do not use backups for any other purpose, and if we ever restore from a backup, we delete your data again before the service goes back online.

Records subject to an active legal hold or open privacy request are exempt from automated deletion until that hold is lifted.

7. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, Colorado, Virginia, Connecticut, Utah, and similar regimes), you have the right to:

• Access a copy of the personal data we hold about you.
• Portability — receive that copy in a structured, machine-readable format.
• Correction of inaccurate data.
• Erasure (the "right to be forgotten").
• Restriction or objection to certain processing, including profiling for personalization.
• Withdrawal of consent at any time.
• Do Not Sell or Share My Personal Information (CCPA/CPRA).

You can exercise any of these rights from the in-app Privacy Center or by emailing support@ascended.social. We respond within statutory deadlines (45 days for CCPA, 30 days for GDPR with a possible 60-day extension) and provide a public tracking ID for every request.

7a. EU representative (GDPR Art. 27)

Third Eye Cyborg, LLC is established in the United States. We have appointed Prighter as our representative under Article 27 GDPR (European Union), Article 27 UK GDPR (United Kingdom) and Article 14 FADP (Switzerland). You and data-protection authorities can contact Prighter, in addition to or instead of contacting us, on any matter about our processing of personal data: https://app.prighter.com/portal/13398342593 (please quote "ID-13398342593"). You can also contact us at support@ascended.social. We have not appointed a legal representative under the EU Digital Services Act; for DSA contacts, see our DSA Notices.

8. Children

Ascended Social is intended for adults and users represent that they are at least 18 years old. The Service is not directed to children or anyone under 18, and age is currently collected as a representation rather than independently verified. If you believe a person under 18 has provided data or created an account, contact us and we will take appropriate action, including deletion where required. For child-safety reporting, see our Child Safety & CSAE Standards.

9. International transfers

Our infrastructure is hosted in the United States. If you access the service from outside the United States, your data is transferred to and processed in the United States under appropriate safeguards (Standard Contractual Clauses where applicable).

10. Security

We protect your data with encryption in transit, encryption at rest for databases and object storage, role-based access controls, automated abuse detection, and a documented incident response plan. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authority as required by law.

Two-factor authentication (2FA/MFA): We offer optional TOTP-based two-factor authentication for all accounts. When enabled, you must enter a time-based one-time code from an authenticator app (such as Google Authenticator, Authy, or 1Password) in addition to your password at each login. You are solely responsible for keeping your authenticator device and backup codes safe. We strongly encourage all users to enable MFA in Settings → Security.

11. Related agreements

The Astronomaly User Agreement governs the location-discovery feature and incorporates this Privacy Policy by reference for any geolocation data collected through that feature.

12. Changes

We will update this Privacy Policy when our practices change. The effective date at the top of the page shows the current version. Material changes are surfaced in the in-app Privacy Center and, for logged-in users, by email or in-product notice before they take effect.

Privacy questions: support@ascended.social. If you're in the EU, the UK or Switzerland, you can also contact our representative, Prighter: https://app.prighter.com/portal/13398342593.

Questions: support@ascended.social

Your privacy choices, including Do Not Sell or Share My Personal Information: https://legal.ascended.social/privacy-your-privacy-choices. To ask for access, a copy, a correction or deletion of your data, use our data request form at https://ascended.social/app/privacy/dsar or email support@ascended.social. You don't need an account to make a request.