Zohara's privacy policy

Last updated: 15 November 2026

In short

• Before you sign in, all your answers stay on your device.
• Your account keeps your first name, your birth details, how to address you, the readings written for you, and what you choose to keep. Conversations on the Ask screen are kept until you delete your account.
• Religion, dreams and memories are sensitive, and they are kept only with your explicit consent. Each dream, each memory and the book can be deleted on its own.
• To read a dream, its text is sent to the AI, even if you don't keep the dream.
• Personal information goes to the AI only after your explicit yes, which you can take back on the Me screen. The AI receives facts our own engine computed, not your email or your account ID. It does not receive your birth date, time and place themselves, but they can be roughly worked back from the birth chart it does receive.
• Reminders are set on the phone itself, and nothing about them leaves it.
• No ads, no tracking or usage-measurement tools, and we sell information to no one.
• You can delete your account inside the app, and everything kept in it is deleted.

Who we are

Zohara (a working name) is a daily mentor: astrology, numerology, Kabbalah and the book close to your heart, in one voice. It is in a closed beta in Israel.

Zohara is run by Aviv Leibovich, Efraim Kishon 85, Tel Aviv-Yafo 6607223, Israel. They are responsible for the information described here (the "controller of the database", in the words of Israeli law). For any question about privacy: support@zohara.app.

You don't have to give us anything

No law requires you to give us any detail, and everything we collect is given freely. Without a birth date there is no chart. Without signing in, your chart and numbers are computed on your device, and the daily reading is a sample.

What stays on your device

Before you sign in, your answers are kept in the local storage of your phone or browser:

• your first name, and how to address you in Hebrew: feminine, masculine or without gender;
• your birth date, the time and where it comes from (a certificate, your parents or memory), or the part of the day;
• your birth city as you typed it, and, when it was found in our list, its coordinates and time zone;
• the ways of looking that interest you, and how much detail you want;
• your book, only if you choose to keep it;
• your full name given at birth, if you entered it on the Numbers screen.

Your chart and numbers are computed from these answers on the device itself. Your birth city is looked up in a list inside the app, with no map service. None of this reaches our servers before you sign in.

The device also keeps the app's language, whether the address question was asked, the date of your last night ritual, your settings for reminders, sound and vibration, your sign-in session once you sign in, and technical marks for the email sign-in and the update mechanism. Zohara uses no cookies.

What your account keeps

Signing in keeps your chart beyond this device. When you sign in, these go to your account:

• your first name, how to address you (only if you chose), your ways of looking and how much detail you want;
• your birth: the date, the time if known and where it comes from, the part of the day, the place as you typed it and the precision level, and, when the city was found in our list, its coordinates and its time zone on the day you were born.

If your account already holds a birth, the account wins and nothing is overwritten. Your book does not go to the account (details under "Your book").

As you use the app, the account also keeps:

• the readings written for you: the text, the facts it was written from, the model's name and the length, so the same reading is not written twice;
• the chart computed from your birth, so it is not computed every time;
• a record of each call to the AI: the date, which function, which model, the length and the cost, to keep to a daily budget;
• your full name given at birth, if you add it on the Numbers screen, for the numbers of your name. A name added before you sign in goes to the account when you sign in, unless the account already holds a birth (then the account wins, the name included). "Back to the first name" deletes it;
• dreams and night questions, as described below;
• conversations and memories from the Ask screen, as described below;
• technical rows made for every new account, such as a day counter and your plan's status (free during the beta).

Sensitive information

Under Israel's Privacy Protection Law, religious belief is information of special sensitivity. We treat dreams and personal memories the same way. So all three are kept only after your explicit consent. For dreams and memories, each item can be deleted on its own, taking back your consent deletes all of them, and the account keeps the time you consented along with your answer.

These rules are enforced in the database itself, not only on the screen: without a stored yes, no dream, night question or memory can be saved, not even by our own functions.

Your book

On the first screens we ask whether there is a book close to your heart. Answering is optional. Your book is kept only if you tick "Keep the book I chose", and even then only on your device: it is not sent to your account or to the AI. If it ever moves to the account, we will update this page first, and there will be a way to delete it there.

On the Me screen there is "Forget my book". It deletes the choice and its consent wherever they are kept, along with what the mentor remembered about the book. Signing out, deleting the app, or clearing the site's data in your browser also removes it from the device.

Dreams and night questions

• To read a dream, its text, the feeling you chose, and your night question when the dream is read with it, are sent to our function and from there to the AI. This happens even if you don't keep the dream. The function keeps nothing of the dream, only the record of the call (date, model, length and cost).
• A dream is kept in your journal only after a yes, asked the first time you tap "Save to my journal". Each dream can be deleted on its own, and each night question you kept is listed in the journal with its own delete.
• "Stop keeping dreams" deletes the whole journal and your night questions. Of the nights, only the date and the time the ritual ended remain.
• From the night ritual we keep its date and the time it ended. The question is kept only with your yes.
• There is no recording inside the app. If you dictate with your keyboard's microphone, the dictation is done by your phone's keyboard (Apple's or Google's), under their terms, not by us.

Ask

• What you write on the Ask screen and the mentor's replies are kept in your account as conversations, so a conversation can continue. With each message, up to twelve earlier messages of the same conversation are sent to the AI too.
• The mentor asks once whether she may remember. After a yes, she remembers people, plans and what matters to you, without asking again. Something sensitive, such as faith or health, is kept only with its own explicit yes.
• Everything kept is listed under "What I remember", and each item can be deleted on its own. "Stop remembering" deletes everything.
• A conversation is kept until you delete your account.

Reminders

• Reminders (for the morning reading, for the night ritual, and about your birth time) are set on the phone itself, and nothing about them leaves it. Their settings are kept on the device.
• The phone asks for permission to send notifications only when you ask for a reminder, not when the app opens. In the birth-time conversation, "I'll check and come back to you" is such a request too, since "Remind me tomorrow evening" is ticked there in advance (you can untick it).
• A reminder's words name no fact: no planet, no number, no date. So a locked screen shows nothing of what a reading says.
• Signing out or deleting your account takes back every reminder on the phone, and their settings.

Reports and contacting us

• You can report a text the AI wrote that does not seem right. A report does not copy the text. The account keeps where the text was shown, which text it was, your reason if you wrote one (up to 280 characters), and the time. Only we read reports, and they are deleted with the account.
• The Me screen also shows our address for anything you want to ask: support@zohara.app.

Signing in

You can sign in with Apple or with Google, and on the web also with a link by email. There are no passwords.

• Apple: Apple sends us your email address (or Apple's relay address, if you choose to hide your email) and a fixed identifier. If Apple passes on your name too, Zohara does not keep it. On the iPhone, Apple also gives us a token. We keep it only to end Zohara's access to your Apple ID when you delete your account.
• Google: Google sends us your email address, a fixed identifier, and the name and picture on your Google account. The sign-in service keeps them on your account record. Zohara does not use the name or the picture.
• Email: your email address. The link is sent through Supabase's email service and works only on the device that asked for it.

The sign-in service keeps a technical record of sign-ins: when, from which IP address, and a description of the browser or device. On the web, Google's and Apple's sign-in tools load only on the save screen. When they load, Google and Apple see the visit under their own policies, and may use their own cookies.

Updates in the app

Each time it opens, the iPhone app checks our storage for a newer version of its screens. Like any request on the internet, the check reveals your device's IP address.

When it downloads an update, the update component adds a device identifier. On the iPhone this is the identifierForVendor: an identifier Apple gives our apps on this device, which changes if all our apps are removed from the phone. It is sent only to our own storage and used only to deliver updates, and we do not link it to your account. Supabase may keep it in its request logs for a short time.

The website

The web version is served by Netlify. Like any host, Netlify sees your IP address and your browser's details on each visit. The site loads only our own files (the font included), Supabase, and, on the save screen only, Google's and Apple's sign-in.

What we don't collect

• No usage-measurement tools, no trackers, no advertising identifiers, and no crash-reporting service.
• No ads, and we send no marketing emails.
• No location from your device: you type your birth place. No access to your contacts, photos, camera or microphone either.
• No payments at this stage, and no notifications from a server. When they come, we will update this page first.
• We do not sell, rent or give information to anyone for their own use.

Who else processes information

Only the providers Zohara cannot work without, each only for what it needs:

• Supabase: the database, sign-in, sending the sign-in links by email, storage and functions. The information is stored in the European Union region, in Stockholm, Sweden. The functions that talk to the AI run on Supabase's servers, by default in the region nearest to whoever calls them.
• Anthropic: the language model that writes the readings, the dream readings and the answers on the Ask screen, processing the information on our behalf only to write them. The company is in the United States. Details in the next section.
• Apple and Google: only when you sign in with them, and only to sign you in; Apple also when an account is deleted, to end Zohara's access. Their own policies cover their side.
• Netlify: hosting the web version.
• Apple's TestFlight, during the beta only: Apple passes us the name and email entered in the test invitation, and the crash reports and feedback testers choose to send.

Some of these providers are outside Israel, so information is transferred to them abroad. We give information to no one else unless the law requires it.

What the AI receives, and what it doesn't

The readings, the dream readings and the answers on the Ask screen are written by a language model from Anthropic. Our principle: the engine decides, the AI only speaks. Every fact (a planet's position, a number, a Hebrew date, a verse) is computed by us or taken from a verified table, and the model receives it ready.

It receives:

• your first name, how to address you, how much detail you want, and the ways of looking you chose;
• the facts the engine computed: your birth chart, today's planets and the aspects between them, the Moon, the Hebrew date, your personal numbers and the card of the day. Verses come only from our verified table;
• the memories you approved, with every reading, every dream reading and every answer;
• for a dream: its text, the feeling and your night question;
• on the Ask screen: your message and the earlier messages of the same conversation.

It does not receive:

• your email, your account ID, your IP address or a device identifier;
• your birth date, time and place themselves. But the birth chart it receives is complete: every planet's position to a tenth of a degree, and, when the time is known, the houses, the ascendant and the midheaven. From such a chart your birth date can be worked back, and, when the time is known, the time to within minutes and roughly the area;
• your book;
• your full name, only the numbers computed from it.

Under Anthropic's commercial terms, it does not train models on this information. Under its retention policy, it deletes it within 30 days, unless its safety systems flagged it as breaking its usage policy (then up to two years), or the law requires keeping it.

Before personal information goes to the AI, the app asks for your explicit yes: for your first name and your answers from the first screens, for the chart and numbers computed from your birth, and for what you write on the Ask and Dreams screens. Without it, no personal information is sent to the AI: readings are written from the facts alone, and Ask and Dreams do not answer until you agree. The account keeps the time of your yes. You can take it back at any time, on the Me screen. Taking it back stops the sending and deletes nothing already written.

How long information is kept

• Your account and everything in it: until you delete the account.
• A dream, a night question or a memory: until you delete it, or until you take back your consent, whichever comes first.
• Conversations on the Ask screen: until you delete your account.
• Reports on texts: until you delete your account.
• Readings: until you delete your account. A change to your birth details deletes the computed chart and the readings from yesterday on, since they no longer fit.
• On your device: until you sign out or delete your account, which deletes from the device your answers, your full name, the date of your night ritual, your reminders and your address choice (the app's language, your sound and vibration settings, and technical marks stay), or until you delete the app or clear the site's data.
• Providers' technical logs (IP addresses, the device identifier in updates, the sign-in record): for a short time, under their terms.

Deleting your account

On the Me screen there is "Delete my account". It deletes your account and everything in it: your profile, birth details, chart, readings, dreams, nights, conversations, memories, and the record of AI calls. This cannot be undone. The app then starts again, as on a new device. You can also write to us and we will delete it for you.

Deleting your account also ends Zohara's access to your Apple ID. You can check this, or remove Zohara yourself, in the list of apps using Sign in with Apple in your Apple Account settings.

Your rights

Under Israel's Privacy Protection Law, you may:

• See your information: ask, and we will send a copy of the information in your account.
• Ask us to correct or delete information that is not correct, complete, clear or up to date. Beyond what the law requires, we delete any information in your account on request. Technical logs and copies at our providers are deleted under their own terms.
• Complain to the Privacy Protection Authority.

And some of this you can do yourself, in the app:

• correct your birth time (in the precision conversation), change how you are addressed (on the Me screen), and delete your full name (on the Numbers screen);
• delete dreams, night questions, memories and your book, and the whole account;
• take back at any time your consent to keeping dreams and to keeping memories. Taking it back changes nothing else in the app. For your book, the details are under "Your book";
• take back your consent to sending information to the AI, on the Me screen.

For requests: support@zohara.app. We will answer within 30 days.

Security

• Information is encrypted in transit (HTTPS) and at rest at Supabase.
• Each account reaches only its own information. The rule is enforced in the database itself, and automatic tests guard it.
• Secret keys are never in the app.
• App updates are signed, and the phone refuses an update not signed with our key.
• No method is perfect. If a breach affects your information, we will tell you as the law requires.

Children

Zohara is meant for adults, aged 18 and over. We do not knowingly collect information about children.

Changes to this page

When something changes, we update the date at the top. A material change, such as new information collected or a new provider, is announced in the app before it applies.

The law

This page was written in light of Israel's Privacy Protection Law of 1981, including Amendment 13, in force since August 2025, and its regulations.

Contact

Aviv Leibovich, Efraim Kishon 85, Tel Aviv-Yafo 6607223, Israel. support@zohara.app