The Open Door (operated via RippleNav) is an independent project based in Australia. If you have any questions about your privacy, reach out at privacy@ripplenav.org.
Because accounts are shared across the platform, when you sign in we store your account email address, a salted one-way hash of your password, and payment/subscription state via Stripe. At The Open Door, we store the questions you ask along with the specific entropy. Those measurements shape the reading, so they are kept with it.
Payment: card numbers are never handled by us; Stripe does.
Age: when you create your account we record that you confirmed you are eighteen or over, and the date you confirmed it. Nothing else about your age is asked for or kept.
The question you put at The Open Door, the words the desk draws for it, and the interpretation you read back are stored encrypted, not as plain text. The database holds a sealed copy, and the key that opens it is held apart from it, so a copy of the database on its own does not reveal what you asked. We hold that key because this notice has to be able to show you your own readings, and because account data exports have to be able to hand them to you.
Your single RippleNav account works across both apps. Our technical setup (including sign-in, Cloudflare hosting, database storage, and Stripe billing) is unified under this single account. When you sign in with a third party like Google, they confirm who you are and share your email address with us purely to handle your login. It does not grant us access to your account.
The question you put at The Open Door and the reply the app provides, leave Cloudflare and are likely processed outside the country you are in, including in China. DeepSeek is governed by its own privacy policy at deepseek.com (true as of 27 October 2026). The interpretation and measurements from the session are stored in your account so the page can show them to you again.
We do not share personal information with third parties except the processors named above (Stripe, Cloudflare, Resend, DeepSeek), or where required by law. Questions people ask at The Open Door are often about personal situations, which can include information about health, beliefs, or relationships: we treat it as sensitive, keep it for no longer than we need it, and never publish it. If you would rather not have a question processed by an outside provider, do not submit it, because nothing is sent until you press to receive an answer. You can delete a single reading from your past questions at the desk, or close your account from the Account page.
You can download a copy of your data, or close your account and have it deleted, from the Account page. Closing it deletes your account, private questions, every reading taken at The Open Door, session notes, and the key that decrypts them.
Financial transaction records required by Australian tax law are retained separately for five years without links to your private reading database.
For privacy complaints or questions, write to privacy@ripplenav.org or contact the Office of the Australian Information Commissioner at oaic.gov.au.
Material changes to this policy will be posted here.