Privacy policy

Version 2026-09-17

1. What Sidra keeps

• Your birth date, time and place, and the location and time zone found for that place. They're needed to calculate your chart. Encrypted, and kept until you delete your account. Your chart is encrypted separately, under its own key.
• Your email address. There's no password — your email is your account, and it's where your sign-in links go.
• Your current time zone, so that "today" is your today.
• The plan you chose, and which version of these documents you accepted and when.
• What Sidra wrote to you: your readings, and every reply Sidra gave you in a check-in — including its replies when the safety screen responded to something you said — but never what you typed. Kept encrypted for 30 days so that a person at Sidra can check the quality and accuracy of what Sidra writes and look into anything you report; then moved to an archive for six months in case a pattern needs investigating; then deleted automatically. Anything you report with "Report this" is kept until a person has dealt with it.
• A reader code. Each account has a random code, shown in your settings, so a reviewer can find what was written to you without seeing your name, email or birth details. This is pseudonymous, not anonymous: the code is linked to your account, which is how a report reaches the right words and how deleting your account deletes them.
• Your archive, on Premium: the readings you've kept, until you delete your account. Conversations are never archived.
• Your answers to "How should Sidra write for you?": whether you want more or less of a few things, and anything you tell us confused you. Used to decide how Sidra writes, and deleted with your account.
• What you send through the feedback form, including what you'd pay. Read by a person. If you delete your account these are kept, but no longer linked to you.
• If you join the waitlist or ask for the beta link: your email address, when you joined, which page you used, and the exact sentence you agreed to. We use it to send the beta link if you asked for it, and launch news and occasional updates. You can leave the list at any time by replying to any of those emails. Nothing else about you is collected there.
• Small records that make the app work: your sign-in sessions, when you were last shown the notice that Sidra is an AI, and how much of today's check-in you've used.

2. What Sidra doesn't keep

• What you type into a check-in isn't stored by Sidra. It's used to write the reply and then discarded. Your own browser keeps today's check-in on your device, so it's still there if you come back later in the day; it's cleared when you sign out or the day changes.
• What you say in a conversation where the safety screen detects distress — thoughts of self-harm or suicide, abuse, or someone in danger — isn't stored, on our servers or in your browser. We record that the screen fired, on what date, and which category. Sidra's replies to you are kept for quality review on the same terms as every other reply (section 1), and a reply can repeat something you said.
• The one exception, stated plainly: if the safety screen detects a stated intention to seriously harm another person, that message and up to six messages before it are stored, encrypted, so that a human being can review it. See section 6. A person can't judge a threat they aren't permitted to read, and reviewing it is the only purpose this record has.
• No advertising, no analytics trackers, and your data isn't sold.

3. How it's used

• To calculate your chart and today's sky against it.
• To write your readings and replies, and to check every one against your chart before you see it.
• To run the safety screen on what you send.
• To send you sign-in links.
• To review the quality and accuracy of what Sidra writes, look into reports, and decide how Sidra should write.

4. Who else handles it

Sidra uses a few outside services to run. Each gets only what its job needs:

• Anthropic, which provides the AI model. It receives your chart, including your birth date, time and place, to write and check your readings, and what you type in a check-in, to run the safety screen and write the reply. Names you mention are taken out before the reply is written. It doesn't receive your email address.
• Render, which hosts the app and its database, in the United States.
• An email delivery service, which receives your email address to send your sign-in links and, if you joined the list, Sidra’s updates.
• OpenStreetMap, only if a birthplace you type isn't in Sidra's own list of places. Then the place name is sent to look it up — nothing else.

During the beta there's no payment processor, because nothing is charged.

5. Your choices

• Delete your account at any time from Settings. It deletes your account, email, birth details, chart, archive, reader code, the replies kept for review, your answers to "How should Sidra write for you?", and the records in section 1 — straight away, not after a waiting period. The exceptions are feedback-form answers, which are kept unlinked from you, and a safety review record under section 6.
• A copy of what Sidra holds about you: ask through the feedback form. There's no button for this yet.
• Sign out to clear what this browser keeps.

6. Safety review

If the safety screen detects a stated intention to seriously harm another person, your account is locked and the matter is queued for a person to review, including whether to report it to the authorities. That is a human decision in every case — nothing is reported automatically. This record is kept for that review even if the account is deleted.

7. Children

Sidra isn't for, and doesn't knowingly keep data about, anyone under 18. An account given a birth date under 18 is removed.

8. Outside the United States

Sidra's services run in the United States.

Language for readers in Canada, the EU and the UK: not written yet.

9. Changes

The version at the top changes when this policy does. When it changes in a way you'd want to know about, you'll be asked to accept it again.

10. Questions

There's no privacy address yet. Privacy questions and data requests go through the feedback form, which a person reads.