Crystal Guide

Crystal Guide is the data controller for the personal data processed through this Service. The app is built and hosted on the Base44 platform. For any privacy question or to exercise your rights, contact us at hello@omernisim.com.

We collect only what we need to run the Service:

• Account data — if you register, your email address and (for Google sign-in) your basic profile, plus your subscription tier.
• Your saved crystals — the crystals you bookmark to your collection when signed in.
• Chat content — the questions you ask and the crystal names you look up, sent to our AI provider to generate answers. Your chat history is stored on your own device (browser local storage), not on our servers.
• Photos you upload — if you use photo identification, the image is processed to identify the crystal and is not used for any other purpose.
• Usage counters — for guests, a free-question count kept in your browser; for members, feature usage needed to apply plan limits.
• Payment data — if you subscribe, payments are handled by Stripe. We never see or store your full card details.
• Technical data — standard server logs (such as IP address and browser type) generated by our hosting provider to keep the Service secure and reliable.

We do not knowingly collect data from children under 16, and we do not sell your data.

Under the GDPR we rely on the following legal bases:

• Contract — to provide the account, chat, collection, and subscription features you request.
• Legitimate interests — to keep the Service secure, prevent abuse, and enforce fair-use limits.
• Consent — for any non-essential cookies or storage (see section 5). You can withdraw consent at any time.
• Legal obligation — to keep records (e.g. for tax) where the law requires it.

We share data only with service providers ("processors") that help us run the Service, under contracts that require them to protect your data:

• Base44 — application hosting, authentication, and database.
• Anthropic (Claude) — the AI model that generates crystal answers from your questions.
• Stripe — payment processing for subscriptions.
• Google — optional sign-in with your Google account.
• Wikimedia Commons — public crystal images fetched to illustrate pages.
• Google Analytics & product-monitoring tools — usage measurement, loaded only if you consent to the analytics category (see section 5).

Some of these providers may process data outside the EEA/UK. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We use a small amount of cookies and browser local storage. We group them into three categories:

• Strictly necessary — required for the Service to work: keeping you signed in, remembering your free-question count, storing your crystal chats on your device, and saving your cookie choice. These are always on and don't need consent.
• Preferences — remember non-essential choices to improve your experience. Only set with your consent.
• Analytics — usage measurement to help us improve, using Google Analytics and product-monitoring tools. These load only if you grant this category, and never for advertising. If you don't consent, no analytics scripts run.

On your first visit we ask for your choice, with non-essential categories switched off by default. You can change your mind at any time:

Manage cookie settings

We keep account and subscription data for as long as your account is active, and for a reasonable period afterwards to meet legal and accounting obligations. Chat history lives in your browser and is removed when you clear your browser storage. Guest usage counters reset when you clear local storage. You can ask us to delete your account data at any time.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting past processing; and
• lodge a complaint with your local data protection authority if you believe we've handled your data unlawfully.

To exercise any of these rights, email us at hello@omernisim.com. We'll respond within one month.

Data is transmitted over encrypted connections (HTTPS) and stored by our hosting and payment providers using industry-standard security measures. No system is perfectly secure, but we take reasonable steps to protect your information from loss, misuse, and unauthorised access.

We may update this policy from time to time. When we make material changes, we'll update the "last updated" date above and, where appropriate, ask for your consent again. Please review this page periodically.

For any question about this policy or your personal data, contact us at hello@omernisim.com.