Privacy Policy

Last updated: October 28, 2026

Pocket Oracle lets you ask the world's holy books a question. Your questions can be private. They can show what you believe. So we guard every question. This page says what we collect and why. It says who gets it. It says how long we keep it.

Who we are

Pocket Oracle is made by Graverholt Unlimited LLC. Here, "we" and "us" mean that company. This page covers the website pocketoracle.com. It also covers the Pocket Oracle: Holy Books apps for iPhone and Android.

Questions about your data? Write to josh@graverholtunlimited.com.

The short version

We ask before we send your first question.
We do not save your questions on our servers.
To answer you, we send your question to two AI companies. They are Anthropic and OpenAI.
They keep it for a short time.
Their terms with us do not let them train their AI on it.
We never sell your data. We show no ads.
We do not track you on other apps or sites.
You can use Pocket Oracle with no account.
You can delete your data.

What happens when you ask?

Before your first question, we ask for your OK. If you tap "Not now", nothing is sent. You can still read the books. Reading sends nothing to the AI companies.

If you say yes, your question goes to our server. Our server sends it to two companies.

Anthropic writes the reply. It reads your message and the passages we find. In a chat, it also reads your last few messages and the replies you got.
OpenAI helps us find passages that fit what you mean. It gets a short search form of your message. At times it gets your exact words. In a chat, it may also get the message you sent just before.

Our server holds your words only while it writes your answer. Then it lets them go. We never write your words to our files or our logs.

Some messages sound like you may hurt yourself. When our own check spots one, we send it to no one. We answer right away with a help line. Its words are not sent later in that chat either. Anthropic also helps us spot these messages. When it does, you get the help line, not a passage. We count how many help replies we give each day. The count does not say who got one.

What do the AI companies keep?

Anthropic deletes what we send within 30 days. It can keep it longer if the law asks. Its safety checks may flag a message. Then it can keep that message up to 2 years. It can keep its safety scores up to 7 years.
OpenAI keeps what we send up to 30 days, to watch for abuse. It can keep it longer if the law asks, or to stop harm.

Their terms with us say they may not train their AI on what we send. We do not train any AI on your words either. You can read their own privacy pages: Anthropic and OpenAI.

What do we keep on our servers?

For each phone or web browser, we keep:

A random ID.
On phones, a random app key too. We keep the key only in a coded form. So a copy of our files could not be used to sign in.
If you said yes to sending questions, and when.
How many credits you have.
How many free questions you used today.
A list of credits added and used. For example, a pack you bought, or a refund.
A small log for each answer. It has none of your words. It has the time and the kind of answer. It has the shelf you picked and how long it took. It has how many quotes passed our check.
Reports you send. We keep the passage, the kind of answer, and the reason you picked. A daily summary of new reports comes to us by email. It has counts and passages only.
On phones: iPhone or Android, the app version, and when the app last checked in.

Our own files and logs never keep your IP address. Our server uses it for a short time to stop abuse. For example, it stops too many requests from one place. Render, the company that runs our servers, keeps its own short record of each request, as below.

What stays on your phone or browser?

Your questions, answers and chats are saved on your phone or in your browser. That way you can see them again. We do not have a copy.

Delete one card, or tap "Clear my questions" to delete them all.
If you remove the app, they go too.
Your phone's own backups may copy what the app saves. iCloud and Google backups do this.
The app keeps its random key in your phone's secure storage.
On the website, one cookie tells our server which browser is yours. That keeps your credits with you. It lasts up to 400 days. It renews each visit. We use no ad cookies and no tracking cookies.

You do not need an account. Signing in keeps your credits safe when you get a new phone.

Sign in with Apple. Apple gives us an ID it makes for our app. It also gives us your email. If you choose Hide My Email, we get a private Apple address. We do not ask Apple for your name.
Sign in with Google. Google gives us your Google account ID and your email. We keep the email only if Google has checked it. We do not keep your name or photo.

We keep your email for two reasons. It shows you which account you used. It helps us help you if you write to us. We never join two accounts just because their emails match.

Apple tells us if you stop using Sign in with Apple for Pocket Oracle. Then we sign you out on each device. If you delete your Apple Account, we delete your Pocket Oracle account too. Apple also tells us if you stop our emails from reaching you through Apple.

What do you get when I buy credits?

In the apps, you pay Apple or Google. They take your payment. A purchase never shows us your card, your name or your email. They send us:

what you bought and when;
the price, the kind of money, and the store's country;
the store's number for the purchase;
if it was a test;
a random code that ties it to your phone or your account.

We keep these records so we can add your credits. Apple and Google tell us about refunds. Then we take back the credits left from that purchase.

On the website, credit packs are paid through Stripe. Stripe takes your card and your email. We never see your card. Stripe tells us what you bought. It also tells us the email you gave. We keep that email only in a coded form. Then you can move your credits to another device later. Stripe handles your payment under its own privacy policy. Website payments go through a Stripe account held by Third Space.

How does moving credits by email work?

You can move credits you already have to another device. First you type an email. If it bought credits, we send a 6-digit code to it. The code works for 30 minutes. It works only where you asked for it.

To send the code, the email address and the code go to Resend. Resend sends our emails. It keeps a record of each email it sends. We keep only a coded form of the address. We keep a short record of each try for 2 days, to stop abuse. We never put the address or the code in our logs.

Who else gets data?

We do not sell your data. We do not share it for ads. These companies help us run Pocket Oracle. Each one gets only what it needs for its job.

Render runs our servers and our files in the United States. Each request passes through Render's network. Render keeps a record of each request, with its IP address, for up to 30 days.
Anthropic and OpenAI help answer your questions, as above.
Resend sends our emails.
Apple and Google run the app stores. They also handle store purchases and sign-in, when you use them.
Google also sends the fonts on our web pages. So Google sees your IP address and browser when a page loads.

Stripe takes website payments.

Each company that handles data for us must guard it as well as we do. Our contracts with them say so.

We may also share data if the law makes us. We may share it to stop fraud or harm. If Pocket Oracle is sold, your data goes with it, and this page still covers it.

How long do you keep data?

Your questions and chats: never on our servers. They stay on your phone or browser until you delete them.
At the AI companies: up to 30 days. Flagged messages can be kept longer, as above.
Answer logs and reports: kept until we delete them. They have none of your words.
Guest data on a phone: kept until you delete it. In the app, open Settings and tap Delete my data on this phone.
Credits and purchase records: kept while you use Pocket Oracle. After you delete your account, we keep the purchase records. We keep the list of credits added and used too. They have no email. We keep them for up to 7 years, for refunds, disputes and tax.
Moving credits by email: codes last 30 minutes. The record of tries lasts 2 days.
Sign-in checks: 10 minutes.

What are my choices?

Tap "Not now" when we ask before your first question. Then nothing is sent.
Stop sending questions at any time. In the app, open Settings. Tap Stop sending my questions. On the website, nothing is sent until you ask. So you can stop by not asking.
Delete your questions from your phone or browser at any time.
Delete your account or your guest data. See Delete your account.
Ask us to show, fix or delete the data we hold about you. Write to josh@graverholtunlimited.com. We answer within 30 days.

Children

Pocket Oracle is for people 18 and older. We do not mean to collect data from anyone under 18. Do you think someone under 18 used Pocket Oracle? Write to us. We will delete their data.

How do you keep data safe?

Each request travels over an encrypted link. We keep app keys and sign-in checks only in a coded form. We do the same with the email for moving credits. We limit who can reach our servers and keys. If your data is ever exposed, we will tell you as the law requires.

Where is data kept?

We are in the United States. Pocket Oracle is made for people in the United States. Your data is kept and used in the United States.

Changes to this page

If we change this page, we change the date at the top. Some changes touch what we send to the AI companies. Then we ask for your OK again before your next question.

Contact

Graverholt Unlimited LLC
1942 Broadway Ste 314C, Boulder, CO 80302, United States
josh@graverholtunlimited.com