Privacy Policy & Terms

What This Policy Covers

This Privacy Policy is published by Ocranthor LLC, a Florida limited liability company ("Ocranthor", "we", "us", "our"), and applies to:

• The website at ocranthor.com (including its contact form);
• The Solyx mobile and desktop application;
• Information you submit through any Ocranthor channel about any of our brands, including: Solyx, Breed Production Studio, Ember & Tide, Bella Tavola Ristorante, Valdencross Academy, The Mountainview Deer Steak Joint, Nakhit Loobnan, Maison Fumoir, Crossroads Kitchen, Yakimono Japanese Restaurant, and Pure Heart Publishers (the "Brands").

Some Brands operate independently and may publish their own brand-specific privacy notices. Where a brand-specific notice exists and conflicts with this policy, the brand-specific notice governs for processing carried out by that brand.

For the Solyx app's specific data handling, jump to the Solyx App Overview below.

Privacy on ocranthor.com

What we collect when you visit: The website does not set tracking cookies, does not run analytics scripts, and does not share data with advertising networks. Standard server logs (request URL, timestamp, IP address, user-agent) are retained for up to 30 days for security and operational purposes only. Web fonts are served from a privacy-respecting host (Bunny Fonts) which does not log IPs for tracking.

What we collect via the contact form:

• Name you provide
• Email address
• Selected brand of interest (optional)
• Message text
• Your age attestation (13+) and explicit consent to processing

Lawful basis for processing (GDPR / UK GDPR): your explicit consent, given at the time of submission.

Purpose: exclusively to respond to your inquiry. We do not add submitters to marketing lists. We do not transfer contact-form submissions to third parties except: (a) our email infrastructure provider (Google Workspace); (b) where required to route the inquiry to the relevant Brand. Contact-form data is retained for up to 24 months from your last interaction, after which it is deleted absent a separate retention obligation.

What we never want via the contact form: student records (transcripts, IEPs, education records subject to FERPA), health information, government identifiers, payment information, or any data about another person you do not have authority to share.

Children's Privacy & COPPA

The Ocranthor website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the website. The contact form requires age attestation that the submitter is 13 or older.

Valdencross Academy: Although Valdencross is being developed as a K-12 (and beyond) educational system that will serve children, we do not collect children's personal information through the public website. Parents or legal guardians who wish to register interest in Valdencross programs may use the contact form. Once Valdencross enrollment systems are launched and accredited, a separate, COPPA- and FERPA-compliant intake channel will be provided, with verifiable parental consent obtained before any personal information is collected from a child.

If you believe a child under 13 has submitted personal information to us, please contact privacy@ocranthor.net immediately and we will delete it.

FERPA notice: Until accredited enrollment systems are in place, please do not submit student "education records" as defined in 20 U.S.C. § 1232g (transcripts, grades, disciplinary records, IEPs, attendance records, etc.) through the website. If FERPA-protected records are received in error, they will be securely deleted and not used.

Your Privacy Choices

Regardless of where you live, you may exercise the following choices regarding personal information you have shared with Ocranthor:

• Access a copy of your data we hold;
• Correct inaccurate data;
• Delete your data, subject to legal retention requirements;
• Withdraw consent for processing based on consent;
• Opt out of "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising under the meaning of the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act, or similar U.S. state laws. There is therefore nothing to opt out of at this time.
• Object to automated decision-making — we do not perform any solely automated decision-making with legal or similarly significant effects on you.
• Lodge a complaint with your local data protection authority (for EU/UK/EEA residents).

To exercise any of these rights, email privacy@ocranthor.net with "Privacy Request" in the subject line. We will respond within 30 days (or shorter, where required by your jurisdiction). We may need to verify your identity before fulfilling certain requests.

Authorized agents: California residents may designate an authorized agent to make a request on their behalf in accordance with CPRA. Submit the agent's written authorization to privacy@ocranthor.net.

Privacy at a Glance

Data & Third-Party Services

Your account is managed via Firebase Authentication (Google). Messages you send are processed by Google Cloud Vertex AI, OpenAI, or Anthropic depending on the selected model. Image generation prompts are transmitted to Black Forest Labs (Flux) via BFL API or OpenAI (DALL·E 3) via OpenAI API. Video generation prompts are transmitted to Vertex AI (Veo). We do not store your conversation history on our own servers.

The App uses Firebase Crashlytics (crash reports) and Firebase Analytics (aggregate usage statistics). This data is anonymous, used solely to improve app stability, is not linked to your identity, and is not sold. You may opt out via Settings → Privacy → Do Not Sell or Share.

Real-time conferencing (Arcanum) is powered by LiveKit (LiveKit Inc., livekit.io). Audio and video streams are relayed through LiveKit's infrastructure. Sessions require authenticated access and LiveKit does not retain media content after a session ends. See livekit.io/legal/privacy-policy.

Solyx by Ocranthor LLC does not sell or share your personal information with third parties for advertising or cross-context behavioural purposes. All third-party service providers act as data processors under contract and are prohibited from using your data for their own commercial purposes.

Sub-processors summary:

• Google LLC — Firebase (auth, database, storage, crash reporting, analytics), Vertex AI (Gemini, Veo). policies.google.com/privacy
• LiveKit Inc. — Real-time conferencing relay. livekit.io/legal/privacy-policy
• Apple Inc. — App distribution, StoreKit billing, iCloud sync (optional), MapKit. apple.com/privacy
• OpenAI — GPT, o-series, DALL·E 3, and GPT Image 1 models, accessed directly via the OpenAI API. openai.com/privacy
• Anthropic — Claude Sonnet and Opus models, accessed directly via the Anthropic API. anthropic.com/privacy
• Google LLC — Firebase Storage — Used for hosting app resources. No personal data, scan results, or user content is ever uploaded to Firebase Storage.
• Recraft AI — Logo and image generation via Recraft V4 API (external.api.recraft.ai). Text prompts are transmitted directly to Recraft. recraft.ai/privacy
• FASHN AI — Virtual try-on image generation via FASHN API (api.fashn.ai). Model and garment images are transmitted to FASHN for processing. fashn.ai/legal/privacy

Medical Disclaimer & Privacy-First Processing

Privacy-First Processing Pipeline: Document scanning uses a three-step pipeline — the first two steps run entirely on your device.

• Step 1 — OCR on-device: Apple's Vision framework extracts text from the image entirely on your device.
• Step 2 — PII redaction on-device: Named entities (names, phone numbers, addresses, Social Security Numbers, Medical Record Numbers, dates of birth, ZIP codes) are automatically redacted before anything leaves your device.
• Step 3 — Redacted image to Vertex AI: Only the PII-redacted image and redacted text are transmitted to Google Cloud Vertex AI for AI interpretation. Raw images and unredacted personal data are never uploaded.

Scanned documents are processed in-memory only — no images or transcription results are written to persistent storage.

Lifestyle Vault Features

The following features store all data exclusively on your device via SwiftData. Data is never transmitted to external servers except where explicitly noted.

• Habit Forge — Daily habit tracking with custom frequencies, streak counters, and weekly heatmaps. All habit data stored on-device only.
• Sleep & Dream Journal — Dream narratives, sleep quality/duration, mood tracking, lucid/recurring flags, custom tags, and optional faith-based reflections (Christian or general spiritual perspectives). All dream data is stored exclusively on-device. An on-device content policy prevents entries containing satanic or occult glorification from being saved; dreams describing spiritual warfare from a Christian perspective are permitted.
• Movement Log — Workout diary with exercise logging (sets, reps, weight, distance, duration), personal record flags, and session ratings. All workout data stored on-device only.
• Travel Planner — Trip itineraries with day-by-day scheduling, categorised activities, cost tracking, budget management, and packing checklists. All trip data stored on-device only.

If you have enabled iCloud Sync (disabled by default), Lifestyle Vault data will be synced to your personal iCloud account under Apple's privacy terms.

Financial Tools & Wallet Scribe

Data Handling: Individual transaction records (merchant, amount, date, category, notes) are stored exclusively on your device using SwiftData and are never transmitted to external servers.

When you request AI coaching insights, only anonymised category totals and aggregate spending summaries — not individual transaction details — are sent to Google Cloud Vertex AI.

Receipt scanning uses your device camera and Vertex AI to extract transaction data. Scanned receipt images are processed in-memory and are not retained after extraction.

The App does not connect to or access your bank accounts, payment cards, or any financial institution. You are solely responsible for the accuracy of all data you enter.

Audio Recording & Meeting Transcription

The Meeting Scribe feature (available on Enterprise plans) allows you to record and transcribe meetings.

• Audio Data: Meeting audio is processed by Google Cloud Vertex AI for transcription. Audio is transmitted securely under Google's data processing terms. Audio recordings are not retained by the App after transcription is complete.
• Zoom Integration: Meeting Scribe may integrate with Zoom Video Communications, Inc. via their OAuth API. Zoom OAuth tokens are stored locally on your device and are not transmitted to Solyx's servers. Your use of Zoom is subject to Zoom's Terms of Service and Privacy Policy. Solyx by Ocranthor LLC is not affiliated with, endorsed by, or sponsored by Zoom Video Communications, Inc.

Camera & Media Processing

Several features use your device camera or photo library: document scanning, receipt scanning, cooking recipe scanning, and MTG card OCR.

• All image capture is initiated solely by your explicit action. The App never accesses the camera or photo library passively or in the background.
• Images are processed on-device and/or transmitted to Vertex AI only as required for the specific feature. Images are processed in-memory and are not persistently stored after the feature completes, except where you explicitly save results (e.g. saving a scanned recipe).
• Medical document images undergo on-device PII redaction before any content is transmitted externally.
• Generated images (Black Forest Labs Flux via BFL API, OpenAI DALL·E 3 and GPT Image 1 via OpenAI API) and videos (Vertex AI Veo) are stored locally on your device.

You may revoke camera or photo library access at any time in iOS/macOS System Settings.

Location & Mapping Services

Certain features use your device's location, including the AI chat assistant (location context suggestions) and the Map view. Location data is processed on-device by Apple's CoreLocation and MapKit frameworks and is never transmitted to Solyx's own servers.

When location context is enabled in Settings, your approximate location (city/region level only) may be included in messages sent to Google Cloud Vertex AI solely to improve the relevance of AI responses. Precise GPS coordinates are not transmitted.

Map search queries are processed by Apple MapKit and are subject to Apple's Privacy Policy. You may disable location access at any time in iOS/macOS System Settings.

Data Retention & Deletion

We retain personal data only as long as necessary for the purpose it was collected or as required by law. The table below summarises our retention practices.

• Account & authentication data — Retained for the lifetime of your account. Deleted within 30 days after account deletion.
• Chat messages — Not stored on Solyx servers. Conversations stored locally on your device persist until you delete them in-app or uninstall the app. If iCloud Sync is enabled, data is stored in your personal iCloud account and is subject to your iCloud retention settings.
• Financial transactions (Wallet Scribe) — Stored locally on your device only. Deleted when you clear data in-app or uninstall.
• Document scan data — Processed in-memory only. No raw images or scan results are written to persistent storage at any time.
• Lifestyle Vault data (Habit Forge, Dream Journal, Movement Log, Travel Planner) — Stored locally on your device only. Deleted when you clear data in-app or uninstall.
• Enterprise audit logs — Retained for the duration of the enterprise subscription plus 90 days after cancellation, then permanently deleted from Firestore.
• Crash reports & analytics — Anonymised data retained by Firebase Crashlytics and Analytics per Google's standard retention schedules (typically 90 days for crash data, 14 months for analytics aggregates). You may opt out via Settings → Privacy → Do Not Sell or Share.
• LiveKit session media — Not retained after a conference session ends. No recordings are stored by LiveKit unless you explicitly enable recording (Enterprise feature).

To request deletion of your account and all associated data, use the in-app Settings → Account → Delete Account option, or contact us at the address in the footer. We will process deletion requests within 30 days.

Your US State Privacy Rights

Depending on the US state where you reside, you may have rights regarding your personal information, including the right to know, delete, correct, and opt out of sale or sharing. Solyx by Ocranthor LLC does not sell personal information; you may formally record a Do Not Sell opt-out in Settings → Privacy.

To submit a verifiable privacy request, use the contact form in Settings → Privacy → Your US Privacy Rights. We will respond within 45 days. Complex requests may require an additional 45-day extension with notice. You may also use an authorised agent to submit requests on your behalf.

EU, UK & EEA — GDPR Rights

Legal bases for processing:

• Contract performance — Processing your account email and subscription status is necessary to provide the service you signed up for.
• Legitimate interests — Crash reporting and anonymous analytics to maintain app stability, where this does not override your fundamental rights.
• Consent — AI data-processing (you provide explicit consent at first launch via the AI Consent screen). You may withdraw consent at any time by deleting your account.

Your GDPR rights:

• Right of access (Art. 15) — Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — Request correction of inaccurate data.
• Right to erasure / "right to be forgotten" (Art. 17) — Request deletion of your data. See Data Retention section for timelines.
• Right to restriction of processing (Art. 18) — Request that we limit how we use your data while a dispute is resolved.
• Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — Object to processing based on legitimate interests. You may opt out of analytics at any time.
• Right to withdraw consent (Art. 7(3)) — Withdraw AI data-processing consent at any time by deleting your account.

International transfers: Your data is processed on Google Cloud infrastructure in the United States (region: us-central1). Google LLC participates in the EU-US Data Privacy Framework and provides Standard Contractual Clauses (SCCs) for international data transfers. LiveKit Inc. also processes data in the US and provides SCCs.

Data Residency: Your data is processed and stored in Google Cloud's us-central1 (Iowa, USA) region. If you are located in the European Economic Area (EEA), data transfers to the United States are made under Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

Data Protection Officer: Solyx by Ocranthor LLC is a sole-developer application and does not currently have a designated DPO. Privacy inquiries may be directed to the contact address below.

Supervisory authority: If you are an EU resident and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

Account Deletion: To permanently delete your account and all associated data, go to Settings → Account → Delete Account within the app. This will immediately delete your Firebase Authentication account and all personal data stored in our databases. This action is irreversible.

To exercise any of these rights, contact us via Settings → Privacy → Your Privacy Rights or email the address in the footer. We will respond within 30 days (extendable to 60 days for complex requests, with notice).

Other Jurisdictions

The Ocranthor website and the Solyx app are accessible globally. Visitors from outside the United States and the EU/UK may have additional rights under their local laws, including but not limited to those summarized below.

Canada — PIPEDA (Personal Information Protection and Electronic Documents Act)

If you are in Canada, you have the right to access, correct, and request deletion of your personal information; the right to know how your information is used and disclosed; and the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca). Our designated privacy contact for Canadian inquiries is privacy@ocranthor.net.

Brazil — LGPD (Lei Geral de Proteção de Dados)

If you are in Brazil, the Lei Geral de Proteção de Dados (Federal Law No. 13,709/2018) grants you rights of access, correction, anonymization, blocking, deletion, data portability, withdrawal of consent, information about sharing, and the right to lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd. Our lawful basis for processing contact-form data from Brazilian residents is your consent (Art. 7-I LGPD). Contact privacy@ocranthor.net to exercise these rights. A formal Brazilian Data Protection Officer (Encarregado) is being evaluated; in the interim, all LGPD inquiries are handled by Ocranthor directly.

China (Mainland) — PIPL (Personal Information Protection Law)

The Personal Information Protection Law of the People's Republic of China requires separate consent for the cross-border transfer of personal information. If you access our website from mainland China, please be advised that any personal information you submit will be transferred to and processed in the United States. By submitting the contact form, you provide your separate consent under Article 39 PIPL to this cross-border transfer. If you do not consent, please do not use the contact form.

United Kingdom — UK GDPR & Data Protection Act 2018

UK residents have the same rights as EU residents under the UK GDPR and the Data Protection Act 2018, and may lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Australia — Privacy Act 1988 (Cth)

Australian residents have rights under the Australian Privacy Principles (APPs), including the right to access and correct personal information and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Switzerland — Federal Act on Data Protection (FADP, revised 2023)

Swiss residents have rights of access, correction, deletion, data portability, and the right to object, and may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.

Other Jurisdictions

If your jurisdiction is not listed above and grants you specific privacy rights with respect to personal information processed by U.S. operators, please contact privacy@ocranthor.net and we will work with you in good faith to honor those rights.

End User License Agreement

The full in-app EULA contains 24 sections. Key provisions are summarised below.

1. Acceptance of Terms
By downloading, installing, or using Solyx on iOS, iPadOS, or macOS, you agree to this EULA.

2. License Grant
Limited, non-exclusive, non-transferable, revocable license for personal and professional use. No sublicensing, resale, or redistribution.

3. Medical Disclaimer & Privacy-First Processing
See Medical section above. App is not cleared or approved by the FDA, EMA, TGA, SFDA, PMDA, or any other regulatory authority.

4. AI-Generated Content
Text, image (Flux), and video (Veo) outputs may contain inaccuracies. You are solely responsible for verifying any AI-generated content before acting on it.

5. Data & Privacy
See Data & Third-Party Services above.

6. Financial Tools & Wallet Scribe
See Financial Tools section above. Not financial advice. Transaction data stored on-device only.

7. Location & Mapping Services
See Location section above. City/region context only; GPS not transmitted.

8. Audio Recording & Meeting Transcription
See Audio & Recording section above. You are responsible for recording consent compliance.

9. Camera & Media Processing
See Camera & Media section above. In-memory processing; no persistent storage of scans.

10. Subscriptions & Billing
Billed via Apple StoreKit. Subscriptions auto-renew unless cancelled 24 hours before renewal. Manage in App Store account settings. Refunds subject to Apple's refund policy.

11. iCloud Sync
Optional. Disabled by default. When enabled, selected data is stored in your personal iCloud account subject to Apple's iCloud Terms. Solyx has no access to your iCloud data.

12. Prohibited Uses
No harmful content generation, recording without consent, reverse engineering, circumventing security, reselling, or violating applicable law.

13. Intellectual Property
Copyright © 2026 Ocranthor LLC. "Solyx" and "Ocranthor" and related marks are proprietary. All rights reserved.

14. Disclaimer of Warranties
THE APP IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. THE DEVELOPER MAKES NO WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

15. Limitation of Liability
Developer not liable for indirect, incidental, or consequential damages. Total liability capped at the greater of amounts paid in the prior 12 months or USD $50.

16–17. Termination & Governing Law
Rights terminate automatically on breach. Disputes subject to binding arbitration or courts of competent jurisdiction. EU consumer rights not limited.

18. Age Requirements
App is rated 17+. Not directed at children under 13. COPPA and GDPR-K compliant. Contact us immediately if you believe a child under 13 has used the App.

19–24. Changes, Attribution, Storage, Privacy Rights, Data Sources, Contact
See full in-app EULA for complete text of all remaining sections.

Third-Party Content & Data Sources

5e Database
Content sourced from the System Reference Document 5.2 ("SRD 5.2") published by Wizards of the Coast LLC under CC-BY 4.0. Rule data served via the Open5e API (api.open5e.com). Wizards of the Coast LLC is not affiliated with, and does not endorse, this application.

Scripture Reference
Uses the Berean Standard Bible (BSB). © 2016–2024 Bible Hub. All rights reserved. Used by permission. Bible content is stored locally on-device and is never transmitted to external servers. Full licensing terms: berean.bible.

Trading Card Database
Card data provided by Scryfall (scryfall.com) under their API terms. Card names, oracle text, and imagery are the intellectual property of Wizards of the Coast LLC and respective rights holders. Used under the Wizards of the Coast Fan Content Policy. This App is not produced by, endorsed by, supported by, or affiliated with Wizards of the Coast LLC.

Mapping
Map functionality powered by Apple MapKit. Subject to Apple's Privacy Policy.

Real-Time Conferencing — LiveKit
Arcanum conferencing is powered by LiveKit (LiveKit Inc.). LiveKit SDK is licensed under the Apache License 2.0. Sessions require authenticated access and no media is retained after a session ends. LiveKit usage is subject to the LiveKit Terms of Service and Privacy Policy. Solyx by Ocranthor LLC is not affiliated with or endorsed by LiveKit Inc.

Firebase & Google Cloud
Authentication, database, storage, analytics, and AI inference are powered by Firebase and Google Cloud Platform (Google LLC), licensed under the Apache License 2.0 where applicable. Usage is subject to Firebase Terms of Service and Google Privacy Policy.