โ† Back to Home

Privacy Policy

Last updated: November 18, 2025

1. Introduction

Huna Practice ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including the Huna Oracle Cards application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you voluntarily provide when creating an account or using our Service:

  • Email address
  • Name (optional)
  • Password (encrypted)
  • Profile picture (if you choose to upload one or use OAuth)
  • OAuth provider information (if you sign in with Google, Apple, or Facebook)

2.2 Usage Information

We automatically collect certain information when you use our Service:

  • Log data (IP address, browser type, operating system)
  • Device information
  • Pages visited and features used
  • Date and time of access
  • Oracle cards drawn and preferences
  • Language preferences

2.3 Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

We use the collected information for various purposes:

  • To provide and maintain our Service
  • To authenticate your identity and manage your account
  • To personalize your experience
  • To send you verification emails and password reset links
  • To respond to your comments, questions, and requests
  • To monitor and analyze usage patterns and trends
  • To detect, prevent, and address technical issues
  • To improve our Service and develop new features
  • To comply with legal obligations

4. Third-Party Services

4.1 OAuth Providers

We use third-party OAuth providers to allow you to sign in:

  • Google: When you sign in with Google, we receive your email address, name, and profile picture as provided by Google
  • Apple: When you sign in with Apple, we receive your email (or relay email if you choose to hide it) and name
  • Facebook: When you sign in with Facebook, we receive your email address, name, and profile picture

These providers have their own privacy policies governing the use of your information. We encourage you to review their privacy policies.

4.2 Service Providers

We employ third-party companies and services to facilitate our Service:

  • Supabase: Database hosting and authentication infrastructure
  • Vercel: Website hosting and content delivery
  • Email service providers: To send verification and password reset emails

These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Passwords are encrypted using bcrypt hashing
  • All data transmission uses HTTPS encryption
  • Database access is restricted and monitored
  • Rate limiting to prevent abuse
  • Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain data.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to our processing of your personal information
  • Withdraw Consent: Withdraw your consent at any time

To exercise these rights, please contact us at privacy@hunapractice.app. We will respond to your request within 30 days.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to facilities located in various countries and the use and disclosure of information about you as described in this Privacy Policy.

10. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) signals. However, you can disable cookies in your browser settings to prevent tracking.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of your personal information. We do not sell your personal information.

12. GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We process your personal information based on:

  • Your consent (which you can withdraw at any time)
  • Performance of a contract with you
  • Compliance with legal obligations
  • Our legitimate interests

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Huna Practice

Email: privacy@hunapractice.app

Data Protection Officer: dpo@hunapractice.app

Website: https://hunapractice.app

By using our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.