Privacy policy
The cards keep confidences. So does Catalyx, within the limits of running a web service. This page says what is kept, why, and how to make it stop. Last revised 2026-10-06.
What Catalyx keeps
An email address
An account is an email address. You give it to us directly, and we send a sign-in code to it, or you sign in with Google or Apple, and they hand us the address they hold for you. Nothing else from those accounts is asked for or kept.
Your readings
Every reading is stored: the ticker you whispered, the three cards drawn, the market snapshot they were laid against, and the interpretation once revealed. A reading you have not signed in to claim is stored without a name on it. A reading you share by link is public to anyone holding the link, without your name on it.
A record of what you paid
When you subscribe, Catalyx keeps a record of the subscription and of each cycle granted: the order or invoice reference, the dates, the plan. The money itself is handled by Stripe, the App Store, or Google Play, whichever door you came through. Catalyx never sees a card number.
How the websites are used
On catalyxapp.com and app.catalyxapp.com, Catalyx records how the doors are used: pages opened, links followed, tickers whispered, cards revealed, where a visit stopped, how quickly pages load, and errors when something breaks. A cookie on catalyxapp.com connects one visit to the next. Once you sign in, these records carry your account's internal number, never your email address. The iOS and Android apps record none of this.
Session and operational records
A sign-in session is kept so you stay signed in. Request logs are kept briefly to keep the service running and to answer for it when it does not.
What Catalyx does not do
It does not show ads. It does not sell, rent, or trade what it knows about you. It does not follow you across other sites or apps, and the apps carry no tracking software. The websites' usage records are used for one thing: learning which doors work and which ones stick.
Who else sees anything
Catalyx runs on Cloudflare, which hosts the service and its storage. Market data comes from a financial data provider, who is told the ticker and nothing about you. The interpretation is composed by a language model provider, who is given the cards, the ticker, and the market snapshot, and nothing that identifies you. Payments go through Stripe on the web and through Apple and Google in their apps, under their own policies. Usage on the websites is measured by PostHog, in its European Union region. Sign-in codes are sent by email. That is the whole list.
Deleting everything
The account screen, in the app or at app.catalyxapp.com/account, has a door marked delete. Behind it, the account, its sessions, its readings, its credits, and its subscription records are removed at once. A subscription itself is cancelled where it was bought, in the App Store, in Google Play, or through the Stripe portal on the account page; deleting the account does not stop a store from renewing it. The websites' usage records are held by PostHog under an internal number; write to the address below and they are deleted too.
Children
Catalyx is for adults with brokerage accounts and a sense of humor. It is not for anyone under 18.
Changes and questions
When this page changes, the date above changes with it. Questions go to oracle@support.catalyxapp.com. A person reads them.