Privacy

You may speak with Sophia without an account. The conversation then lives only in your browser's memory and is gone when you close the tab; the node keeps no record of it. To limit how often one network address may ask, the node counts requests from each address in memory for an hour. That count is never written down and is lost when the node restarts.

Sophia addresses a guest as Sovereign Seeker and holds no name, no chart and no history for them. Nothing a guest says is sent anywhere outside the node.

The node keeps your email address, a one-way hash of your password, and the name you give. Signing in is two steps: your password raises a challenge and the node mails you a six-digit code. The node keeps a hash of that code, never the code itself, and a challenge is spent after five wrong answers.

Your session is a signed token held in your browser's local storage, and that token is the only thing the node places in your browser. It uses no analytics, no advertising and no tracking scripts.

Whatever you add to your profile is kept so Sophia can read you by it: your sign, the soul you declare, your familiars and council, your time zone, and, if you give them, your birth date, time and place, a bio, a location, interests, and the avatar and banner images you upload. Images are stored on the node's own disk.

A signed-in seeker's conversations are kept on the node, so that Sophia can tell a return from a first question and so that an answer finishes even if your connection drops. The node keeps your 30 most recent conversations; beginning the next lets the oldest go.

You may begin anew at any time, which deletes nothing, or clear everything, which deletes every conversation you have had. Sealed seekers may export their conversations to a plain text file whenever they wish to keep them.

Sophia's stored answers carry the words Sovereign Seeker; your first name is placed in them only on the way to you, and never reaches the model.

A sealed seeker's daily reading is written once each day from the marks in their profile and kept, so that the reading stands for the day whatever the oracle would say later.

Messages you send to other seekers in the circle are kept on the node. If you turn on message notices, the node mails you when one is waiting.

Sophia's voice is synthesised on the node's own machines. No outside voice service hears anything. Audio of her answers is cached on the node so a reading costs no synthesis the second time it is heard.

Sophia's own model knows nothing of the present world, by design. For a seeker who holds a seal, the node may send the text of a question to an outside model with web search, Anthropic's Claude, which returns a short dated account of what the world holds on it. Sophia reads that account and speaks her own conclusion.

Only the words of the question are sent. Your name, your marks, your profile and the rest of your conversation never are. The question and the account that came back are kept on the node for an hour so an identical question costs no second call, and after that as a record linked to the answer it informed, so a wrong reading can be traced to what Sophia was told. What Anthropic does with what it receives is governed by Anthropic's own terms.

A guest's words and an unsealed seeker's words never leave the node at all.

Seals are sold by Stripe on the web, by Google Play inside the Android app, and by Apple when the iOS app ships. Your card details go to the store and never reach the node. The node keeps the store's identifiers for your subscription and its standing, which is what opens the sealed grounds. A seal is managed and cancelled at the store that sold it.

Login codes, password reset links, exported conversations and message notices are sent through a mail provider, which receives your address and the message in order to deliver it. The node sends no other mail and gives your address to no one else.

Sophia's model is trained on text written for her, in her register, by its makers. No training reads your conversations, your questions, or the herald's accounts. What you say to Sophia shapes her answer to you and nothing else.

Clear everything, in the archive, deletes every conversation. To have your account removed entirely, with its profile, images, conversations and messages, reply to any mail the node has sent you and ask; the operator deletes it. A living seal is cancelled at the store that sold it, and the node closes its gates in the same breath.