Privacy Policy

Last updated: October 2, 2026

Effective date: October 2, 2026  ·  Dakota Labs LLC  ·  iOS App

This Privacy Policy describes how Dakota Labs LLC ("Dakota Labs," "we," "us," or "our") handles information in Malefic, our iOS application. It covers what the app does today, with its service offline, and what the service did while it ran.

We do not sell your personal data. We do not share it with advertisers. We do not build profiles for third-party targeting. Malefic contains no analytics or advertising code.

1. The Service Today

Malefic was built in two halves: the iOS app, and an online service (a server and its databases) that handled sign-in, stored accounts and delivered readings. On September 12, 2026 we shut the service down and deleted it, together with both of its databases. Nothing replaces it, and we hold no Malefic account or reading data.

The app still points at the service's former address, which was hosted by Railway. That address now answers "not found", so sign-in, readings and the other online features do not work. If you try to sign in or load a reading, the app's request (for a sign-in, the token Apple issues and any birth details you entered) goes to that address and is refused at Railway's network. It never reaches a Dakota Labs server, and we keep no copy of it. Railway's own policy governs any request metadata its network logs: railway.com/legal/privacy.

2. What the App Keeps on Your Device

• Session token. If you signed in before September 12, 2026, the app holds the session token the service issued, in the iOS Keychain. It no longer works. Signing out removes it.
• App settings. A few settings in the app's local storage, such as whether you have finished onboarding.
• Birth details you enter. Your birthdate, and optionally your birth time and birth place, are held only while the app is open, and are sent only with a sign-in request (see section 1).

The app does not save readings or other content on your device; everything it shows came from the service.

3. Apple's Part

Sign in with Apple. Signing in happens between your device and Apple. Apple gives the app a stable user identifier and, on first sign-in only, your email address if you choose to share it. With the service offline, the app has nowhere to keep them.

App Store and StoreKit. Malefic Premium subscriptions are sold and billed by Apple. We never receive your payment card information. The app checks your subscription with StoreKit on the device; it also tries to report your subscription tier and expiry date to the service, and while the service is offline that request fails like the others.

Place search. When you type a birth place, the app uses Apple Maps to suggest matching places, so what you type is sent to Apple.

Notifications. During onboarding the app asks for permission to show notifications. It does not register your device for push notifications, and Dakota Labs sends none. You can change the permission at any time in iOS Settings.

Apple's own privacy policy governs the data Apple handles: apple.com/legal/privacy.

4. What the Service Did While It Ran

From March 2026 until September 12, 2026, the Malefic service ran on servers hosted by Railway. While it ran:

• It stored your account: your Apple user identifier, your email address if you shared it, your birthdate, your birth time and birth place (name and coordinates) if you gave them, the sun, moon and rising signs calculated from them, a display name if you set one, and your subscription tier and expiry date.
• It stored the readings generated for you, such as personal readings and your birth chart reading.
• It calculated your signs itself. Your birth details never left the service for that.

How readings were written. The service generated readings and other content with AI language models:

• Ollama, an open-source model runtime on a Dakota Labs server, was tried first for all content.
• Groq was the fallback for daily readings, weekly and monthly content, personal readings and birth chart readings. Groq's privacy policy: groq.com/privacy-policy.
• OpenAI (the gpt-4o-mini model) was the fallback for the creature codex, which is written per sign from per-sign creature data only. OpenAI's privacy policy: openai.com/policies/privacy-policy.

What these models received was sign names and descriptions and the date. They never received your name, email address, Apple user identifier, birthdate, birth time or birth place.

All of the data in this section was deleted with the service's databases on September 12, 2026.

5. Data Retention and Deletion

We hold no Malefic account data, so there is nothing for us to delete. To remove what is on your device, sign out of Malefic or delete the app. You can also revoke Malefic's use of your Apple ID at any time in Settings → [Your Name] → Sign in with Apple.

You can cancel a Malefic subscription at any time in Settings → [Your Name] → Subscriptions on your iOS device. Refunds are handled by Apple.

6. Children's Privacy

Malefic is rated 17+ due to horror-themed content. It is not meant for anyone under 17, and we do not knowingly collect personal information from children. If you believe a minor has provided us with personal information, contact us.

7. Changes to This Policy

If the Malefic service comes back, this policy is updated before it does, to describe what the service then collects and who processes it. Any other change revises the dates at the top of this page.

8. Contact Us

Questions or requests regarding this Privacy Policy:

Dakota Labs LLC
Email: [email protected]
Web: dak-labs.dev