App Security: Where Your Data Lives (It Doesn't) (2026)
Table of Contents
The shortest version of our security model: your data lives on your device, and nowhere else. This page explains what that means in practice, what the apps never do, and how you can verify it yourself in about five minutes.
The Security Model
Security is usually a list of defenses: encryption, firewalls, audits. Ours is simpler - there is nothing to protect on a server because there is no server. When an app processes a tarot spread, a sigil, or a dream log, the computation happens on your phone and the result stays there. The absence of infrastructure is the security measure.
- No servers, no cloud sync, no accounts to hack
- All processing happens locally on your device
- Data is stored only in the app sandbox on your phone
- Backups are optional exports that you create and control
- No analytics SDKs, no ad SDKs, no third-party trackers
What Stays on Your Device
The intimate stuff - your readings, your sigils, your dream journal, your ESP scores - stays in the app sandbox. That is the same private storage area every Android app gets, readable only by the app itself. If you uninstall the app, the data goes with it unless you exported it first.
- Reading history and journals: app sandbox only
- Sigils and charged intentions: app sandbox only
- Dream logs and projection notes: app sandbox only
- ESP session scores and progress: app sandbox only
- Optional exports: files you create and store where you choose
What Never Happens
It helps to state the negatives explicitly, because most apps do these things. Ours do not - by design, not by policy. The architecture makes them impossible, which is stronger than a promise.
- Never uploaded to a company server
- Never synced to a cloud account you did not create
- Never sold, shared, or used for advertising profiles
- Never read by us - we have no way to reach your device data
- Never locked behind an account that can be shut down
How to Verify It Yourself
- Open the Play Store listing and read the Data Safety section
- Check the permission list - ours request nothing sensitive
- Install the app, enable airplane mode, and use every feature
- Watch for network activity during normal use (there will be none)
- Export and delete your data to confirm you control it
Arcana Goetia is a good example of the model in practice: an offline reference for the 72 spirits, their seals, and working notes. Everything you record stays on your phone. If your practice involves names, seals, and notes you would rather keep private, that is exactly the kind of data that belongs nowhere but your pocket.
FAQ
Ready for the full experience?
These guides work with pen and paper, but a digital tool makes them faster.
Frequently Asked Questions
Where exactly is my data stored?
In the app sandbox on your own device - the private storage area Android gives each app. There is no server copy anywhere.
What happens if I uninstall an app?
The local data is removed with the app, unless you exported it first. Exports are files you create and control, so your record survives if you want it to.
Can you see my data if I email support?
No. We have no access to your device or its sandbox. If you email us about a reading or a log, only what you choose to paste into the email reaches us.
References
- OWASP Mobile Application Security Verification Standard (2024)
- Google Play Data Safety policy (2025)
- GDPR Article 5: Principles relating to processing of personal data (2016)