Privacy Policy

This Privacy Policy explains how The Unfolding Path LLC ("we," "us," or "our") collects, uses, shares, and protects information when you visit The Unfolding Path website at unfoldingpath.org (the "Website"). The Unfolding Path LLC is a limited liability company based in Oregon, United States. The Website runs on software owned and licensed by Timatsu LLC, which designs, builds, hosts, and operates the Website, including its AI, design, and art, on our behalf and also stores inquiries, shared readings, and the founders' notes for us. Our Terms of Service govern your use of the Website.

What This Policy Covers, and What It Does Not

The Website is the home of The Unfolding Path, a venture founded by Michael Sagaert and Tim Kinzie.

This Policy Covers the Website

This policy applies to information collected through the Website itself: when you browse, when you use the Soul Codex or talk with Mikey, when you reach out through the contact page, and when an authorized founder signs in.

Other Companies Are Separate

Timatsu LLC builds and operates the Website and stores inquiry records and shared readings on our behalf, as described in this policy. Its own websites and services have their own terms and privacy practices. The founders are also involved in other ventures, each a separate legal entity. When you visit one of their websites or contact them directly, your use is governed by their own terms and privacy policy, not by this one, and any information you provide in that context is collected by them and not by this Website.

Information We Collect

This Website is the home of The Unfolding Path and offers a few interactive features: the Soul Codex, Mikey (an AI companion), a way to get in touch, and a small private area for the founders. We aim to collect as little as possible. The categories below describe what the Website may collect.

Information You Provide

When you reach out through the contact form, you enter details such as your name, your email address, and the message you write. When you submit the form, that information is sent to our server, which emails it to hello@timatsu.com, emails a confirmation copy to the address you entered, and saves it as an inquiry record in a central database that Timatsu LLC operates on our behalf, so we can respond and keep a record of our correspondence. If sending fails, the form may instead open a message in your own email program as a fallback. Before you can chat with Mikey, you enter your name and email address, which are handled the same way as the contact form, together with the conversation, as described under Mikey, the Companion. We use what you send to read and respond to you, and for the other purposes described under How We Use Information.

The Soul Codex

To generate a reading, you enter a birth date, a birth time, and a birthplace. Those details are sent to our server, which resolves the place you typed into map coordinates through a geocoding service and computes the astrological and calendar positions for that moment. It then sends your birth date, birth time, and birthplace, together with the computed positions, through an AI model router to a third-party language-model provider acting on our behalf, solely to write the reading. We do not ask for your name with your birth details, and the reading is not linked to your identity. We do not write your birth details or your reading to a database. The finished reading, which includes your birth date, time, and place, is kept in server memory for up to ten minutes so the same reading can be served again without a new request to the AI provider, and is then discarded. Your birth details are not included in any chat conversation that is sent to us.

Share images you save or share from the Codex are drawn in your own browser and are not sent to us, and they never show your birth date, time, or place. If you choose Copy Link, we store that reading without your birth details, together with its share image, so the link works; anyone who has the link can view it. Timatsu LLC stores shared readings and their share images on our behalf. Shared readings do not expire on their own: they stay available until you ask us to remove one, which you can do by contacting us with its link.

The same Soul Codex engine also serves readings to signed-in members of The Unfolding Path app, currently the founders. Those readings are saved in the member's own private Vault in the app.

Mikey, the Companion

Mikey is an AI companion who can talk with you about the Codex and the traditions it draws on, and can help route an inquiry to us. Mikey asks for your name and email address before you can chat. When you use Mikey, the messages you enter are sent to our server and passed through an AI model router to third-party language-model providers acting on our behalf, solely to generate the reply. Once you have sent at least one message, the conversation is sent to us automatically when you leave or switch away from the page, or sooner if you choose to send it, so your inquiry is not lost. We keep these conversations, with a short summary when there is one, as inquiry records so we can respond and so we can secure and troubleshoot the feature. These conversations are not used to advertise to you or to build advertising profiles about you.

The chat on the Soul Codex page works differently. It does not ask for your name or email address, it does not send the conversation to us, and it does not save it. Your messages still pass through the AI model router to a language-model provider to generate the reply.

Mikey's spoken replies and the Soul Codex Story are read in an AI voice made from Michael Sagaert's voice, with his permission. They are not recordings of him speaking to you, and Mikey's words are not his own. When you press Listen, the text of that reply is sent to a text-to-speech provider to make the audio.

Conversations with Mikey may touch on spiritual or philosophical beliefs. You choose what to share, and anything you share is used to reply to you, to respond to your inquiry, and as described under How We Use Information.

The Ambient Scribe described on the Companion page is in development. It is not available on the Website and processes no information today. Before any real session runs through it, this policy will be updated to describe it.

Mikey is not a secure channel and not a therapist, so please do not enter passwords, payment details, government identifiers, or other sensitive information, and contact us directly for anything confidential.

Accounts and the Private Area

A small, access-controlled part of the Website (the founders' private area) requires you to sign in, and today it has two accounts: Tim Kinzie and Michael Sagaert. Signing in uses a passkey kept on your own device; only its public key is stored with us. A one-time link sent to your email address sets up an account and its password. A password alone never signs anyone in: together with a one-time recovery code, it lets you set up a new passkey if a device is lost, and you can change it from your profile. Passwords are held by our authentication provider, never in the Website's own records. We keep each account's name, email address, role, passkeys, recovery codes, and active sessions, and a record of sign-in events (such as signing in, signing out, and adding a passkey) for security. A successful sign-in sets an HttpOnly session cookie holding a random token that our server checks on every request, and it lasts up to 12 hours. This area is limited to authorized accounts; if you do not have one, this does not apply to you.

The Vault in the Private Area

The private area includes a Vault where a founder can read, search, add to, and organize his own notes, which are kept in The Unfolding Path app's database, operated by Timatsu LLC. Notes can include uploaded transcripts and anything else a founder writes. Michael Sagaert's Vault is his; with his agreement, Tim Kinzie can read it but cannot change it. A map of how notes connect shows only their titles and links. Deleting a note moves it to the Vault's Trash, where it can be restored.

When a founder presses Refine on a note, the text of that one note and its title are sent through the AI model router to a language-model provider, which returns a cleaner draft and flags anything that does not match the original. The founder's original words are kept under the draft and can be restored at any time. When a founder chooses Sign As Mine, the note records the time of signing and a fingerprint (a one-way hash) of the signed text, so any later change can be detected. No note is used to train Mikey or any other feature of the Website.

Search and Visit Reports in the Private Area

The private area also shows the founders the visit counts described below and the Website's search performance from Google Search Console, which reports totals such as searches, clicks, and pages. We send Google no information about visitors to read those reports.

Information Collected Automatically

When you visit the Website, our hosting and network providers automatically receive standard technical information that your browser and device send in order to load a web page. This may include your IP address, browser type and version, device and operating system information, the pages and resources you request, referring URLs, and the date and time of your visit. This information is used to operate, secure, and improve the Website. To prevent abuse, the Website also counts requests per IP address for the Soul Codex, Mikey, sign-in, and the contact form, along with a one-way hash of the anti-spam token your browser solves before a Codex reading or a Mikey reply; those counters are deleted within two days.

Visit Counts

To understand how the Website is used, our own server counts page views on its public pages, without cookies and without storing your IP address. For each view we record the page, the website that referred you (its domain only), the campaign source if the link carried one, the kind of device (desktop, phone, or tablet), the country our host derives from your connection, and a visitor code made by scrambling the day, your IP address, and your browser's identifier together. That code counts one person once a day and changes every day, so visits cannot be linked from one day to the next. No count is made if your browser sends a Global Privacy Control or "Do Not Track" signal. These counts are seen only by the founders.

Cookies and Similar Technologies

The Website uses a small number of cookies and similar local-storage technologies for functionality only: a signed session cookie if you sign in to the private area, a local flag that remembers you have seen the cookie notice, and a local flag that remembers you have completed a Codex reading so the site can take you to the home page on your next visit. The Website does not use analytics or advertising cookies (the visit counts described above use none), and we do not use cookies to build advertising profiles about you or to track you across other companies' websites. You can control or clear cookies and local storage through your browser settings.

What We Do Not Collect

The Website does not knowingly collect payment card numbers, government identifiers, precise geolocation, or biometric data, and it does not ask for special categories of sensitive data. Anything you choose to share with Mikey is handled as described under Mikey, the Companion. We do not collect information from the separate companies described under What This Policy Covers, and What It Does Not.

Categories of Personal Information

For the benefit of readers in jurisdictions that ask businesses to map their collection to standard categories (such as California), the personal information the Website may collect falls into these categories: identifiers (such as name, email address, and IP address); internet or other electronic network activity (such as pages requested and basic device and browser information); and the contents of communications and any details you choose to enter into our contact form, the Soul Codex (including a birth date, time, and place), or Mikey. We collect these from you directly and from the technical metadata your browser transmits. We do not collect the other statutory categories, such as financial account numbers, biometric information, precise geolocation, or protected classification characteristics, through this Website.

How We Use Information

We use the information described above to: operate, maintain, and secure the Website; respond to your messages and inquiries; improve the Website; detect, prevent, and address spam, fraud, abuse, and technical problems; and comply with our legal obligations and enforce our Terms of Service.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or for other companies' marketing. We share information only in these limited situations:

• Service providers. We use a small set of vendors to run the Website. They process information on our behalf, only as needed to provide their service to us, and are expected to protect it. See Service Providers below.
• Legal and safety. We may disclose information if required by law, regulation, legal process, or a governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of The Unfolding Path LLC, our visitors, or the public, or to investigate fraud or abuse.
• Business transfers. If this Website or its assets are involved in a merger, acquisition, financing, or sale, information may be transferred as part of that transaction. We will take reasonable steps to ensure it remains subject to protections consistent with this policy, and we will note any change of control here.

Service Providers

The Website relies on a few third-party providers to function. Each processes information only as needed to provide its service to us. The providers, and the information they may process, are:

• Hosting and content delivery (Vercel), which processes connection metadata such as IP addresses and request headers in order to serve the site.
• AI and language-model providers (OpenRouter and the model providers it reaches). Messages you enter into Mikey pass through the AI model router (OpenRouter) to third-party language-model providers in order to generate replies. For the Soul Codex, the same router passes your birth date, birth time, and birthplace, together with the computed positions, to a language-model provider in order to write the reading. When a founder presses Refine, the router receives the text of that note.
• Text-to-speech (ElevenLabs), which receives the text of a Mikey reply or of the Soul Codex Story when you press Listen, in order to turn it into audio in an AI voice made from Michael Sagaert's voice.
• Geocoding (Nominatim, the OpenStreetMap geocoding service), which processes the birthplace you type into the Soul Codex, and only that, in order to turn it into map coordinates.
• Email delivery (Resend), which may process the name, email address, and message you submit in order to deliver your inquiry to us and to send you a confirmation copy, and which delivers the founders' account setup links.
• Authentication and database (Supabase), used by Timatsu LLC to operate the Website for us, which process sign-in records (if you have an account), the founders' Vault notes, the inquiry records you submit, shared readings and their share images, visit counts, and the per-IP counters used to prevent abuse.
• Search reporting (Google Search Console), which supplies the founders with totals about how the Website appears in Google search and receives no visitor information from us.

We may use additional providers for security, monitoring, or infrastructure, including DNS and network protection services. We choose providers based in part on their data-protection practices, and they are expected to use information only to provide their service to us.

Data Retention

We keep information only for as long as we need it. Inquiry records, including contact form messages and Mikey conversations, are not deleted automatically: we keep them as long as needed to respond to you and to maintain a record of our correspondence, and we delete them when you ask. Shared readings stay available until you ask us to remove them. Soul Codex readings held in server memory are discarded within ten minutes. Per-IP request counters are deleted within two days. Technical logs are kept for a limited period for security and diagnostics. We may retain information longer where required to comply with a legal obligation, resolve a dispute, or enforce our agreements.

Data Security

Information travels over encrypted connections (HTTPS/TLS) and is stored in managed systems that encrypt data at rest and restrict access. Access by the founders and by Timatsu LLC personnel is limited to what is needed to respond to you and to provide, secure, and support the Website. We use reasonable safeguards, but no website or method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you as the law requires.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you: to access or receive a copy of it; to correct it; to delete it; to opt out of its sale or sharing (we do not sell or share it for advertising); and to limit certain processing. You also have the right not to be treated differently for exercising these rights.

To make a request, email us at hello@timatsu.com. We will verify your request, usually by confirming you control the email address involved, and respond within the timeframe required by applicable law, generally within 30 to 45 days. You may use an authorized agent where the law allows, and we may ask for confirmation of their authority.

We do not sell personal information or share it for advertising, and the Website does not track you across other websites, so there is nothing else for an opt-out preference signal to switch off. When your browser sends a Global Privacy Control or "Do Not Track" signal, the Website does not count your visit.

United States State Privacy Rights

A growing number of U.S. states, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, have consumer privacy laws. If you are a resident of such a state, you may have the rights described under Your Rights and Choices, including the right to know what personal information is collected and how it is used, the right to access, correct, and delete it, the right to opt out of any sale or sharing and of targeted advertising, and, in some states, the right to appeal a decision on your request. We do not sell personal information, and we do not process it for targeted advertising. To exercise your rights, or to appeal, contact hello@timatsu.com.

Residents of the EEA, the UK, and Switzerland (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, The Unfolding Path LLC is the controller of the limited personal data this Website processes. Our legal bases are: your consent (when you choose to contact us, chat with Mikey, or request or share a Soul Codex reading); our legitimate interests in operating, securing, and improving the Website and in responding to inquiries, where those interests are not overridden by your rights; and compliance with legal obligations.

You have the rights of access, rectification, erasure, restriction, objection, and portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact hello@timatsu.com.

International Data Transfers

The Unfolding Path LLC is based in the United States, and our providers may process information in the United States and other countries. If you access the Website from outside the United States, you understand that information may be transferred to and processed in countries whose data-protection laws may differ from those where you live. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

Children's Privacy

The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information through this Website, contact us and we will delete it.

Third-Party Websites and Links

The Website links to other websites, including those of the companies described under What This Policy Covers, and What It Does Not, and of our providers. We do not control those sites, and this policy does not apply to them. When you follow a link, the destination's own privacy policy governs.

Changes to This Policy

We may update this Privacy Policy as the Website evolves. When we do, we will revise the "Last updated" date above, and for material changes we will provide more prominent notice on the Website. Your continued use of the Website after an update means you accept the revised policy.

Contact

Questions about this Privacy Policy, or about how the Website handles your information, can be sent to hello@timatsu.com. For questions about a specific company mentioned here, please use the contact details it provides, since those are handled separately as described under What This Policy Covers, and What It Does Not.