Privacy Policy

1. Data we collect

Account and birth-profile data: your email address; the name, date of birth, and optional exact birth time and place you provide; and the resolved coordinates, time zone and UTC instant needed to calculate a chart.

Companion data: if you create a Compatibility profile, we store the adult’s label and birth details you enter, the time you confirmed their permission, derived chart facts, relationship readings and your private journal notes. We do not ask for their email or phone number and do not link their account.

Usage and device data: pages and actions on the Service, device type, browser language, and approximate location (country) derived from your IP address. We do not store your raw IP address with your profile — only a country and a one-way hash created with a secret salt to detect abuse.

Marketing/attribution data: how you arrived (referring source, campaign and click identifiers) and an essential first-party identifier (the “vid” cookie) that ties your activity together.

Payment data: handled by the billing provider identified at checkout. We receive transaction and subscription status, not your full card number.

If you leave your email address without creating an account (for example the morning-note form), we store it together with your visitor identifier to send you the emails you asked for, until you unsubscribe.

2. How and why we use it

To provide and personalise the Service and your daily readings; to operate accounts and subscriptions; to prevent fraud and abuse; to measure and improve the Service; to send service and, with your consent where required, marketing messages; and to meet legal obligations.

Legal bases (GDPR): performance of our contract with you (providing the Service and billing); our legitimate interests (security, fraud prevention, analytics and improvement); your consent (non-essential cookies and marketing, which you can withdraw at any time); and compliance with legal obligations.

3. Cookies and similar technologies

We use a strictly necessary first-party identifier to run the Service and attribute your journey, plus first-party analytics to measure and improve it; we do not use third-party advertising trackers on the Service. Marketing emails are sent only where you have opted in, and you can opt out at any time. You can manage cookies in your browser.

4. Who we share data with

We share data with processors who act on our instructions: the billing provider identified at checkout, transactional and marketing email (Resend), hosting and infrastructure, and product analytics. We do not sell your personal data.

Some providers may process data outside your country; where required we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Advertising measurement: when you arrive from an ad, we report conversion events (for example that a signup or purchase happened) back to that advertising network (such as Meta or Microsoft Advertising), together with click identifiers and, where used, a hashed form of your email address so the network can match the event. We never share your readings or birth details for advertising.

Compatibility sharing is optional. A share link contains only the selected, sanitised strength, growth invitation and practical reflection — never names, dates of birth, places or internal profile identifiers. Links use a random token, expire after 30 days, and can be revoked earlier from your account.

5. Retention

We keep account data while your account is active and for a limited period afterwards as needed for legal, tax and fraud-prevention purposes. Aggregated and anonymised analytics, which no longer identify you, may be kept indefinitely.

Companion profiles and their derived readings remain until you delete that profile, relationship or account. Deleting a profile revokes its share links. Private journal notes are deleted with the related account erasure request.

6. Your rights

Depending on your location you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. EU/EEA and UK users may also lodge a complaint with their data-protection authority.

To exercise any right, contact [email protected]. You can request erasure of your account at any time; we will anonymise your personal data while retaining the aggregated analytics that no longer identify you.

7. Children and changes

The Service is for adults (18+) and is not directed to children. We do not knowingly collect their data.

We may update this policy; the last-updated date at the top of this page reflects the latest version. Questions: [email protected].

This English version prevails over any translation.