What we collect

Sign-in details. When you sign in with Google or Apple, we receive an account ID, your email address and, if you allow it, your name.
Birth details. Profile name, date, time and place of birth (including coordinates) and gender. Everything else is calculated from these.
What you write. Questions you ask, tarot questions, notes, life records, your daily one-line entries, self-ratings and growth check-ins, your answers to the self-description questions, and your sentence-by-sentence feedback on readings.
Friends' answers. When you send an invitation link, friends can answer without registering. The words they pick, the two sentences they write and their signature are stored under your invitation, and only you and that friend can see them.
Payment details. Payments are processed by Stripe and we never see your full card number. We keep only your Stripe customer ID, subscription status and period, credit balance, and a log of credits used and returned.
On-device data. So that the Service works offline, your data is first stored in this browser's local storage on your device.

Where it is stored

If you do not sign in, your data stays on your device. Once you sign in, it is synced to Google Firebase (Cloud Firestore) in Google's Singapore region (asia-southeast1). Our database rules allow only you to read your own data from the app (for what the operator can see, see the next section). Payment records sit in a location that not even your own browser can read; only our servers can.

How we use it

to calculate your charts and write your readings, life manual, daily line and the monthly letter;
to work out growth levels and monthly reviews, and to sort your daily entries automatically;
to process payments, grant and deduct allowances and credits, and prevent abuse;
to fix errors and make readings more accurate.

We do not sell your data, and we do not use it for advertising.

What the operator can see

To fix errors, check the quality of readings and handle your requests, the operator personally can use administrator access to view your sign-in name and email, your profile details (name, date, time and place of birth, and gender), the questions you ask and the readings you receive, and your allowance, credit and payment records. This viewing happens only on the operator's own computer; the data is not shared with anyone else and is not sent to any language-model service for any other purpose. Your notes, life records and chart calculation data are not included.

Who processes it for us

To run the Service, some data is processed by the providers below. They may only process it on our instructions and may not use it for anything else.

Google (Firebase): sign-in, data storage and running our servers.
Apple: if you choose to sign in with Apple.
OpenAI: the language model service that writes readings. For each reading we send the chart data that reading needs (including birthplace and birth time) and the exact question you asked. The life manual reading also includes a summary of your growth records. Some questions include keywords you have confirmed and the words your friends chose most often, but never your friends' own sentences or names. Your self-description answers are used to suggest keywords, and the daily line draws on the opening of your most recent readings. Your notes and life records are never sent to OpenAI.
Stripe: payments and subscriptions. We share your sign-in email address and an internal ID with Stripe so it can create your customer record and receipts.

Automatic sorting on our own machines

Sorting your daily entries and writing the monthly letter are done by a model that runs locally on computers we own. It reads the text of the relevant notes, but only in memory: the text is never written to disk, our logs never contain the text or your account, no person reads it, and it is never passed to any third party.

The public case library

The consent you give when you sign in is recorded. However, the public case library has not been launched: we have not published, shown or given anyone's birth details or readings to anyone. Before it launches, we will update this policy, explain how identifying details are removed, and ask for your consent again. Anyone who does not agree will not be included.

Analytics

The Service does not currently use any third-party analytics. If we turn analytics on in future, it will record only event names and the page they came from, never your questions, birth details or readings.

Retention, export and deletion

So that we can check whether readings hold up over time, most records are append-only: a correction is saved as a new record and the old one is kept.
You can export your life records from the Cloud menu. For a full copy of your data, email us.
Deleting your account and all your data: for now, email d.tytern@gmail.com from the address you sign in with. Once we have confirmed it is you, we will delete your account and everything under it within 30 days and reply to confirm. Payment receipts already issued are kept by Stripe for as long as the law requires.
Signing out only clears what is shown on this device. It does not delete anything in the cloud.

Security

Data is encrypted in transit and stored in Google's data centres, and our server keys are kept only in Google's secret management service. We work hard to protect your data, but no system is perfectly secure. If a breach affects your data, we will tell you within a reasonable time.

Children

The Service is not intended for children under 13. If you believe a child has given us data without your consent, contact us and we will delete it.

Your rights

Depending on where you live, including under Malaysia's Personal Data Protection Act, you can ask to access, correct, export or delete your personal data, and you can withdraw your consent. Email us and we will reply within 30 days.

Changes to this policy

When this policy changes, we update the date at the bottom of the page. We will also notify you in the Service of any significant change.

Contact

Send privacy questions and requests to d.tytern@gmail.com. See also our Terms of Service.