Privacy policy

In short

• Computing a chart stores nothing. Your birth data is used for the calculation and then forgotten.
• An account is only needed to save charts and buy readings. A chart is saved only when you ask, after you agree to it.
• A paid AI reading sends the facts computed for the chart to OpenAI, never your name or birth data.
• Saved data is kept in the European Union until you delete it. You can download it or delete it at any time from your account page.

Computing a chart

When you compute a chart, the birth date, time and place you enter are sent to our server inside an encrypted request. They are used to compute the chart and are then discarded: they are not written to a database or to our logs, they never appear in a web address, and they are not shared with anyone.

The birth-place search runs on our own server, against a copy of the GeoNames place database. What you type is not sent to anyone else.

Accounts

You can sign in with a link sent by email, with an email address and password, with Google or with LINE. Sign-in is provided by Supabase, which stores your email address and, if you use Google or LINE, the name and identifier that service shares. Passwords are handled by Supabase only and never reach our application.

Our own database stores only a random identifier for your account and the date it was created.

Saved charts

When you save a chart, and only after you tick the box agreeing to it, we store:

• the name you give the chart;
• the birth date and time, and the time-zone choice;
• the birth place: its name, coordinates and time zone;
• the lunar node setting; and
• the date and time you agreed to the storage.

The legal basis is your consent (Article 6(1)(a) GDPR; Thailand's Personal Data Protection Act). You can withdraw it at any time by deleting the chart or your account.

Library and AI readings

The free library reading is assembled on our server from pre-written texts, one per configuration of the chart. It sends nothing to anyone and is not stored.

When you buy an AI reading, and only after you tick the box agreeing to it:

• we send OpenAI the facts computed for the chart: the positions in signs and houses, the aspects, the planetary pictures, and the dates of the period's transits and solar-arc directions. We never send your name, the chart's name, the birth date, time or place, or your email address. We ask OpenAI not to keep the request (store: false);
• we store the reading in your account, with the birth data it was written for, the facts it cites, and the date and time you agreed.

To be confirmed before launch: how long OpenAI keeps API requests for abuse monitoring, and whether the OpenAI project keeps its data in the EU.

Payments

Credits are bought through Stripe Checkout. Stripe receives your payment details and email address; we never see your card number. We keep a ledger of your credits: each purchase (date, pack, amount paid and currency) and each reading it paid for. Stripe keeps payment records for as long as the law requires, also after you delete your account. Unused credits are lost when you delete your account.

Where, and for how long

Your account, saved charts, readings and credit ledger are stored in the European Union (Supabase in Frankfurt, Germany, and our servers in the EU). They are kept until you delete them, one chart or reading at a time, or everything at once by deleting your account. Deleting your account removes all of it from our database and your sign-in from Supabase.

To be completed before launch: how long encrypted backups are kept before deleted data is gone from them too.

Your rights

• Access and portability: "Download my data" on your account page gives you everything we store for you, as a JSON file.
• Correction: rename a chart, or delete it and save it again with the right data.
• Erasure and withdrawal of consent: delete a chart or a reading, or your whole account.
• Complaint: you can complain to a data protection authority: in the EU, the one in your country; in Thailand, the Personal Data Protection Committee.

Cookies and browser storage

We use no advertising or tracking cookies. When you are signed in, your browser keeps your sign-in session in its local storage. When you open a saved chart, this browser tab briefly holds the chart's data to pass it from the account page to the chart page; it is removed when the chart page opens, and the tab's storage is cleared when you close it.

Service providers

• Supabase (sign-in, EU region).
• OpenAI (writes the AI readings, from the facts described above; United States).
• Stripe (payments).
• Render (hosting of the API and its computations, in Frankfurt, Germany).
• Vercel (hosting of the site: its worldwide network serves the pages and passes your requests on to the API; United States company).

Contact and changes

Contact details of the data controller: to be completed before launch. We will publish any change to this policy on this page, with a new date at the top.