1. What we collect
- Account data: email address and a salted password hash. We never store the plaintext password.
- Reading inputs: birth date/time, timezone, place coordinates, optional question and the derived chart.
- Generated reports, citations, gaps, disclaimer/age-gate versions and consent records.
- Chat conversations with your readings, including your messages, AI replies and a per-day message counter.
- Entitlements and payment event identifiers from PayPal, Stripe, Apple or Google. We do not receive full card numbers.
- Push tokens, product analytics events, and operational logs (method, path, status, duration, subject).
- Memories you explicitly save, and relationship profiles you create (display name, relationship type, notes, consent status, and birth details only when you attest that the subject consented). Memories and relationship birth details are included in subject export/delete and are never inferred from chat.
2. Face readings
Face readings accept only named landmark points extracted on the device. Original images are not uploaded to this service. Consent is required before processing and is recorded with the reading. Deleting the reading deletes the points and the consent record.
3. Why we process it
- To provide the service and the reading you requested (contract).
- To operate entitlements, prevent abuse, secure the service and improve reliability (legitimate interests).
- To process face landmarks and optional notifications (consent, where required).
- To meet tax, accounting, fraud-prevention and other legal obligations.
4. Processors and transfers
We use payment and infrastructure providers including PayPal, Stripe, Apple, Google, Expo Push, our hosting/database providers, and — only when chat is enabled — a configured large-language-model provider. That provider processes the unlocked reading text, recent chat messages and any memories you explicitly saved in order to generate a reply; it does not receive relationship profiles. Some processing may occur outside your region; where required, transfers rely on appropriate safeguards.
5. Retention
Account, reading and chat data are kept while the account is active and for a limited period after deletion as required for backups, disputes and legal obligations. Chats are deleted with their reading, when you clear the conversation, or by the same retention setting that purges readings. Payment providers retain their own records under their policies.
6. Your rights
Depending on your location, you may request access, export, correction, deletion, restriction or objection, and you may withdraw consent for face processing or notifications. The account page can export all data (including chat), delete reading/chat data, or delete the account; memories and relationship profiles can be edited or deleted individually on the account page, and individual conversations can be cleared in the reading view. Contact our support form at /contact for other requests. You may also complain to your local supervisory authority.
7. Children
The service is not directed to anyone under 18. We do not knowingly collect data from children.
8. Security
We use HTTPS in production, hashed credentials, least-privilege access and deletion cascades. No system is perfectly secure; report suspected issues to our support form at /contact.
9. Controller
Controller: SEER, registered address available on request. DPO/privacy contact: available on request.