Privacy Policy

Birth details. The date, local clock time, country, region and city you enter, plus the longitude and IANA time zone we derive from that city. The time zone and longitude are what let us correct your local clock time to true solar time, including historical daylight saving. An optional name, if you type one.

Account. Your email address and a hashed password, held by our authentication provider. We never see your password.

Payment. A Stripe checkout session identifier, a payment intent identifier, the amount, the currency and the email address you paid with. We never receive or store your card number.

Your report. The optional question you write, the computed chart, and the seven sections of the finished report.

Before you buy, your birth details stay in your own browser. Nothing is sent to us until you choose to purchase.

The report is written by a large language model. It is given the computed chart facts and your question, and deliberately not given your name, your email address, your longitude, your exact birthplace or your full calendar birth date. Those fields are stripped before the request leaves our server, and the stripped context is checked again before it is sent.

The provider is currently DeepSeek. Its servers are outside New Zealand and outside the European Union, so this processing happens in another country. If we change provider we will update this page.

Supabase hosts the database and the login system, so it holds your account, your birth details and your report.

Stripe handles the payment. Stripe receives your email address, the amount and your card details, which you give directly to Stripe. Stripe does not receive your birth details.

DeepSeek generates the report from the stripped chart facts described above.

Resend sends the email that tells you your report is ready. It receives your email address and a link, not the report text.

Cloudflare sits in front of the site for DNS, TLS and protection against abuse, so it sees your IP address and request metadata.

Oracle Cloud hosts the application server, in Sydney, Australia.

Vercel Analytics and Speed Insights collect aggregate page-view and page-performance measurements. They are not used to build a profile of you.

Your report and the birth details behind it are kept for 12 months from purchase, so that you can come back and read the report. After that they are deleted.

You can ask us to delete them sooner. Write to [email protected] from the address on your account and we will remove the report and the birth details.

A minimal transaction record — the amount, the date, the currency and the payment identifiers — may be kept longer where accounting, tax or anti-fraud law requires it. That record does not contain your birth details or your report.

Only the account that bought it. Report pages are served with no-store caching and are excluded from search engines, and a request for a report that does not belong to your account is answered exactly the same way as a request for one that does not exist.

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, by writing to [email protected] from your account address. Deleting your report is irreversible.