What we remember about you.

The short version

• Your birth date, time, and location are never publicly exposed — stored with server-side-only access.
• Your data never trains AI models — ours or anyone else's.
• You can download everything we hold, or delete your account, from your account page. No questions asked.
• After a deletion request, we retain zero personal data within 2 years.
• We never sell your data. We never share it with advertisers.

Everything below is the long version — legally accurate, human-readable.

This Privacy Policy describes how Zodiacs ("we," "us," or "our") collects, uses, and protects your personal information when you use Zodiacs and related services (the "Service").

Information We Collect

Information you provide directly:

• Account information: name, email address, password (hashed, never stored in plaintext).
• Birth data: birth date (required), birth time (optional), birth location (optional). The exact birth time — which can be sensitive — is held in a database with server-side-only access that is never exposed to the internet.
• Relationship data: any birth data you add for a partner, family member, or colleague, under the same protection.
• Readings and outcomes: the calculations and interpretations we generate for you, plus any outcome feedback you submit.
• Payment information: handled end-to-end by Stripe. We never see or store card numbers.

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps) — retained 90 days.
• Device information (operating system, screen size, user agent) — used for rendering, not tracking.
• Usage analytics (which features you use) — aggregated, stored via our analytics provider PostHog with IP anonymization enabled. PostHog runs only after you accept analytics cookies, and may record session replays for product debugging with all form inputs masked before capture.
• First-party analytics beacon — a lightweight, self-hosted event beacon (page views, scroll depth, clicks) sent to our own analytics infrastructure, never to a third-party ad network. While you are signed in to the app, the pages you open are recorded there under your account's email, unless you have declined analytics.
• Cookies — strictly necessary cookies (session) and analytics cookies (opt-outable). See our Cookie Policy.

How We Use Your Information

We use the information we collect for exactly these purposes — nothing else:

• Generate your personalized readings, charts, and compatibility analyses.
• Save your birth profile, readings, and outcomes so you can revisit them.
• Process subscription billing via Stripe.
• Send transactional emails (receipts, password resets, account notices). No marketing unless you opt in.
• Diagnose technical issues and improve the Service through aggregated usage patterns.
• Detect fraud, abuse, and security threats.

What We Will Never Do

• We will never train AI models on your data. Not our models, not third-party models. Your birth data, readings, and outcomes are never included in any training dataset.
• We will never sell your personal information. Ever.
• We will never share your data with advertisers. We don't run ads, we don't sell ad space, and we don't participate in cross-site ad tracking.
• We will never use birth data for purposes you didn't opt into. Your chart is computed for your readings; full stop.

Information Sharing

We share information only with a narrow set of service providers under strict confidentiality and data-processing agreements:

• Stripe — payment processing (they see your payment method; we never do).
• Vercel — application hosting (encrypted in transit, processed in our team account).
• PostHog — anonymized product analytics and consent-gated session replay (form inputs masked).
• Gleap — the support chat. They process whatever you choose to write in a conversation with us, plus your name and email if you are signed in to the app, so a reply can reach you.
• Third-party large-language-model providers (currently Anthropic, via our own proxy) — your birth details and the chart calculations derived from them are processed by third-party large-language-model providers to generate your readings, along with your active preferences and, if you store one for name-based readings, your birth name. We do not include your email, account credentials, or payment data in any model prompt.

We may disclose information if required by valid legal process. We will notify you of any such request unless we are legally prohibited from doing so.

Data Retention

Your readings are worked out on your own device and stay in your browser's storage — deleting your account does not touch them, and clearing that storage is what removes them. What we hold on our server is your account itself, your plan, a daily count of the paid screens your account opened and the upgrade prompts it met, and the birth data you gave us for the morning line or a friend map. If you delete your account:

• Within 7 days: your account, your plan, that daily count, the birth data behind the morning line, and any friend map you made are removed from the live databases.
• Within 30 days: all related records in logs and analytics are purged.
• Within 2 years: encrypted backup snapshots containing historical data are cycled out. After this window, zero personal data about you remains, verifiable via our backup rotation policy.

Your Rights

You have the right to:

• Access — download everything we hold about you as a JSON file, from your account page.
• Correct — edit any profile or birth data directly in the app.
• Delete — one button on your account page. We do not ask why.
• Port — that file is machine-readable, so you can take it to another service.
• Object — opt out of analytics, marketing, or any other non-essential processing.

For GDPR, CCPA, or any other jurisdiction-specific requests, contact support@zodiacs.ai. We respond within 30 days.

Security

We apply layered protection: TLS 1.3 for all traffic, server-side-only database access (the database is never exposed to the internet), strict role separation, and daily backups replicated off-site with a 14-day on-site retention and off-site snapshot cycle. We follow industry best practices but acknowledge that no system is perfectly secure — we commit to notifying affected users within 72 hours of confirming any breach.

Children's Privacy

Zodiacs is not intended for users under 16. We do not knowingly collect information from children. If you believe a child has provided information to us, contact us and we will delete it promptly.

Changes to This Policy

When we make material changes, we will notify you by updating the "Last updated" date and, where appropriate, via email or an in-app notice. Continued use after a change means you accept it — but you can always delete your account if you disagree.

Contact

Privacy questions, data requests, or security reports: support@zodiacs.ai.

Legal entity details are available on request via support@zodiacs.ai.