Last updated18 October 2026

This Privacy Policy describes how ChiAura (the “Service”) collects, uses, discloses and protects personal information, and the choices available to you. By using the Service, you acknowledge the practices described in this Policy.

1Data Controller

The Service is operated by Luke Lee, an individual developer located in the United States (“we”, “us”). Questions or requests concerning this Policy may be sent to chiaura2025@gmail.com.

2Information We Collect

1. Account information: the email address and display name provided by Google or Apple when you sign in. We do not receive your password.
2. Birth details: the date, time and place of birth you enter for yourself or for any profile you create.
3. Generated content: charts, readings, tarot draws, name reports and saved conversations.
4. Usage information: credit consumption, features used, device and browser type, and error and performance logs.
5. Billing information: Stripe customer and subscription identifiers, plan and renewal date.
6. Network information: the IP address from which you sign in or access the Service, and the country inferred from it. We store only the country code derived from the IP address, not a precise location.

3Information We Do Not Collect

Payment card and bank details are entered on pages hosted by Stripe, our payment processor, and are not transmitted to or stored on our servers. We do not use advertising trackers or build advertising profiles.

4Information About Others

If you enter birth details for another person, you confirm that you are entitled to provide that information and have obtained any consent required by applicable law. You are responsible for the information you submit about others.

5How We Use Information

We use personal information to provide and operate the Service, including generating charts and readings; to maintain your account and synchronise content across devices; to administer free and paid entitlements; to respond to support requests; to secure, maintain and improve the Service; to use IP addresses and inferred country to detect and prevent abuse, enforce rate limits, compile aggregate usage statistics and set default regional preferences; and to comply with legal obligations. IP-derived information is accessible only to the operator of the Service for these purposes; it is not sold, and is not shared with third parties for their own purposes. We do not use your birth details or readings to train artificial intelligence models.

6Legal Bases

Where applicable law requires a legal basis for processing, we rely on the performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where requested, and compliance with legal obligations.

7Service Providers and Disclosure

We share personal information only with providers that process it on our behalf: the AI model provider that generates readings (currently Alibaba Cloud Qwen models, which receive chart data and generated text), Stripe for payments, Google and Apple for authentication, and our hosting and email providers. These providers may process data outside your country of residence. We do not sell personal information or share it for third-party marketing. We may disclose information where required by law, or where necessary to protect the rights, safety or property of the Service, its users or others.

8Data Retention

We retain account content until you delete it or delete your account. When you delete your account, it is deactivated immediately and your profiles, birth details and conversations are deleted within 30 days, and residual copies in backups are overwritten in the ordinary course. Readings already generated (BaZi readings, tarot readings and name results) are retained in anonymised form: they are disconnected from your account, and any questions you wrote and any birth details of other people are removed, so they can no longer be linked to you. They are used only for service improvement and aggregate statistics, and not to train AI models. To record that the account was closed, we retain the account number, display name, a partially masked email address and the sign-up and deletion dates. Feedback you send through the Contact page is kept so we can handle it; if you delete your account, its text is retained but is no longer linked to you. Billing records are kept as required by tax and accounting law, technical logs are retained for a limited period for security and troubleshooting, and IP addresses are retained for no longer than 180 days.

9Your Rights and Choices

You may edit or delete profiles on the Profiles page, change your language and display name or delete your account on the Account page, and cancel a subscription through the Stripe billing portal. Depending on your jurisdiction, you may have the right to access, correct, delete or port your personal information, to object to its processing, and to lodge a complaint with a supervisory authority. Requests may be sent to chiaura2025@gmail.com; we will respond within 30 days and may need to verify your identity.

10Cookies and Local Storage

We do not use advertising cookies. Your browser stores a sign-in token, your language preference and a cached copy of your most recent chart to support core functionality. It also stores a randomly generated anonymous visitor identifier, used only to compile aggregate usage statistics and never for advertising. Clearing browser data signs you out, removes the local copy and resets the visitor identifier, without affecting your account.

11Children

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has provided personal information, contact chiaura2025@gmail.com and we will delete it.

12Security

We apply reasonable technical and organisational measures, including encryption in transit and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where required by law, we will notify affected users and the relevant authorities of a personal data breach.

13Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised date, and material changes will also be notified by email. Continued use of the Service after the effective date constitutes acknowledgement of the updated Policy.