Privacy Policy

1. Information We Collect

Birth Data: When you get a reading, we collect your birth date, birth time (optional), and birth location (latitude/longitude). This data is used exclusively to calculate your Human Design reading.

Email Address: If you voluntarily provide your email address (e.g., to save your chart or receive updates), we store it to deliver the services you requested. Email capture is optional — you can generate and view a chart without providing your email.

Payment Information: If you purchase a paid report, your payment is processed by Stripe, a PCI-DSS compliant payment processor. We do not receive, store, or have access to your full credit card number. We receive a Stripe session ID confirming payment completion.

Usage Data: We may collect anonymous technical data such as browser type, referring URL, and pages visited to understand how the Service is used and improve it. This data is not linked to personally identifiable information.

2. How We Use Your Information

• Birth data — To calculate and display your Human Design reading
• Email address — To send you your chart link, service updates, or report delivery (if purchased)
• Payment confirmation — To unlock paid report content you have purchased
• Anonymous usage data — To improve the website experience and fix bugs

We do not use your data for advertising targeting, profiling, or sale to third parties.

3. Data Retention

Chart data is stored in our database so you can revisit and share your chart. If you wish to have your data deleted, you may contact us and we will remove your records within a reasonable timeframe.

Email addresses are retained until you unsubscribe or request deletion. Payment records are retained as required for accounting and legal compliance.

4. Third-Party Services

We use the following trusted third-party services:

• Stripe — Secure payment processing. Stripe's privacy policy governs their handling of payment data: stripe.com/privacy
• Google Fonts — Font delivery (standard web fonts served from Google's CDN)
• Render.com — Cloud hosting infrastructure for the application

We do not share your personal data with these services beyond what is necessary to provide the Service.

5. Cookies

We use minimal browser storage (localStorage) to remember preferences such as your last generated chart ID, enabling a smoother experience when you return to the site. We do not use tracking cookies or third-party advertising cookies. We do not use a cookie consent banner because we do not set advertising or analytics cookies.

6. GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate data
• Right to Erasure — Request deletion of your personal data
• Right to Restriction — Request that we restrict processing of your data
• Right to Data Portability — Request your data in a portable format
• Right to Object — Object to processing of your data

To exercise any of these rights, please contact us using the information on our website.

7. CCPA Rights (California Residents)

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the "sale" of personal information. We do not sell personal information. To exercise your rights under the CCPA, please contact us.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our database is hosted on secured infrastructure with access controls. Payment data is handled exclusively by Stripe's PCI-DSS compliant systems.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made. Continued use of the Service after updates constitutes acceptance of the revised policy.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through the information available on our website.