Privacy Policy: Reckoned Yet?

Effective date: October 9, 2026

We collect only what is needed to read your chart and run the conversation. We do not ask for an email, a password, or a tracking profile. We don't sell data. Your raw birth details stay on your device unless you sign in; if you do, your profiles are stored with your account so they follow you to another browser or device. The AI model only ever receives derived chart context, never your raw birth details.

1. What we collect and process

No account, no tracking. The app does not ask for your email address, phone number, or password. On first launch, we create an anonymous account token: a random identifier unique to your device. This identifier stays in your device's secure storage and keeps your chat history across sessions. On the web app, this token and your profiles live in your browser's storage for app.reckoned.app; clearing site data removes them. You may sign in with Google or an email link to keep purchases, history, and profiles across browsers and devices.

Birth data per profile. If you have not signed in, your birth date, time, time zone, city, longitude, and gender stay on your device or in your browser. In the iOS app they live in the app's private storage; in the web app they live in the browser's local storage for this site, unencrypted, readable only by pages on app.reckoned.app. They are not sent to our servers. If you sign in, the profiles on that device (name, birth date, time, time zone, city, longitude, and gender) are also copied to our database and kept with your account, so that signing in on another browser or device restores them. That copy is encrypted at rest, readable only by your account, never shared with third parties, never sent to the AI provider in raw form, and used for nothing else. Deleting a profile while you are signed in deletes our copy of it, and "Delete account & charts" deletes all of them. Deleting the app or clearing site data removes only the copy on that device.

Profile names. Display names you assign to profiles (for example, "Me" or "Partner") are stored on your device, and with your account if you sign in.

Conversation messages and daily readings (server-side). The questions you send to the AI, the follow-up replies, and the context of drawn Guanyin Lots are sent to our backend database and stored there, keyed only to your anonymous token.

Derived chart context (server-side, transient). When you request a reading, ask a follow-up question, or draw a Guanyin Lot, your device converts your local birth fields into a text string of chart data (stems, branches, ten gods, luck pillars, and daily elements). We send this derived chart context, never your raw birth date or precise birthplace, to our backend and to third-party AI models to generate the response.

Subscription and quota state (server-side). Your purchase status (free tier, subscription tier, or top-up queries) and daily usage counters are tracked on our servers against an anonymous subscriber identifier. Payment processing is handled by Apple (iOS app, through your Apple ID) or by Stripe (web app). When you buy on the web, Stripe receives your payment details, billing country, and email address; we receive only a customer reference, the product bought, and its status.

Aggregate telemetry (server-side, de-identified). Performance indicators, latency metrics, and error rates are logged for app maintenance. Your anonymous device token is salted and SHA-256 hashed before it reaches our telemetry databases, so the logged value cannot be linked back to your session.

Sign-in identity (optional, opt-in). If you link a Google account or an email address to keep your purchases, history, and profiles across devices, the provider shares a unique identifier for this app and an email address. Google may also share a display name. We use this only to keep your purchases, history, and profiles available across devices and to send sign-in links you request. We do not send marketing email, and we do not cross-reference this identity with the AI model or any third-party databases.

2. What we never collect

• Email address
• Phone number
• Password
• Contacts
• Photos
• Device or hardware location
• Advertising identifiers (IDFA) and tracking pixels
• Data sold by ad networks or data brokers

We do not ask for any of these.

3. How your data is used

To draw your chart. All BaZi calculations run locally on your device. No server is contacted to compute your chart.

To generate AI readings and Oracle lots. When you start a dialogue or draw a lot, the derived chart context and text history are sent to a third-party AI provider's API to return the interpretation. No personal identifiers, emails, or device keys are sent with this request.

To enforce quotas. Quota records are checked on our servers to manage usage. We do not inspect the content of your prompts to do this.

4. Sensitive-category data handling

Because birth charts can reveal private philosophical or spiritual leanings (which may qualify as special-category personal data under frameworks such as GDPR Article 9), we keep this data isolated:

• Raw birth details leave your device only if you sign in, and then only to our own database, to sync your profiles. They are never sent to the AI provider, to analytics, or to any other third party.
• The derived chart data (stems, branches, cycles) cannot be used to recover your precise original birth entry.
• No third-party analytics or advertising platforms receive any of this.
• Server-side chat logs and synced profiles are isolated using row-level security, encrypted at rest, and excluded from our application diagnostic logs.

5. Third-party data subprocessors

We use a small set of subprocessors:

• Cloud infrastructure: Database and hosting providers located in the United States.
• AI interpretation: Readings are generated by a third-party AI model provider, reached through our own servers. It receives your computed chart, the questions you ask and the conversation you lead, your app language, and, for a compatibility reading, the second chart you choose to compare. It never receives your name, contact details, or device identifiers. This data is used only to generate your readings, never for advertising.
• Payments (web): Stripe, Inc. (card processing, tax calculation, receipts).
• Error reporting: Sentry (crash and error reports, with birth data, chart text, and questions stripped before sending; no session replay).
• Subscription tracking: An anonymous backend service that tracks subscription status, kept separate from chart data, backed by Apple App Store systems on iOS and Stripe on the web.

The app asks for your permission before anything is shared with the AI provider: your first reading is preceded by an in-app disclosure, and AI readings stay off unless you agree. Your chart itself is computed on your device.

We do not run advertising scripts or third-party behavioral analytics SDKs. For our full subprocessor list, contact support.

6. Data retention and erasure

Device-local storage: Erased when you delete the app or choose "Delete account & charts" in Settings.

Server-side storage: Retained, in anonymized form, to support your chat continuity. Tapping "Delete account & charts" triggers an immediate database wipe that replaces sensitive records with null values and completes within 30 days.

Telemetry: Aggregated system data is kept indefinitely for long-term health monitoring, and is not linked to any identifiable user.

7. Your rights, regional scope, and device portability

You can access, correct, or erase your records directly inside the app. The export path is the in-app "Export my readings" option in Settings, because we hold no email or other personal identifier to verify an external export request against. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority. Our database and hosting run on US East cloud nodes, under Standard Contractual Clauses (SCCs) where international transfers apply; the AI model provider may process requests in other countries. This app does not support or operate within mainland China.

Anonymous histories, balances, and profiles live where they were created. Signing in (Google or email) lets you recover purchases, server-side history, and your profiles on another browser or device. App Store subscriptions also transfer through Apple's receipt system.

8. Children

This app is not directed at children under 13. We do not knowingly collect data from children under 13. You must be at least 13 to use it. If you believe a minor is using the app, please contact support and we will guide them through the deletion process.

9. Changes to this policy

If we make a material change (new data collected, new sub-processor, change in retention), we will update the effective date at the top of this page and post a notice in the app for active users. Continuing to use the app after a material change takes effect constitutes acceptance.

10. Contact

Operated by Boxuan Cui, who is the data controller for the personal data described in this policy. Direct all inquiries, erasure verification requests, or due diligence questions to [email protected].