Privacy Policy
Last updated: 2026-07-12
Who operates ChartLab
ChartLab is operated by ChartLab Operator.
You may contact us through Settings → Feedback in the app.
What we collect
Sign-in: email and display name from Google OAuth (when you choose to sign in).
Chart data: birth date, time, timezone, gender, and chart selections you enter.
Generated content: Chart Lab readings and Consult reports saved to your account.
Usage: credit balance, free-trial counters, and a log of credit grants and spends.
Product analytics: pages you view and in-app interactions (clicks, buttons and tabs used, scroll depth, and field-usage metadata such as which field you edited and how long — we do NOT record the characters you type into fields).
Security and abuse-prevention data: your device and browser type, screen size, approximate location (country/region/city and network provider from your connection), and a one-way hashed identifier derived from your IP address. We do not store your raw IP address.
Payments (when enabled later): Stripe processes payments; we store pack metadata and Stripe event ids, not full card numbers.
Feedback: messages you submit in Settings, optionally with an email you choose to provide for a reply.
Marketing email preference: whether you opt in to product updates and occasional promotions (stored on your account).
Educational email preference: whether you opt in to BaZi learning emails — chart insights, timing concepts, and community notes (stored on your account).
Marketing email
With your optional consent, we may email you about product updates, BaZi tips, and occasional promotions (for example credit bonuses or new features).
You can opt in on first sign-in or in Settings → Email preferences. You can withdraw consent anytime in Settings; we will also include an unsubscribe link in every marketing email once sending begins.
We do not send marketing email until an email service provider is connected. Transactional messages about your account or purchases, if any, are separate and do not require marketing consent.
Marketing preferences are stored on your account until you opt out or delete your account.
Educational email (BaZi learning)
With your separate optional consent, we may email you BaZi learning content — chart insights, timing concepts, and community notes similar to what we share on our public Facebook page.
You can opt in on first sign-in or in Settings → Email preferences. You can withdraw consent anytime in Settings; we will include an unsubscribe link in every educational email once sending begins.
Educational email is independent from marketing email — you may opt in to one, both, or neither.
We do not send educational email until an email service provider is connected.
Why we use it
To provide Chart Lab readings, Consult, Records, and credit billing.
To send prompts to our AI provider to generate readings (see AI Disclaimer).
To prevent abuse and keep accounts secure.
AI processing
Readings are generated by third-party AI models from your chart inputs and prompts.
We do not sell your personal data. We do not use your readings to train public models unless a provider's terms say otherwise.
How long we keep data
Saved Chart Lab readings and Consult reports: up to 90 days from last update, then deleted automatically — or sooner if you delete your account.
Product analytics and security/abuse-prevention data (interactions, device, approximate location, hashed IP identifier): up to 90 days, then deleted automatically — or sooner if you delete your account.
Sign-in sessions: about 30 days, or until you sign out or delete your account.
Credit ledger: removed when you delete your account. Stripe payment event ids may be kept up to 12 months for fraud and billing disputes.
Feedback messages: up to 12 months, or removed when you delete your account.
Account identifiers: until you delete your account in Settings.
Your choices
Settings → Delete account permanently removes your login, saved readings, consult reports, credits, and related account data. Signing in again creates a new empty account.
Settings → Email preferences toggles marketing and educational email opt-in or opt-out.
Settings → Feedback for other privacy questions.
We aim to respond to privacy requests within 30 days via the in-app channel only.
Service providers
Cloudflare (hosting and database), Google (sign-in), Stripe (payments when live), and our AI API provider.
These providers process data only to run the service.