NatalChart.AI
en
Free chart

Legal

Privacy Policy

Last updated: October 14, 2026

NatalChart.AI (“we”, “our”, “us”) provides AI-assisted natal chart calculations and astrology readings. This Privacy Policy explains what personal data we collect, why we collect it, how we share it, and your rights under data-protection laws including the EU/UK General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA/CPRA”).

For privacy questions or to exercise your rights, contact us at privacy@natalchart.ai.

1. Data we collect

  • Account data: email address, authentication identifiers (Google OAuth subject, magic-link tokens), display name and avatar URL when you sign in with a third-party provider.
  • Birth data: date, time, latitude/longitude and place name you submit to generate a natal chart. Birth time is optional but improves accuracy. A chart built without signing in is kept in your browser and in a short-lived draft on our side (deleted within 24 hours unless you sign in); it becomes part of your account only when you create one.
  • Chat content: messages you send to the AI and the AI's responses, along with the chart context they were grounded on.
  • Billing data: Stripe customer ID, plan, and subscription status. We do not store full card numbers; payment card data is handled entirely by Stripe.
  • Usage data: page views, feature events, IP address (anonymised in Google Analytics), browser/device info, approximate location derived from IP.
  • Diagnostics: crash reports and performance traces via Sentry.
  • Developer API requests: if you use the API at api.natalchart.ai, the birth data in a request is used to compute the answer and is not stored. For each request we keep the endpoint, the status code and the response time, linked to your account.

2. How we use data (purposes & legal bases)

  • Provide the service: calculate charts, render AI readings, persist your account and history. Legal basis: performance of the contract.
  • Billing: process subscriptions and prevent fraud. Legal basis: contract & legitimate interest.
  • Product improvement & security: debug errors, monitor abuse, optimise reliability. Legal basis: legitimate interest.
  • Analytics: measure aggregate usage. Legal basis: consent (you can decline via the cookie banner).
  • Communications: service emails (sign-in codes, billing receipts) and, with your consent, occasional product updates. Legal basis: contract & consent.

We do not sell your personal information and we do not use your chat content to train third-party models.

Data from Google sign-in

When you sign in with Google, we ask Google only for the basic scopes openid, email and profile. Google then shares your Google account identifier, email address, name and profile picture with us. We never ask for your Gmail, contacts, calendar, Drive or any other Google data.

We use this data only to create your account and sign you in on the website and in our apps, to show your name in the app, and to send the emails described in section 2. It is stored in our authentication database (Supabase) while your account exists and is deleted with your account. We do not sell it, we do not use it for advertising, and we share it only with the processors in section 3 that run the service for us.

NatalChart.AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Oh Tarot

Oh Tarot is our tarot app, on Android and on the web at natalchart.ai/tarot. It signs in with your NatalChart.AI account, and this policy covers it in full.

What it keeps: the questions you ask, the cards drawn for them, each card’s interpretation and the answer of each reading, the voice you choose, and your pentacles (the balance and a log of gifts, purchases and opened cards).

AI: to read the cards, your question and the drawn cards are sent to the Google Gemini API. These requests are not used to train Google’s models.

Purchases: pentacle packs are paid through Google Play in the app and through Stripe on the web. We receive what is needed to credit them (the order, the pack and the time), never your card details.

Your control: in Oh Tarot’s settings you can export your readings as a file, delete your tarot data (readings and pentacles) while keeping your NatalChart.AI account, or delete the account with everything in it.

3. Third-party processors

We share data only with vetted processors that act on our instructions under data-processing agreements:

  • Supabase: authentication and database (EU/US regions).
  • Stripe: payment processing and subscription billing.
  • Google (Gemini API): AI inference for readings and chat. Gemini API requests are not used to train Google's models per the Gemini API terms.
  • Anthropic (Claude API): AI inference for readings and chat. Under Anthropic's commercial terms, API requests are not used to train its models.
  • Google Analytics 4: aggregate web analytics, with IP anonymisation and Consent Mode v2.
  • Google Play: subscription billing in the Android app, and pentacle purchases in Oh Tarot.
  • Cloudflare: hosting of Oh Tarot on the web.
  • Google Firebase (Android app): push notifications, and Google Analytics for Firebase, which measures installs and in-app steps such as sign-up, the first chart and purchases to attribute our Google Ads campaigns. It can use your device's advertising ID; in the EEA, the UK and Switzerland this measurement stays off unless you consent, and you can reset or delete the advertising ID in your device settings.
  • Vercel: application hosting and edge delivery.
  • Sentry: error monitoring and performance tracing.
  • Resend: transactional email delivery.

4. International transfers

Some processors are based in the United States. Where data leaves the EU/UK we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, to ensure an adequate level of protection.

5. Retention

  • Account & chart data: retained while your account is active. On deletion, removed within 30 days (excluding lawful retention obligations).
  • Chat history: retained while your account is active; you can clear it from settings at any time.
  • Billing records: retained for up to 7 years to meet tax and accounting obligations.
  • Diagnostics & analytics: retained for up to 14 months in aggregated form.

6. Your rights

Depending on where you live, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data (the “right to be forgotten”);
  • Restrict or object to processing;
  • Data portability: receive your data in a machine-readable format;
  • Withdraw consent at any time, without affecting prior lawful processing;
  • Lodge a complaint with your local supervisory authority.

To exercise these rights, email privacy@natalchart.ai. We respond within 30 days.

7. Cookies & tracking

We use a minimal set of essential cookies (authentication, theme, consent state) and, with your consent, analytics cookies for GA4. See our Cookies Policy for the full list and your choices.

8. Children

NatalChart.AI is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact privacy@natalchart.ai and we will delete it.

9. Who can see your data

Authorised personnel of NatalChart.AI can access account data, birth data and chat content through an internal admin tool. We do this only to run the service: to answer a support request, to investigate abuse or fraud, to fix a bug you have reported or that our monitoring found, and to check the quality and accuracy of the readings the AI produces. Access is limited to what the task needs, and every time an operator opens an individual account or an individual conversation it is recorded in an internal access log with a timestamp.

We do not read your conversations for advertising, we do not sell them, and we do not use them to train third-party models. If you would prefer your history not to be retained, you can delete individual conversations, or delete your account, at any time.

10. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, role-based database access (RLS), and audit logging of internal access. No system is perfectly secure; if you believe your account has been compromised, contact contact@natalchart.ai.

11. Changes to this policy

We'll update the “Last updated” date and, for material changes, notify you by email or in-app notice before the changes take effect.

12. Contact & data controller

The data controller is Bubltalk LLC, a Florida limited liability company that operates NatalChart.AI, 7184 Conway Rd, Orlando, FL 32812, USA. For all privacy enquiries, including requests under GDPR or CCPA/CPRA, email privacy@natalchart.ai.