Privacy Policy (v2)

Effective date: 12 November 2026　Version: v2 (v1 took effect on 10 November 2026; v2 adds Sign in with Google)

This Privacy Policy explains what personal data Lodestarly (演卦, “the platform”, “we”, “us”) collects when you use our website, mobile app and related services (together, the “Service”), why we collect it, who we share it with, how long we keep it, and what rights you have. It does not apply to third-party websites or services linked from the Service; please read their own privacy policies.

1. Who we are

For the purposes of UK and EU data protection law, the operator of Lodestarly is the data controller of your personal data.

Contact: support@lodestarly.com

2. What we collect

2.1 Your account

• Email address: used for sign-in with a one-time code, account recovery and service notifications.
• Sign in with Google (optional): if you choose “Continue with Google”, we receive your Google account identifier and email address from Google, and use them to sign you in and to link that Google account to your account with us. If that email address is already the sign-in email of an account, the Google account is linked to that account and we send a notice to that email address. We do not receive or store your name, profile photo or any other Google profile data. We store the account identifier, the email at the time of linking, when it was linked and when it was last used. You can unlink it at any time on your account page.
• Accounts without an email: you can use some features (such as starting a chat) before adding an email. In that case we only create an anonymous account for your device and do not collect an email address or phone number.
• Interface language, country/region: the language is used to show the interface and send notifications. Your country/region is inferred by our network provider from the IP address of your visit; we store only the country code, to understand usage by region. We do not store your IP address in our database; server access logs do record IP addresses and are overwritten on a rolling basis by size, without archiving.

2.2 Birth details and profiles

• Date of birth, time of birth (which can be marked as uncertain), city of birth and the coordinates and time zone derived from it, plus the name, gender, relationship to you, occupation and question you enter for a profile.
• You can create profiles for yourself or for other people. If you create a profile for someone else, make sure you have their permission.
• When you place an order, a copy of the selected profile is saved with the order as the information the consultation was based on.

This data may be special category data. Providing birth details on a metaphysics platform may indirectly reveal religious or philosophical beliefs; consultation content that touches on physical conditions may be health data. We currently process birth details as necessary to provide the service you request. When you sign in or add an email, you are also asked to read and tick the Special Category Data Notice as your explicit consent.

2.3 Chats and consultations

• Text messages, images, videos and voice messages between you and consultants (voice messages are recorded by you with the microphone in the app or on the website).
• Paid content you purchase, reviews you write, reports you submit and your conversations with support.
• Video consultations: calls are carried by a real-time audio/video provider. The platform does not record audio or video. We only log the start time, end time and duration of a call for billing and dispute handling.

2.4 Payments

Payments are processed by Stripe. We never receive or store your full card number or security code. We store only the customer and transaction IDs returned by Stripe, the order amount and currency, and payment and refund status. If you choose to save a card for future payments, the card details are stored by Stripe.

2.5 Device and technical data

• Push token: if you allow the app to send notifications, we obtain a push token through Google Firebase Cloud Messaging to deliver notifications about new messages, order status and similar events to your device.
• Crash and error reports: we use Sentry to collect error information (the error, device model, operating system and app version, etc.) to fix problems. Reports carry only our internal account ID and do not include your email, phone number or IP address.
• Website analytics (website only): we use Google Analytics 4 to count which features people use and how far they get, without birth details, chat content or consultant data; the data is stored by Google (United States) and kept for 14 months. It is on by default; the site tells you about it on your first visit, and you can turn it off at any time on the “About the platform” page or the “Privacy & data” page.
• Ad measurement (website only): we use the Meta Pixel to measure ads. It sends only which feature was used and whether a payment was started and succeeded (including amount, currency and payment method) — not what you viewed or entered. In the UK, the EU, Switzerland and Thailand it is turned on only with your consent; elsewhere it is on by default. Both can be turned off at any time on the pages above. We cannot delete data held by Meta on your behalf; you can manage it under “Your activity off Meta technologies” in your Facebook settings.
• Ad source (website only): if you start a chat from an ad landing page, we record that page, the permitted ad-source parameters in the link and your country or region, to measure visits, questions and paid conversions. The first source is linked to your account and deleted when you delete your account.
• The app contains no advertising and uses no third-party analytics SDKs.

3. Why we use your data and our legal bases

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

You may ask us for more detail about our legitimate-interests assessments by email.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects for you. All readings on the platform are given by consultants themselves.

4. What consultants can see

To provide a consultation, the consultant you choose can see: the birth details and profile information you provide for that consultation (name used, gender, relationship, occupation, question, etc.), the chat between you, and a user alias and number generated by the platform for that consultant only.

Consultants cannot see your real name, email, phone number, payment details or device identifiers. Each consultant sees a different alias for you, so aliases cannot be used to tell whether two consultants are talking to the same person.

Please do not send your own contact details or other information that identifies you in chats; the platform blocks phone numbers, email addresses and messaging-app accounts in messages (see the Terms of Use).

5. Who we share data with

We do not sell your personal data. We share it only as follows.

The consultants who serve you (see section 4).

Service providers acting on our behalf (data processors), bound by contracts that restrict their use of your data to the services they provide to us:

When you sign in with Google, your Google account itself is managed by Google under its own privacy policy; we receive only the two items listed in 2.1 above.

Platform staff view conversation content only when handling disputes and reports, and they handle the messages you send to support.

Legal and safety reasons: when required by law, court order or a regulator, or where necessary to protect the rights, property or safety of the platform, our users or the public.

Business transfers: in connection with a merger, acquisition, restructuring or sale of assets, your data may be transferred to the successor, subject to confidentiality obligations equivalent to those in this policy.

6. International transfers

The operator is in the UK, the servers are in Singapore, consultants are in mainland China, and some providers are in the United States, the European Economic Area or elsewhere. Your data is therefore transferred outside the UK and the EEA. When we do so, we use appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• the UK International Data Transfer Agreement (IDTA) or Addendum approved by the Information Commissioner’s Office;
• other adequacy mechanisms available under applicable law.

You may request a copy of the relevant safeguards by email.

7. How long we keep data

• Account and profiles: until you delete your account.
• Accounts without an email: removed automatically if they have no orders and have not been used for 180 days.
• Images, videos and voice messages in chats: videos and voice messages are kept for 90 days by default; images have no time limit by default. After expiry the file is deleted and the message shows an “expired” placeholder. These periods are set by the platform and may change.
• Message previews in push notifications: 7 days.
• Orders and transaction records: kept after you delete your account, but no longer linked to you (see section 8).
• Error reports: kept for Sentry’s event retention period, at most 90 days.
• Server access logs: overwritten on a rolling basis by size, without archiving.
• Database backups: one per day, deleted after 30 days.

Where we must keep data for legal reasons (for example, an open legal claim), we isolate it and stop using it for any other purpose.

8. Deleting your account

You can delete your account in the app under “Me → Privacy & data”, or on the website’s “Privacy & data” page (/account/privacy). Deletion takes effect immediately and cannot be undone.

If you have uninstalled the app and cannot sign in on the website (for example, because no email is linked to your account), you can also ask us to delete your account by emailing support@lodestarly.com. If an email is linked to your account, send the request from that address; if not, include details that let us verify the account is yours, such as the email you used when paying and the date and amount of an order. We will delete the account within 30 days of verifying it and reply to confirm; the same data is deleted as described below.

• Deleted: birth details and profiles; charts, lot and dream reading records; chat messages; notifications; follows; push devices and tokens; the link to your Google account; your customer record and saved cards at Stripe. Image, video and voice files in your chats are then removed from storage by a clean-up job. Consents you gave lapse.
• Kept without your identity: orders and transaction records (amount, time, status, etc.) are kept for accounting, tax and chargeback handling, but can no longer be linked to you. Reports you submitted keep their outcome with the reporter’s identity removed. For paid content you unlocked, a placeholder record remains on the consultant’s side.
• When deletion has to wait: if you have an order in progress or a refund that has not completed, you can delete your account once they finish — these records are evidence of delivery and for disputes. The page tells you why.

Deleted data may remain in database backups for up to 30 more days and is removed as the backups expire.

Before deleting your account, you can export your data on the same page.

9. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (the “right to be forgotten”);
• restrict or object to certain processing;
• port your data in a structured, machine-readable format;
• withdraw consent at any time where processing is based on consent (this does not affect processing carried out before withdrawal);
• lodge a complaint with a data protection authority.

You can export and delete your data yourself on the “Privacy & data” page. For other requests, email support@lodestarly.com. We will respond within 30 days, or tell you if we need more time where the law allows.

UK residents may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk. EU residents may contact their national data protection authority.

10. Children

The Service is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, please contact support@lodestarly.com and we will delete it promptly.

11. Security

We protect your data with encryption in transit (TLS), least-privilege access controls and audit logging, and the consultant-facing interfaces are built so that they do not contain your identity or contact details. No system is completely secure; if a security incident affects your personal data, we will notify you as required by law.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will publish a new version with a new effective date and, where appropriate, let you know by email or in-app notice. Earlier versions remain available.

13. Contact us

Email: support@lodestarly.com

本页由 scripts/build-docs.py 从 docs/legal/privacy-policy-v2.en.md 生成 · 请修改 Markdown 源文件而非本页