Privacy Policy

1. Data controller and data we collect

Data controller: Kiril Kaminskyi, an individual (operator of the InnerData service, innerdata.cloud). Contact: [email protected], Telegram @kim0n.

Account data: email address, password (bcrypt-hashed), interface language, subscription status.

Birth data: the name you provide, birth date, birth time and birth place (city and country). This data is required to compute your chart and generate personalized interpretations. It is stored in our PostgreSQL database and is only used to provide the service to you.

Usage data: IP address, browser type, pages visited, session length and feature interactions. Collected automatically to operate and improve the service and to keep it secure.

Payment data: purchases and subscriptions are processed by Whop (whop.com), which acts as the merchant of record and payment processor. We do not receive or store your full card number. We only keep your subscription status and the Whop identifiers needed to grant and manage Pro access.

2. Why we process your data

Your birth data is used solely to generate your personal astrological analysis (natal chart, forecasts and other sections) and to personalize the experience. Interpretations are produced with the help of third-party large language model (LLM) APIs — currently DeepSeek, OpenRouter (which may route to models such as GPT-4.1-mini) and Alibaba Qwen (DashScope). The minimum text required for an interpretation may be sent to those providers for processing. We do not sell, rent or share personal data with third parties for their own purposes.

Usage data helps us improve the product, monitor performance and protect the service from abuse. Aggregated analytics (Google Analytics 4 via Google Tag Manager) is only enabled with your consent where consent is required, and you may withdraw it at any time.

3. Storage and security

Data is stored on the infrastructure of our hosting provider Fly.io (PostgreSQL and Redis; TLS in transit and encryption at rest where supported). Passwords are hashed with bcrypt. Access to production data is limited to the operator and the minimum tooling required.

AI results and chart calculations are cached to improve speed. Caches expire automatically (typically within 30 days) and are never used to identify you outside your own account.

4. Third parties we share data with

Whop (whop.com): payment processing, subscription billing, cancellations and refunds. Processing is governed by Whop's Buyer Terms and Privacy Policy.

LLM providers (DeepSeek, OpenRouter, Alibaba Qwen / DashScope): the text needed to generate your interpretations may be processed by their APIs. These providers may operate servers outside the European Economic Area (EEA). We instruct providers not to use your data for model training, and content on the site is published with ai-train=no. Where transfers outside the EEA occur, they rely on available safeguards (adequacy decisions or standard contractual clauses where offered) or on your consent where applicable. AI disclosure: reports are generated by AI models and astronomical calculations and are not reviewed by a human professional.

Google Analytics 4 / Google Tag Manager: aggregated visitor statistics, enabled only with your consent via the CookieYes banner (or where legally permitted). Google OAuth (if you use it to sign in): Google provides only your email and name. Hosting: Fly.io.

5. Your rights

Under applicable data protection law (GDPR/RODO and equivalent local laws) you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• delete your account and the associated data;
• receive a copy of or export your data;
• withdraw consent and object to processing, including automated analysis.

To exercise these rights, email [email protected] or contact us on Telegram. We respond within 30 days. You may also lodge a complaint with your local data protection authority.

6. Cookies and local storage

Necessary technologies: localStorage keeps your auth token, session data and preferences; these are required for the app to function. With your consent we use Google Analytics 4 tags through Google Tag Manager, managed by the CookieYes consent banner. You can change or withdraw analytics consent at any time; blocking analytics does not break the app.

7. Retention and deletion

Account data is kept while your account is active and is deleted within 30 days after you delete the account. AI result caches expire within 30 days. Technical logs are kept for a limited period for security and diagnostics. Data may be retained longer only where required by applicable law (for example accounting records kept by the payment processor).

8. Contact

Privacy and data protection contact:

Email: [email protected]

Telegram: @kim0n