← Back
🔒

Privacy Policy

Last updated: September 2026 · Effective: September 2026

This Privacy Policy explains how WitsType AI Inc. (“WitsType AI,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you use BirthHue, our sidereal Vedic astrology service at birthhue.com. It is written to meet the requirements of the US state privacy laws (including the CCPA/CPRA), the UK GDPR and PECR, Canada’s PIPEDA, and India’s Digital Personal Data Protection Act, 2023 (DPDP). Please read it carefully before using our service.

1.Information We Collect

We collect information you provide directly to us and information generated automatically through your use of the service. Your birth date, time, and place are the most sensitive data we hold; they can be used to infer traits about you, so we treat them accordingly throughout this policy.

Account Information (via Google OAuth)

Astrological & Birth Data

Content You Create

Usage & Technical Data

Payment Information

Paid plans are not live yet, so today we collect no payment information. When they launch, we will not store your credit card or banking details: all payment information will be handled directly by Stripe, our payment processor. We will receive only a non-sensitive transaction record (subscription status, plan type, and Stripe customer ID) from Stripe after a successful transaction.

2.How We Use Your Information

PurposeData Used
Generate your Vedic (sidereal) natal chart and astrological readingsBirth date, time, city
Authenticate and maintain your account sessionGoogle OAuth credentials, session token
Power the AI Chart Chat featureBirth data, computed chart placements, your chat questions
Send important account or service updatesEmail address
Send daily horoscope / transit emails (you can opt out any time)Email address, birth data
Process subscription payments and manage billing (when paid plans launch)Stripe customer ID, subscription status
Confirm you are 18 or olderDate of birth (checked once at sign-up, not stored), confirmation timestamp
Find and fix errors in the appError reports, page, device/browser details
Improve the accuracy and features of the serviceUsage data (aggregated and anonymised)
Detect fraud, abuse, and security threatsIP address, device data, session data
Comply with legal obligationsAs required by applicable law

We do not sell or share your personal data with third parties for their own marketing purposes, and we do not use your birth data or personal information for advertising.

3.Data Storage & Security

Your data is stored on cloud infrastructure from our hosting providers and Supabase (authentication and datastore), both managed platform providers. Our database is encrypted at rest and connections to the service are protected by TLS/SSL encryption in transit.

Where your data is stored and processed: our Supabase database is hosted in Seoul, South Korea; AI Chart Chat requests are processed by Anthropic in the United States; our workflow server (n8n) and chart-calculation service run on our own virtual private server.

Legacy backup tables: our database also holds a small set of legacy backup tables (older copies of chart and chat data and test data kept from earlier development). They are not used by the app, are not exposed to users, and are kept only for recovery and troubleshooting. When you delete your account, your own rows in the backup tables that carry a user identifier are deleted as well. We review and purge these backup tables periodically, and at least once a year.

We retain your account data for as long as your account remains active. If you delete your account (in-app, via Settings → Delete Account, or by emailing us), we delete your personal information and astrological data, including charts, journal entries, connections, AI chat history, feedback, invites, referrals and activity history, and your sign-in itself, immediately. See our Data Deletion Policy for the full breakdown of what is deleted and any narrow exceptions (for example, once paid plans launch, Stripe may retain transaction records under its own retention policy for tax/accounting purposes).

While we implement reasonable technical and organisational safeguards, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet.

4.Third-Party Services

We use the following third-party services (sub-processors) to operate BirthHue. None of them are permitted to use your data for their own purposes beyond providing the service to us.

We do not integrate with any advertising networks or analytics trackers (such as Google Analytics) beyond what is described above.

5.Cookies & Session Data

BirthHue uses a minimal cookie policy. We set only the cookies strictly necessary to operate the service:

We do not use:

Because we only use strictly necessary session cookies, no cookie consent banner is required under current cookie regulations. If our cookie usage changes in the future, we will update this policy and notify users accordingly.

6.Your Rights & Choices

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@birthhue.com. We do not charge for reasonable requests and will respond within 30 days (California/PIPEDA) or one month (UK GDPR).

7.UK GDPR: Lawful Basis for Processing

Processing PurposeLawful Basis
Account creation and authenticationPerformance of a contract
Generating your natal chart and readingsPerformance of a contract
AI Chart ChatPerformance of a contract / your explicit request
Subscription billingPerformance of a contract
Daily horoscope / transit marketing emailsConsent (opt-in at signup; withdraw any time)
Fraud and abuse preventionLegitimate interests
Legal/tax record-keepingLegal obligation

8.International Data Transfers

We and our sub-processors (our hosting providers, Supabase in South Korea, Anthropic, Sentry, Resend, and Stripe once paid plans launch) may process your data in the United States, South Korea or other countries outside the UK/EEA, Canada or India. Where we transfer personal data originating in the UK or EEA to a country without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) or an equivalent lawful transfer mechanism offered by that sub-processor, and we take reasonable steps to ensure your data receives a comparable level of protection regardless of where it is processed.

9.California / US State Privacy Rights (CCPA/CPRA)

If you are a California resident (or a resident of a state with a similar consumer privacy law), you have the rights described in Section 6 above, plus the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, so there is nothing to opt out of today. We will update this section if that ever changes.

10.Canada (PIPEDA)

WitsType AI Inc. is the organization responsible for your personal information and can be reached at support@birthhue.com. If you are located in Canada, we process your personal information based on your meaningful consent, obtained when you create an account and again for optional marketing emails. You have the right to access and correct your personal information as described in Section 6. If you have a complaint we cannot resolve, you may escalate it to the Office of the Privacy Commissioner of Canada.

Our commercial emails comply with Canada’s Anti-Spam Legislation (CASL). We send them only with your express consent, and every email identifies WitsType AI Inc., includes our mailing address, and contains a working unsubscribe link.

11.Children's Privacy

Having a BirthHue account and generating a chart are two separate things, and age is treated differently for each.

Account holders (18+). BirthHue is for people aged 18 and over and is not directed at children. We do not knowingly create accounts for anyone under 18. After signing in for the first time you are asked for your date of birth, and an account for someone under 18 is not created (any data from that sign-in is deleted and nothing is kept). If you believe a child has created an account, please contact us and we will delete it promptly.

Birth details of others, including children. An adult account holder may enter another person’s name, birth date, time, and city, including those of their own child, to generate a chart. The child has no account and never signs in. We collect a child’s details only through their parent or legal guardian’s account, use them only to produce that chart, never contact the child, and never use them for marketing or profiling. By entering a child’s details you confirm you are their parent or legal guardian. You can delete that chart or export it at any time in the app, and a parent or guardian can also ask us to delete it (see our Data Deletion Policy). Birth details you enter for a chart, for yourself or someone else, are chart data, not a statement of your age.

12.India (DPDP Act, 2023)

If you are in India, WitsType AI Inc. acts as the Data Fiduciary for your personal data. We process it with your consent, given when you sign in, and for the purposes set out in this policy.

13.Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. Your continued use of BirthHue after changes are posted constitutes your acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we protect your information.

14.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

We aim to respond to all privacy-related enquiries within 5 business days.