1 · Who we are & scope
Auspice8 is operated by Kwok Shing Chan, an individual (sole trader) based in the United Kingdom(“Auspice8”, “we”, “us”). We are the data controller for the personal data described here.
This policy covers both this website (auspice8.com, currently the waitlist) and the Auspice8 mobile app for iOS and Android. Questions and requests: privacy@auspice8.com.
2 · Effective date & versions
This is version 1.1, effective 12 July 2026. We version this policy and keep prior versions available. We’ll tell you about material changes by email (if you’re on our list) or in the app before they take effect. The wording you consented to is recorded against your signup, so a later edit never silently changes what you agreed to.
3 · What we collect — website
When you join the waitlist we collect:
- Your email address, and a record of your consent — the time you signed up, the confirmation click, and the version of the consent wording you agreed to. Your email is stored with our email provider, AWeber, which sends a confirmation email you must click before anything is saved (double opt-in).
- Basic request data (e.g. IP address at signup) used to confirm the signup and prevent abuse.
When you create or use a member account we also collect:
- Account and membership data — your verified email, display name, chosen sign-in method, membership type, and join date. Creating an account does not subscribe you to marketing.
- Private beta feedback — the category, subject and message you submit, plus the product area, platform, optional app version, review status, and any staff response. Feedback is visible only to you and authorised Auspice8 staff.
- Security and request data used to protect account forms, refresh sessions, prevent automated abuse, and enforce feedback submission limits.
The site sets no advertising cookies and shows no cookie banner, because there is nothing to banner— we run no analytics and no marketing trackers. The only browser storage we use is a single functional flag (in your browser’s session storage) that remembers you’ve already seen the intro animation; it is strictly necessary for that feature and stores no personal data.
4 · What we collect — the app
When Auspice8 launches, the app will process:
- Account data — your email and the sign-in method you choose (email, Apple, or Google).
- Your birth data — date, time, and place.This is the heart of the product: it’s what your BaZi (Eight Characters) chart is calculated from. It is sensitive to you, and we treat it that way.
- Partner / third-party birth data — if you run a compatibility reading, the birth date (and optionally time) of the other person. We ask for the minimum: no name and no contact details are required. You confirm you may share it, and you can delete it on its own at any time.
- Your questions to the Oracle — free-text questions are screened for personal information before any AI processing.
- Purchases — handled by RevenueCat and the app stores. Card numbers never reach us.
- Device, diagnostics, and crash data— via Sentry, to find and fix what’s broken.
- Product usage data — via PostHog (EU-hosted): screens viewed and features used, tied to your account ID, so we know what to build next. Not sold, not used for advertising.
5 · BaZi derivations
From your birth data we calculate your Eight Characters, Five Element balance, and luck pillars, and generate readings. These derived results are stored to your account and are deleted when your account is deleted.
6 · AI processing — Mistral (EU)
Some readings are phrased in natural language by an AI model provided by Mistral AI, a sub-processor based in the European Union. It receives only derived, structured values — pillars, zodiac, element scores — never your raw birth date, time, or place, your name, or your email. Free-text Oracle questions are screened for personal information before they are sent. This processing stays in the EU (with UK↔EU adequacy); we use no China-based providers and transfer no data to the PRC. Under our agreement, your inputs are not used to train models (verified against Mistral’s terms at publication).
7 · How we use data & legal bases (GDPR)
- Consent — for marketing emails (via double opt-in) and, given its intimate nature, for processing birth data. You can withdraw consent at any time.
- Contract — to deliver the readings and features you ask for.
- Legitimate interests — security, fraud prevention, crash diagnostics, and product analytics to keep the service reliable and improve it.
8 · Processors & recipients
We share data only with the providers that run the service. We never sell it or share it for advertising.
- AWeber — email delivery (US; under EU–US Data Privacy Framework / SCCs)
- Netlify — website hosting
- Supabase — app database & authentication
- Resend — account and transactional feedback email delivery
- Mistral AI — AI text generation (EU)
- RevenueCat — subscription management (US)
- Apple & Google — payments and sign-in on their platforms
- Sentry — crash diagnostics
- PostHog — product analytics (EU)
9 · International transfers
We take an EU/UK-first posture. Where a provider is in the US, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We never transfer personal data to the PRC.
10 · Retention
- Waitlist: until launch plus 24 months, or until you unsubscribe — whichever comes first. Consent records are kept as evidence that consent was given.
- Account & birth data: for the life of your account. When you delete your Auspice8 data we delete the product data within 30 days; backups are purged within 90. The shared sign-in identity may remain if it is used by another product.
- Beta membership & feedback: while your Auspice8 membership is active and while feedback remains useful for product development, or until you delete your Auspice8 data, whichever comes first.
- Partner data: deletable on its own, at any time.
11 · Your rights
You have the right to access, correct, delete, restrict, or object to processing of your data, and to data portability. The app provides in-app data export and Auspice8 data deletion (or request deletion here if you no longer have the app). You can withdraw consent at any time (the unsubscribe link in any email, or an in-app toggle), and you can complain to your data protection supervisory authority. To exercise any right, email privacy@auspice8.com.
12 · Children
Auspice8 is not intended for anyone under 18, and we don’t knowingly collect their data.
13 · Entertainment disclaimer
Auspice8 offers readings for reflection and entertainment. They are not a substitute for professional advice — medical, legal, financial, or psychological. The app’s Oracle routes crisis-related content to appropriate help resources.
14 · Changes & contact
We’ll announce material changes by email or in-app before they take effect. For anything in this policy, contact privacy@auspice8.com.