What we collect, and how long we keep it
Identity & profile. Your name, email, date of birth, gender, and optional audience preferences. This includes which reading topics you have asked us to email you — a content preference only. Subscribing to the Civic reading records that you want it and nothing more: we do not collect, infer, derive, or store any political opinion or affiliation, and no reading is targeted or ranked by one.
Retention: While your account is active; removed when you delete your account unless a legal hold applies.
Sensitive personal information — sexual orientation. Orientation is optional and opt-in. It is sensitive personal information under the CPRA and special-category data under the GDPR.
Retention: Only while you choose to share it; removed when you deselect it or delete your account.
Location. For local-time features we store only a grid-snapped and jittered current-location value. If you provide a birthplace for chart math, that place is treated as a sensitive astrology input and is never shown on your profile. Other members never see your exact location.
Retention: Current-location coordinates are privatized while active; removed on deletion. Birthplace inputs remain until you remove them or delete your account.
Astrology inputs. Your birth date, and optionally your birth time and birthplace, used to compute your chart, your four readings, optional Timing scans, and compatibility. On-demand Timing questions are processed for that request and are not stored as a third-party profile. Circle stores derived chart points and a label you chose about people you add — never their legal name or contact. It does not store their date of birth, but the points are precise enough to imply it, so we protect them as birth data. The household exemption does not apply to us; we are the controller. You can delete an entry at any time, and deleting your account erases the roster.
Retention: While your account is active; birth time and birthplace are optional and removable.
User content & messages. Your photos, video, bio, prompt answers, saved profile-visible astrology tool results, private astrology tool history, private Ask ZoëDate AI prompt history, reports, and the contents of your messages.
Retention: While your account is active; removed on deletion unless preservation is required for safety, legal, or abuse investigations. Message contents are SPI.
Derived data. Computed readings and their archive, compatibility scores, profile-interaction history, blocks, and moderation labels.
Retention: While your account is active; removed on deletion.
Payment. Card payments are tokenized by Stripe. We store only subscription status and limited billing metadata, not your full card number.
Retention: Payment records are kept up to 7 years for tax, accounting, fraud prevention, and legal compliance.
Automatically collected. Device and IP information, cookies, Vercel Analytics and Speed Insights events, product usage, security events, and operational logs that keep the service working and secure. At sign-up we also derive a coarse device signature from ordinary browser and device characteristics (never canvas, audio, or other invasive fingerprinting) and store it — like your sign-up IP — only as a salted hash, to detect ban evasion and fraudulent duplicate accounts. The raw signature is never stored.
Retention: Device, usage, and error logs are kept up to 24 months unless security investigations require longer.
Circle — derived data about people you name
Circle lets you keep private pair readings about specific people in your life. You enter a birth date, and optionally a birth time and place, plus a label you choose ("co-founder", "M", "Mom") and a relationship type (work, family, partner, or friend).
The Circle roster stores derived chart output — the sign and exact position of every chart point the birth date supports, plus the Moon and the angles when a birth time and place were given. Its intake does not retain that person's date of birth, birth time, birthplace, coordinates, legal name, or any contact detail. Those positions are still precise enough to imply the birth date, and with a time and place, the birth time and birthplace, so we protect them as that person's birth data: no other member can see them, and removing the entry erases them. A Circle entry is never linked to a ZoëDate account, and never enters any ranking or recommendation.
The lawful basis is the contract to provide the Circle feature you asked for (GDPR Art. 6(1)(b)). The household or purely personal activity exemption does not apply to ZoëDate. That exemption runs to you, not to the platform providing the service. We are the controller.
You can hard-delete any entry from Circle. Deleting your account cascades the rest. Data export includes your Circle entries as stored — derived points only.
Circle questions and answers stay in your private Ask history while your account is active. You can delete a conversation directly. Removing a Circle entry also deletes its Ask history. Your account export includes those conversations and their saved answers. Do not put another person’s raw birth details, contact information, or sensitive information into chat.
If you explicitly share an Ask excerpt, we store that excerpt, your chosen labels, the answer date, and a digest of its access token. Anyone with the link can read the excerpt for 30 days. We do not report recipient views or expose the chart, conversation history, or account identity. A new link replaces the previous link for that conversation. You can revoke it at any time; deleting the conversation, Circle entry, or account also deletes the shared copy. Expired copies remain private and included in your export until replaced or deleted. Revocation cannot remove copies someone already saved.
How we use information
- Operate the app: account access, reading and newsletter delivery, the legacy connection features, moderation, billing, and support.
- Protect members: report review, block enforcement, spam prevention, and legally required preservation.
- Improve product quality: aggregate analytics, crash diagnostics, and abuse-pattern detection.
- If enabled later, generate optional AI-assisted features only where the product clearly labels them as suggestions.
Who processes data for us
As of 2026-09-26, these are the service providers that run ZoëDate or process data for a feature you use:
- Supabase — authentication, database, Realtime, and media storage.
- Vercel — hosting, serverless functions, crons, Web Analytics, and Speed Insights.
- Vercel AI Gateway and Anthropic — optional AI narrative, coaching, Ask ZoëDate AI astrology Q&A, and Smart Inbox model processing.
- Stripe — payment processing, billing portal, subscriptions, receipts, and fraud controls.
- Resend — transactional, lifecycle, safety, and account email delivery.
We do not currently use a third-party product analytics processor outside Vercel Analytics. If we enable another analytics, error-monitoring, AI, or media-classification processor that receives personal information, we will update this section before sending that data.
Data sources and attributions
We do not sell your information
We do not sell or share your sensitive personal information, and we do not sell your personal information. Global Privacy Control (GPC) opt-outs are honored by default because we do not run a sale or cross-context behavioral-ad sharing path.
Your rights
Depending on where you live, including under the California CCPA/CPRA, you can request to know, access, correct, delete, or export your personal information, and opt out of any sale or sharing. We won't discriminate against you for exercising privacy rights.
You can export or delete your data from your account settings. For privacy, correction, access, or authorized-agent requests, use our contact page.
Limit the use of my sensitive personal information
Under CPRA §1798.121 you can direct us to limit the use of sensitive personal information to what's necessary to provide ZoëDate. For ZoëDate, that includes sexual orientation, precise location before privatization, birth-place inputs, and message contents. Because we use this data only to operate and protect the service, that limit is our default.
You can remove optional sensitive fields, like orientation or birth time, anytime in your settings.
Adults only
ZoëDate is for adults 18 and older. We do not knowingly allow minors to create accounts. If you believe a minor is using ZoëDate, report the profile or use the contact page.
EU/UK (GDPR) and contact
If you're in the EU or UK, our legal basis for processing special-category data, such as sexual orientation, is your explicit consent, which you can withdraw at any time. You also have rights of access, rectification, erasure, and portability.
For GDPR questions or data-rights follow-up, use the contact page. See also our Terms of Service and Safety Center.