What we collect, and how long we keep it
Identity & profile. Your name, email, date of birth, gender, and optional audience preferences.
Retention: While your account is active; removed when you delete your account unless a legal hold applies.
Sensitive personal information — sexual orientation. Orientation is optional and opt-in. It is sensitive personal information under the CPRA and special-category data under the GDPR.
Retention: Only while you choose to share it; removed when you deselect it or delete your account.
Location. For local-time features we store only a grid-snapped and jittered current-location value. If you provide a birthplace for chart math, that place is treated as a sensitive astrology input and is never shown on your profile. Other members never see your exact location.
Retention: Current-location coordinates are privatized while active; removed on deletion. Birthplace inputs remain until you remove them or delete your account.
Astrology inputs. Your birth date, and optionally your birth time and birthplace, used to compute your chart, your four readings, optional Timing scans, and compatibility. On-demand Timing questions are processed for that request and are not stored as a third-party profile. Circle stores only derived chart points and a label you chose about people you add — never their date of birth, legal name, or contact. The household exemption does not apply to us; we are the controller. You can delete an entry at any time, and deleting your account erases the roster.
Retention: While your account is active; birth time and birthplace are optional and removable.
User content & messages. Your photos, video, bio, prompt answers, saved profile-visible astrology tool results, private astrology tool history, private Ask ZoëDate AI prompt history, reports, and the contents of your messages.
Retention: While your account is active; removed on deletion unless preservation is required for safety, legal, or abuse investigations. Message contents are SPI.
Derived data. Compatibility scores, profile-interaction history, blocks, and moderation labels.
Retention: While your account is active; removed on deletion.
Payment. Card payments are tokenized by Stripe. We store only subscription status and limited billing metadata, not your full card number.
Retention: Payment records are kept up to 7 years for tax, accounting, fraud prevention, and legal compliance.
Automatically collected. Device and IP information, cookies, Vercel Analytics and Speed Insights events, product usage, security events, and operational logs that keep the service working and secure. At sign-up we also derive a coarse device signature from ordinary browser and device characteristics (never canvas, audio, or other invasive fingerprinting) and store it — like your sign-up IP — only as a salted hash, to detect ban evasion and fraudulent duplicate accounts. The raw signature is never stored.
Retention: Device, usage, and error logs are kept up to 24 months unless security investigations require longer.
Circle — derived data about people you name
Circle is a Premium feature that lets you keep private pair readings about specific people in your life. You enter a birth date, and optionally a birth time and place, plus a label you choose ("co-founder", "M", "Mum") and a relationship type (work, family, partner, or friend).
We persist only derived chart output — a sun sign, and when a timed birthplace was provided, derived point longitudes and signs. We do not store that person's date of birth, birth time, birthplace, coordinates, legal name, or any contact detail. We do not match a Circle entry to a ZoëDate account, and a Circle entry never enters Discover or matching.
The lawful basis is the contract to provide the Circle feature you asked for (GDPR Art. 6(1)(b)). The household or purely personal activity exemption does not apply to ZoëDate. That exemption runs to you, not to the platform providing the service. We are the controller.
You can hard-delete any entry from Circle. Deleting your account cascades the rest. Data export includes your Circle entries as stored — derived points only.
How we use information
- Operate the app: account access, matching, messaging, moderation, billing, and support.
- Protect members: report review, block enforcement, spam prevention, and legally required preservation.
- Improve product quality: aggregate analytics, crash diagnostics, and abuse-pattern detection.
- If enabled later, generate optional AI-assisted features only where the product clearly labels them as suggestions.
Who processes data for us
As of 2026-06-23, these are the service providers that run ZoëDate or process data for a feature you use:
- Supabase — authentication, database, Realtime, and media storage.
- Vercel — hosting, serverless functions, crons, Web Analytics, and Speed Insights.
- Vercel AI Gateway and Anthropic — optional Premium AI narrative, coaching, Ask ZoëDate AI astrology Q&A, and Smart Inbox model processing.
- Stripe — payment processing, billing portal, subscriptions, receipts, and fraud controls.
- Resend — transactional, lifecycle, safety, and account email delivery.
We do not currently use a third-party product analytics processor outside Vercel Analytics. If we enable another analytics, error-monitoring, AI, or media-classification processor that receives personal information, we will update this section before sending that data.
Data sources and attributions
We do not sell your information
We do not sell or share your sensitive personal information, and we do not sell your personal information. Global Privacy Control (GPC) opt-outs are honored by default because we do not run a sale or cross-context behavioral-ad sharing path.
Your rights
Depending on where you live, including under the California CCPA/CPRA, you can request to know, access, correct, delete, or export your personal information, and opt out of any sale or sharing. We won't discriminate against you for exercising privacy rights.
You can export or delete your data from your account settings. For privacy, correction, access, or authorized-agent requests, use our contact page.
Limit the use of my sensitive personal information
Under CPRA §1798.121 you can direct us to limit the use of sensitive personal information to what's necessary to provide ZoëDate. For ZoëDate, that includes sexual orientation, precise location before privatization, birth-place inputs, and message contents. Because we use this data only to operate and protect the service, that limit is our default.
You can remove optional sensitive fields, like orientation or birth time, anytime in your settings.
Adults only
ZoëDate is for adults 18 and older. We do not knowingly allow minors to create accounts. If you believe a minor is using ZoëDate, report the profile or use the contact page.
EU/UK (GDPR) and contact
If you're in the EU or UK, our legal basis for processing special-category data, such as sexual orientation, is your explicit consent, which you can withdraw at any time. You also have rights of access, rectification, erasure, and portability.
For GDPR questions or data-rights follow-up, use the contact page. See also our Terms of Service and Safety Center.