Privacy Policy
Effective from: 9 September 2026 · Version: 1.0
1. Who we are and who this policy applies to
Dmitry Bogomolov, 85000, Bar, Montenegro, Barskih Logorasa St. 5A, apt. 28A (“we”, “the App”) provides the mobile app BaziArt — an entertainment-and-education self-discovery service based on East Asian philosophy (BaZi, Qi Men Dun Jia).
This policy applies to all users of the App, with additional provisions for users in the European Economic Area (EEA), the United Kingdom, and Switzerland (“EEA users”) where GDPR grants extra rights (section 8).
For questions about this policy: support@baziart.com.
2. What data we collect
2.1. Account data
- Email and password (hashed — we never store your password in plain text) — for email registration.
- Password reset code: if you request a reset, we email you a one-time code and, once the password is changed, a notice about it. We do not store the code itself, only a protected fingerprint of it; the code works for 30 minutes.
- Google/Apple sign-in identifier — when you sign in with those services (we never receive or store your Google/Apple password).
- Guest login: if you use the App without registering, we create an anonymous account tied to a hash of your device's attestation key (not the raw device identifier itself — the original value is never sent to us or recoverable from the hash). This lets a reinstall on the same device reuse the same account instead of creating a new one.
- Interface language (locale).
2.2. Birth chart data
Date, time (if known), and place of birth (city, coordinates, timezone), plus an optional label you choose for the chart. You may create charts for people other than yourself (family, partners) — by entering another person's data you confirm you have the right to do so (their consent, or, for minors, parental authority) and do so at your own responsibility.
2.3. AI analysis data
The optional follow-up question you enter, and the AI-generated response text. To generate a response, your chart data and question text are sent to our subprocessor Anthropic (section 4) — only the data required to answer, without your email or other direct identifiers unless you include them yourself in the question text.
2.4. Consent data
Whether and when you granted or withdrew consent (for AI processing, for research use of rectification data), and the version of the consent text you were shown.
2.5. Subscription and purchase data
Subscription status, store of purchase (App Store, Google Play, RuStore, Telegram Stars), transaction ID, renewal date. We never receive or store your card number — payment is handled entirely by the relevant store/payment provider; see section 4.
2.6. Technical data
IP address and general technical information about your device (OS type, app version) — in request logs and for abuse protection (request limits, device attestation via Play Integrity/App Attest). Request-limit counters are kept briefly (no longer than a day) and are tied to your account identifier or IP address. App crash and error data — via Sentry (server) and Firebase Crashlytics (mobile app), see section 4.
Product analytics — via Firebase Analytics (Google): which screens are opened and which in-app events happen (for example, the paywall shown, a purchase completed or restored, a quiz step passed), tied to a pseudonymous Firebase installation identifier — not to your name, email, birth data or chart. There is no in-app switch to turn this off; it is disabled in development builds only. See section 4.
2.7. Reports about generated text
Every AI-generated text in the App has a “Report” control. If you use it, we store: a copy of the text you reported, the reason you chose, your optional comment, and technical information about which model and which version of our instructions produced that text. We need this to act on reports and fix the cause, not only the symptom. How long this data is kept is described in section 5.
2.8. Sign-up on the website
On the BaziArt website you can leave an email address to be notified when the "Your 2027 Year" product launches. We store the address, the chosen language, the source page and the moment of your explicit consent to the email. Birth details entered into the website form for the preview result are not stored. The address is deleted on request to the support email or via the link in the email.
2.9. Planner and decision journal
Events you add to the planner, planner settings and decision journal entries (the decision, date, chosen window, outcome and note) are stored only on your device (on iOS also in its iCloud backup; on Android the App's data is excluded from backups). We do not receive them and do not store them on the server. Signing out or deleting the account removes them from the device. They are deleted together with the entry in the App or when the App is uninstalled.
If you allow the App to access the device calendar (Timing → My calendar), it reads your events for the next 14 days to show them against the hour windows, and creates an event in your calendar only when you tap "Suggest a time". Calendar events are processed on the device, are not sent to the server and are not stored by the App; only the task type you choose for an event is kept in the App's settings on the device. You can revoke access in the system settings — the planner keeps working with the events you add by hand.
2.10. The "Your 2027" report bought on the website
If you order the annual report on the website, we store the email address for delivering the link, the birth details entered for the calculation (date, time or the "time unknown" mark, time zone and coordinates of the place, gender), the chosen language, the moment you accepted the terms, the payment status and the payment identifier at the payment provider. Payment details (card, account) are processed by the provider as the seller or payment agent under its agreement with you; we do not receive them. The provider is named on the payment page and in section 4 of this policy. Until a provider is connected, the payment details are emailed, and we see only what the payment system shows the recipient: the payer's name and the amount. The explanatory text of the report is generated with Anthropic (section 4) from the birth details once and stored with the order. The report opens via a link with a secret token from the email, as a page or as a PDF file: do not share the link. A downloaded file stays with you, and deleting it is up to you. The order and the report are kept until you ask us to delete them (support email), but no longer than 24 months after the end of the year the report covers (see also section 5).
2.11. Chart transfer code from the website to the App
The calculator on the website computes a chart without an account and stores nothing. If you tap "Get a code" to open that chart in the App without typing it in again, we keep the birth details you entered (date, time or the "time unknown" mark, time zone and place coordinates if given, gender) for 72 hours under a protected fingerprint of the code; the code itself is not stored. The code is shown once and never appears in a page address, in analytics or in logs. Once you enter the code in the App, the chart is saved to your account (a guest account included) as an ordinary chart (section 2.1), and the record on the website is deleted when the 72 hours are over.
3. Why we process data and on what legal basis (GDPR Art. 6)
| Purpose | Basis (for EEA users) |
|---|---|
| Creating and maintaining your account, generating charts and analyses you request | Performance of a contract |
| AI analysis of your chart | Your explicit consent (withdrawable at any time — section 2.4) |
| Research (anonymized) use of rectification data | Your separate explicit consent, optional |
| Processing payments and subscriptions | Performance of a contract |
| Fraud prevention, enforcing daily request limits | Legitimate interest — preventing service abuse |
| Fixing crashes and errors (Sentry, Crashlytics) | Legitimate interest — service reliability |
| Understanding how the app is used (Firebase Analytics) | Legitimate interest — improving the product |
| Responding to your support requests | Performance of a contract / legitimate interest |
4. Who we share data with
We do not sell your data. We share data with the following subprocessors — only to the extent needed for their specific function:
- Anthropic (AI analysis text generation, USA) — receives your chart data and question text at the time you request an analysis. Anthropic acts as our processor, does not train its models on this data, and deletes requests and responses within 30 days (longer only where its usage policy was violated or the law requires). Transfers to the USA rely on the EU Standard Contractual Clauses in Anthropic's Data Processing Addendum.
- RevenueCat (subscription management) — receives your account identifier and transaction data to reconcile subscription status across stores.
- Apple App Store / Google Play / RuStore / Telegram — process subscription payments directly as the merchant of record; we only receive subscription-status confirmation from them, never payment details.
- Sentry (server error monitoring) and Firebase Crashlytics, Google (mobile app crash reports) — receive technical error data, without direct personal identifiers where possible.
- Firebase Analytics, Google (product analytics) — receives in-app event names with technical parameters (the product identifier of a purchase, a quiz step, a screen name) and a pseudonymous installation identifier; it does not receive your email, birth data or chart.
- Railway (hosting for the server, the database, and the request-limit counter store) — stores and processes data as our infrastructure operator, on our instructions.
- Resend (sending service emails, USA) — receives your email address and the text of the message: a password reset code or a notice that the password was changed. It does not receive your chart data.
Some of these subprocessors may process data outside the EEA (notably in the USA). In that case we rely on each subprocessor's own international transfer safeguards (standard contractual clauses and similar mechanisms), described in their respective privacy policies.
We also disclose data where required by law, court order, or to protect the rights and safety of App users.
5. Data retention
We keep your data for as long as your account exists. Deleting your account in the App removes: all your charts, AI analyses, consent history, subscription and purchase records in our database, and sign-in tokens. This does not cancel a subscription in the App Store/Google Play — the App warns you about this separately before deletion (see also section 7).
Exception — reports about generated text (section 2.7). These are kept after your account is deleted, but without any link to it: the reference to your account is cleared, and only the copy of the text, the reason and the comment remain. Otherwise deleting an account would be enough to erase the evidence that the model said something unacceptable — and that evidence is exactly what lets us fix the model. If you included information about yourself in a report comment, it stays in that comment; ask us to remove it separately.
A report bought on the website (section 2.10) is not linked to an account in the App: deleting the account does not affect it. The order, the birth details in it and the explanatory text are kept until you ask us to delete them (support email), but no longer than 24 months after the end of the year the report covers; after that they are deleted together with the report link. A downloaded PDF file stays with you.
Birth details under a transfer code (section 2.11) are kept for 72 hours from the moment the code is issued and are deleted automatically, whether the code was used or not.
Password reset code records (section 2.1) are kept for two days from the request and are deleted automatically.
Technical logs (IP addresses, request data) are kept for a limited period (up to 30 days) for security purposes, separately from account data.
6. Children
The App is not intended for people under 16 years old, and we do not knowingly collect data about such individuals from themselves. If you believe a child has provided us their own data directly (as opposed to being the subject of a chart created by a parent — see section 2.2), contact us for deletion.
7. Your rights
Regardless of your jurisdiction, you can:
- Get a copy of your data — directly in the App (Profile → “Export data”): a file with your profile, charts, AI readings, consent history, life events entered for refining the birth time, notification settings and history, subscription and purchase records, bookings with masters, reports you sent and pair invitations — everything we hold about you except sign-in and push tokens. If that fails for any reason, write to support@baziart.com and we will run the same export by hand.
- Delete your account — directly in the App (Profile → “Delete account”), immediate and irreversible. Deleting your account does not cancel an active subscription in the App Store/Google Play — cancel it separately in the relevant store's settings.
- Withdraw consent for AI processing or research use of rectification data — in the App's settings; withdrawal does not affect processing lawfully carried out before withdrawal.
- Correct inaccurate data — via your profile (chart data) or a request to support@baziart.com.
7.1. Additional rights for EEA users (GDPR)
You also have the right to: object to processing based on legitimate interest; restrict processing in certain cases; data portability; lodge a complaint with your country's data protection authority if you believe we have violated GDPR.
8. Security
Passwords and refresh tokens are stored only in hashed form, never in plain text. Data is transmitted over a secure connection (HTTPS). Guest login is protected by device attestation (Play Integrity/App Attest). No system can guarantee absolute security — if you suspect your account has been compromised, contact us.
9. Changes to this policy
We may update this policy as the App evolves. For material changes, we will notify you through the App or by email (if we have one on file) before the changes take effect.
10. Contact
Dmitry Bogomolov, 85000, Bar, Montenegro, Barskih Logorasa St. 5A, apt. 28A, support@baziart.com.