1. Who we are

This service is operated by the Mettae team. For privacy questions, please contact support@mettae.com.

We handle personal information in line with applicable data protection laws. Wherever you live, any rights your local laws give you also apply.

2. Information we collect

Account information: your email address, display name and password, which is stored with irreversible encryption (a scrypt hash). We cannot see your actual password.

Chart details saved to your account: the BaZi profile you choose to save (date and time of birth, birth city, gender, name), your Past Lives inputs and your preferences. These are stored encrypted on our servers with AES-256-GCM.

Content kept only on your own device: your support-chat history, mood check-ins, dream journal and your most recent chart result are kept in your browser's local storage, not on our servers. You can delete them at any time with “Clear conversation” on the support page or by clearing this site's data in your browser. When you log out or delete your account, this content is also cleared from this device.

Voice input (the microphone button on the healing page): speech-to-text is done by your browser; our website does not receive or keep the recording. Some browsers (such as Chrome) send the audio to the browser maker's servers for recognition, under that company's privacy terms; the page tells you this and asks for your agreement before first use. If you don't want the audio to leave your device, please type instead.

Feedback box messages: what you write in the feedback box and when you sent it are stored on our servers. Messages go only to the team; other users can't see them. The team is notified by email, including your registered email address so we can reply to you. Our replies are stored with your message and sent to your registered email address.

Chat Room: your posts, comments, reports and when you made them are stored on our servers. Posts and comments are public to all visitors and show your display name (or "Anonymous friend" if you choose to post anonymously), never your email. Before anything is published, the system automatically checks for abuse, advertising, contact details and similar content; anything showing signs of self-harm or crisis, or reported by several people, is hidden first and reviewed by an administrator (administrators can see the poster's email so they can deal with breaches or contact you if needed). You can delete your own posts and comments at any time.

Payment information: collected and processed directly by Stripe. We never see or store your full card number; we only keep the order status Stripe sends back. If you buy a 30-Day Pass, we store an irreversible fingerprint of each person's birth details to apply the "up to 6 people" rule. The fingerprint cannot be turned back into a date of birth, and we do not store the original birth details for this purpose.

Technical information: a session cookie that keeps you signed in (httpOnly, readable only by the server) and a cookie that remembers your language. IP addresses and sign-in emails used to prevent abuse are first turned into an encrypted digest (the original cannot be read back from it) and then used only to count request frequency, kept for at most 2 days. Our hosting platform records access logs (including IP address and browser information) for about 30 days. Security audit logs (which do not contain conversation text) are kept for about 30 days.

We will never ask for identity documents, and we don't collect information unrelated to the readings.

3. How we use your information

To provide the readings, reports and emotional support features you choose; to save your profiles for next time; to process purchases and payments; to keep accounts secure and prevent abuse; and to meet our obligations where the law requires.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Where information is stored and overseas processing

Accounts and personal data are stored in the data centres of the cloud provider we use, encrypted in transit and at rest.

When you use AI readings or healing conversations, the relevant text (such as your chart results, the birth details and name you entered, your question and the current conversation) is sent to the third-party large language model providers we use so they can generate a reply; our servers do not keep these conversations. We only send what is needed to generate a reply, never your email or password. We take reasonable steps to ensure these providers protect your information to a standard no lower than this policy.

These model providers' servers may be located outside your country or region, and their own privacy policies apply; some providers have not clearly committed not to use the content they receive to improve their models. If you do not want this content processed by a large language model, please do not use AI readings or healing conversations. Charts and system calculations do not go through any large language model.

Payments are processed by Stripe, which may process payment data in several countries and regions.

Emails such as sign-up verification codes are sent through a third-party email service, which only receives your email address and the content of the email.

5. How long we keep information

We keep your account, profiles, feedback-box messages and Chat Room posts and comments while your account exists. When you delete your account, your account, sign-in records, encrypted personal data, feedback-box messages and Chat Room posts and comments are deleted from the production database straight away; backup copies expire at the end of the backup cycle (no more than 35 days). Chat Room content removed by an administrator for breaking the rules is kept for 90 days for review and then deleted.

Sign-in sessions expire after 30 days and are then deleted automatically; email verification codes are valid for 10 minutes and deleted after 1 day. Content kept only on your device is under your control; we can't see or delete it.

Payment transaction records (amount, time and receipt) are kept by Stripe as the payment processor as required by law, and may be kept longer to meet tax and accounting rules (usually several years). These records do not include reading data such as birth details. Purchase and pass records in our own database are deleted together with your account.

6. Your rights

Access and export: after signing in, go to Account → My data and privacy to export, in one click (JSON), all of the personal data we hold on our servers. Content that stays only on your own device, such as healing conversations, mood check-ins and dream journals, is not on our servers and so is not in the export file; it remains in your browser, where you can view or clear it on the relevant page.

Correction: you can edit your profiles at any time.

Deletion: on the same page, enter your password to permanently delete your account and personal data.

If you have a question or complaint about how we handle your personal information, please contact support@mettae.com first. We will respond within 30 days. If you are not satisfied with our response, you can complain to the data protection authority where you live.

7. Security

All traffic uses HTTPS; passwords are hashed with scrypt; personal data such as birth details is encrypted at field level; sign-in is rate-limited to prevent brute-force attacks; and only hashes of session tokens are stored in our database.

No system can be guaranteed to be completely secure. If a data breach is likely to result in serious harm, we will promptly notify affected users and the relevant regulators as required by applicable law.

8. Minors

This service is only for users aged 18 or over. If we find that a minor has registered, we will delete their account and data.