Your privacy.

What we collect

Account information includes your email, chosen name, account ID, authentication records, and account timestamps. Supabase manages password authentication; application data exports never include passwords or authentication tokens.

We store questionnaire answers and progress, completed results, imported Human Design type, AI reflections, optional daily edits and their time zone/activation settings, chat questions and replies, purchase identifiers, payment amounts and refund status, reply balances, usage counts, and complimentary access expiry. A birthday supplied at signup or in Your data is saved privately for free birthday discoveries and an optional birthday email, along with your email preferences, consent timestamp, and time zone. You can remove it in Your data. A date entered only in an individual discovery is used for that calculation and is not separately saved. If you type a birth date or other personal information into chat or another saved field, it becomes part of that content.

The optional Character strengths questionnaire includes spirituality and religious-belief items. We request explicit consent before saving those answers and results, and record when you consent. If you request an AI feature, its context can include these results. You can withdraw by clearing your saved profile or deleting your account from Your data; withdrawal does not undo processing already completed.

Hosting, authentication, payment, and AI providers can process network and device information, IP addresses, request timestamps, error/security logs, and transaction information needed to deliver and protect their services. We do not operate advertising pixels or behavioral advertising features in this version.

Why we use it

We use information to authenticate you, save and score discoveries, generate the profile features you request, process purchases and refunds, prevent abuse, enforce usage limits, respond to support/privacy requests, and meet legal obligations. If you opt in, we send birthday emails and available daily edits using a verified email provider, record delivery status, and provide unsubscribe controls. Daily emails contain reflection prompts; anyone with access to your inbox may see them. We do not sell your profile or use your results to target ads. We do not use personality results to make employment, credit, insurance, or similarly significant decisions about you.

Where relevant privacy law requires a legal basis, providing requested account and purchased services supports contract performance; security, reliability, and responding to requests support legitimate interests; compliance supports legal obligations. Where consent is required for a particular use, we will request it. You can choose not to use AI features and still use your saved discoveries.

Who processes information

Supabase provides authentication and application data storage. Vercel hosts the site and server functions. Stripe receives account email and purchase identifiers for checkout and handles card information on its own payment page; we do not store full card numbers or security codes.

When you request chat or an AI reflection, selected completed results and relevant messages are sent to OpenAI, either directly or through Vercel AI Gateway. We do not add your account email or the original birth-date input to the AI context. Information you include in your own messages is sent as part of those messages. Requests set storage off, but this does not eliminate provider security or abuse-monitoring retention. See OpenAI’s data controls and Vercel’s privacy policy.

After you build an AI master profile, new or retaken discoveries can update that profile when you next open it, using the prior version as a baseline. If you enable daily edits, your master profile and recent daily prompts are used to generate fresh suggestions while you are active. Daily edits do not use live astrology forecasts. You can pause them in your master profile. Daily edits are kept for up to about 30 days through scheduled cleanup, or removed when you clear your profile or delete your account.

Your configured email delivery service and Supabase process account emails such as confirmation and password reset messages. We may disclose information when legally required, to protect rights and safety, or to a successor in a business transfer subject to applicable safeguards and notice. Service providers may process information outside your country, including in the United States; applicable transfer safeguards depend on the provider and jurisdiction.

Cookies and sharing

Authentication cookies keep you signed in and support secure account access. Blocking them may prevent sign-in. This version does not use advertising cookies. Your profile and chat are account-private by default, but authorized operators and service providers may access data when necessary to operate, support, or secure the service; private does not mean end-to-end encrypted.

A share card contains your chosen name and result titles. It does not automatically include email, birth date, or chat. Full data exports contain much more personal information. Anyone you share an export or card with may keep or redistribute it.

Retention and your controls

Saved discoveries, answers, reflections, and chat remain in the active application database until you clear them or delete your account. Clearing a profile leaves your login, purchased access, reply balance, and content-free accounting/usage records in place. Account deletion removes the account and linked application records, including tester access and remaining credits. Provider backups, security logs, and Stripe-held payment records may persist under provider retention schedules or legal obligations; we do not promise instantaneous deletion from every backup.

Your data lets you download the application records linked to your account as JSON, or delete the account. You can edit your name in Your space, retake discoveries to update results, and clear chat separately. The download is paginated to include the whole stored conversation, not just the latest replies shown in the interface. It excludes secrets, other people’s information, and external provider logs or backups.

Your privacy rights

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or receive a portable copy of information; object to or restrict certain processing; withdraw consent; or complain to a regulator. Contact the privacy address below for requests not covered by the account controls, including external payment records. We may need to verify your identity, but will not ask for your password. We will respond within applicable legal deadlines and explain any lawful limits or exceptions. We do not penalize you for exercising applicable privacy rights.

Age, security, and updates

Magic You is intended for adults 18 and older. We do not knowingly invite children to create accounts. Contact us if you believe a child provided personal information. We use access controls, encrypted connections, and restricted server credentials; no online service can guarantee absolute security. Keep account credentials and exports safe.

We will update this policy as practices change, show its version date, and provide notice of material changes through the service or email as appropriate. Any new use that requires consent will be presented before that use.

Contact

Magic You is operated by BetterGood Gang LLC.

For account help, refunds, or privacy requests, email mail@aaronmcguire.design.