Privacy Policy

1. Scope

This Privacy Policy applies to InnerCipher websites, Google sign-in, profile pages, report generation, report viewing, report deletion, paid report unlocks, support emails, analytics, and related service operations.

If you do not want this processing, please do not use InnerCipher.

2. Information We Collect

We collect only the information reasonably needed to operate InnerCipher.

This may include Google OAuth account information such as email, name, profile image, and provider account ID; report inputs such as birth date, birth time, birthplace, city, timezone, gender selection, and related report context; generated reports and report status; profile history; support messages; and technical data such as cookies, device, browser, IP, performance, security, usage, and Vercel Analytics data.

When paid checkout is available, we may also collect and store payment-related records needed to create checkout sessions, confirm successful purchases, unlock full report access, prevent duplicate charges, provide support, and handle refunds, disputes, fraud, tax, accounting, and compliance records. These records may include payment provider name, checkout ID, order ID, transaction ID, request ID, product ID, amount, currency, payment status, refund or dispute status, timestamps, and metadata linking the payment to your InnerCipher account and report.

3. Payment Information We Do Not Store

InnerCipher does not ask you to enter payment card numbers, bank account numbers, card security codes, or full billing credentials directly into InnerCipher.

Payments are processed by Creem or another checkout provider shown at checkout. Payment card details and similar payment credentials are handled by the payment provider, not stored by InnerCipher. We may receive purchase status, receipt identifiers, customer email, tax or checkout metadata, and webhook events from the provider so that we can operate the paid report unlock.

InnerCipher does not request government ID numbers, medical records, legal files, emergency information, or unrelated highly sensitive personal information for normal report generation.

4. How We Use Information

We use information to sign users in, generate BaZi and Four Pillars reports, save report history, show reports in your profile, support report deletion, create checkout sessions, confirm payment through provider webhooks, unlock paid full reports, prevent duplicate payment attempts, respond to support and refund requests, protect the service, prevent abuse, monitor performance, understand reliability, manage AI cost and stability, improve product quality, and meet legal or operational needs.

5. AI Processing

When you generate a report, relevant birth details, report inputs, prompts, and report context may be processed by AI providers when needed to create or improve the requested output.

AI-provider processing is governed by the provider's terms and by our configuration where available. Please avoid entering unrelated sensitive information in report fields or support messages.

6. Service Providers

InnerCipher uses service providers to run the product. These may include Google OAuth for sign-in, Vercel Analytics and hosting for performance and usage measurement, AI providers for report generation, managed database or hosting infrastructure for storing reports and account records, Creem or another payment provider for checkout, tax, receipts, refunds, disputes, and payment records, and email tools for support.

We share information with these providers only as reasonably needed to operate, protect, support, analyze, improve, or comply with InnerCipher. If checkout is handled by Creem, Creem may act as the Merchant of Record for the transaction and may appear on your receipt or bank statement.

7. Cookies, Analytics, and Security

We use cookies and similar technologies for normal product functions such as login sessions, preferences, security, checkout continuity, and service operation.

We use analytics and technical logs to understand traffic, performance, reliability, errors, and abuse risks. We protect data with safeguards such as TLS in transit, provider security controls, limited access, and operational monitoring. No internet service can be perfectly secure.

8. Retention, Report Deletion, and Payment Records

We retain information for as long as reasonably needed to provide the service, maintain report history, confirm paid access, secure and operate InnerCipher, handle support or refund requests, analyze reliability, or meet legal, tax, accounting, fraud-prevention, dispute, and operational needs.

When you delete a report from your profile, it will no longer be shown there. Backup copies, technical logs, AI-provider processing records, payment records, refund or dispute records, tax or accounting records, and security records may not be deleted immediately. If a report has payment history, we may need to retain payment-related records even after the report is removed from your profile.

Aggregated or de-identified analytics may be retained for product and reliability analysis.

9. Your Requests

You may contact us to request access, correction, export, or deletion of personal information associated with your account. We may need to verify your account before responding.

Some deletion requests may be limited where information is needed for security, abuse prevention, legal obligations, payment records, refund or dispute handling, support records, tax or accounting obligations, or operational integrity.

10. Children and Guardians

InnerCipher does not currently use a general age gate, but the service is not designed to intentionally collect children's personal information beyond user-submitted report inputs.

Parents or guardians may contact us to request deletion of information they believe was submitted by a child.

11. No Sale of Personal Information

We do not sell personal information. We share information only as needed to operate, protect, support, analyze, improve, process payments, handle refunds or disputes, or comply with the service.

12. Contact

For privacy or data requests, email support@innerciphers.com with the subject "Privacy Request."