Privacy Policy
Kitty Knows All is operated by INNOVURA PTY LTD, a company registered in Australia, and this policy is written to meet the Australian Privacy Principles. This page says what we collect, why, where it goes, and how to have it removed.
What we collect
- Birth details: name, date, time if known, and place. These are needed to compute a chart.
- Your verdicts on Kitty's guesses, tick or cross, stored without your name or birth details.
- Email, only if you give it, so we can send your reading, receipts and renewal reminders.
- Sign-in: by a code we email you, or with Google. Google tells us your verified email address and your name; we keep nothing else from it, and we never see your Google password.
- Saved readings: every report Kitty finishes under a reading pass is kept with the birth details it was computed from, so you can open it again on any device that holds the pass. “Forget” on the My readings page deletes it.
- Kitty’s letters: if you ask for the weekly or monthly letters, we keep the birth details of the person the letters are about, with your email, so each letter can be computed from their chart. Both go when you unsubscribe; the link is in every letter.
- Purchase records: which plan, when, and a record of each person read under a pass. The record is a one-way hash of the birth details, not the details themselves.
What we do not collect
No card numbers; Stripe handles payment. Share cards and share links hold a first name, a score and a one-liner, never a birth date, time or place.
Where it goes
- OpenAI receives your birth details and computed chart to write the reading. OpenAI does not train its models on API data.
- Stripe processes payment on our behalf and holds your payment details under its own privacy policy.
- Supabase stores share cards, email addresses, verdicts and purchase records in a database in Sydney, Australia.
- Vercel hosts the site.
Cookies
One cookie, named kk_pass, remembers your reading pass after a purchase. It contains a random token and nothing about you. Your browser may also keep an in-progress chart locally so a payment redirect does not lose it.
Advertising measurement
When we run ads, a Meta pixel and a Google tag may set cookies so we can count which ads lead to a chart or a purchase; in the UK and the EU we ask before loading them, and you can say no. We also keep our own anonymous counters of the steps a visitor reaches (landing, chart, paywall, purchase) together with the campaign link that brought them, under a random browser id that is not tied to your name, email or birth details. If you buy, we send Meta a hashed version of your email so it can match the purchase to the ad, as the law allows; the hash cannot be turned back into your address.
How long
Chart inputs are used to compute and write, then kept only as the hashed purchase record. Share cards stay while their link is live. Emails stay until you ask us to remove them.
Your rights
Email hello@kittyknowsall.com to see, correct or delete what we hold about you, or to delete a share card. We answer within 30 days. Residents of the EU, UK and other jurisdictions with data-protection law have the rights those laws give them.
Children
The service is for adults. We do not knowingly collect data from anyone under 18.
Changes
The date above changes when this policy does.