StarFate (星命) is a fortune-telling and self-reflection app. You enter your birth data once; the app casts your BaZi (Four Pillars), Zi Wei Dou Shu and Western natal charts on your phone, shows a daily fortune and a daily tarot card, and lets you talk to an AI reader that knows your charts. This page explains what we collect, why, and how to delete it. Contact: [email protected]
Account: your email and password. We store only a one-way hash of your password — we can't see it. If you sign in with Apple or Google, we receive the account identifier that provider gives us and an email address (with Apple this may be a private relay address). We also keep your app language and time zone (so the daily free quota resets on your local day), when you last used the app, and when you accepted the AI notice.
Birth data (date and time of birth, place of birth, sex) for you and any extra profiles you add (family, friends, partner): stored on your phone and used there to cast your charts. While you're signed in, a text copy is included in the cloud backup described below.
On your phone: everything the app keeps on your phone (birth data, conversations, mood notes, readings, settings) is stored encrypted with a key held in your phone's secure keychain / keystore. On Android the app also opts out of the system's automatic app-data backup, so your records only leave the phone through the encrypted cloud backup described below. You can additionally require Face ID, fingerprint or your phone passcode to open the app (Me > Settings > Unlock when opening the app); that check is done by your phone, and no biometric data ever reaches us.
AI readings: when you ask the AI reader a question, the app sends our server a structured summary of your charts (BaZi, Zi Wei Dou Shu, natal chart, today's day pillar and transits, today's tarot card; when you ask about a family member's or friend's year or a compatibility match, also that person's chart summary), your question, and up to 10 of your most recent messages in that conversation. We forward this to the AI service to write the answer. It does not include anyone's name or birth date, or your email address. Our AI request log does not store your questions; it keeps only the AI's answer text for 7 days so a retried request isn't charged twice, then deletes it. Your conversations are stored on your phone and, while you're signed in, included in the encrypted cloud backup described below. With AI memory on, your own recent cards, lots, moods and questions are included too. These records are on your phone and, while you're signed in, in your own encrypted cloud backup so they can move to a new phone. Apart from that backup, our server keeps no separate copy, and they are never available to other users. AI answers may mention them, and those answers are kept only for the period above. AI memory stays off until you agree, and can be turned off under Me > Settings.
Daily fortune: the free version sends only a structured summary of your day master and today's day pillar — no birth date, no identity — and the resulting lines are shared by everyone with the same combination and cached for 3 days. The personalised version for members sends your chart summary; the answer is kept for 7 days as above.
Check-ins: the dates on which you viewed your daily fortune, used to count your streak and grant reward questions.
Mood notes and settings: your daily mood entry, settings and streak data are stored on your phone and included in the cloud backup.
Cloud backup: while you're signed in, a text copy of your birth profiles, settings, check-ins, mood notes, moon cycle journal, 16 personality type results, AI conversations, fortune lot and tarot reading history (including the questions you typed) and Life Simulator games is backed up to our server so you can restore it on a new phone. Backups are encrypted with a key that is not stored in the database, we keep only the latest two copies and don't read them for any other purpose. Each copy also records the app version and a random code the app generates for itself (different on every install, not a device identifier), used only to tell which device uploaded it so two devices don't overwrite each other.
A hashed device identifier: used only to make sure the free questions for new accounts are given once per phone. It can't be turned back into the original identifier and is never used for ads or tracking.
A hash of your normalized email address (lower-cased, with any “+tag” removed, and for Gmail without dots): used only to make sure free questions are given once per mailbox. It can't be turned back into your email and is never used for ads or tracking.
Purchases: through RevenueCat we learn whether you're a member, which plan, and when it expires, and we keep purchase events (store, product, price, currency, transaction ID) for support and bookkeeping. Payments are handled by Apple / Google; we never see your card details.
AI usage records: the time, type, count, model, token usage, cost and duration of each AI request, used for free-quota counting, fair use and cost control.
Feedback and AI answer reports (only if you send them): the category and message you write — when you report an AI answer, that question and answer — plus your app version, platform and language.
IP address: used briefly for rate limiting, not stored long-term.
To cast and explain your charts, answer your questions, count your free quota, provide member benefits, restore your data on a new phone, answer support requests and prevent abuse.
We don't sell your data, show ads or track you across apps, and we don't use your conversations to train AI models.
Anthropic (Claude AI): writes the AI readings and the daily fortune line from the chart summary and question described above. It never receives your name or email. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
RevenueCat: subscription management.
Apple App Store / Google Play: sign-in, payments and subscriptions.
Hosting: floppy.tw (Taiwan) and Cloudflare (network delivery).
Push notifications: StarFate currently does not use remote push. Daily reminders are scheduled locally on your phone and nothing about them is sent to our server.
AI answer texts are deleted after 7 days, the shared daily-fortune cache after 3 days, password reset and email verification codes once they expire, and older cloud backups as soon as a newer one arrives (only the latest two are kept).
You can delete your account any time in the app: Me → Account → Delete account. Your account record (email, password hash, Apple / Google sign-in identifiers, language, time zone, quota and membership status), reset codes, cloud backups and check-ins are deleted, and Sign in with Apple access is revoked. AI usage records lose your account, request ID and answer text and remain only as anonymous statistics; purchase events lose the link to your account; feedback messages are unlinked from your account; the hashed device identifier and the hash of your normalized email are kept without any link to an account so free questions aren't given twice to the same phone or mailbox.
You can also email [email protected] to request access to or deletion of your data. See the account deletion page for details.
StarFate is not intended for children under 13, or under the minimum age required by the law where you live.
Charts and readings are for entertainment and self-reflection. They are not medical, psychological, legal, financial or investment advice.
We'll update this page and its date when this policy changes.