BARI · Policies & practice
Privacy Policy
Launch draft · Not yet approved for public sales. Seller and jurisdiction-specific review is required.
What we store
We store your normalized birth date, birth time (or unknown-time flag), selected city, coordinates, historical timezone, fixed profile, reading text, and engine versions. Browser sessions and hashed recovery secrets control access. We do not ask for an email before a reading.
Payments & processors
The payment provider handles payment account details. BARI stores an order identifier, product, amount, currency, payment status, capture reference, and refund reference. It never collects card numbers, and it never sends your birth details to the payment provider. Hosting is provided by Cloudflare. When checkout is operated by a Merchant of Record (see Terms), that company collects your email address, billing country and payment details directly, as the seller of your order, under its own privacy policy.
Cookies & measurement
A necessary HttpOnly session cookie lasts 30 days. We use aggregate first-party funnel counters, with no birth details, advertising identifiers, or third-party analytics. A hashed network address is used briefly for rate limits. No advertising cookies are used.
Retention, rights & deletion
You may export and delete readings from My archive. The proposed retention is 30 days for unpaid readings, until customer deletion for paid readings, 24 hours for rate-limit records, 30 days for expired sessions, and the legally required period for minimal transaction records. Automated retention must be enabled as described in the operating runbook before public launch. Backup deletion follows the configured recovery window. Contact the seller to exercise applicable access, correction, deletion, or objection rights.
International processing
Data may be processed outside your country. Final controller identity, lawful basis, cross-border transfer safeguards, processor agreements, storage regions, and statutory retention periods require jurisdiction-specific review before launch.
AI writing
To write a personalized Full Path we send Anthropic PBC (United States), acting as our processor, only derived facts: your Paths, model scores, pattern codes, your twelve-month focus themes, the concern you chose and the optional note you typed. Your birth date, birth time, city and coordinates are never sent. Under Anthropic's commercial terms, API inputs and outputs are not used to train its models by default. The note and the written reading are stored with your reading and are deleted with it.
Email delivery (optional)
If you choose to receive your personalized reading by email when you buy it, we keep your email address only until that one email is sent, then delete it and keep only a masked hint (for example ha***@gmail.com) so you can see where it went. The email is sent by Resend, Inc. (United States), acting as our processor, and contains your reading and a private link that opens your archive on any device. We never use the address for marketing. Deleting your reading also deletes the delivery record and the link.