Privacy policy

DestinyTara — Cultural Exploration and Personal Reflection Platform

Last updated: 2026-08-15

Una versión en español está disponible en destinytara.com/legal/es/privacy. The English version is the official, controlling version except where mandatory local consumer law provides otherwise.

1. Data controller

The data controller is Doctor Genio S.A. de C.V., a company incorporated under the laws of Mexico, which operates the DestinyTara brand and service.
Francisco Javier Mina 752, Col. Centro, C.P. 64000, Monterrey, Nuevo León, Mexico
Privacy contact: privacy@destinytara.com
Legal contact: legal@destinytara.com

This Policy applies to everyone who uses DestinyTara. The Service is not offered to, marketed to, or intended for users in the EU, the EEA, the United Kingdom, or Switzerland, and access from those regions is blocked at the network level. Because DestinyTara does not offer goods or services to, nor monitor the behaviour of, data subjects in the EU/EEA or UK, it does not fall within the territorial scope of Article 3(2) of the EU or UK GDPR, and no Article 27 representative is appointed. We nonetheless voluntarily align our practices with GDPR-grade standards, and with California's CCPA/CPRA and Mexico's LFPDPPP, wherever the Service is available.

Given the scale of the Service, DestinyTara is not required to and does not appoint a formal Data Protection Officer. All privacy matters — including access, correction, and deletion requests — are handled directly by the operator through the contacts above.

2. Data we collect

• Authentication: Email address (for OTP login via Mailgun).
• Birth data (sensitive): Date, time, and place of birth, and optionally gender (used to determine the chart's polarity), provided by you for Qi Men Dun Jia, BaZi, and Zi Wei Dou Shu calculations.
• People you add (Personas): If you use the Personas / saved-people feature, the birth details you enter for other individuals so you can run charts for them. This information is provided by you, at your initiative, and about people other than yourself. You alone decide whether to add another person and what to enter. See Section 3A for the responsibilities that come with this feature.
• Usage data: AI conversations, saved charts, interaction logs, ratings.
• Payment: Processed by Stripe or PayPal; we never store card numbers.
• Technical: IP address, approximate geolocation, device/browser metadata (for tax compliance, security, and fraud prevention).

3. Birth data and explicit consent

Your date, time, and place of birth are, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), ordinary personal data — not sensitive data. Even so, because we combine them with Chinese-metaphysics analysis (Qi Men Dun Jia, BaZi, and Zi Wei Dou Shu), we voluntarily apply a heightened level of protection to birth data — encryption at rest, private-by-default handling, and the granular consent below — beyond what the law requires for ordinary data.

We only process birth data on the basis of your specific, informed, freely given, and revocable explicit consent. You consent separately and granularly to:

• (a) Service consent — processing your birth data strictly to deliver the cultural-exploration Service you request;
• (b) Training opt-in — we will NOT use your birth data or conversations to train AI models unless you separately opt in. Training opt-in is off by default and can be turned off at any time, with no effect on your access to the Service.

You can withdraw either consent at any time from your account settings or by emailing privacy@destinytara.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

3A. Birth data about other people (Personas)

The Personas feature lets you save identification data (date, time, and place of birth) for people other than yourself, in order to generate readings inside your account. Under Mexico's LFPDPPP (art. 3) these are ordinary personal data — not sensitive data. Doctor Genio, S.A. de C.V. acts as the data controller (responsable) for them. Because you — not DestinyTara — choose whom to add and what to enter, you accept the following as a condition of using this feature:

• Lawful basis and consent. You represent and warrant that, for every person you add, you have a lawful basis to do so and, where the law requires it, that person's informed consent to enter their birth data and generate readings about them. You will not add birth data for anyone who has asked you not to, or who could not reasonably expect you to.
• No prohibited targets. You will not add data about minors, about anyone lacking legal capacity, or about any person in order to stalk, monitor, profile, or make adverse decisions about them. (See our Acceptable Use Policy.)
• Private, not public. Data you enter about another person is handled privately, only within your account. It is not public, not indexable or searchable by other users, and not shared. No person appears in any searchable directory.
• You can delete them. You may remove any person you have added, together with their birth data, at any time from your account, or by emailing privacy@destinytara.com. When you remove the person, or delete your account, their data is permanently erased. If a person you added asks you to remove their data, you agree to do so. If that person contacts us directly, we may remove their data from your account and will tell you we have done so.
• Third-party data-subject rights. Any person whose data has been registered by a user may request access, rectification, cancellation, or objection (ARCO rights), or erasure of their data, by emailing privacy@destinytara.com. We will act on the request and erase the relevant data.
• Indemnity. You agree to indemnify and hold DestinyTara harmless from any claim, complaint, or liability arising from birth data you entered about another person without a lawful basis or required consent, or in breach of this Section or our Acceptable Use Policy. This undertaking governs the relationship between you and the Company and does not limit the rights the law grants to the data subject against the Company.

4. Data Protection Impact Assessment (DPIA)

Because the Service uses AI to analyze birth data, and as part of our voluntary heightened-protection posture, DestinyTara has completed and documented an internal Data Protection Impact Assessment (DPIA) covering collection, processing, retention, third-party transfers, and risk mitigations for the birth-data processing flow. The DPIA is reviewed periodically. A summary can be requested at privacy@destinytara.com.

5. Legal bases for processing (GDPR Art. 6)

• Explicit consent — Art. 6(1)(a) and Art. 9(2)(a): for collecting and using your birth data to provide the Service.
• Contract — Art. 6(1)(b): for account creation, subscription management, and payment processing.
• Legitimate interests — Art. 6(1)(f): for security, fraud prevention, abuse detection, and service-integrity logging, balanced against your rights and freedoms.
• Legal obligation — Art. 6(1)(c): for tax, accounting, and other record-keeping duties under Mexican and applicable foreign law.

6. AI transparency

Your queries are processed by third-party AI inference providers. Our primary model is provided by DeepSeek, whose inference infrastructure is located in China; a fallback path routes through OpenRouter to comparable models. In both cases, what is sent to the provider is the already-computed structure of your chart plus your question (not your raw birth data, which is calculated on our own servers), and it is not retained by us beyond the request lifecycle. No human reviews the AI output before it is shown to you, and the AI may produce inaccurate or "hallucinated" responses. Interaction logs are anonymized after 30 days unless you have specifically opted in to training.

International data transfer and consent. Your charts are calculated on our own servers. Your raw birth data (date, time, and place) is NOT transmitted to the AI provider: the AI advisor receives only the already-computed structure of your chart (pillars, palaces, elements) together with the question you type, solely to generate the reading you request. By using the AI advisor (chat and interpretations), you give your express consent for that derived structure and your question to be processed on those providers' infrastructure, which may be located in China (DeepSeek), the United States, or other countries (via OpenRouter). This consent is revocable at any time by emailing privacy@destinytara.com; if you revoke it, you can keep using the rest of the Service (chart calculation, Power Hours, saving) without the AI advisor. Chart calculation and non-AI features do not transfer data to these providers. Each provider's processing is additionally governed by its own terms.

7. Third-party processors

• Payment processors — Stripe and PayPal, for billing and subscription management. We never store card numbers. When you choose PayPal, PayPal's own SDK loads in your browser and receives your IP address and device information.
• AI inference providers — DeepSeek (primary; inference infrastructure in China) and OpenRouter (fallback routing), for model inference on your prompts and birth-data context; payload not retained by us beyond the request lifecycle.
• Email delivery — Mailgun, for OTP and transactional email.
• Bot protection — Cloudflare Turnstile, a privacy-preserving CAPTCHA alternative that receives your IP address and browser signals to distinguish humans from bots.
• Hosting and edge infrastructure — Cloudflare / AWS or similar global cloud providers for application hosting, edge delivery, and security.

We do not sell, rent, or trade your personal data. No data brokers, no ad networks.

8. International data transfers

DestinyTara operates from Mexico and relies on global infrastructure, so your data may be processed outside your country of residence. Specifically: hosting and edge delivery run on Cloudflare / AWS (primarily the United States and other regions); AI inference runs on DeepSeek in China (primary) and via OpenRouter (fallback); email runs on Mailgun. The Service is not offered to, and blocks access from, the EU, the EEA, the United Kingdom, Switzerland, mainland China, and other restricted regions (see our Terms). Because we do not offer the Service to data subjects in the EU/EEA or UK, GDPR international-transfer mechanisms (such as Standard Contractual Clauses or the EU-US Data Privacy Framework) do not apply to our processing. For users in the regions we do serve, we minimize what is sent, instruct providers not to retain or train on it where supported, and anonymize interaction logs after 30 days.

9. Retention, account deletion, and right to erasure

You can delete your account and all associated birth data at any time, from your account settings or by emailing privacy@destinytara.com. Deletion is permanent and irreversible: birth data, saved charts, and AI conversations are purged from databases, caches, and propagated to third-party processors within a reasonable window (target: 30 days). The only exception is payment and invoicing records, which we are legally required to keep for a limited period (see the retention table below).

We do not retain personal data beyond what is technically or legally required:

• Account and birth data — for the life of the active account only.
• AI interaction logs — anonymized after 30 days (or deleted immediately on account deletion).
• Payment and invoicing records — 5 years, as required by Mexican fiscal law.
• Security/IP logs — 30 days.

10. Your rights

EU/EEA and UK (GDPR): right of access, rectification, erasure, restriction, portability, objection, to withdraw consent, and to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA): right to know, delete, correct, limit use of sensitive personal information, opt out of sale/sharing (we do not sell or share for cross-context advertising), and non-discrimination.

Mexico (LFPDPPP — ARCO): access, rectification, cancellation, opposition.

11. Cookies and measurement

Strictly necessary storage. To run the Service we use a strictly necessary sign-in token, stored in your browser's localStorage, so the Service can keep you logged in, and a short-lived dt_cc cookie holding only your two-letter country code (used to decide whether the measurement pixel below may run in your region). This storage is strictly necessary to deliver the Service you request and falls within the "strictly necessary" exemption in Article 5(3) of the ePrivacy Directive.

Advertising measurement (region-dependent). To understand how our advertising performs, we use TikTok measurement tools: a browser pixel and a corresponding server-side events integration. When they run, they send TikTok limited event information — for example, that a page was viewed, a pack was selected, checkout was started, or a purchase was completed — together with technical identifiers (your IP address and browser user-agent) and, for a completed purchase, a one-way cryptographic hash (SHA-256) of your email address so the conversion can be matched. We send the email only in irreversible hashed form; we do not send TikTok your raw email, your raw birth data, your charts, or the content of your AI conversations. This measurement is geographically limited: it runs only for visitors in Singapore, Mexico, Malaysia, and Australia — the markets where we currently advertise and where its use is permitted without prior opt-in. It does not run in the European Union, the United Kingdom, Switzerland, or the EEA (which are not served by us in any case), or in any other region. Where local law requires prior consent, we do not run it. If we expand advertising into a jurisdiction that requires opt-in consent, we will introduce a consent mechanism before enabling it there and update this section.

Cookieless, server-side traffic telemetry. Separately from the advertising measurement above, we count site usage on our own servers in a way that is cookieless and does not touch your device — it sets no cookie, writes nothing to localStorage, and builds no browser fingerprint. For requests reaching our servers we may record the page path requested, the referring host, a country/region derived from your IP address (the IP is used only transiently to derive the country and is then discarded, not stored in this telemetry), a coarse device class (mobile/desktop), and a timestamp. These records are aggregated into counts and are not linked to any account, email, birth data, or individual visitor, and are not used to profile you or to make any decision about you. For visitors in regions where the Service is not offered, we display a notice and count aggregate visit volume by country to gauge demand; we do not profile, track, or retain personal data about visitors from those regions. The lawful basis is our legitimate interest in understanding site usage and regional demand.

Aside from the strictly necessary storage, the region-dependent advertising measurement, and the cookieless server-side traffic telemetry described above, we do not use analytics, tracking, or profiling cookies, and we do not sell or share personal information for cross-context behavioral advertising. If we introduce further non-essential cookies or client-side analytics — that is, any technology that stores or reads information on your device — we will ask for your consent first (where required) and update this section.

12. Age gate — no processing from minors

The Service is strictly for users 18 years of age or older. We do not knowingly collect or process any data from minors. If we learn that a user is under 18, we will immediately delete their account and all associated data. If you are a parent or guardian and believe we may hold data about a minor, please contact privacy@destinytara.com.

13. Contact

Privacy inquiries: privacy@destinytara.com
Legal inquiries: legal@destinytara.com