Privacy notice (draft)

Draft: to be reviewed again before paid reports launch.

The free chart

The chart on the home page is worked out in your browser. The birth date, time, place and gender you type are not sent to us and are not stored.

The waitlist

When you join the waitlist we keep your email address, your language, when you agreed and which link brought you to the site (for example, an Instagram ad). We use them only to tell you when riffos opens and to learn which channels work. You can ask to see, correct or delete it at any time, or unsubscribe from any email.

Your account and reports (app.riffos.app)

When you sign in we keep your email address. Your details (the name you go by, birth date, time and place, gender, personality type, the direction you most want to know about, and what you tell Sifu about your life now: work, industry, relationship, children, which way your front door faces and where your birth time comes from) are kept in your account to write and show your reports. For a relationship report, the name, relation, birth details and personality type of the person you add are kept too; ask them first. Your reports, your questions to Sifu with the answers, and your reports' PDFs are kept in your account.

How Sifu writes

Reports and answers are written by Sifu, riffos's digital master: software (a language model) running on a server riffos chooses, currently riffos's own. It receives the chart facts the engine worked out, the name you go by, what you told Sifu and your question, never your email or payment details. A part or an answer that fails the rule check is read by riffos staff before you see it.

Face reading (optional)

The front photo is measured on your device and never sent to us. Only if you also tick Sifu's face reading are the front and side photos sent to the server, once, and dropped after the reading; only the measurements and the written reading are kept.

Payment

Payments are handled by Stripe; we never see your card number. We keep the email, product, amount and date, as accounting rules require.

Visit counts, error reports and the bot check

We count visits and a few steps (for example, viewing the free chart or starting a payment) with PostHog, without cookies, without storing anything in your browser and without identifying you; the query part of each address is removed first. When something breaks, Sentry receives the error, the page (without its query) and the browser type, never your email, name or birth details. Payment, sign-in and the waitlist use Cloudflare Turnstile to check a person, not a bot, is using them.

Where it is kept, and by whom

Accounts and reports are stored with Supabase (Singapore); the site and app are served by Cloudflare and Vercel (Singapore); Inngest schedules the writing jobs (it handles report numbers and check results). Stripe, PostHog and Sentry may process data outside Malaysia, for example in the United States or the EU.

Your rights

You can see, correct or delete your details at any time: your account page downloads everything we keep, or deletes the account and all in it (payment records stay for accounting, linked to no one). You can also email us.

Contact

hello@riffos.app