Privacy Policy

What we collect

Account information: when you sign in with an email code or with Google, we keep your email address and an account identifier. With Google sign-in we request only basic identity information (openid and email) and do not read any other data in your Google account.

Sign-in sessions: to keep you signed in we store session records (sign-in time and client type, such as the desktop app or the website); sign-in tokens are stored only encrypted or hashed.

Service logs: the platform backend logs the path, status code and duration of each request, without IP addresses or URL parameters. The web server's access log keeps only a truncated IP address (for example 203.0.113.0), the time, the page address without parameters, the status code and the browser type, for 14 days, to troubleshoot and prevent abuse. To rate-limit requests the backend briefly uses your full IP address in memory and does not write it to the logs.

Conversations, profiles and memory

Your conversations in the desktop app (each question and reading, and the results of charting, card draws and casts), the profiles of the people you read for (including birth details), the "About me" material you import, and what fate remembers about you — how to address you, your preferences, things you've mentioned, and reminders — are sent over an encrypted connection and kept in your fate account, so you can continue on another device, fate keeps your requests, and reminders arrive on time. Sensitive matters such as health, finances, legal issues or crises are not saved to long-term memory automatically.

You can delete individual conversations in the app, and view, edit or forget what fate remembers and manage reminders under Settings › Memory.

Charts, card draws and casts are computed on your computer. Readings, conversation and memory upkeep are handled by the model service you choose (for example your ChatGPT or Claude subscription, or your own API key): chart facts, your questions and relevant memory go directly from your computer to that service and are covered by its own privacy policy. fate's servers only store the material listed above; they never call any model and never send this content to model providers.

Your model sign-ins and API keys stay on your computer only (API keys are stored encrypted and protected by the system keychain) and are never uploaded to fate's servers.

Cookies and analytics

The website uses essential cookies to keep you signed in (session and cross-site request protection), fate.lang to remember the language you chose, and fate.consent to remember your choice about analytics cookies (13 months). After you sign in, it also keeps fate.signedIn in your browser's local storage (only the first letter of your email, shown as the avatar in the top bar); it is removed when the sign-in expires or you sign out.

The website uses Google Analytics 4 to understand how it is used, only on heyfate.ai. It sets the first-party cookies _ga (a random identifier that tells browsers apart) and _ga_RPYP9FBQV3 (session state), which last up to 2 years, and records the pages you view, scrolling, outbound link clicks and downloads, how you arrived, and your device, browser, language and approximate location. Google uses your IP address only to estimate your location and does not store it.

If your device's time zone is in Europe, the website asks before using analytics cookies, and Google Analytics does not load until you choose Accept; when Google determines from your IP address that you are in the EEA, the UK or Switzerland, analytics cookies are also off by default. Elsewhere analytics is on by default. You can accept or reject at any time under “Cookie settings” in the footer; if you reject, we delete any _ga cookies already set and stop loading Google Analytics.

Before anything is sent we remove every URL parameter except utm_ ones (for example the email address and one-time request id on the sign-in page), and Google Analytics also redacts email addresses. Google signals and advertising features are turned off, and analytics data is kept for 14 months. To learn how Google uses this data, see Google's explanation (https://policies.google.com/technologies/partner-sites). You can block these cookies in your browser or install Google's opt-out add-on (https://tools.google.com/dlpage/gaoptout). The desktop app contains no analytics.

How we use information

We use this information only to provide and protect fate: creating and signing in to accounts, sending verification emails, keeping you signed in, storing and syncing your conversations, profiles and memory, reminding you at the times you set, understanding how the website is used, troubleshooting and preventing abuse. We do not sell your personal information, use it for advertising or use it to train any model, and we share it with no one except the service providers listed below, which process only what is needed to run fate, or where the law requires.

Google user data

Information obtained through Google sign-in (your email address and account identifier) is used only to create and sign in to your fate account; it is not used for any other purpose or transferred to third parties. fate's use of this information adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers and location

fate's servers are located in Hong Kong, China (Alibaba Cloud). Verification emails are sent through Resend; Google handles authentication when you sign in with Google; Google Analytics processes the website's visit statistics. When you buy a plan, card payments are handled by Stripe and Alipay payments by ZPAY (z-pay.cn); fate does not store your card number or payment account.

Retention and your rights

We retain account information until you close your account, and conversations, profiles, memory and reminders until you delete them in the app or close your account. Web server access logs are retained for 14 days and analytics data for 14 months.

To export or correct server-held account information, or request account closure, contact us through the support email address. We verify your identity and process requests within 30 days of receipt. Closing your account removes the email address used for sign-in, your Google sign-in link and non-financial data held on our servers. It invalidates your platform sessions and ends access to that account's benefits.

Payment, refund and chargeback records, and operational audit records including request-handling records, are retained for payment reconciliation and support. These records are not deleted immediately when the account is closed. Old database backups are gradually removed under the existing rotation rules. When restoring a backup, verified correction and account-closure records are reapplied, and closed accounts are not reopened.

Account closure does not remotely clear any data on your computer, sign you out of ChatGPT or Claude, or remove your API keys. You continue to manage local data, model logins and API keys separately. You can clear local data in the desktop app and separately sign out of model accounts or replace API keys.

Minors

fate is intended for adults. If you are under 18, use it only with the consent and guidance of a parent or guardian.

Changes and contact

If this policy changes, we will update this page and the date above. For any privacy question, contact service@mail.faleme.ai.