Privacy

Your account

Signing up stores your email address and, if you use Google, the name and profile picture Google gives us. If you pick a language or currency in Settings while signed in, that choice is kept with your account too, so it applies wherever you sign in. That is all an account is. You can read the site, draw a card and get a reading without one.

Your name and birth date

If you choose to give them, we keep your name and birth date with your account. We use them only to show your zodiac sign and numerology. Nobody else sees them, they are not sent to analytics, and deleting your account deletes them. Once saved, they can be changed again after 60 days. You can use the zodiac pages without giving either.

Readings

A reading is written by an AI model run by a third-party provider. The card you drew, whether it fell upright or reversed, and the question you typed are sent to that provider to produce it. Do not type anything into that box you would not want a third party to process.

We also count how many readings you have asked for today, so the daily limit can be enforced. That count is the number itself, not the readings.

If you buy credits, we keep your balance and a ledger of every purchase, spend and refund: when it happened, how many credits, which spread, and for a refund the reason (for example, that the writer failed). It holds no question and no reading. It is deleted with your account; the record of the payment itself is kept as described under Payments.

If you draw without an account, you see part of the reading and we keep the whole of it, with your question, for 7 days, so you can read and save it by creating an account. It is linked only to a random number in a cookie, never to a name or an email. Once you save it, or once 7 days have passed, it can no longer be read or saved from that cookie, and it is then deleted.

After a reading you can tap how it landed and write one line about it. Both are stored with that reading and only you can see them. They are never sent to the AI provider or to our analytics, and they are deleted with the reading. Your streak is worked out from the dates of your own readings; nothing new is collected for it.

You can publish a reading as a link. The public page shows the cards, your question and the whole reading, as the share sheet previews it before you create the link, and never your name or email. Turn a link off from your notebook at any time and its content is deleted.

If you buy a question ticket, the question you type is stored with your ticket and, once the reading is written, with the reading in your notebook, like any other question. It is also sent, together with the cards you drew, to the third-party AI provider that writes the reading and picks the spread. We do not sell your question or publish it. Please do not put in a question anything you would not want an AI service to process: other people's full names, phone numbers, addresses or identity numbers.

If your ticket includes follow-up questions, each message you send and each answer is stored with the ticket, shown under your reading, and sent with the reading and the cards to the same provider to be answered.

If a reading you paid for with credits includes follow-up questions, each message you send and each answer is stored with that reading in your notebook, and is sent with the reading and the cards to the same provider to be answered.

Question tickets

For each ticket we keep: its kind (Standard or Deep), whether you paid with credits or by bank transfer, when it was bought and when it expires, its state (bought, in use, used, expired), the question and the spread chosen, the reading it produced, and the time you confirmed you are old enough, with the version of the terms you saw. Credit movements for tickets (a hold when you buy, a return if it expires) appear in your credit log. A ticket record is deleted with your account; the payment record is kept as described under Payments.

Analytics

Only if you agree. Nothing measures you until you press Allow on the banner, and declining is a real answer that we keep. If you agree, we record which pages you visit and a short list of actions — a reading started, a preview spent, a language switched. If you pick one of the suggested questions, we record which one; a question you type yourself never reaches analytics.

This runs on PostHog, on their European servers. Visitors who are not signed in are not given a profile, so those events are not tied to a person.

Where you came from

If you agreed to analytics and then sign up, we keep, against your account, the campaign tag or the site that first brought you (for example “facebook”) and the page you landed on. We use it only to learn which channels bring people and to improve the experience. It holds no question, no reading, no email address and no IP address, and it is deleted with your account.

The weekly card

The weekly card is on by default for an account: we send you one email a week with a card and a few words about it, and we keep that it is on. For every email we send you (the weekly card and the come-back reminders alike) we keep a log of the date and the kind, so we can see whether they bring people back. We do not track whether you open an email or click a link in it. You can turn the weekly card off from your notebook or from the link in any weekly email, and everything above is deleted with your account.

The installed app and reminders

If you install Daily Draw on your phone or computer and open it while signed in, we keep the date you first opened it and the date you last did, on your account, so we can see whether the app is being used. If you switch on the morning reminder, we keep the address your browser gives us for sending notifications to that browser, and nothing else about it. We use notifications for the morning reminder and, now and then, for offers and news from Daily Draw: at most two of those in any seven days. For each offer we send, we keep that it was sent to you, so nobody gets the same one twice. You can switch notifications off in Settings, and everything above is deleted with your account.

How long some things are kept

Bao Công Xử Trí keeps the verdict you were given and, if you typed one, the question beside it, on your account for 90 days, and then deletes them. The daily zodiac messages we write for each sign are kept for 30 days and then deleted; a message you saved yourself is your own copy and stays until you remove it or delete your account. Both deletions run automatically every day.

Cookies

Only the ones the site needs to work, plus one for analytics if you agree — none for advertising.

Every cookie, what it does and how long it lasts: see the Cookie Policy.

Where you are

Our host tells us which country a request came from, and we use it to choose whether to show you dollars or đồng. The answer is kept in the currency cookie above and checked again on later visits — until you pick a currency yourself in Settings (the ⚙ at the top of every page), after which your choice sticks and we stop looking.

Payments

Buying a membership, credits or a deck is paid by bank transfer through payOS. We keep a record of each order — what it was for, the amount, and whether it went through — together with what payOS reports about the transfer, which includes the name and number of the bank account that paid. It is kept so a payment can be matched, refunded or looked into later. We never see your banking login.

TikTok live streams

When we host a TikTok LIVE, a program on our side records what TikTok already makes public about the room: comments, gifts, likes, follows and shares, with each person's TikTok user id, @handle and nickname, and how many people were watching. We ask for nothing more and, apart from the one case at the end of this paragraph, link none of it to a Daily Draw account. We use it to see how each live went, and we delete it 30 days after the live ends. The clean-up runs each time we host a live. A question typed with #hoi or #free and the reading we write for it are kept the same way and deleted with the rest, except that a #free reading is also saved to your notebook, as any reading is, until you delete it. The one case: if you use a live code to get a reading, we keep the link between your account and your TikTok id and @name, to stop abuse, until you delete your account.

Who else is involved

• Supabase stores the database and signs you in.
• Vercel serves the site.
• An AI provider writes the readings.
• Google signs you in, if you choose it.
• PostHog receives analytics, only with your consent. When you are signed in, it is linked to your account's id, never to your email.
• payOS carries bank-transfer payments and tells us when one arrives.
• Sentry receives a report when something breaks: the error, the page it happened on, and your account's id if you are signed in. Never your email, your address, or anything you typed.

Your choices

You can decline analytics on the banner, or clear this site's data in your browser to be asked again. To see or delete what is held about you, write to us and we will do it.

Under Vietnamese law on personal data (Decree 13/2023/ND-CP and the Law on Personal Data Protection) you may ask to know what we hold, see it, correct it, delete it, limit how we use it, and withdraw consent you gave. Write to us at the address under Contact. We answer within the time the law sets. You may also complain to the competent authority in Vietnam. Deleting your account removes your readings, tickets and credit log; we keep only the payment records the law requires.

Deleting your account and your data

Write to contact@dailydraw.app and say you want your account deleted. Send it from the address on the account — or from the Google or Facebook account you sign in with — so we know it is you. We delete the account, your readings, your preferences, and the decks recorded against it.

Records of payments already made are kept for as long as tax and accounting law requires. Everything else goes. We answer within 30 days, and usually the same week.

Contact

contact@dailydraw.app