Privacy Policy

• The free reading works without an account. To calculate it, the date you enter is sent to our server and recorded in a request log (without a name unless you are signed in).
• We collect only what we need to run your account, deliver purchases and improve the service.
• We never sell personal data and we do not use it for third-party advertising.
• We never see or store your full card number; the payment provider handles it.

• Dates of birth you enter, and the request log. For every reading we store the date of birth, who it is for (you, a child, a loved one, another person), the chosen gender, the access level and the time — linked to your account if you are signed in. We need this to show you your readings, count what is left on your plan and keep anonymous service statistics. Records are kept for up to 24 months. By entering another person's date you confirm you have a legitimate reason to do so.
• Account details. Your email address and login information.
• Purchases. What you bought, when, the amount and its status. Card details are collected by our payment provider, not by us.
• Usage events. Pseudonymous events such as "profile calculated" or "report opened", tied to a random session identifier (and to your account if you are logged in). We use them to fix problems and understand which features are useful.
• Messages you send us, such as support requests.

We do not ask for or collect health information, identity documents or your precise location.

• To provide the service you asked for: calculating profiles, delivering and storing paid reports, managing your account (performance of a contract).
• To process payments, prevent fraud and keep records required by tax and accounting law (legal obligation and legitimate interest).
• To improve and secure the service using pseudonymous usage events (legitimate interest).
• To send marketing only if you opted in; you can opt out at any time (consent).

We use a small number of service providers, only for the purposes above:

• Supabase — database and authentication.
• Railway — application hosting.
• Our payment provider — checkout, payments, taxes and receipts. It may act as merchant of record and process your data under its own privacy policy.

These providers may store data outside your country, including in the United States or the European Union. We rely on their contractual safeguards for such transfers. We may also disclose data where the law requires it.

• Account data and saved reports: while your account is open.
• Purchase and payment records: for as long as tax and accounting law requires, even after an account is deleted.
• Usage events: up to 24 months, then deleted or fully anonymised.
• Data kept only in your browser: until you clear it.

Depending on where you live (including under the Law of the Republic of Azerbaijan "On Personal Data" and, for people in the EU/UK, the GDPR), you can ask us to access, correct, export or delete your personal data, to restrict or object to certain processing, and to withdraw consent at any time.

To use these rights, contact us through the support details shown on your receipt. We will reply within 30 days. You can also complain to your local data-protection authority.

Data is encrypted in transit, access to the database is restricted by row-level security, administrative actions are logged, and payment card data never reaches our servers. No system is perfectly secure, but we will notify you and the relevant authorities of a breach where the law requires it.

Innato is intended for people aged 18 and over. We do not knowingly create accounts for minors. If you believe a minor has created an account, contact us and we will delete it.

We use only what is needed to run the site: a login cookie when you sign in, and browser storage for your preferences and your consent choice. We do not use advertising or cross-site tracking cookies.

We will update this policy when our practices change and show the new effective date at the top. The data controller is Innato. For privacy questions, contact us through the support details shown on your receipt. See also our Terms of Service.