Privacy Policy

Last updated: 6 May 2026

1. About This Policy

Luck Timing ("we", "us", "our") respects your privacy. This Privacy Policy describes what personal information we collect, how we use it, and the choices you have. It applies to the Luck Timing mobile app, the lucktiming.com website, and any related services (together, the "Service").

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

2. What We Collect

We collect only what we need to run the Service for you. The categories below describe what we may collect across the app and the website.

Account information. Email address, display name, and (optionally) a profile photo. Where you sign in with a third party — Apple, Google, or similar — we receive a basic profile from that provider.
Birth chart inputs. Birth date, birth time, and birth location for any profile you create — yours or, with their consent, someone you add. These are used to compute BaZi readings.
Saved profiles and readings. Charts, readings, journal notes, and any other content you save in the app.
Compatibility and matchmaking inputs. Preferences and other information you choose to provide for compatibility comparisons or matchmaking.
Social activity. Friends connections, messages and chat content you send through the app, and any other information you share with other users.
Payments. When you buy something, our payment processor receives the card or bank details directly. We receive a record of the transaction (amount, currency, time, last four digits of the card, country) but never the full card number.
Notifications and devices. If you enable push notifications, we store a push token from Apple or Google so we can deliver them. Device type, OS, app version, and language preference may be collected for diagnostics.
Geographic signals. The country derived from your IP address (provided by our edge network) and your browser timezone. We use these to show prices in your local currency and to localise content. We do not use these to track your precise location.
Logs and diagnostics. Crash reports, error traces, and basic performance metrics so we can keep the Service running.

3. How We Use Your Information

We use your information to:

Calculate your charts, readings, and timing windows
Sync your saved profiles, preferences, and history across your devices
Process payments and manage subscriptions
Send transactional notifications (purchases, account changes, security alerts)
Operate social, compatibility, and matchmaking features
Run the referral programme — including credit balances and any clawbacks needed when a related payment is reversed
Improve, debug, and secure the Service, prevent fraud, and enforce our Terms
Comply with legal obligations and respond to legitimate requests from authorities

4. Legal Bases (where the GDPR or similar laws apply)

We rely on the following bases to process your personal data:

Performance of a contract — to deliver the features you sign up for
Your consent — for things like push notifications and optional features
Legitimate interests — to keep the Service safe, secure, and improving
Legal obligation — when required by tax, accounting, or law-enforcement requirements

5. Cookies and Local Storage

On lucktiming.com we use a small number of essential storage mechanisms to keep you signed in, remember your language preference, and show prices in your local currency. We do not use third-party advertising cookies. The mobile app uses local device storage to keep your data working offline.

6. Service Providers

We do not sell your personal information. To run the Service we work with carefully selected processors. Each is contractually bound to use your data only on our behalf, in line with this Policy and applicable law. We disclose the categories of recipients below; if you would like more detail, please contact us.

Cloud infrastructure and authentication — to host your account, saved profiles, readings, and related data.
Web payment processing — for purchases made on the website. Payment card details are entered directly into the payment processor and are never stored by us.
App-store payment processing — for in-app subscriptions and one-time purchases. These are governed by the applicable app store's terms and privacy policy.
AI text generation — for parts of personalised readings. We send only the minimum chart-derived data needed for the reading (no name, email, or other identifying information).
Translation — when translating reading content between supported languages.
SMS verification — when you choose to verify a phone number.
Email delivery — for receipts, password resets, security alerts, and account notifications.
Mobile app distribution and push notifications — for building and shipping the app, and for routing push notifications via the operating system's notification services.
Edge hosting and content delivery — for the website's request routing, content delivery network, and geographic signals used to localise prices.

7. Data Security

We protect your data with industry-standard measures, including encryption in transit (HTTPS), encryption at rest, restricted internal access, and regular security reviews. No system is perfectly secure, however, and we cannot guarantee absolute security.

If a personal data breach affects you, we will notify you and the relevant authorities as required by law — generally within 72 hours of becoming aware of the breach — and explain steps you can take.

8. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to keep some records for longer:

Payment-transaction records may be retained for up to 7 years to meet accounting and tax obligations
Aggregated, non-identifiable analytics may be retained indefinitely
Backups may take up to 90 days to fully expire
Records relating to fraud, abuse, or unresolved disputes may be retained for longer where necessary

9. Account Deletion

You can delete your account at any time from within the app's Settings → Danger Zone, or by following the steps on our delete-account page. See that page for details on which data is removed, which data may be retained, and how long it takes.

10. Children's Privacy

The Service is not directed at children under 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact support@lucktiming.app and we will delete it.

11. International Transfers

Your information may be processed in countries other than the one you live in. Where the law requires, we use appropriate safeguards — such as standard contractual clauses — to protect your data during these transfers.

12. Your Rights

Depending on where you live, you may have one or more of the following rights:

Access — request a copy of the personal data we hold about you
Correction — ask us to correct inaccurate or incomplete data
Deletion — ask us to delete your data (subject to legal-retention exceptions)
Portability — receive your data in a portable format
Restriction or objection — limit or object to certain processing
Withdraw consent — for processing that relies on your consent

13. Regional Notes

Malaysia (Personal Data Protection Act 2010). Malaysian residents have rights to access, correct, and limit the processing of their personal data, and to withdraw consent.

European Economic Area / United Kingdom (GDPR / UK GDPR). EEA and UK residents have the rights listed in section 12, and the right to lodge a complaint with their national supervisory authority.

California (CCPA / CPRA). California residents have the right to know what personal information we collect, the right to deletion, and the right to opt out of sale or sharing of personal information. We do not sell or "share" personal information for cross-context advertising.

14. Third-Party Links

The Service may link to third-party sites and services we do not control. Their privacy practices are their own. Please review their policies before using them.

15. Changes to This Policy

We may update this Policy when our Service or applicable law changes. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app or by email.

16. Contact

For privacy questions or to exercise any of your rights, email support@lucktiming.app. We will respond within 30 days.