Legal
myDelfy.ai is operated by dib s.r.o., a company registered in the Czech Republic ("we", "us", "our"). This policy explains what personal data we collect when you use myDelfy.ai, why we collect it, how we use it, and what rights you have over it.
If anything here is unclear, please reach us through our contact form.
| Data | Why we collect it | Lawful basis |
|---|---|---|
| Email address | To identify your account and send you a sign-in link. We do not use passwords. | Performance of contract |
| Name (optional) | To personalise your readings. You may use a first name only or any name you choose. | Performance of contract |
| Birth date, birth time, birth place | To calculate your natal blueprint. The calculation is performed entirely on our own servers. Your raw birth data is not transmitted to any third-party service. | Performance of contract |
| Questions and written inputs (Oracle feature) | To generate a personalised Oracle reading. These inputs are processed by a third-party AI language model provider and are not retained by that provider beyond the immediate request. | Performance of contract |
| Data | Purpose | Lawful basis |
|---|---|---|
| AI-generated readings and reports | Stored against your account so you can access them again. You may delete them at any time. | Performance of contract |
| Credit balance and purchase history | To manage your account and comply with financial record-keeping obligations. | Legal obligation / legitimate interests |
| Session cookie | A single strictly-necessary cookie keeps you signed in during your browser session. It contains no tracking information and expires when you close your browser or sign out. No consent is required for this cookie under EU ePrivacy rules. | Strictly necessary (exempt) |
We do not use advertising cookies, tracking pixels, or marketing analytics. We do not sell, rent, or trade your personal data to any third party for commercial purposes.
We use a small number of third-party services to operate myDelfy.ai. Each is bound by a data processing agreement and permitted to use your data only to provide their service to us.
| Category | Purpose | Location |
|---|---|---|
| AI language model provider | Generates the text of your readings. Receives your name, calculated position codes, and any written Oracle inputs. Does not receive your raw birth data. Does not use API data to train its models. | United States |
| Translation service provider | Translates your reading into your preferred language when requested. Content is processed transiently and not stored beyond the immediate request. | European Union |
| Payment processor | Handles all credit card transactions. We do not store any payment card data — it is handled entirely by the payment processor, which is PCI-DSS Level 1 certified. | United States |
| Email delivery provider | Sends transactional emails: sign-in links and purchase receipts. Your email address is shared only for delivery purposes. | United States |
| Cloud hosting provider | Hosts the application and database. All stored data resides on their infrastructure. | United States |
| Geocoding service | Used once at calculation time to resolve your birth place to a geographic coordinate and local timezone. Only the place name you enter is sent — no account data. | European Union |
Transfers to processors located in the United States are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent transfer mechanisms where applicable.
| Data | Retention |
|---|---|
| Account data (email, name, birth data) | Until you delete your account |
| Generated readings and reports | Until you delete them or delete your account |
| Purchase records | 7 years, as required by Czech accounting law |
| Sign-in tokens | 15 minutes from creation, or immediately on use |
| Session cookie | Until you sign out or close your browser |
Under the General Data Protection Regulation (GDPR), you have the following rights over your personal data:
To exercise any of these rights, please use our contact form. We will respond within 30 days. We may ask you to verify your identity before acting on a request.
You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence. In the Czech Republic, where we are registered, this is the Úřad pro ochranu osobních údajů (ÚOOÚ), reachable at uoou.cz.
myDelfy.ai is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, please contact us via our contact form and we will delete it promptly.
We may update this policy when our practices change or when required by law. Material changes will be notified by email to registered accounts at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent version.