DESTINYU · TRUST · en
Updated September 30, 2026 · V3 public-discovery version
Depending on the feature you use, DestinyU may handle account email, nickname, birth details, birth place/timezone, preferred language, reading inputs, email preferences, consent records and technical usage/security signals. For Face Reading, the selected photo is processed inside your browser and is not uploaded to or stored on DestinyU servers.
We use data to calculate and display requested readings, reuse your Universal Profile, operate accounts, send opted-in Daily Destiny Lite email, prevent abuse, measure product reliability and repeat use, control variable cost, support deletion and investigate failures.
First-party product analytics are designed not to store raw email addresses, birth data, photo data, street addresses, coordinates, full reading content or free-form questions in event properties. Anonymous browser continuity uses a random opaque cookie; the analytics database stores a one-way SHA-256-derived subject identifier rather than the raw cookie.
DestinyU may use secure session cookies for authentication, a random anonymous identifier for reading continuity/measurement, and a last-visit date used to classify return windows. We do not use these cookies to promise identity recognition across unrelated services.
Daily Destiny Lite requires an explicit opt-in. We record the consent event and provide a signed unsubscribe link. Unsubscribed, hard-bounced or complained addresses are excluded from eligible Daily Lite delivery. Marketing permission is kept separate from service-email authority.
Current infrastructure includes Vercel for hosting/deployment, Supabase for managed database/authentication, and Resend for email delivery when production email is enabled. Face Reading additionally loads the MediaPipe vision runtime through JSDelivr and model files hosted by Google; the image itself is processed in the browser rather than sent by DestinyU to those services. MediaPipe may collect performance and utilization metrics under its applicable terms.
Profile and account data are kept while needed to provide the account unless deleted or a shorter rule applies. Reading-session metadata, consent evidence, security and deletion audit records may be retained where operationally or legally needed. Face image files are not retained by DestinyU because the current photo-reading flow does not upload them to DestinyU servers.
Account/profile correction and deletion flows are being tested before Public Beta. The deletion workflow is designed to remove scoped profile, reading, product-event, email and consent data and to record deletion success or failure without storing raw secrets. Public Beta will not rely on an untested deletion path.
DestinyU is intended for a global audience, so data may be processed in countries different from your own through our infrastructure providers. Where applicable law gives you rights to access, correct, delete, restrict, object, withdraw consent or obtain a copy of your personal data, we will provide a request path before Public Beta.
If you use the Contact form, we store the email address you provide, an optional name, your message, locale and a one-way anonymous subject hash used for basic abuse limiting. Contact messages are available only to the owner Admin and are kept only as needed to review, respond, handle privacy requests or maintain a minimal inquiry record. Do not include passwords, payment data or unnecessary sensitive information.
DestinyU is designed for adults and is not intended for people under 18. We do not knowingly design personalized profile, email or photo flows for children in the current product scope.