Orakai is an independent application operated at orakai.io. For privacy enquiries contact info@orakai.io. We respond within 30 days.
| Data | Purpose | Legal basis |
|---|---|---|
| Account creation, password reset, service communications | Contract | |
| Name | Account personalisation | Contract |
| Birth date, time, gender | Generating your BaZi and Five Elements reading | Contract |
| Reading history | Cooldown enforcement, showing previous readings | Legitimate interest |
| Session cookies | Keeping you signed in | Legitimate interest (essential) |
| Payment data | Subscription processing — handled entirely by Stripe, never stored by us | Contract |
| IP address, device type | Security, fraud prevention, server logs (30-day retention) | Legitimate interest |
We do not collect your location, contacts, camera, microphone, or browsing history.
We use only essential cookies — no tracking or behavioural advertising cookies from Orakai itself.
Session cookie — keeps you signed in. Expires on sign-out or after 30 days.
CSRF token — protects form submissions. Session-scoped.
Google AdSense (where active) may set its own cookies under Google's policy. Manage via Google Ad Settings.
| Processor | Role | Policy |
|---|---|---|
| Stripe, Inc. | Payment processing. Stripe stores your card data — we never see or store it. | stripe.com/privacy |
| Google LLC | Advertising (AdSense / Ad Manager). Google may use identifiers for ad personalisation per your consent settings. | policies.google.com |
We do not sell your data. No third party receives your birth data, reading results, or account details for marketing purposes.
Account and reading data — retained while your account is active. Permanently deleted within 24 hours of account deletion (Menu → Delete My Account).
Server logs — automatically deleted after 30 days.
Payment records — retained for 7 years under applicable financial law, held by Stripe under their own obligations.
If you are in the EEA, UK, or equivalent jurisdiction, you have the right to: access your data, rectify inaccuracies, erase your data (fastest via Menu → Delete My Account), data portability, and to object to processing based on legitimate interest.
Contact info@orakai.io to exercise any right. You may also complain to your national data protection authority at any time.
All data is transmitted over HTTPS with TLS. Passwords are hashed with PBKDF2-SHA256 and never stored in plain text. We apply industry-standard hardening and access controls. In the event of a breach, we will notify affected users and the relevant authority within 72 hours.
Orakai is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact info@orakai.io and we will delete it promptly.
Orakai is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to merchantability, fitness for a particular purpose, or non-infringement. We make no representation that the application will be uninterrupted or error-free.
To the fullest extent permitted by applicable law, Orakai and its operator, affiliates, and licensors disclaim all liability for any direct, indirect, incidental, special, consequential, or punitive damages arising from or in connection with your use of or inability to use the application, even if advised of the possibility of such damages.
All readings, interpretations, and guidance provided by Orakai are for entertainment and personal reflection only. They do not constitute professional financial, legal, medical, psychological, or any other form of licensed advice. All decisions you make based on content from Orakai are entirely and solely your own responsibility. Orakai bears no liability for any outcome — financial, personal, relational, health-related, or otherwise — arising from those decisions.
Nothing herein excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence or for fraudulent misrepresentation.
We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice before they take effect. Continued use of Orakai after changes are posted constitutes acceptance of the updated policy.