Privacy & Trust
Your data is sacred ground.
We built 8lifes with privacy as a founding principle, not an afterthought. Here is exactly what we do — and do not — do with your information.
End-to-End Encrypted
Your birth data and personal reflections are encrypted at rest and in transit using AES-256. We use industry-standard TLS 1.3 for all connections.
Your Data, Your Keys
API keys and model credentials are encrypted server-side. They are never exposed to the browser or stored in plaintext anywhere in our systems.
Zero-Knowledge Analytics
We do not track your reading behavior across sites. Analytics are aggregated and anonymous. No third-party trackers, no cookies beyond session essentials.
Right to Deletion
Under GDPR Article 17, you can request full deletion of your account and all associated data at any time. We process these requests within 30 days.
Transparency by Design
This Privacy Policy is written in plain English. If you do not understand it, please email us — we will explain it to you in simpler terms.
Minimal Data Collection
We collect only what is strictly necessary: birth time, birth location, and your self-reported preferences. Nothing more. Ever.
Data Principles
We never sell your personal data to any third party, including advertisers or data brokers.
Your birth data is used solely for generating your reading report. It is never used for training AI models.
Questionnaire responses are used only to personalize your current session and are not stored beyond that.
You may request a full export of all data associated with your account at any time (GDPR Article 20).
We use sub-processors (Supabase, DeepSeek) only when necessary and have executed Data Processing Agreements with each.
Your Rights (GDPR)
- • Right of Access — know what data we hold
- • Right to Rectification — correct inaccurate data
- • Right to Erasure — request full deletion
- • Right to Data Portability — export your data
- • Right to Object — opt out of processing
Security Measures
- • AES-256 encryption at rest
- • TLS 1.3 for all network communication
- • Argon2id password hashing
- • HttpOnly secure session cookies
- • Quarterly security audits
- • Row-Level Security on all database access
Questions about your data? Contact us at privacy@8lifes.com
Last updated: August 2026 · Controller: 8lifes Ltd. · DPO: dpo@8lifes.com