Privacy Policy

• Account details: email address, password (stored hashed by our authentication provider), and sign-in method.
• Profile details you choose to add: display name, date of birth, gender, who you're looking for, city, region, cultures, bio, photos, and flags.
• Sensitive details you volunteer: birth date and time for moon sign estimates, culture, and faith or family values expressed through flags. In the EU/UK some of this counts as special category data and we process it only with your explicit consent, given when you add it.
• Astrology data: birth date, birth time, and any birth details you enter for a compatibility report, plus the AI-generated readings and saved reports created from them. These are visible only to you, and you can delete or export them from your settings.
• World Traditions (Kundli Milan, Chinese zodiac, synastry, life-path numbers): scores are calculated inside your browser. Any birth details you type for another person, and any report you keep, are stored only in that browser's local storage — we never receive or store them, and you can delete them or clear them all from the Astro tab. If you ask for a written story, only the calculated scores and first names are sent to our AI provider to generate text; the text is returned to you and not stored by us.
• Activity: likes, matches, messages, games, vouches, and preferences you save.
• Technical data: device and browser type, approximate location from your IP address, and security logs.
• Payment records: plan purchased, amount, currency, country, and Stripe reference. Card numbers are handled by Stripe and never reach our servers.

• To run your account, Discover, matching, and chat — performance of our contract with you.
• To keep the community safe: reviewing reported content and profiles, screening uploads, and preventing fraud — legitimate interests and legal obligations.
• To process purchases and prevent chargebacks — contract and legal obligation.
• To provide astrology, flags, games, and AI conversation insights — your consent, withdrawable by removing the data or turning the feature off.
• To send service emails such as confirmations and safety notices — contract; marketing email only if you opt in, and you can unsubscribe at any time.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use a small set of processors under contract:

• Our cloud backend provider, for database, authentication, and photo storage.
• Stripe, for payments.
• Our AI provider, for optional conversation-insight and content-screening features. Text sent for analysis is not used to train third-party models.
• Email delivery for account and safety messages.

We may also disclose information where the law requires it, or to protect the safety of a member or the public.

Your display name, age, city or region, cultures, bio, photos, and public flags are visible to other signed-in members. Your saved preferences, your private "Looking for" list, your email address, and your exact birth details are never shown to other members.

Family Circle is optional. If you invite someone with an invite link, they join your circle only after signing in and opening that link. They can then see only the matches you deliberately share, and only a short summary of each one: first name, city or region, cultures, moon sign, photo-verified status, and any note you add. They never see your messages, your photos, your email address, or anyone's birth details. You can stop sharing a match, or remove a person from your circle, at any time from your Profile tab — removal takes effect immediately and deletes what was shared with them.

Our servers are in the United States. If you are in the EU, UK, or another region with transfer rules, we rely on Standard Contractual Clauses and equivalent safeguards with our processors.

We keep your profile while your account is active. When you delete your account we remove your profile, photos, and matches within 30 days, except records we must keep longer for tax, fraud, or safety reasons (typically up to 7 years for payment records, and a limited ban record where an account was removed for harming others).

• Delete everything yourself at any time: Profile tab, “Delete my account”. That erases your profile, photos, matches and messages permanently. To access, correct, or export your data, email support@tasaliapp.com and we respond within 30 days.
• Withdraw consent for astrology, AI insights, or marketing at any time.
• Object to or restrict certain processing, and lodge a complaint with your local data protection authority (EU/UK).
• California residents: request the categories and specific pieces of information we hold, request deletion or correction, and know that we do not sell or share personal information as those terms are defined by the CCPA/CPRA. We honour Global Privacy Control signals and will never discriminate against you for exercising a right.
• We do not use automated decision-making that has a legal effect on you; matching suggestions can always be changed by editing your preferences.

Tasali App is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, email support@tasaliapp.com and we will remove it promptly.

Data is encrypted in transit, photos are stored in a private bucket reachable only through short-lived signed links, and database access rules limit every record to the members entitled to see it. No system is perfect — if a breach affects you we will notify you without undue delay and the relevant regulator within 72 hours where the law requires it. Suspected security issues can be reported to security@tasaliapp.com.

We may disclose account information — including profile details, reports, moderation records, and message content where it is necessary — when we believe in good faith that the law requires it, or that it is needed to prevent imminent physical harm, investigate fraud, protect our rights, or respond to a valid legal process such as a subpoena, court order, or police request.

• We check that a request is valid and properly scoped before we answer it, and we give only the data the request covers.
• We tell you about a request for your data unless the law forbids it or telling you would put someone at risk.
• Apparent child sexual exploitation is reported to NCMEC and law enforcement, and the related account data is preserved for those reports.
• Reporting a member to us does not contact the police for you. In an emergency, call your local emergency number.

When a photo is reviewed, we keep only the outcome, the reason, and a one-way fingerprint of the image so the same rejected photo cannot be uploaded again — the rejected file itself is deleted immediately. Reports, blocks, safety notes, support messages, and staff actions are logged so we can investigate patterns, answer appeals, and show regulators how we act. These records are visible only to the Tasali App team, are kept for up to two years (longer where an investigation or the law requires it), and survive account deletion in the minimum form needed to keep removed members from returning.

We will post any update here and notify you of material changes. Questions or requests: support@tasaliapp.com, or Tasali App LLC, Yuba City, California, USA.