Privacy Policy · Life Path Key

This Privacy Policy explains how Life Path Key ("we", "us", or "our") collects and uses information when you visit or use the Life Path Key website at lifepathkey.com and its life path number calculator (the "Service"). It says what we collect, why, who receives it, how long we keep it and what you can do about it.

In short: the calculator works in your browser and does not send us your date of birth. If you create an account, we keep your email address and, when you save your chart, your full name at birth and your date of birth, encrypted. Payments go through Stripe; we never see your card number. Our AI provider receives only numbers for the texts of your chart; for the chat, also your question without contact details and up to 3 previous exchanges; never your name or date of birth. We do not sell your information or use it for ads. See Your Date of Birth and Name.

Who We Are

Life Path Key is operated by Zorka Apps Limited, No. 5, 17/F, Strand 50, 50 Bonham Strand, Sheung Wan, Hong Kong, which decides how your information is used. Contact: [email protected].

1. Information We Collect

Technical data: every request to the Service passes through our network provider and reaches our server, which see your IP address and request details in order to deliver the page. To limit abuse of our two data endpoints (analytics events and error reports), our server counts requests per address for one hour, in memory only and as a salted hash, never in readable form. Our own application does not keep request logs. Cloudflare, which every request passes through, processes your IP address (see Who Receives Information).
Error reports: when something fails in your browser, the type of error, for programming errors a short message with every number, month name, address and identifier removed, where in our code it happened, the kind of page and the release of the site. See Cookies and Analytics.
Product analytics, only with your consent: a few fixed codes about using the calculator and the steps to your full chart, and through Google Analytics the pages you open. See Cookies and Analytics.
Your account: your email address, how you sign in (an email code or Google), when the account was created, your sign-in sessions and the browsers you signed in from, stored only as hashes of random values, without your IP address or browser details, and the language you use the site in, so that we email you in that language. See Your Account.
Your chart, if you save it: your full name at birth, your date of birth, your time zone and the numbers calculated from them. See Your Date of Birth and Name.
Comparisons: another person's date of birth and an optional label. See Other People's Data.
Subscription: your Stripe customer and subscription identifiers, the status and dates of your subscription and payments, and keyed hashes of your email address and of a card identifier from Stripe, used to allow one free trial and one first-payment refund and to stop new subscriptions after a dispute. Stripe, not Life Path Key, collects your card details.
Questions to the AI numerologist and its answers. See AI-Written Texts and Chat.
Your messages: if you write to us, your email address and what you write.

The calculator needs no name, email address or account. We create an account only when you sign in, and we do not ask for your location.

2. Your Account

Signing in. You enter your email address and we email you a one-time code, valid for 10 minutes. We store the code only as a keyed hash, together with a keyed hash of your email address, and delete it once it is used; codes that expired are deleted within 2 days. Your account is created when you first enter a correct code.

Continue with Google. If you choose it, you sign in on Google's page. We ask Google only for your email address: Google tells us the address, whether Google has verified it, and an identifier of your Google account, which we store only as a keyed hash to recognize you next time. We do not receive your name, photo or contacts, and we keep no Google tokens. If an account with the same email address already exists, Google is linked to it only when Google manages that address (for example a Gmail address), and we email you when a sign-in method is added to or removed from your account.

Sessions and browsers. A cookie keeps you signed in; we keep only a hash of its value, and the session ends after 30 days without a visit or when you sign out. A second cookie remembers that this browser has signed in to your account, so that someone else's failed attempts with your email address do not lock you out; we keep only its hash, for 180 days after your last sign-in. We store no IP address or browser details with either.

Account emails. We email you sign-in codes and a code to confirm deleting your account, a notice when a sign-in method is added or removed, and emails about your subscription: when your trial starts, a reminder before the first charge, when a card that already had a trial is used again, and when a payment needs your action or did not go through. These emails are part of the Service, not marketing.

3. Your Date of Birth and Name

In the calculator: your browser only. The month, day and year you enter in the calculator are used only by the calculator running in your browser to work out your life path number and show how it was calculated. They are not sent to our server or to anyone else, and we do not store them, unless you save your chart to an account (below).

The date never appears in the address of the page, so it is not saved in your browser history, shared links or our network provider's records;
it is not part of any analytics event or error report;
the calculator keeps it in no cookie or browser storage: reloading or leaving the page clears it.

While you build your full chart. You add your full name at birth. Until you sign in, your name and date stay only in this browser tab (its session storage), so that they survive signing in; they are cleared once your chart is saved, when you sign out, or when you close the tab.

Saved to your account. When you save your chart, your browser sends your full name at birth, your date of birth and your time zone to our server. We store the name and the date encrypted (AES-256-GCM), with the keys kept outside the database. The time zone, such as America/New_York, comes from your browser and is used to work out "today" for your personal day and year. From the name and the date we calculate your numbers and store them with your account, so that your chart opens without calculating again; if we change how a number is calculated, we recalculate it from the saved name and date. We use your name and date only to show your chart and your comparisons, never for ads or analytics, and they never appear in a page address, an analytics event, an error report or our logs. Our AI provider receives only the numbers, never the name or the date (see AI-Written Texts and Chat).

How long. Until you delete your profile or your account. In your account you can download them with the rest of your account data, or delete your account (see Your Choices and Rights).

4. Other People's Data

To compare numbers, you enter another person's date of birth and, if you like, a label such as their first name. The label only helps you tell comparisons apart and is not used in the calculation. We store the date and the label encrypted with that comparison and use them only to show it to you; the numbers compared are stored as plain numbers, and our AI provider receives only these pairs of numbers. The date and the label are not sent to anyone else.

This is information about someone else. Enter it only if you have the right to, for example when the person knows you use the Service and would expect it. A comparison is kept until you delete it, your profile or your account.

5. AI-Written Texts and Chat

What the AI receives. DeepInfra, Inc., in the United States, runs the AI models that write the overview of your chart, the story of your personal year, the text about a comparison and the answers in the chat. For these texts it receives the numbers of your chart, or the pairs of numbers of a comparison, the language and the kind of text. It never receives your name, your date of birth, the other person's date or label, your email address or your account identifier.

Chat questions. For an answer, DeepInfra also receives your question and up to the last 3 exchanges of the chat. Before a question leaves our server, we remove email addresses, phone numbers, links, handles, dates, years of birth and the parts of your name. Please do not put contact details or other people's private information in a question anyway.

According to DeepInfra's data privacy documentation, it holds the data it receives in memory while processing, does not store it on disk, deletes it once processing is complete, does not log the content of requests and does not use it to train models.

What we keep. Your questions and the answers are stored encrypted and deleted automatically 30 days after they were written; a question that could not be answered is not saved. The other AI texts are stored by their numbers only, with no link to you, and are shown to everyone with the same numbers. For each AI request we keep a cost record (the model, the number of tokens, the cost and the time) without any text, for 13 months. We do not use your questions or your chart to train AI models.

6. How We Use Information

To deliver the Service and protect it against abuse;
To find and fix errors;
With your consent, to understand how the calculator and the steps to the full chart are used;
To keep your account, sign you in and send account emails;
To save and show your chart and comparisons;
To bill the subscription, allow one free trial and one first-payment refund, and handle refunds and disputes;
To write the AI texts and answer your questions;
To answer your messages and requests; and
To meet legal obligations.

We do not use your information for advertising or sell it, and we make no decisions about you with legal or similarly significant effects.

7. Legal Bases

Where the GDPR or UK GDPR applies, we rely on our contract with you to provide your account, your chart and the subscription; on our legitimate interests to deliver and secure the Service, for error reports without personal content, and to prevent abuse of the free trial, refunds and payments; on your consent for product analytics; and on legal obligations where the law requires us to keep or disclose information.

8. Who Receives Information

Cloudflare (network and security): sits in front of the site, so it handles your IP address and all traffic to us.
Our hosting provider, whose server in the United States runs the Service and stores our database.
PostHog, Inc. (US Cloud; error reports and, with your consent, product analytics): receives them from our server, never from your browser, without your IP address, email address, name or date of birth.
Google LLC (Google Analytics 4, only with your consent): receives directly from your browser your IP address, which every request to Google carries, your browser and device details, a random identifier from its cookies, the page addresses of our public pages you open, without anything after them (for example lifepathkey.com/en/life-path-calculator/ or the meaning page of a number), and the fact that a calculation finished. Never your date of birth or any text you typed. Personal pages, such as sign-in, your account or your chart, reach Google only as one address, lifepathkey.com/en/private/, never with their content. Google also learns, by name only, that the unlock button was pressed, that the name step was completed and that the offer was shown; never which number, name or offer, and nothing from or after the payment.
Our email provider (Zoho): sends sign-in codes and account emails, so it receives your email address and the content of each email, and holds the messages you send us.
Stripe, Inc. and its affiliates (payments, subscribers only): receive your email address and, on Stripe's own checkout page, your card details, under Stripe's privacy policy. We receive from Stripe the status of your subscription and payments and an identifier of your card, which we store only as a keyed hash. When you delete your account, we delete your customer record at Stripe, unless a payment dispute is still open.
DeepInfra, Inc. (AI texts, subscribers only): the numbers of your chart and of your comparisons, and your chat questions cleaned as described in AI-Written Texts and Chat; never your name, date of birth or email address.
Google LLC ("Continue with Google", only if you use it): you sign in on Google's page, and we receive your email address, whether Google has verified it, and an account identifier.

We may also disclose information when the law requires it, to protect rights and safety, or to a successor if the Service is transferred; in that last case this policy keeps applying to what was collected under it. We do not sell personal information or share it for advertising.

9. How Long We Keep Information

Your date of birth in the calculator: not kept at all (see Your Date of Birth and Name).
Your account and subscription record: until you delete your account.
Your chart (profile) and comparisons: until you delete your profile or your account; a comparison also until you delete it.
Sign-in sessions: end after 30 days without a visit, or when you sign out.
Sign-in codes: until used, at most 10 minutes; expired codes are deleted within 2 days.
Browsers you signed in from: 180 days after your last sign-in, and at once when you delete your account.
Your Google link: until you delete your account.
Trial, refund and dispute markers: the keyed hashes of an email address and of a card, and whether a trial, a first-payment refund or a dispute is linked to them, are kept for 730 days, also after you delete your account. They contain no readable email address or card number.
Payment events and billing tasks: the identifier and type of each event Stripe sends us, without its content, 13 months; finished billing tasks, which hold only Stripe identifiers, 90 days.
Payment records at Stripe: as long as tax and accounting law requires.
Daily counters: how many questions you asked and comparisons you made today (UTC), deleted automatically within 2 days.
Chat: 30 days after each message was written.
AI texts stored by numbers: with no link to you; texts written for an older version of our instructions are deleted after 30 days.
AI cost records: without any text, and no longer linked to you once you delete your account; deleted automatically 13 months after the request.
Database copies: every night we make an encrypted copy of the database and store it with Cloudflare (R2 storage, North America). We keep each nightly copy for 30 days and the first copy of each month for 12 months, and older copies are deleted automatically. Before each release of the Service we also make an encrypted copy on our server: at each release we delete copies older than 3 days and keep at most the 3 newest. Data you delete can remain in a copy until that copy is deleted.
Abuse counters: one hour, in memory.
Sign-in limits: counters of sign-in attempts and emails in our Redis store, keyed by keyed hashes of your IP address and your email address, per hour and per day; deleted automatically within 2 days.
Error reports and analytics events: kept by PostHog for one year, then deleted in its monthly cleanup (so some last up to about 13 months); we keep no copy.
Google Analytics: Google keeps event-level data for 2 months, the period set in our property, then deletes it; reports built from it hold totals, not you.
Your analytics choice: the lpk_consent cookie, 180 days, then we ask again.
Your light or dark theme: in your browser's local storage until you clear it.
Your messages: in our mailbox until we delete them; there is no automatic deletion period.

10. Your Choices and Rights

Depending on where you live, you may have the right to access your information, correct it, delete it, receive a copy of it, object to or restrict its processing, and withdraw consent at any time. You may also complain to your local data protection authority. We do not treat you differently for using these rights.

Analytics: change or withdraw your choice with "Privacy settings" at the bottom of every page, or in Your Privacy Choices.
A copy of your data: "Download my data" in your account gives you a file with your account (email address and sign-in methods), your profile, your comparisons, your chat of the last 30 days and your subscription status.
Deleting your account: in your account, confirmed with a code we email you. It first cancels your subscription, with no further charges, and then deletes your account, chart, comparisons, chat, sessions and signed-in browsers at once. What stays: payment records at Stripe, the keyed hashes that allow one trial and one refund (730 days), AI cost records without a link to you, database copies until they are deleted (nightly copies after 30 days, monthly copies after 12 months) (see How Long We Keep Information). This cannot be undone.
Anything else, including a correction: write to [email protected].

We reply within 30 days. We may need to confirm that a request is yours, for example by asking you to write from the email address of your account. If you use only the calculator, we hold no account, name or date of birth for you, so in most cases there is nothing about you to find.

11. Cookies and Analytics

Necessary. These keep the Service working and need no consent:

lpk_consent: remembers your analytics choice, 180 days;
__Host-lpk_session: keeps you signed in, 30 days from your last visit;
__Host-lpk_login: ties a sign-in code to this browser, 10 minutes;
__Host-lpk_device: remembers that this browser signed in to your account, 180 days from your last sign-in;
__Host-lpk_google: protects a Google sign-in against forgery, 10 minutes;
lpk_pending_chart: your name and date of birth in this tab's session storage until your chart is saved;
lpk-theme: your light or dark preference, kept in your browser's local storage;
security cookies that Cloudflare may set, and, on Stripe's checkout and portal pages, Stripe's own cookies.

Error reports. When something fails in your browser, it sends a short report to our server, which may forward it to PostHog as a necessary part of running the Service. A report contains the type of error, for programming errors a short message in which every number, month name, web address and identifier is replaced, where in our code it happened, the kind of page, the release and a random identifier that does not follow you. It contains no IP address, location, date of birth, page address or text you typed, and there is no session recording.

Product analytics, only with your consent. If you allow analytics in our cookie card, your browser tells our server when you start using the calculator form and when a number is shown (the calculation method and that number); when you press the button to unlock your full chart (with the number shown); when you complete the name step (never the name); when the offer is shown (which offer and whether it has a free trial); when you open your full chart. Our server itself notes when an account is created (and whether it was a test); when a checkout is opened (the offer, the currency and whether it was a test, never a Stripe identifier or a price); when a chat question is answered (only how many questions are left today, never the question); when a comparison is saved (never the other date or its label), and only for a request from a browser that allowed analytics under this text; a yes given when the card spoke only of the calculator does not count, and we ask again. Our server forwards each of these events to PostHog with only these fields: a random event identifier, the page (for example the calculator page), the language, the kind of page and what is named above, plus the release of the site. Every event has its own random identifier and carries no account identifier or email address. We do not link events to each other, to your account or to you, and our server records the time of the events it reports only to the hour, not the moment your account, checkout or comparison was saved. These PostHog events never include your name, your date of birth or any part of it, your other numbers, a price, a chat question, your IP address, the page address, your browser details or cookie identifiers, and PostHog's location lookup is switched off. Payments, renewals and refunds are not analytics events. We ask first everywhere, and a Global Privacy Control or Do Not Track signal keeps analytics off. If you withdraw your consent, collection stops at once; events already sent stay with PostHog for up to one year (about 13 months at most, because PostHog deletes old events once a month).

Google Analytics, only with your consent. If you allow analytics, your browser also loads a script from Google and sends Google Analytics 4 (Google LLC) the pages you open and the fact that a calculation finished. Google receives your IP address, which every request to it carries, and your browser and device details. It sets the cookies _ga and _ga_*, which hold a random identifier and last up to 2 years. We send it the page addresses of our public pages, with anything after them removed, our site's name as the page title, and no referrer, never your date of birth or text you typed. If you open a number's meaning page after a calculation, Google sees that page like any other visit. Google's advertising storage, ad personalization and Google Signals stay off: we use Google Analytics only to measure the site, not for ads. Before you choose, and with a Global Privacy Control or Do Not Track signal, the script is never loaded. If you withdraw your consent, nothing more is sent and these cookies are deleted; Google keeps what it already received for 2 months. Google also learns, by name only, that the unlock button was pressed, that the name step was completed and that the offer was shown; never which number, name or offer, and nothing from or after the payment.

We use no advertising cookies, no advertising measurement and no session recording.

12. Age

Life Path Key is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided personal information to the Service, contact [email protected].

13. Security

Traffic to the site is encrypted. Names and dates of birth, the data of comparisons and chat messages are encrypted in our database, database copies are encrypted, our logs leave out email addresses, names, dates, codes, chat text and cookies, and our application keeps no request logs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14. International Transfers

Zorka Apps Limited is in Hong Kong. Our server is in the United States, and our providers, including Stripe and DeepInfra, may process information outside your country, including in the United States, where data protection law may differ from yours.

15. Not Professional Advice

Life Path Key results and texts, including texts written with AI, are provided for entertainment and self-reflection only. They do not predict your fate or future and are not medical, legal, financial or psychological advice. The Terms of Service say more.

16. Changes to This Policy

We may update this Privacy Policy as the Service changes. We will publish the updated version here with a revised effective date. If a change materially affects how we use personal information, we may provide additional notice where appropriate.

17. Contact

Questions and requests about privacy: [email protected]. We reply within 30 days. See also Contact.