Privacy Policy

Fired — The Cosmic Background Check ("Fired", "the app") is operated by PRETTY GOOD - FZCO, Dubai, United Arab Emirates. This policy explains what we collect, how we use it, and how to reach us with privacy questions.

Information we collect

Depending on how you use the app, we may collect:

Account details you provide, such as your email address.
If you choose Google Sign-In, Google's iOS sign-in service may process your account identifier and network IP address. Google may use the IP address to estimate the device's general location for fraud prevention. Fired does not request device location and does not use this information for advertising or tracking.
If you use Sign in with Apple, an Apple refresh credential stored only in encrypted form in a backend-only token vault. It is used only to validate the Apple link, respond to Apple account events, and remove Apple access when you delete your Fired account; it is never stored in plaintext.
Profile names or aliases you enter for yourself and subjects, and an optional writing-pronoun preference (she/her, he/him, or they/them) where you choose to provide it. This preference affects wording only and is never used as analytical input.
Your own birth details (date, time, and place of birth), if you enter them for pair readings.
Birth details of the subjects you add — the people you choose to run readings on. A selected birth city is resolved to coordinates and a time zone for profile calculation; Fired does not request device location.
An optional memo you attach to a reading, including any context or questions you choose to type.
Reading requests, generated text, and generated narration audio.
Content reports you submit, including the selected reason and related reading identifiers, title, profile names or aliases shown in the reading, language, and any optional message.
Purchase and delivery information from Apple's App Store billing system.
Basic technical logs needed to operate, secure, and troubleshoot the service.

How we use information

To generate and deliver your Gene Keys work-compatibility readings. Profile names or aliases, birth details, an optional writing-pronoun preference, and derived profile data are processed by AI systems to produce the reading text and narration. The preference affects wording only and is never used as analytical input.
To store and retrieve the subjects and readings associated with your account.
To review content reports for safety, quality, and service moderation.
To process purchases and confirm access to paid readings.
To respond to support, privacy, and technical requests.
To improve stability, reliability, and fraud prevention.

Subjects' data and what readings are

Information you enter about another person (a "subject") is processed only to provide the readings you request and keep that subject available in your account library for those readings. We do not use it to build an outside factual or behavioral dossier, do not combine it with outside data sources about that person, and do not share it with anyone for their own purposes.

Readings are AI-generated symbolic, conditional hypotheses derived from birth-data calculations in a Gene Keys profile framework. They are not factual statements, professional assessments, or evidence about any real person. Fired is not a consumer reporting agency, its readings are not "consumer reports" under the U.S. Fair Credit Reporting Act (FCRA) or any similar law, and they must never be used, in whole or in part, as any basis for employment, credit, insurance, housing, or another high-impact eligibility decision regulated by consumer-reporting or background-check laws.

How information is handled

Some data may be stored locally on your device, and some is processed by our backend infrastructure and service providers to generate readings and narration or to validate purchases. We do not sell your personal data.

Before a dossier is generated, Fired asks for your explicit permission to share the submitted profile names or aliases, birth details, optional writing-pronoun preference, derived profile data, and optional memo with third-party AI providers. The finished reading text — which may include profile names or aliases and whose wording may reflect the optional writing-pronoun preference — is shared with the selected text-to-speech provider. The preference is used only to word generated text, never as analytical input. You can withdraw that permission in the app under Settings > AI Data Permission. Withdrawing permission prevents new dossiers from being generated until you grant it again.

We limit access to personal information to the people and systems needed to operate the app and support users.

Third-party service providers

We use service providers to operate the app. Their role depends on the feature you choose:

Supabase — account storage, authentication, and the reading and content-report database.
Apple and Google — optional identity providers. If you choose one of these sign-in methods, that provider authenticates the sign-in and returns an authentication credential to the app and Supabase. Google states that its iOS sign-in SDK may process a user identifier to record the OAuth authorization and an IP address to estimate general device location for fraud prevention. Fired configures Google Sign-In only for identity and email, does not request device location, and does not use sign-in data for advertising or tracking. Each provider handles its part of the sign-in under its own privacy policy.
Fly.io — backend hosting for the reading engine.
OpenRouter (and its model-hosting subprocessors), DeepSeek, Anthropic, and OpenAI — the active language-model route receives submitted profile names or aliases, birth details, an optional writing-pronoun preference, derived profile data, and the optional memo to generate reading text. The preference affects wording only and is never used as analytical input. Only the providers needed for a dossier and its configured fallbacks receive it.
MiniMax, Inworld AI, and Replicate — the active text-to-speech route receives the finished reading text, which may include profile names or aliases and whose wording may reflect the optional writing-pronoun preference, to generate narrated audio. Only the providers needed for that narration receive it.
Geoapify — primary city autocomplete and location metadata for birth places.
Google Places API — fallback city autocomplete and location metadata when the primary service cannot answer.
Open-Meteo — final fallback city search when the configured location services are unavailable.
Apple App Store — one-time purchase processing.
RevenueCat — purchase validation, delivery reconciliation, and deletion of the corresponding processor customer after you delete your Fired account.
Netlify — hosting for this website.

We do not sell your personal data and do not share it with third parties for their own advertising or marketing.

We require every service provider that receives personal information from Fired to use it only to provide its contracted service and to protect it with safeguards that are the same as or equivalent to the protections described in this policy and required by applicable law.

Data retention

Account, reading, and content-report data is retained while your account is active. If you complete deletion inside the app, the success confirmation means your Fired authentication account, associated birth details (yours and your subjects'), generated readings, narration files, and submitted content reports from our active backend systems have been removed. Email-assisted requests are completed within 30 days after we verify the request.

Deleting your Fired account does not wait for RevenueCat to be available. Before removing the authentication account, our backend temporarily records the same random account UUID needed to delete the corresponding RevenueCat customer. It stores no email address, birth data, profile, dossier, narration, purchase receipt, or provider response in that cleanup queue. The task becomes eligible only after the Fired authentication account is gone, retries privately if RevenueCat is unavailable, and is erased when RevenueCat accepts or completes the cleanup, or reports that no customer remains. If Fired account deletion does not complete and the account remains active, the unused prepared UUID becomes eligible for removal after 24 hours and is discarded when the cleanup worker next runs; RevenueCat is never instructed to delete that active customer.

Basic operational logs (error and access logs) may be retained for limited, provider-dependent periods for security and troubleshooting. They expire or are rotated under the relevant provider and service-plan configuration; the exact period varies by service.

Purchase receipts and billing records may be retained longer where required by tax, accounting, or audit obligations. When a consumable reading purchase is delivered, Fired also creates keyed one-way fingerprints of its App Store transaction identifiers. After account deletion, those fingerprints contain no account ID, raw transaction identifier, birth data, profile data, reading, or narration. They are retained for the operational life of Fired solely to prevent the same one-time purchase from being redeemed more than once.

Your choices and rights

You can delete your account and associated app data inside the app from Settings > Account > Delete Account & Data, or contact us to request help with access, correction, or deletion.

If you cannot access the app, use the account deletion page or email us and include the email address used with the app.

For an account linked to Sign in with Apple, the backend normally uses the encrypted Apple credential in its private token vault and may request a fresh, single-use authorization as a fallback. It verifies Apple's signature, issuer, audience, and linked identity before using a fresh authorization. Any credential returned by that fresh confirmation is held only in memory for the current deletion request and is not written to the token vault. Fired attempts to remove Apple access automatically. If Apple verification or revocation is unavailable after deletion begins, your Fired account and app data are still deleted, and the app tells you that one manual Apple step remains: remove Fired in your Apple Account settings. The token-vault entry is wiped as part of the deletion process.

Children

Fired is intended only for users aged 18 and older. The app is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

GDPR (EU / EEA / UK)

If you are in the EU, EEA, or UK, the General Data Protection Regulation gives you the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate personal data.
Erasure — request deletion of your personal data.
Restriction — limit how we process your personal data.
Portability — receive your personal data in a machine-readable format.
Objection — object to specific processing activities.
Lodge a complaint with your local data protection authority.

Our legal basis for processing is contract performance (to deliver the reading service you requested), legitimate interests (to secure and improve the service), and consent where required. To exercise any of these rights, email support@work-compatibility-astro.help.

CCPA / CPRA (California)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following rights:

Right to know what personal information we collect and how we use it.
Right to request deletion of your personal information.
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of personal information.
Right to non-discrimination for exercising these rights.

We do not sell personal information and do not share it for cross-context behavioral advertising. To exercise your rights, email support@work-compatibility-astro.help.

Changes to this policy

If we materially change this policy, we will update the effective date at the top of the page and, where appropriate, notify users inside the app or by email.

Contact

Privacy questions and requests: support@work-compatibility-astro.help

Operator: PRETTY GOOD - FZCO, Dubai, United Arab Emirates.