HORA · AI Astrologer

Privacy Policy

Effective Date: October 14, 2026

1. Introduction

This Privacy Policy describes how MC Intelligence Co., Ltd. ("we", "our", or "us") collects, uses, and protects information in connection with HORA · AI Astrologer ("the App"). HORA is an AI-assisted astrology and character-reading app based on Thai astrology, physiognomy (face reading), and palmistry. The App is available on Android (via Google Play) and iOS (via the Apple App Store); some data practices differ by platform, and where they do this policy states which platform they apply to. By using the App, you agree to the practices described in this policy.

Entertainment only. HORA is provided for entertainment and personal-interest purposes. Its readings are a matter of personal belief and must not be used as a basis for medical, financial, legal, investment, or other important decisions. See our License Agreement for full terms.

2. Information We Collect

2a. Information You Provide (stored on your device)

To generate a reading, you create one or more profiles inside the App. For each profile you may provide:

  • A name or nickname of your choosing (it does not have to be a real name)
  • Birth details — date, time (optional), and place of birth — used to calculate the astrological chart
  • Optional photographs of a face and/or palm, if you choose to use the face-reading or palm-reading features
  • The questions and messages you type when chatting with the AI

This profile information — including any photos, the AI's readings, and your chat history — is stored locally on your device. It is not tied to your login account and is not permanently stored on our servers (see Section 3 for how it is processed).

2b. Photographs & Sensitive Data (Face & Palm Reading)

The face-reading and palm-reading features are optional and only run after you tap the relevant button and accept an in-app notice. When you use them, you either take a new photo with your device's camera or pick an existing photo — in both cases through your device's own system picker. The App itself does not hold a camera permission and cannot access your camera or photo library in the background; a photo reaches the App only when you deliberately choose it.

A facial image may be considered sensitive personal data under Thailand's PDPA and similar laws. We want to be clear about how we handle it:

  • The photo is sent to an AI service once, in order to produce a text description ("observation") of general features for the reading.
  • We do not use facial images for identification, biometric matching, face recognition, or to build any biometric template.
  • The photo is not stored on our servers. The photo and the resulting observation are kept only on your device, inside the profile, and you can delete them at any time.
  • Please only upload a photo of a person's face or palm if you are that person or you have their consent.

2c. Permissions

The App requests a minimal set of permissions on both Android and iOS:

  • Internet / network access — required to communicate with our servers and AI services.

The App does not request microphone, precise-location, contacts, or standalone camera permissions on either platform. Taking or choosing a photo is handled by your device's own system camera/gallery picker (the Android photo picker or the iOS photo picker), which returns only the single image you select. On iOS, the App does not use the App Tracking Transparency framework and does not request permission to track you across other apps or websites.

2d. Automatically Collected Information

We may collect the following to keep the App stable and improve it:

  • Device information (model, OS version, screen resolution)
  • Crash logs and performance diagnostics
  • Anonymised usage analytics

This data is anonymised and not linked to your personal identity.

2e. Account Information (Sign in with Google or Apple)

Signing in is optional — you can use the App as a guest. You may sign in with Google (Android and iOS) or with Apple (iOS). Depending on the method you choose, we receive the following and use it to create and secure your account with us:

  • Your email address. If you use Sign in with Apple, you may choose to hide your address, in which case Apple provides an anonymised private-relay address (@privaterelay.appleid.com) that forwards to your real inbox — we only ever receive the relay address.
  • With Sign in with Google only: your display name and profile picture (shown in the App so you can confirm which account is active).
  • A stable account identifier issued by Google or Apple for your account.

This information is contained in a signed token issued by Google or Apple, which the App sends to our servers to verify your identity. We use it to link your Coin balance, membership status, day passes, and redeemed rewards to your account (so they survive reinstalls and transfer across your devices) and to prevent fraud and abuse. To keep the data we hold to a minimum, our account records are keyed on the Google/Apple account identifier; any display name or profile picture is shown inside the App only and is not used to build a profile of you. You can sign out at any time to return to guest mode. Note that your astrology profiles, photos, and chat history remain on your device and are not uploaded when you sign in.

2f. Purchase & Refund Audit Data

When you buy Coins, a day pass, or a membership through Google Play (Android) or the Apple App Store (iOS) — an in-app purchase — we record purchase and usage metadata that is required to operate the store and to respond to the store's purchase-refund review process. This includes:

  • The store order / transaction ID and purchase receipt issued by Google or Apple for your transaction (on iOS this is Apple's signed StoreKit transaction identifier)
  • Your IP address and an approximate region (country / region code derived from that IP — not precise GPS location) at the time you buy or spend Coins
  • A timestamped record of when Coins or a day-pass question were spent and on which feature

We collect this only for legitimate purposes: to verify purchases, prevent fraud and abuse, and provide the evidence the store requires when reviewing a refund request. We do not receive or store your card or payment-instrument details — those are handled entirely by Google Play or the Apple App Store. We derive the approximate region from your IP address using a geolocation database (see Section 8); we do not collect or store your precise (GPS) location for this purpose.

2g. Device & App Integrity

To protect against fraud, bots, and abuse of free and promotional features, the App uses each platform's app-integrity service to obtain a signed attestation that helps us confirm requests come from a genuine installation of the App on a genuine device: the Google Play Integrity API on Android and Apple's App Attest (backed by the device's Secure Enclave) on iOS. We also use a non-reversible, hashed device identifier to enforce fair-use limits (for example, one free question per day). These signals are used for security and abuse-prevention only and do not identify you or track you across other apps.

3. How Data Flows in Each Mode

HORA offers several usage modes. In every mode, the astrological calculation and the AI reading are produced on demand and the content you send (birth details, photos, questions) is processed transiently — it is used to answer your request and is not permanently stored on our servers.

3a. Free Mode

Free Mode works differently on each platform:

  • Android. Your request (birth details and/or question) is sent from the App through MC Intelligence's secure servers to a cloud AI service to generate a lightweight reading. We process it in real time to answer you and do not permanently store its content. Free Mode is limited (for example, a set number of readings per day) and is ad-supported (see Section 5).
  • iOS. The free reading is assembled from a built-in Thai astrology text library included in the App, not from a cloud AI service. Your birth details are still sent to our servers to calculate the astrological chart, but they are processed transiently to answer your request and are not permanently stored. The current iOS version shows no advertisements (see Section 5).

3b. Economy & Coins Modes

These paid modes send your request from the App through our secure servers to a cloud AI service (such as Google Vertex AI / Gemini and comparable providers) to generate a fuller reading. Our servers forward the content in real time solely to process your request and calculate usage-based Coin billing; we do not permanently store the content of your chart requests, photos, or conversations. The AI provider processes your data under its own terms — for Google Cloud, see Google Cloud's Privacy Notice.

3c. Your Key (BYOK) Mode

Your Key (BYOK) Mode lets you route the app's AI computation to your own account with a third-party AI provider (e.g., OpenAI, Google, Anthropic). The key you enter is a credential for a service you have independently signed up for and pay for directly; all AI-compute charges are billed by that provider to you. This key does not unlock any premium content or features of the App and is not a substitute for a purchase. Premium features are unlocked only through in-app purchases (Coins or membership) processed by the app store. BYOK simply determines who pays for the AI compute on a given request — it never changes what the App unlocks. Our Coins are an in-app consumable processed by the store; they are not a cryptocurrency and cannot be exchanged for, or funded by, any external API key.

Your key is stored locally on your device only and is not shared with any third party other than the provider you direct requests to. You are subject to your chosen provider's terms and privacy policy.

3d. Face & Palm Reading

When you use a face- or palm-reading feature, the selected image is sent (as described in 3a/3b, or 3c if you use your own key) to a cloud AI service once to produce a text observation for the profile. The image is not retained by our servers; the image and the observation are stored on your device only.

3e. Your Permission for Third-Party AI Processing

Before any of your personal data is sent to a third-party AI service, the App asks for your explicit permission in its consent screen. The data concerned is: your birth details (date, time, and place of birth), the questions and messages you type, the life events you enter for birth-time rectification, and any face or palm photos you choose. It is sent through our servers to Google Cloud (Vertex AI) — or, in Your Key (BYOK) Mode, to the provider you choose — only to generate the reading or answer you request.

You can withdraw this permission at any time in Settings → AI data processing. After you withdraw it, nothing more is sent to third-party AI services and features that require AI are paused; features that do not use a third-party AI service (such as the chart calculation and the free birth-time finder) remain available. You can grant permission again at any time.

4. How We Use Information

We use the information we collect to:

  • Calculate charts and generate the readings and chat responses you request
  • Provide and improve the App's features, stability, and performance
  • Maintain your Coin balance, membership status, and redeemed rewards (for signed-in accounts)
  • Respond to your support requests
  • Analyse anonymised usage patterns to improve user experience
  • Display advertisements (Android free users only — see Section 5)
  • Process purchases, prevent fraud and abuse, and respond to Google Play's / the Apple App Store's refund-review process (see Section 2f)
  • Comply with applicable laws and regulations

5. Advertising

5a. Android

On Android, the App displays advertisements to free users via Google AdMob. AdMob may collect certain information to serve and personalise ads, including:

  • Advertising ID (resettable device identifier)
  • Device information (model, OS version)
  • General location (IP-based, not precise GPS)
  • App usage data related to ad interactions

You can opt out of personalised ads in your device settings under Settings → Google → Ads. AdMob's data practices are governed by Google's Privacy Policy. Premium members do not see advertisements, except where a limited-time promotional reward explicitly includes ad breaks.

5b. iOS

The current iOS version of the App does not display advertisements and does not use Apple's advertising identifier (IDFA) or the App Tracking Transparency framework. We do not track you across other companies' apps or websites, and we do not share data with advertising networks on iOS.

A future iOS version may introduce advertising. If it does, we will update this policy and the App's App Store privacy disclosures beforehand, and any use of the advertising identifier will occur only after you grant permission through Apple's App Tracking Transparency prompt.

6. Data Storage & Security

Your astrology profiles, photos, AI readings, chat history, and any AI key you enter are stored locally on your device using the operating system's app storage (encrypted where the platform supports it). Your Coin balance, day-pass and membership status, and redeemed rewards are maintained on our servers: if you sign in with Google or Apple they are linked to your account; otherwise they are linked to your device. Either way they survive reinstalls and cannot be tampered with on the device. We implement industry-standard security practices to protect data processed by the App.

7. Data Retention & Deletion

Data stored locally on your device. You have full control over it:

  • Profiles, photos & readings — You can delete an individual profile (with its photos, readings, and chats) from within the App.
  • Chat history — You can delete individual conversations from within the App.
  • All app data — On Android you can clear all local data via Settings → Apps → HORA → Storage → Clear Data, or by uninstalling the App. On iOS, uninstalling the App removes its local data.

Data stored on our servers. If you sign in with Google or Apple, we keep your account record (the Google/Apple account identifier, and the email — or Apple private-relay address — received at sign-in), Coin/reward balances, day-pass and membership status for as long as your account is active. You can delete your account at any time — see Section 10.

Records we are required to keep. Even after you delete your account, we retain records of your purchases and payments — such as order identifiers, purchase tokens, and Coin-transaction ledgers — for at least five (5) years. We are required to keep these under Thai law, including the Revenue Code (Section 87/3) and the Accounting Act B.E. 2543 (2000). These records are kept solely for tax, accounting, and fraud-prevention purposes and are not used to profile you. This is a lawful exception to erasure recognised under Thailand's PDPA and comparable laws (e.g. GDPR Article 17(3)(b)).

Anonymised crash logs and analytics retained on our analytics provider are automatically deleted after 14 months.

8. Third-Party Services

The App may interact with the following third-party services:

  • Google Play (Android) — App distribution and in-app purchases. Subject to Google's Privacy Policy.
  • Apple App Store / StoreKit (iOS) — App distribution and in-app purchases, and Sign in with Apple. Subject to Apple's Privacy Policy.
  • Google Cloud APIs (Vertex AI / Gemini) — Used in paid modes to generate readings and analyse photos. Subject to Google Cloud's Privacy Notice.
  • Google AdMob (Android only) — Advertising for free users. See Section 5. The current iOS version does not use AdMob.
  • App-integrity services — Google Play Integrity API (Android) and Apple App Attest (iOS) for abuse prevention. See Section 2g.
  • Third-party AI providers — In Your Key (BYOK) Mode, your chosen provider's terms apply.
  • Geolocation databases (MaxMind GeoLite2 & ipinfo.io) — Used on our servers to translate an IP address into an approximate country/region code for the purchase & refund audit trail (Section 2f). This lookup happens on our servers. GeoLite2 data is created by MaxMind; fallback lookups use ipinfo.io.

We share user data with these third parties only as described in this policy and only to provide the App's features. We confirm that each third party with which we share user data — including the AI service that processes your requests — is bound by contractual terms and its own privacy and security commitments that provide the same or equal protection of user data as stated in this Privacy Policy and as required by the Google Play and Apple App Store policies. Data sent to Google Cloud (Vertex AI) for processing is not used by us, and under Google Cloud's terms is not used by Google, to train AI models.

9. Age Requirement & Children's Privacy

The App is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

10. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable laws, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict or object to certain processing
  • Withdraw consent at any time

Deleting your account

If you signed in with Google or Apple, you can delete your account and its associated data at any time:

When you delete your account, it first enters a 30-day grace period during which it is suspended but can be restored simply by signing in again. If you do not restore it within 30 days, the account and its data are permanently deleted.

What is deleted: your account record (the Google/Apple account identifier and stored email or Apple private-relay address), Coin and reward balances, day-pass and membership linkage.

What is retained: records of your purchases and payments (order/transaction identifiers, purchase receipts, and Coin-transaction ledgers), which we are legally required to keep for at least five (5) years — see Section 7. If you have an active paid membership, please cancel it in Google Play (Android) or in your Apple ID subscription settings (iOS) before deleting your account. Your on-device profiles, photos, and chats are removed when you clear the App's data or uninstall it.

To exercise any of these rights, please contact us at support@mc-intelligence.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Effective Date" above and posting the revised policy at this URL.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

← Back to HORA 📜 License Agreement →