Privacy Policy

1. What we collect

• Account data: your email address (you sign in with email and a password, or a one-time email link).
• Profile data: your onboarding questionnaire answers (life stage, decision types, style preferences), which personalize your experience.
• Content data: the decisions, conversations, and reflections you record in the Service.
• Usage data: basic, privacy-friendly analytics (pages viewed, features used) without cross-site tracking.
• Payment data: payments are handled by our Merchant of Record, Paddle (Paddle.com Market Ltd). We never see or store your full card details. Paddle processes your payment information under its own privacy policy.

2. How we use your information

• To provide the Service: generating personalized decision guidance from your conversations and profile.
• To send you service emails (sign-in links, decision review reminders you scheduled).
• To improve the Service using aggregated, de-identified data.

We do not sell your personal data. We do not use your private conversations to advertise to you.

How Tzu remembers you

As you use AskTzu, Tzu writes short notes about your decision patterns and priorities (for example, "Weighs family stability above career speed") so later advice fits you better. Notes are generated automatically from your conversations and saved decisions. Tzu is instructed to leave out health, sexuality, religion, politics and ethnicity, and notes that look like a diagnosis are filtered out. Notes are visible only to you on the What Tzu knows page, where you can delete any note or all of them at any time. Deleting your account deletes them too.

3. AI processing and international transfers

As of this update, AskTzu uses the DeepSeek Open Platform API to generate replies. We send the text you submit, relevant conversation history, and profile details included in the mentor's prompt to DeepSeek. DeepSeek's Open Platform terms require developers to disclose their processing rules for end users and state that DeepSeek's public privacy policy does not cover personal data collected through downstream developer apps. AskTzu is responsible for explaining how we handle that data. Read the DeepSeek Open Platform Terms and DeepSeek Privacy Policy.

DeepSeek's published privacy policy says its services may process and store personal data in China and describes using data to improve its technology. That policy does not establish the exact retention or model-training terms for AskTzu's API account. We have not verified a separate no-retention or no-training commitment for that account, so we do not promise one. Please do not submit highly sensitive personal information.

4. Legal bases (GDPR)

• Performance of a contract (Art. 6(1)(b)): providing the Service you signed up for.
• Consent (Art. 6(1)(a)): optional personalization and product emails; you may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)): service security, abuse prevention, aggregate analytics.

5. Your rights

You may at any time: access your data; export your decision records (machine-readable format); correct inaccuracies; delete your account and associated personal data; object to or restrict processing; withdraw consent; lodge a complaint with your supervisory authority. To exercise any right, email support@asktzu.com — we respond within 30 days.

6. Retention

Account and content data are kept while your account is active. If you delete your account, personal data is deleted within 30 days, except where we must retain records by law (e.g., transaction records retained by our Merchant of Record).

Deleting your AskTzu account does not itself delete information already sent to DeepSeek. The provider's handling and retention follow its applicable API terms. We have not verified an account- specific deletion or retention commitment, so we cannot promise when provider-side copies are deleted.

7. Security

Website and API traffic is transmitted over HTTPS/TLS. Our database provider documents encryption at rest. This is not end-to-end encryption: AskTzu's server-side systems process account content to provide and support the Service. Access is controlled through authentication, database policies, and server-side credentials.

8. AI disclosure

The mentor you talk to is an artificial intelligence. Content it produces is generated automatically and may be inaccurate. It does not replace professional advice (see our Disclaimer).

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors; if we learn we have, we delete it.

10. Changes

We will notify material changes to this policy by email or a notice in the Service at least 14 days before they take effect.

11. Contact

Privacy questions: support@asktzu.com.