Back to Home

Privacy Notice

Definitions

  • Hint — Hint America Inc. ("we", "us" or "our")
  • Service — All features, readings, reports, courses and content available through Hint
  • Platform — Our website hint.app and related services, accessed in a browser on any device
  • User — Any person who accesses or uses the Platform ("you" or "your")
  • Personal data — Any information relating to an identified or identifiable person
  • Processing — Any operation performed on personal data, such as collecting, storing, using or sharing it
  • Data controller — Hint, which decides why and how personal data is processed
  • Data processor — A third party that processes personal data on our behalf
  • Cookie — A small text file stored in your browser that holds data about your use of the Platform
  • Pixel — A small piece of code from another company that runs on our pages and sends it information about your visit
  • Session recording — A recording of how you move through our pages, such as clicks, scrolls and page changes
  • Authentication — The process of confirming who you are when you sign in
  • Token — A unique code used for secure sign-in or to stand in for payment details

1. Who we are and what this notice covers

This Privacy Notice explains how Hint America Inc. ("Hint", "we", "us") collects, uses and shares personal data when you use hint.app and related services (the "Platform"). The Platform is a web service that you use in your browser. It covers every page of hint.app, including the hint.app home page and our quizzes at hint.app/soulmate, hint.app/palmistry, hint.app/natal-chart, hint.app/astro-map and hint.app/marriage-reading, your account area, our emails and our customer support.

Hint America Inc., 2093 Philadelphia Pike #9540, Claymont, DE 19703, United States, is responsible for your personal data. For users in the EU, UK and Switzerland, we are the controller of your personal data. For California residents, we are the "business" under California privacy law.

2. Personal data we collect

Quiz and profile answers. When you take a quiz or use the Platform, you give us your date, time and place of birth, your gender, your relationship status, your preferences for a future partner (such as age range, gender and ethnicity), the name and birth details of a partner if you add them for a compatibility reading, and your answers about your goals and interests.

Palm photos. If you use our palm reading, you take a photo of your palm with your device camera. Until you start a subscription, the photo is stored only in your browser on your device and is not sent to us; you can remove it by clearing your browser data. If you start a subscription, the photo is sent to us so we can create your palm reading and show it in your account, and we keep it while your account is active. We do not use palm photos to identify you.

Account information. Your email address, a unique account ID, sign-in times and IP address. We use passwordless sign-in with single-use codes, so we do not store passwords. If you sign in with Google, we receive your name and email address from Google.

Messages. Messages you send to our astrologers, to Mira (our AI guide) and to customer support.

Payment information. Payments are processed by our payment providers, PayNext and Primer. We receive a token for your payment method, the first six and last four digits of your card, its expiry date, and your billing name and country. We never receive your full card number.

Technical and usage data. Browser type and version, operating system, device type, language, screen size, IP address and the approximate location it indicates, time zone, the pages and features you use, clicks and scrolls, and error and performance data.

3. Sensitive information

Some information you give us is sensitive or could identify you, so we treat it with extra care:

  • Birth details. Your date, exact time and place of birth. Together these can identify you, and your place of birth may indicate your national origin.
  • Partner preferences. The gender you choose for a future partner may reveal your sexual orientation, and you may tell us an ethnicity preference.
  • Relationship status. For example, whether you are single, in a relationship, married or separated.
  • Other people's details. If you add a partner, child or anyone else for a compatibility or family reading, you give us their name and birth details. Please only do this if you are allowed to share them.
  • Palm photos. See section 2.
  • Messages. What you write to our astrologers or to Mira may include information about your health, feelings, beliefs or relationships. Share only what you are comfortable sharing.

We use this information only to create the content you ask for, such as your Soulmate Sketch, natal chart or compatibility reading, and to run your account. We do not use it to target advertising or to infer characteristics about you, and we do not sell or share it for advertising.

4. How we use your data and our legal bases

The legal bases below apply to users in the EU, UK and Switzerland.

  • Create your readings, sketches, horoscopes and other entertainment content — performance of our contract with you
  • Set up and manage your account and subscription — performance of our contract with you
  • Process payments and prevent fraud — performance of our contract; legitimate interests in preventing fraud
  • Answer your messages and support requests — performance of our contract; otherwise legitimate interests
  • Tell you about changes to the Platform, this notice or our Terms — performance of our contract with you
  • Send offers about our services — legitimate interests for similar services, with an option to opt out; consent for other marketing
  • Measure how you engage with our emails — consent where required (including France and Italy); otherwise legitimate interests
  • Analyse use of the Platform and fix problems — legitimate interests in improving the Platform
  • Measure and improve our advertising — consent where required (EU and UK cookie banner); otherwise legitimate interests
  • Prevent fraud, breaches of our Terms and threats of harm — legitimate interests
  • Comply with legal obligations, such as tax and accounting — legal obligation

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our content is for entertainment only and should not be used as the basis for important decisions.

If you do not give us the data a feature needs, such as your date of birth, we cannot provide that feature.

5. Artificial intelligence

Mira, our AI guide. Mira is an artificial intelligence chat feature, not a person. When you chat with Mira, we send your messages and a profile built from your quiz answers (such as your date, time and place of birth, your relationship status and your answers to our general questions) to OpenRouter, an AI service that passes them to the AI model providers it works with, such as Anthropic, OpenAI and Google, to generate replies. Your conversation with Mira is cleared every 20 messages, and the cleared messages are deleted from our systems. Mira does not remember earlier conversations, apart from the profile above, which we keep while your account is active. You can ask us to delete your conversations and this profile at any time. Neither OpenRouter nor these model providers may use your conversations to train their models.

AI-generated content. Some of our content, including Soulmate Sketches, illustrations and parts of reports, is created with the help of AI. Soulmate Sketches, including Real Sketches, come from a library of images we create in advance. We match one to your answers; we do not generate a new image from your personal data when you order it.

6. Analytics and session recording

We use these services to understand how the Platform is used and to fix problems: Google Tag Manager (to manage analytics and marketing tags), Google Analytics (usage analysis), Mixpanel (product analytics and session replay), Google BigQuery (data analysis and reporting), GrowthBook (feature testing), Sentry (error monitoring) and Cloudflare (security and performance). We also use Dash.fi to analyse the performance of our advertising.

Session recording. Through Mixpanel, we record a sample of sessions with the following safeguards: masking of all text on the screen, including your answers, birth details, email address and phone number; blocking of all images, including palm photos; masking of all data entry fields and payment details; and use limited to bug investigation and improving the Platform. Recordings are not used for advertising and are kept for 30 days.

7. Advertising partners and pixels

We advertise Hint on other websites and apps. To measure and improve our ads, we place pixels and similar tools from our advertising partners on the Platform, and we may also send them information directly from our servers. Our partners include Meta (Facebook and Instagram), Google, TikTok, Snapchat, Microsoft, Pinterest, X (Twitter), OpenAI (ChatGPT), AppLovin and Kwai. We also work with Tapad, which links browsers and devices that are likely to belong to the same person, so that our advertising can be measured across devices.

These partners may receive the pages you visit and actions you take on the Platform (for example, starting a quiz, starting a trial or making a purchase), cookie and device identifiers, your IP address and browser information, and an encoded (hashed) version of your email address. They use this to measure our ads, show our ads to people likely to be interested, and build audiences. Each partner also handles this information under its own privacy policy. We never send them your birth details, partner preferences, relationship status, palm photos or messages.

Under California law, this may count as "sharing" personal information for advertising. You can opt out as described in section 10.

8. Email open and click tracking

We use tracking pixels (also known as web beacons) and uniquely tracked links in the emails we send so that we can understand engagement with our communications. This includes whether and when you opened an email, your approximate location (derived from your IP address), and which links you clicked. Where prior consent is required, including for recipients in France and Italy, this tracking is turned off by default and is enabled only if you choose to opt in. Elsewhere, we rely on our legitimate interest in measuring and improving our communications. You can give or withdraw your consent at any time using the Manage email tracking link in the footer of our emails. You can also limit open tracking by turning off automatic image loading in your email client, although this does not prevent tracking of the links you click. Managing your tracking preferences does not unsubscribe you from our emails. This tracking is provided through our email service provider, Customer.io.

9. Who else we share your data with

We share personal data with people and service providers who help us run the Platform, such as our astrologers, our hosting, analytics, payment, email and customer support providers, and our AI providers. They may use it only to provide their services to us, under contracts that require them to protect it.

We may also share personal data:

  • with our professional advisers;
  • with companies in our group that help us provide the Platform;
  • with a buyer of, or investor in, our business;
  • with law enforcement or regulators where the law requires it;
  • to defend legal claims or to protect the rights, property and safety of Hint, our users or others; and
  • with your consent or at your request.

We may use and share information that does not identify you, such as aggregated statistics, for any lawful purpose.

10. Your choices about tracking

Opting out of advertising. You can ask us not to sell or share your personal data for advertising by emailing help@hint.app from the email address on your account. We will stop sending your data to our advertising partners within 15 business days.

You can also block or delete cookies in your browser settings, use the Digital Advertising Alliance (aboutads.info/choices) and Network Advertising Initiative (networkadvertising.org/choices) opt-out tools, and change ad settings with each partner. Turning off tracking will not stop the Platform from working. If you are in the EU or UK, you can change your cookie choices at any time using the cookie settings link at the bottom of every page. See our Cookie Policy for details.

Emails. You can unsubscribe from promotional emails using the link in any of them. You cannot opt out of emails about your account, purchases or subscription.

11. How long we keep data

  • Account and profile — while your account is active; deleted within 30 days after you delete your account
  • Inactive accounts, including quiz answers with no purchase — removed after 365 days of inactivity
  • Palm photos — while your account is active; never sent to us if no subscription is started (the photo stays in your browser)
  • Chats with astrologers — 2 years
  • Mira chats and Mira profile — chat cleared every 20 messages; profile from quiz answers kept while your account is active
  • Payment and tax records — as long as the law requires (usually up to 7 years)
  • Support messages — 2 years
  • Session recordings — 30 days
  • Security logs — 13 months
  • Backups — removed within 90 days

12. How we keep your data secure

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration or disclosure, including:

  • Sign-in and access: passwordless sign-in with single-use codes, multi-factor authentication, and access limited to the people and service providers who need it for their work.
  • Platform protection: DDoS protection and security monitoring through Cloudflare, and encrypted connections (HTTPS).
  • Payments: PCI DSS compliant processing through our payment providers; we never receive your full card number.
  • Backups: regular automated backups and recovery procedures.

We may ask for proof of identity before sharing personal data with you.

Data breaches

A data breach means unauthorised access to, loss of, or disclosure of personal data, or any incident that compromises its confidentiality, integrity or availability.

If we discover a possible breach, we will immediately start our incident response plan, contain it, assess the risks to you and document what happened. We will notify affected users by email within 72 hours of confirming a breach. The notice will describe what happened, what data was affected, the possible impact, what we have done, what you can do, and how to contact us. Where the law requires, we will also notify the relevant authorities.

After a breach, we investigate it fully, strengthen our security measures and keep affected users updated.

13. Transfers outside the UK and EEA

If you are in the UK or European Economic Area, your personal data will be transferred to the United States. When we transfer it, we use appropriate safeguards: transfers to countries recognised as providing adequate protection, standard contractual clauses approved under UK law or by the European Commission, or transfers to companies with approved binding corporate rules.

14. Your rights

Depending on where you live, you may have the right to:

  • ask whether we process your personal data and get a copy of it;
  • correct inaccurate data;
  • receive your data in a machine-readable format, or have it sent to another company;
  • object to processing based on our legitimate interests, and to direct marketing;
  • ask us to delete your data;
  • withdraw your consent at any time, where we rely on it;
  • complain to your data protection authority (in the UK, the ICO).

To use any of these rights, email help@hint.app or use our Help Center. We will ask you to verify your identity and aim to respond within one month. California and Nevada residents have additional rights, described below.

15. California residents

In the past 12 months we collected and disclosed the following categories of personal information:

  • Identifiers
    • Examples: email, account ID, IP address, cookie IDs
    • Why we use it: account, service, security, analytics, ads
    • Who receives it: service providers, analytics and advertising partners
    • Sold or shared: shared for advertising
  • Commercial information
    • Examples: plan, purchases, payment tokens
    • Why we use it: billing, support, fraud prevention
    • Who receives it: payment providers
    • Sold or shared: no
  • Internet activity
    • Examples: pages, clicks, session recordings
    • Why we use it: analytics, fixing bugs, advertising
    • Who receives it: analytics and advertising partners
    • Sold or shared: shared for advertising
  • Approximate location
    • Examples: country and region from IP address
    • Why we use it: regional pricing, fraud prevention
    • Who receives it: service providers; advertising partners (from the IP address their pixels receive)
    • Sold or shared: shared for advertising (IP-based only; birth place is never shared)
  • Profile and birth data
    • Examples: birth date, time and place, quiz answers
    • Why we use it: creating your readings
    • Who receives it: service providers, AI provider
    • Sold or shared: no
  • Sensitive information
    • Examples: partner gender preference (may reveal sexual orientation)
    • Why we use it: creating your readings only
    • Who receives it: service providers, AI provider
    • Sold or shared: no
  • Inferences
    • Examples: profile type, compatibility results
    • Why we use it: personalising content
    • Who receives it: service providers
    • Sold or shared: no

We collect this information from you, automatically from your browser, and from our service providers. We keep it for the periods in section 11.

Your rights. If you live in California, you can ask us to tell you what personal information we have collected about you and how we use and share it, give you a copy of it, correct it, or delete it. You can opt out of the sale or sharing of your personal information, and limit our use of sensitive personal information. We will not treat you differently for using these rights.

To make a request, email help@hint.app or use our Help Center. We confirm receipt within 10 days and respond within 45 days. You can use an authorised agent, but we may ask for proof that you authorised them and verify your identity directly. If we decline your request, you can appeal by replying to our decision within 30 days.

Shine the Light. California residents can ask once a year for the categories of personal information we disclosed to third parties for their own direct marketing in the previous year, and who received it. Email help@hint.app and mention "California Shine the Light Request".

16. Nevada residents

Nevada residents can ask us not to sell certain personal information, as defined by Nevada law (NRS 603A.340). To make a request, email help@hint.app or use our Help Center.

17. Children

The Platform is for adults. You must be 18 or older to use it, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us at help@hint.app and we will delete it, in line with the Children's Online Privacy Protection Act (COPPA).

18. Changes to this notice and how to contact us

We may update this Privacy Notice at any time. We post every new version on this page, and we review this notice at least once a year. Material changes, such as major changes to how we share data with third parties, why we process it, or your privacy rights, will be emailed to you at least 5 days before they take effect. Non-material changes, such as updates to reflect current practices, new features, changes to our analytics or advertising partners, contact details, clarifications and formatting, may take effect immediately when posted. If you continue to use the Platform after changes take effect, you accept the updated notice. If you disagree, you can stop using the Platform and delete your account.

Contact: help@hint.app, our Help Center at hint.app/help, or Hint America Inc., 2093 Philadelphia Pike #9540, Claymont, DE 19703, United States.

19. Disputes

Before taking legal action about how we handle your personal data, please contact us so we can try to resolve it:

  1. First level: email escalations-leader@hint.app with your reference number and previous messages. We reply within 5 business days.
  2. Second level: if you are not satisfied, email escalations-management@hint.app for review by senior management. We give a final decision within 15 business days.
  3. Informal resolution: we then try to resolve the dispute through good-faith discussion for 30 days.

If the dispute is still not resolved, this Privacy Notice is governed by the laws of the State of Delaware, United States, and the dispute will be resolved through binding individual arbitration administered by the American Arbitration Association, as set out in Section 2 of our Terms & Conditions, including the class action waiver. For matters exempt from arbitration, you agree to the jurisdiction of the courts in Delaware. Claims must be brought within six months of the incident.

Hint: Privacy Notice