NinePath Privacy Policy

How NinePath uses information, and the choices available to you.

Last updated: 18 October 2026

Who we are

NinePath is responsible for the personal information described in this policy.

NinePath is provided by Chris nby Ninepath, Leuven, Belgium. Email: support@ninepath.app.

For privacy questions or requests, contact support@ninepath.app.

This policy covers the NinePath app, our website and messages you send to our support team.

NinePath is currently a closed beta, open by invitation only. The app, website and support are in English only. The beta is not offered in Canada, and we do not invite residents of Washington State.

The short version

We use your birth details and selected preferences to provide daily guidance. Part of that guidance is written by AI, using an OpenAI language model, from facts our own code calculates. AI requests do not include your name, email address, birth date, birth time, birthplace, check-in answers, or payment and account details. Optional check-ins can reveal health information and require your separate, explicit agreement. Check-in answers and information worked out from them never go to an AI provider or AI training. Usage analytics is on by default. You can turn it off at any time in Settings › Help improve NinePath. Crash reports are sent only if you turn on the separate diagnostics choice in the app; it is off by default. Essential security and operational error information is processed in all cases. We do not sell your personal information or use it for targeted advertising.

What we collect

Account information: an account identifier, your sign-in method and, when you use a registered account, information supplied by that method, such as your email address and a name supplied by Apple or Google. Guest use also creates a Firebase account identifier; having no email address does not make that account anonymous. Firebase Authentication handles sign-in credentials, and we do not store your password in your NinePath profile.

Birth details and preferences: your birth date, birth time if known, birthplace information you provide, selected-place coordinates, time zone, work-style choice and any selected focus areas or frustration-pattern choices. Birth time and birthplace may be omitted during ordinary onboarding, although some recovery or chart features may need more information. A focus-area choice such as "Health & Energy" is a preference label; it is separate from your check-in answers.

Readings: calculated astrology and numerology information, generated guidance, saved reading records and information needed to provide your account's features.

Optional check-ins: your feeling, energy and support-need answers, when you submitted them, and information worked out from them. We treat answers and health-related inferences as sensitive health information.

Beta access: during the beta, testers get all features, including Plus, free of charge. There is no paywall, price or purchase flow in the beta, so we hold no purchase or payment information for it. Apple or Google would process any future payment, and NinePath does not receive payment-card numbers.

Technical information: installation identifiers, IP addresses, device and software information, authentication and security information, and limited operational error and startup information. Provider-generated identifiers and metadata can still make technical records personal information.

Usage analytics: Google Analytics for Firebase and PostHog (EU cloud) receive app-use events, such as onboarding steps, sign-up and reading opens. These events come with app and device information and a random identifier for your app installation. We do not send your NinePath account ID, name or email address with them. The installation identifier is pseudonymous, not anonymous: it identifies your app installation. It is reset when you sign out, delete your account or reinstall the app. The events do not include your birth details, check-in answers or reading text. Your on/off choice is saved on this device. Analytics providers may infer approximate location from an IP address, depending on their settings.

Crash reports (only if you opt in): if you turn on the diagnostics choice, Firebase Crashlytics receives the type of error and the technical stack trace, with app and device information. It is off by default and is reset when you sign out.

Beta reading dates: during the beta, if your in-app birth date shows you are 18 or older, we record the date (UTC) on which the app shows you a reading, at most once a day. These dates are linked to your NinePath account. They contain dates only, not reading text.

Support and website visits: messages and information you choose to send us, and network and security information needed by our website host to deliver pages safely. Please do not send passwords, payment-card details, birth details, readings or check-in answers in a support message unless we explain why particular information is necessary.

Where a beta signup came from: when you join the invitation list, we record the campaign tags in the link that brought you to the signup page (utm source, medium, campaign and content, for example the post you came from) and the name of the website that referred you, to learn which channels bring signups. Our basis is our legitimate interest in understanding which channels reach people. We keep this with your signup and delete it with the invitation list by 15 December 2026. We do not use cookies or tracking scripts for this. See How we use your signup details.

Optional in-app feedback: the message you write, report type (bug or idea), app version and build number, platform, operating-system version, phone model, current screen and locale. See Feedback you send us.

Optional profile photo: if you add a profile photo, we store that one picture in your account so it appears on all your phones; only you can see it, we do not use it for anything else, and we delete it when you remove it or delete your account.

Optional personality quiz

The personality quiz is optional. If you take it, we save your answers and five trait results in your NinePath account so you can see your results. We also save which statements you answered and the scoring version used to calculate the results.

Your quiz answers and trait results are included in your data export. We do not send them to analytics or crash-reporting services.

We keep your saved quiz answers and results until you delete them or delete your account. You can choose Delete my results on the quiz results screen. Taking the quiz again replaces your previous answers and results; we do not keep a quiz history.

Why we use information

We use account, birth, preference and reading information to provide the service you request, personalise readings, maintain your account and manage your access to features, including free beta access. Our legal basis for this processing is performance of our contract with you, where the information is necessary for that service.

We use your optional quiz answers to calculate and show five trait results. Our legal basis is performance of our agreement with you.

We use check-in answers and health-related inferences only for the check-in purposes described below, on the basis of your consent and explicit consent to processing sensitive health information. Agreeing to our Terms or reading this policy does not give check-in consent.

We use usage analytics to understand and improve the app, on the basis of our legitimate interests in understanding and improving NinePath. You can object at any time by turning off Help improve NinePath in Settings. This stops new analytics events from your app. Turning analytics off does not change your access to any feature.

We use crash reports, only when you have turned them on, to find and fix faults; your consent is the basis and you can turn them off at any time.

During the beta we record reading dates for a possible future tester benefit; no benefit is promised. The basis is our legitimate interests in running the beta and assessing such a benefit. This counting is separate from usage analytics and is never combined with it. It cannot be switched off for one person: if you do not want it, do not join the beta, or delete your account, which removes the dates. To remove dates already recorded, ask us at support@ninepath.app; new dates can still be recorded if you keep using the app. The dates are included in your data export.

We use essential operational and security records to run and protect the service, investigate faults and prevent abuse, on the basis of our legitimate interests in a safe, functioning service. We assess those interests against your rights.

We use contact information to answer requests and send necessary service and security messages, under the applicable contractual or legal basis. These operational messages are separate from marketing. We retain limited evidence where necessary to demonstrate consent, fulfil legal duties or establish, exercise or defend legal claims.

Feedback you send us

If you use Send feedback, we receive your message, whether it is a bug report or an idea, and technical details: app version and build number, platform, operating-system version, phone model, the screen you were on and locale. We use this to understand and fix problems and improve the app.

Feedback is optional. Please do not include health details or personal information. We try to remove email addresses and phone numbers automatically, but cannot guarantee that we catch everything; your message may still contain personal information. No screenshots are collected by this feedback form.

We keep an internal link between your account and your report to control abuse and handle deletion. In this beta, delivery to our issue tracker is switched off, so feedback stays in our own database.

If we switch delivery on, we send the report to our private issue tracker hosted by GitHub (Microsoft), without attaching your name, email address or account identifier. Only a small number of authorised team members can read it; they may receive its content in email notifications. This does not make a report anonymous: we keep the separate internal link to handle account deletion.

Feedback that has not been delivered to our issue tracker is deleted after 90 days. After confirmed delivery, message text in our own database is deleted 30 days after delivery. If a delivery outcome is uncertain, that record has no automatic expiry until we resolve the outcome. In GitHub, the six-month period starts when the issue is created, not when you submit feedback. After that period the report is redacted; an authorised owner deletes the issue and its edit history, normally within 14 days. This manual removal step is not a guaranteed maximum retention period. The internal account-to-report link is kept for the deletion process until redaction. Account deletion also covers feedback in our database and any associated GitHub report and edit history.

If you contact us about a report, quote the reference shown in the app so we can find it. We do not promise replies to individual feedback messages. For account, support or privacy requests, contact support@ninepath.app.

Birthplace searches and AI-written readings

When you type a birthplace search, the search text, a session identifier and network information including your IP address go directly to Google Places. Selecting a result sends its place identifier to Google and lets us save the selected place and its coordinates for calculations. NinePath does not request access to your device's current GPS location.

Google handles Places information under its applicable Maps terms as a separate controller, with its own purposes and privacy practices. See Google's Privacy Policy for those practices.

Part of the daily guidance is written by AI, using an OpenAI language model through OpenAI's API. Our own code first calculates the facts for the day: the reading date, the day type, numerology numbers and natal or current sky facts. The AI writes text from a limited set of those facts. The numbers, day type and sky facts themselves are calculated by our own code, not by AI. If AI text is not available, the reading uses text we wrote in advance. AI requests do not include your name, email address, birth date, birth time, birthplace or coordinates, your focus-area or work-style choices, your check-in answers or anything worked out from them, or payment and account details. Check-ins personalise your reading through NinePath's own processing and are never sent to OpenAI. Automated checks on AI text reduce errors, but we cannot guarantee that guidance is accurate. AI-written guidance can be wrong, and it is not professional advice. NinePath does not use readings to make decisions with legal or similarly significant effects about you.

Check-ins: separate consent and short retention

Check-ins are optional and available to people aged 18 or over. Your daily reading works without them. We record your explicit agreement before storing an answer.

If you agree, we use your answers, and what we work out from them, to personalise the You part of today's reading, provide today's Inner Compass and select a small step and a reflection question. If you repeatedly share difficult moments, we may show a link to support outside the app. This is reflection, not professional care; no one monitors your answers. We never send your answers, or anything worked out from them, to an AI provider, and never use them to train AI. We do not use them for advertising or analytics.

We use each answer, and what we work out from it, for up to 30 days after you submit the answer. We then stop using and displaying both and delete them from our active systems within a further 24 hours. Derived information, including any sensitive part of a saved You reading, expires with its source answer; generating it again does not restart the clock.

Turn check-ins off in Settings › Daily check-ins to withdraw consent. We immediately stop using and displaying your saved answers and what we worked out from them, and delete both from our active systems within 24 hours. Turning check-ins back on requires your explicit agreement again and does not restore deleted answers. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

See Check-in privacy details for storage, version history, future backup conditions and consent records.

Providers and where information is processed

We use the following services for the stated purposes and information, with access limited to what is needed for their role.

This beta runs on our production environment. Our main app database and server functions are in Belgium, European Union, in Google Cloud's europe-west1 region. Our public website uses Firebase Hosting's global content-delivery network, so website delivery is not limited to Europe. Firebase Authentication operates in the United States. RevenueCat and OpenAI also involve processing in the United States. Our PostHog project uses PostHog's EU cloud. Google Analytics is operated by Google and may involve processing outside Europe. Provider support teams, subprocessors and remote access may involve other countries.

Where EU or UK transfer rules require safeguards, we rely on the safeguards in each provider's data processing terms. These may include a relevant adequacy decision, a recipient's Data Privacy Framework certification, or Standard Contractual Clauses; UK transfers require an applicable UK arrangement as well. EU hosting alone does not mean that all access stays in Europe. Contact support@ninepath.app for information about the safeguards and a copy where available, subject to lawful redactions.

How long information is kept

We keep information for the period needed for its stated purpose, taking account of legal duties, rights requests and justified legal claims. The following schedule applies to our processing; provider recovery copies and separate legal records are addressed below.

Shorter retention periods for check-ins, analytics and other purpose-specific records still apply.

NinePath does not currently configure or maintain separate backups or exports of check-in information. Extended point-in-time recovery is switched off. Firestore version history can retain deleted versions for at most one hour after deletion from active systems, after which NinePath cannot recover them through that history. Google's own internal infrastructure deletion follows Google Cloud's data-deletion terms; the one-hour limit is not a promise about those internal timelines. Before enabling backups, we will update the check-in details page with a maximum retention period, isolation from ordinary use and the process for reapplying deletions before restored data returns to use.

We retain minimal consent, incident or claims evidence only for a specific purpose and period, with restricted access, rather than keeping check-in answers as proof. A lawful, specific preservation requirement may affect deletion of the relevant limited records, and we will explain any applicable exception.

Choices, rights and account deletion

You can turn usage analytics off in Settings › Help improve NinePath. Turning it off stops new analytics events; it does not by itself delete events already sent to Google Analytics or PostHog. Contact support@ninepath.app to request access to or deletion of analytics records linked to your app installation. We use the provider's tools where we can identify your records, and we explain any limits.

You can delete your saved quiz answers and trait results through Delete my results on the quiz results screen, without deleting your account. They are also included in your data export and removed when you delete your account.

You can request account deletion in the app or through Delete your account, without reinstalling the app. We verify the request appropriately, delete our Firebase-held account data and request deletion of the associated RevenueCat customer record. Account deletion does not by itself remove analytics events already held by Google Analytics or PostHog; we handle those as described above. An initial acknowledgement or a single completed step is not confirmation that the whole request is complete.

Depending on the law that applies, you may have rights to access, correct, delete or receive a portable copy of information, restrict processing, object to processing based on legitimate interests, and withdraw consent. We may ask for proportionate information to verify your request, without requesting your password or unnecessary sensitive information.

We act on deletion requests without undue delay. Under EU and UK data-protection rules, we normally tell you what action we have taken within one calendar month of receiving your request. If a lawful extension is necessary, we explain the reasons within that period. We explain any information that must be retained and any separate period applicable to restricted recovery copies. We apply the relevant local deadline and explain a refusal, available review or appeal route and complaint options where required. Your rights can have lawful exceptions, but these do not remove our duty to assess your request.

You can complain to the Belgian Data Protection Authority or your competent local authority. UK users can contact the Information Commissioner's Office. Australian users can contact the Office of the Australian Information Commissioner where applicable.

Age

NinePath is for people aged 18 or older. The only age check is the birth date you give during onboarding. If it shows you are under 18, you cannot use NinePath. An invitation to the beta is not verification of your age or where you live. If you believe someone under 18 is using NinePath, contact support@ninepath.app so we can assess and act on it. We do not use personal information for targeted advertising.

Website, security and changes

Our website has no optional analytics, advertising or tracking cookies. The hosting provider still processes network and security information to serve the pages. App fonts are bundled rather than fetched from Google Fonts during use.

We use technical and organisational safeguards, including encrypted network connections and restricted access, to protect information; no system is completely secure. These safeguards do not mean exported files are end-to-end encrypted or remain under our control after you share them.

We update this policy when our processing changes and show the date above. We notify you of material changes and obtain fresh consent where required before using information for a new consent-dependent purpose. Contact support@ninepath.app with any question about this policy.