Privacy Policy

In short: HarmonyName is run by one person in the United Kingdom, and that person decides how your data is used.

HarmonyName is a trading name operated by a UK-based sole trader (an individual running a business, not a registered company).

For data protection law, that individual is the “data controller”— the person who decides how and why your personal data is used.

• Data controller:【CONFIRM: operator's full legal name】
• Trading name: HarmonyName
• Website: harmonyname.com
• Contact email: 【CONFIRM: privacy/support email】

If you have any question about this policy or your data, please email us at the address above.

In short: we use your birth details and AI (artificial intelligence) to suggest Chinese names.

HarmonyName generates Chinese given names. We do this by combining BaZi (八字, Chinese “Four Pillars” astrology) with AI (artificial intelligence) that draws on classical Chinese poetry.

You buy credits up front (a prepaid model), and each name generation uses credits.

In short: your email, your birth details, your purchase history, and the names we generate for you.

Account data

Your email address. If you sign in with Google, we also receive basic Google account profile information (such as your name and email) from Google.

Birth data

Your birth date, birth time, and birth city / location (including longitude and timezone). We use this to work out your BaZi chart.

Your BaZi chart is first calculated inside your own web browser. However, the inputs you give us and the result that is produced are then sent to our server so we can generate names for you.

Purchase history

Which credit packs you bought. Your card details are handled by Stripe (our payment provider) and are not stored by HarmonyName.

Generated names and analysis

The names we generate for you, and the related analysis, are saved and linked to your account.

In short: mostly to deliver the service you paid for, and partly to keep the service safe.

Under UK GDPR we must have a valid reason (a “lawful basis”) for using your data. Here is how we use your data and the lawful basis for each use:

• To create and run your account, and to generate names. Lawful basis: performance of a contract— we need this data to give you the service you signed up and paid for.
• To take payment and manage your credits. Lawful basis: performance of a contract.
• To keep the service secure and prevent abuse (for example, rate limiting to stop misuse). Lawful basis: legitimate interests— it is in our reasonable interest to protect the service and our users.
• To meet legal and accounting duties (for example, keeping records of sales). Lawful basis: legal obligation.
• Anything you have specifically agreed to (for example, optional emails). Lawful basis: consent— you can withdraw this at any time.

In short: we use a small set of trusted companies to run the service. We do not sell your data.

We do not sell your personal data. We share it only with the service providers (called “processors”) that we need to run HarmonyName. Each one only handles your data to do its job for us:

• Stripe— payment processing (handles your card details securely).
• Supabase— user authentication (sign-in) and database hosting (stores your account data).
• OpenAI— creates text “embeddings” (a numeric form of text) to find poetry that matches your profile.
• Anthropic (Claude)— the AI (artificial intelligence) model that writes the names.
• Vercel— website hosting (runs and serves the website).
• Upstash— rate limiting (helps stop misuse of the service).

To generate names, your birth data and the generation prompts may be sent to OpenAI and Anthropic (Claude).

In short: some of our providers are based abroad, so your data may be processed outside the United Kingdom.

Some of our processors (for example, OpenAI, Anthropic, and Vercel) may process your data outside the UK (United Kingdom) and the EEA (European Economic Area), such as in the United States.

When this happens, we rely on appropriate safeguards required by UK data protection law — for example, Standard Contractual Clauses(approved legal terms that protect your data) or the UK's International Data Transfer Agreement, and (where relevant) UK “adequacy” decisions — so your data keeps a similar level of protection.

In short: we keep your data only as long as we need it, then delete it.

We keep your personal data only for as long as we need it to provide the service and to meet our legal duties. After that, we delete it or make it anonymous.

• Account and birth data: 【CONFIRM: retention period — e.g. kept while your account is active, then deleted within X days of closure】
• Generated names and analysis: 【CONFIRM: retention period】
• Purchase / billing records: 【CONFIRM: retention period — UK tax rules often require keeping records for around 6 years】

When you close your account, we will delete or anonymise your data, except where we must keep some of it by law (such as accounting records).

In short: you have strong rights over your data, and you can contact us to use them.

Under UK GDPR you have the right to:

• Access— ask for a copy of the data we hold about you.
• Rectification— ask us to correct data that is wrong or incomplete.
• Erasure— ask us to delete your data (sometimes called the “right to be forgotten”).
• Restriction— ask us to pause our use of your data.
• Objection— object to us using your data where we rely on legitimate interests.
• Portability— ask for your data in a portable format so you can move it elsewhere.
• Withdraw consent— where we rely on your consent, you can withdraw it at any time.

To use any of these rights, email us at 【CONFIRM: privacy/support email】. Using your rights is free, and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the ICO (Information Commissioner's Office), the United Kingdom's data protection regulator. You can reach them at ico.org.uk. We would appreciate the chance to help first, so please consider contacting us before you go to the ICO.

In short: we use the small amount of storage needed to keep you signed in and to keep the service safe.

A cookie is a small file a website stores on your device. We use only the cookies and similar storage we need to run the service:

• Authentication / session: to keep you signed in securely.
• Rate limiting / security: to help stop misuse of the service.

Analytics: 【CONFIRM: do you use any analytics (for example, traffic measurement)? If yes, name the tool and note that non-essential analytics cookies need consent. If no, state that you do not use analytics cookies.】

In short: HarmonyName is not meant for young children.

HarmonyName is not directed at children. You must be at least 16 years old to create an account and use the service (and in any case not under 13). If you believe a child has given us personal data, please contact us and we will delete it.

In short: if we change this policy, we will update this page.

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top. If the changes are significant, we will take reasonable steps to let you know.

In short: email us with any privacy question or request.

For any privacy question, or to use any of your rights, email 【CONFIRM: privacy/support email】.

Data controller: 【CONFIRM: operator's full legal name】, trading as HarmonyName.