PRIVACY POLICY
Data and privacy
What Ling saves, how we use it, and how you can manage your information. Last updated: 16 September 2026.
About this policy
This policy explains how Ling collects, uses, and stores personal information. Ling is operated by Mohd Aiman Khan as an individual. He is responsible for your personal information (the data controller). For questions or help with your data, email [email protected].
What we collect
Account information includes your email address, profile, sign-in records, and confirmation that you accepted the terms and are at least 18. When you request a reading, we save your questions, answers, birth details, cards or chart, generated reflection, and follow-up messages. We also keep feedback, problem reports, and beta access requests you submit.
How we use your information
We use account and reading information to provide Ling, keep your history available, and respond to support requests. The legal basis is our agreement to provide the service. We also record limited usage and security information to prevent abuse, investigate errors, and improve the beta, based on our legitimate interests in running the service. You can object to that use. We may also retain information when required by law.
Who can access your information
Your saved readings are available through your account and are not visible to other readers. Authorized administrators can review beta sessions, feedback, and usage records to provide support, investigate problems, and improve the service. We do not include your private readings in another reader’s prompts or responses.
How reflections are generated
Cloudflare Workers AI receives your questions, answers, relevant cards or chart, and the conversation context needed to generate a response. Its policy states that customer content is not used for model training or service improvement without explicit consent. Ling separately saves your reflections and messages so you can return to them.
Services we use
Lovable hosts Ling, Supabase handles sign-in and data storage (with the primary database in Ireland), and Cloudflare provides computing and abuse protection. Google handles sign-in if you choose that option. Google Fonts supplies fonts, and OpenStreetMap supplies the birthplace map. These providers may receive connection information such as your IP address, and some processing may take place outside the European Economic Area. Contact us for information about providers and international data-transfer safeguards.
Information stored in your browser
Browser storage keeps you signed in, remembers your language, and holds unfinished reading drafts so you can continue after signing in. On your first visit, a banner asks for your cookie choice; if you pick “Essential only”, we only use what the service needs to function. Starting over or signing out clears those drafts. Clearing your browser data does not delete readings already saved to your account, but it does reset your cookie choice.
Keeping and deleting your data
We keep account and reading information while your account is active so your history remains available. You can request account deletion from your dashboard. There is a 14-day recovery period, and you can cancel before permanent deletion starts. Processing delays may mean deletion takes longer. Security and administration records may be retained to investigate problems or meet legal requirements. Existing backup copies are not removed immediately when an account is deleted. Contact us about backups or the retention of a particular record.
Your privacy rights
You can download a copy of your data from your dashboard. You can also email [email protected] to ask for access, corrections, deletion, limits on how we use your data, or a portable copy, as provided by applicable law. You may object to processing based on legitimate interests. We normally respond within one month and will explain if a legally permitted extension is needed. We may need to confirm your identity, but will never ask for your password.
Privacy concerns
If you have concerns about how your personal information is handled, you can contact us. You also have the right to lodge a complaint with a data protection authority, such as the Swedish Authority for Privacy Protection (IMY), or the authority in the EU/EEA country where you live or work.
Age and what you choose to share
The Ling beta is for people aged 18 and over. We record your age confirmation and do not ask for an identity document. Avoid sharing sensitive personal information, passwords, or someone else’s private details. You can keep your questions general. Contact us if you submit something that needs to be removed.
Changes to this policy
We will publish updates on this page with a revised date. If we make significant changes to how we handle personal information, we will notify you through the service or by email.