Who is responsible
Charms Universe is operated by LuckyCharms. Contact zhfang115t@gmail.com or write to 4 The Redwoods, 34 Madingley Road, Cambridge, CB3 0EX, United Kingdom.
LuckyCharms is responsible for the personal data described here. This notice is separate from accepting our Terms. Contact us about access, correction, restriction, objection, portability or deletion; do not send passwords, recovery codes or private source files by email.
What we collect and why
To provide your account we store a username, optional display name, password and recovery-code hashes, session records and your settings. Signup records the policy version, time, minimum-age declaration, age band and any guardian declaration. We do not ask for a full date of birth, payment card, phone number or government ID.
Your library contains only memories and files you choose to save. Conversation remembering, when enabled, saves your new user messages. Learning stores source-linked summaries, categories, quoted insights, correction history and processing progress. A limited copy of preceding conversation context may accompany a saved message to resolve references; AI replies in that context are not facts about you.
WeChat imports are selected by you. Text previews and message selection happen on your device; saving sends only your selected messages, their supplied sender labels and timestamps, and your conversation title and area to Charms. Charms stores this as an uploaded source, which can be used in replies and by background learning when enabled. This does not connect to your WeChat account or read its chats automatically. Unselected content is not uploaded by this workflow.
Security and capacity controls store hashed rate-limit keys and request counters. The hosting provider handles network information such as IP address and request metadata. Charms does not automatically scan your PC, read raw RAM, import your Discord account or collect unrelated files.
Purposes and choices
Account access, storage and requested responses support the service you ask us to provide. Security, abuse prevention and usage limits protect accounts and service availability. Policy declarations document the signup conditions. Optional background learning and conversation remembering require your separate, default-off choice for each galaxy.
Enable or withdraw optional learning in Your twin, and conversation saving in Chat or Your twin. Pause stops new learning requests and conversation capture; a request already running may finish. Withdrawal stops future processing but does not automatically remove earlier sources or completed knowledge. You can delete those separately. There is no marketing signup or sale of your personal library.
Do not upload passwords, identity documents, biometric templates, or sensitive health, religious, political or sexual information. This beta has no dedicated special-category-data workflow. Only share other people’s information when you have a proper basis to do so.
AI processing and personal profiling
OpenAI provides the underlying AI model. Chat sends your question, bounded recent conversation context and selected relevant memories or learned knowledge. Quick add sends supported selected contents for analysis; Describe photo sends the chosen image. Extract document text and Transcribe speech ask you to confirm sending that original to OpenAI and return a preview for review. Quick add has a separate, unchecked choice for sending selected documents and audio/video for processing. Background learning does not send those originals automatically; it learns from readings or transcripts you have chosen to save. Video processing uses speech from its audio, not visual frames. Unknown formats remain stored originals unless you add readable notes. Generated readings and transcripts may contain errors or omit content and are retained with the source until edited or deleted.
Charms builds and retrieves a personal profile; it does not train separate personal model weights or guarantee complete recall. Insights may be wrong, incomplete, contradictory or historical. Review their sources before relying on them. The app is not designed to make decisions about employment, credit, housing, healthcare or other significant eligibility outcomes.
Charms requests store:false for its Responses API calls. This does not establish zero provider retention: OpenAI may retain abuse-monitoring content and other permitted processing state under its own controls. See OpenAI data controls. No third-party model tool execution is enabled in this release.
Service providers and location
Render hosts the application, database and originals in the configured Frankfurt region. OpenAI processes AI inputs. GitHub stores deployment source code, not your uploaded library. The Windows launcher uses Microsoft Edge to open the same hosted account. There is no analytics, advertising or social-media SDK in the shipped Charms frontend.
Our providers may process some information outside the UK or EEA. We do not claim UK-only processing or a zero-retention provider configuration. Ask LuckyCharms for the applicable provider contracts, processing locations and transfer-safeguard information. The service is not end-to-end encrypted; authorised service operations can access server data when necessary.
Retention and deletion
- Account details, selected sources, originals and learned knowledge stay until you delete them or your account. There is no automatic whole-library expiry.
- Sessions normally expire after seven days and can be revoked by signing out or deleting your account.
- Temporary Quick add reviews expire after 30 minutes. Cleanup runs at startup and periodically.
- Recent unsaved chat context remains in the open page and clears on reload. Context already stored with a saved conversation source persists with that source. Editing or deleting a source clears copied interpretation context across its galaxy.
- Deleted conversation turns leave a hash-only retry receipt for up to seven days, preventing retries from recreating the deleted message. Account deletion removes those receipts.
- Deletion removes active account records and revokes sessions. Uploaded originals are queued for durable cleanup; failed filesystem cleanup retries. A deleted account’s opaque identifier and deletion time remain for up to seven days to block delayed requests from recreating it. No name, content, password or raw IP is kept in that marker.
- Rate-limit keys expire with their short security windows. Provider logs and backups have their own retention. Render’s published disk snapshot policy makes snapshots available for at least seven days; this is not a promise that every backup disappears after exactly seven days. We cannot selectively edit a provider snapshot.
Use Data requests for the active-account deletion controls and backup/provider limitations.
Your rights and contact
You can inspect, edit and delete sources, download originals and export each galaxy in Settings. Contact LuckyCharms to request access, correction, erasure, restriction or portability. You can also object to processing based on legitimate interests. Where consent applies, you may withdraw it. We aim to respond within one calendar month; verification, lawful exceptions or a permitted extension may apply, and we will explain them.
You may complain to the Information Commissioner’s Office or your relevant data-protection authority. Contacting us first is optional.
Users aged 16–17
New accounts require an age band of 16–17 or 18+. Users aged 16–17 must separately declare that a parent or legal guardian has agreed to their use and the Terms. We do not offer signup for under-16s. These are self-declarations, not verified age or verified parental consent. Our optional learning controls start off for everyone; there is no advertising or public profile sharing. Contact LuckyCharms about an account belonging to someone under 16 or a concern about a young person’s data.
Policy changes
Material changes will be described here with a new effective date. A new processing purpose requiring consent will need a new choice; continued browsing does not grant optional consent. Cookie details are in the Cookie policy.