Privacy Policy

1. Overview

NullStateLab ("we," "us," or "our"), operated by Junki Doi, is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect the data you provide when using our AI subscription services: Tenmei AI, Mushin Diet AI, and Daily Plate AI.

By using our services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following personal information when you register:

• Basic contact information: Name (or nickname) and email address
• Birth information (Tenmei AI): Date, time, and place of birth — used solely to generate your astrology-based readings
• Body and health information (Mushin Diet AI): Height, weight, target weight, age, gender — used to calculate estimated BMI, TDEE, and calorie targets
• Lifestyle information (Mushin Diet AI): Exercise frequency, exercise environment, job type, sleep patterns, stress level, snack frequency, alcohol frequency, dietary restrictions and food allergies — used to personalize daily workout and ingredient suggestions
• Food preferences (Daily Plate AI): Dietary style, food preferences, allergies, household size — used to personalize daily ingredient and meal suggestions
• Timezone and delivery preferences
• Payment information — processed securely by Stripe. We do not store card numbers or payment details on our systems.

Please note: Body measurements, health-related lifestyle information, and dietary restrictions are considered sensitive personal data. By providing this information, you consent to its use as described in this policy.

3. How We Use Your Information

We use your data exclusively to provide and improve our services:

• To generate and deliver personalized daily AI content to your inbox
• To process subscription payments via Stripe
• To send transactional emails (welcome, billing, service updates)
• To improve the quality and accuracy of our AI-generated content

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services and Data Transmission

We use the following third-party services to operate NullStateLab. By using our services, you consent to your data being transmitted to these providers as described below.

• OpenAI API — AI content generation for Mushin Diet AI and Daily Plate AI. Your personal profile data — including body measurements, lifestyle information, dietary restrictions, and preferences — is transmitted to OpenAI's API servers to generate your personalized daily email content. Only data necessary for content generation is transmitted. OpenAI processes this data under their API usage policies and does not use API inputs to train their models. See OpenAI's Privacy Policy at openai.com/privacy for details.
• Stripe — payment processing. Your payment information is handled directly by Stripe and is subject to Stripe's Privacy Policy. We do not receive or store your card details.
• Google Workspace / Google Apps Script — your registration data and delivery preferences are stored in Google Sheets and processed via Google Apps Script for email delivery. Google's Privacy Policy applies to data stored within Google Workspace.
• Gmail / Google Workspace (SMTP) — daily emails are delivered via Google's email infrastructure.
• Cloudflare — website hosting and infrastructure. Cloudflare may process limited connection data for security and performance purposes.

5. Data Storage and Security

Your registration data is stored in Google Sheets within a secure Google Workspace environment, accessible only to authorized administrators. We implement reasonable technical measures to protect your personal information from unauthorized access or disclosure.

While we take data security seriously, no method of internet transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention and Deletion

We retain your personal information for as long as you maintain an active subscription, plus up to 24 months thereafter for accounting and legal compliance purposes.

You may request deletion of your personal data at any time by emailing [email protected]. We will process deletion requests within 30 days. Please note that some data may be retained for legal or accounting purposes even after deletion requests.

7. GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please contact us at [email protected].

8. Cookies

Our website may use basic cookies for functionality purposes. We do not use tracking or advertising cookies. By using our website, you consent to this limited use of cookies.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active subscribers of significant changes via email. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related inquiries: [email protected]