Privacy notice (PDPA)

Draft. Last updated 2026-11-05.

Who we are

This website is operated by to be confirmed (to be confirmed), Malaysia. For any question about your personal data, email [email protected].

What we collect

Account: your name, email address and password (stored only as a secure hash).

Birth profiles: a label you choose, gender, birth date, birth time (if known) and birth city. Birth details are encrypted in our database.

Orders: the report you bought, the amount, and the payment reference. Card and bank details are handled by the payment provider; we never see or store them.

Qimen questions: the question type and, if you type one, your question text.

Technical: your IP address (to limit abuse of the free calculator) and cookies needed to keep you logged in and remember your language.

Why we use it

To calculate your chart, prepare and deliver your reports, run your account, take payment, prevent abuse, and keep the accounting records the law requires.

We do not sell your data and do not use it for advertising profiles.

If AI is used to help write report text, we send only the calculated chart and the profile label, never your email address.

How long we keep it

Free calculator: the birth details you enter are deleted within 1 hour.

Your account, birth profiles and reports: kept until you delete your account or ask us to delete them, so you can re-download your reports.

Qimen question text: deleted automatically 30 days after you submit it. It is never printed in the PDF.

Order and payment records: kept for as long as Malaysian tax law requires (currently 7 years), even after account deletion, without your birth details.

Where it is stored

On servers in Singapore (DigitalOcean, via Cloudways). Traffic passes through Cloudflare for security. Payments are processed by our payment providers.

Your choices and rights

Access: download everything we hold about your account from My account → Download my data.

Correction: edit your birth profiles at any time from My account.

Deletion: delete your account from My account, or email [email protected]. This deletes your profiles, reports and question texts.

You can withdraw consent at any time; we then stop processing your data, except the order records the law requires us to keep.

Security

The site uses HTTPS, birth details are encrypted at rest, and access to the admin area is restricted.