Your Privacy First (Zero-Knowledge)
By design, the birth details you enter are processed and stored on your own device and are never stored on our servers. Even if you enable the optional cloud backup, it lives only in your own Google account (a hidden app-data folder in your Google Drive, encrypted with AES-256) and never passes through our servers. The one exception: when you actively generate an analysis report, the birth data needed for that calculation is transmitted over an encrypted channel to our server, computed in memory only and discarded immediately — never written to any log or database.
1. Purpose of Collection
The birth details you enter — date, time, gender and birth city/location — are used for one purpose only: to calculate your BaZi (Four Pillars of Destiny) chart and the related daily, natal and luck readings. Your birth city is converted to coordinates on your device to compute True Solar Time. If you sign in and actively generate an analysis report, the birth data needed for that calculation is computed in server memory and discarded immediately afterwards (see “Your Privacy First” above).
2. Voluntary Supply
Supplying these details is entirely voluntary. If you do not provide them, the only consequence is that the app cannot calculate a chart for you; there is no other consequence.
3. Optional Cloud Backup and Account Data
If — and only if — you choose to sign in to enable cloud backup, the profiles you have saved are backed up to your own Google Drive (a hidden app-data folder) so that you can restore them on another device, and the related account identifier (such as your email address or a Google account ID) is processed by our authentication provider solely to enable sign-in. Neither is held in any database on our servers.
4. Classes of Transferees
We do not sell your personal data and we do not use it for direct marketing. Your personal data may be handled by:
- our service provider, Google Firebase, acting as our data processor for account identifiers; and
- our payment provider, Stripe — acting as our data processor for web tips, Pro subscriptions and one-time report purchases; we receive no card or payment details. Stripe also holds your email address and transaction records as a data controller in its own right, under its own terms and retention policy; and
- Google reCAPTCHA — used by our app-integrity check (App Check); it sends standard technical signals (such as your IP address) to Google’s reCAPTCHA service to tell humans from automated abuse; and
- regulators, law-enforcement, or our professional advisers, where reasonably necessary or required by law.
5. Retention
Local data is kept on your device until you delete the profile or clear the app’s data. Cloud backups are kept in your own Google Drive until you delete them in the app, close your account, or revoke the app’s access; the account identifier, together with subscription status, daily usage counters and two-year-outlook unlock records, is deleted when the account is closed.
6. Your Access and Correction Rights
You have the right under the Ordinance to request access to, and correction of, your personal data held by us. As most data never leaves your device, you can exercise these rights directly in the app by viewing, editing or deleting your saved profiles. For any data held in cloud backup, you can delete it in the app while signed in, or revoke the app’s access in your Google account settings; for help, contact Bilibala Shadowpaw Limited at info@bilishadowpaw.com. As permitted by the Ordinance, we may charge a reasonable fee for a data access request, and we will respond within 40 days.
By entering your birth details, you acknowledge that you have read and understood this statement.