1. Who We Are
Bilibala Shadowpaw Limited, a company registered in Hong Kong, is the data user responsible for the app. For privacy matters you may contact us at info@bilishadowpaw.com.
2. Our Privacy Commitment (Zero-Knowledge)
The app is built so that your core astrological data — your birth date, time, gender, birth location, and the charts computed from them — stays on your own device and is not transmitted to or stored on our servers, unless you actively choose to enable cloud backup.
3. Personal Data We Do Not Collect
By default, the following never leaves your device:
- your birth date, time and gender;
- your birth city / location (used on-device to compute True Solar Time); and
- the BaZi charts, readings and reminders calculated from them.
4. Data You Choose to Provide
You may choose to share certain data with us:
- Cloud backup — if you sign in to enable backup, your saved profiles are synced to our cloud database so you can restore them on another device.
- Account & authentication data — to sign in, our authentication provider processes an account identifier such as your email address or a Google account ID.
- Communications — if you email us, we receive your message and contact details to respond.
5. Technical and Usage Data
We and our service providers may automatically collect limited technical information — such as app version, device and operating-system type, language setting, and aggregated, anonymised usage and crash diagnostics — to keep the app secure and to improve it. Server logs may briefly record IP addresses for security and abuse prevention. This information is not linked to your astrological profile.
6. Cookies and Local Storage
The app uses your browser’s local storage / on-device storage to remember your saved charts and preferences (for example your selected city and active profile). It does not use third-party advertising or cross-site tracking cookies.
7. How We Use Data, and Our Legal Basis
We use the limited data described above only to provide and secure the app, to enable backup and restore if you opt in, to respond to your enquiries, and to comply with applicable law. We process personal data on the basis of your consent and for the directly related purposes set out in our PICS, consistent with Data Protection Principle 1 of the Ordinance.
8. Disclosure and Third Parties
We do not sell your personal data, and we do not use it for direct marketing. Personal data may be handled by:
- Google Firebase — our cloud provider (Authentication, database and hosting), acting as our data processor under appropriate safeguards; and
- professional advisers, regulators or law-enforcement — only where reasonably necessary or required by law.
9. Cross-Border Data Transfer
Our cloud provider (Google) may store and process backup data on servers located outside Hong Kong. We take reasonable steps to ensure that such data continues to be protected to a standard comparable with the Ordinance.
10. Data Retention
Data stored locally remains on your device until you delete the relevant profile or clear the app’s data. If you use cloud backup, your synced data is retained until you delete it or close your account, after which it is removed from active systems within a reasonable period, subject to any legal retention requirements.
11. Security
We apply industry-standard measures, including encryption in transit and authentication and access-control rules that restrict any backed-up data to your own account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your Rights (Access and Correction)
Under the Ordinance you have the right to request access to, and correction of, your personal data held by us. Because most data stays on your device, you can exercise these rights directly in the app by viewing, editing or deleting your saved profiles, and by clearing the app’s data. For any data held in cloud backup, you can delete it while signed in, or contact us. As permitted by the Ordinance, we may charge a reasonable fee for processing a data access request, and we will respond within 40 days.
13. Children’s Privacy
The app is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.
14. Third-Party Links
The app may link to third-party sites (such as our Threads page). We are not responsible for their content or privacy practices; their own policies apply.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the version and date above, and where changes are material we will take reasonable steps to notify you. Your continued use of the app constitutes acceptance of the updated policy.
16. Contact and Complaints
For any privacy question or to exercise your rights, contact Bilibala Shadowpaw Limited at info@bilishadowpaw.com. You also have the right to lodge a complaint with the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).