Privacy Policy
Last updated: 17 September 2026
We know how much your privacy matters. This Privacy Policy explains transparently how Timeless Compass collects, uses and protects your personal data, and the rights you hold under the law. We process personal data in accordance with the data protection laws that actually apply to this service.
1. Data we collect
Account data: email address and sign-in method (password or Google authorisation). Advanced Year-Pillar Analysis data: a standard Qi Men chart requires no complete BaZi and no birth data. Only when you actively enable this paid feature do we process the birth year / year pillar and the before-or-after-Lichun detail that the feature actually needs. We follow data-minimisation principles and do not require names, contact details, identity-document numbers, a full date of birth, a birth time, a birth place or a complete BaZi. Year pillars are used only to generate the interpretation you selected and to retain that reading in your history. If the data concerns another person, you must have the legal right, appropriate permission or another applicable lawful basis to provide it, and remain responsible for its source and how it was obtained. Usage and interaction data: the question text you enter, chart timestamps, chart and hexagram records, tarot spreads and card orientations, AI interpretation records, in-depth follow-ups, quiz answers and results, and comments and ratings. Please do not enter unrelated highly sensitive information such as identity-document numbers, bank accounts or detailed medical records when asking the AI. Transaction and shop data: Stardust balance, purchase records, online-shop orders, delivery address and contact phone number (where needed to ship physical goods) and refund status. We never store your full card details; all payments are encrypted and handled by a compliant third-party payment provider. Technical and free-allowance identifiers: to manage the daily free reading allowance, prevent abuse, maintain security and keep the service running, we use a device identifier stored in your browser and process your network address (IP) server-side as a one-way hash used as an identifier. We also keep basic browser and device information and error logs.
2. Core commitment: we never sell your data
We state plainly that we will never sell, rent or trade any of your personal data (contact details, birth information or reading records) to any third party for commercial gain. Your data is used only to provide and improve this service.
3. Purposes of processing
To provide and improve charting, hexagram, quiz, daily-fortune and online-shop fulfilment features; only when you actively enable Advanced Year-Pillar Analysis, to use the year pillars you provide to generate the interpretation you selected and retain that reading in your history; to generate other personalised AI interpretations and maintain your history; to manage your Stardust account and handle customer support; to manage the daily free allowance, keep the comment area orderly and prevent abuse; and to carry out internal troubleshooting and improve overall security.
4. Data sharing, public sharing and cross-border transfer
As a global online service, your data may be processed across borders when transferred to service providers. We share data only where necessary, with the following providers. Cloud infrastructure: our account system, database and servers are hosted on Lovable Cloud and other cloud providers. Payments: card payments are processed by Stripe. AI interpretation: the question and chart data you submit are sent over an encrypted connection (HTTPS) to the AI service gateway we use and to the corresponding large language model (for example a Google Gemini model), purely to generate interpretations. This is encrypted transmission, not anonymisation. Any server-side storage, logging and retention by those providers is governed by their own terms, and we make no assurances beyond what those terms provide. Public sharing: if you create a public share link for a reading or quiz result, anyone who obtains that link may view the content. Public content excludes your account data, email address, internal user identifiers, information identifying other people and year-pillar data. You can stop sharing at any time, after which the original link no longer displays the content.
5. Cookies and local storage
We use browser local storage and only the cookies necessary to keep you signed in, remember your language and interface preferences, identify daily free allowances or one-time trial / preview eligibility, temporarily store consent records, and keep the site working. When an unsigned-in guest uses Guest Preview, we do not create or save a reading history record; we process only the technical data needed to provide that service and prevent abuse. If you choose to register after Guest Preview, we temporarily store your question text and original chart time in your browser so the same question can be restored after sign-up. This draft is kept for up to 24 hours and cleared after it is successfully restored. We currently use no third-party advertising cookies for cross-site tracking. If we introduce analytics in future, it will be enabled only after you opt in.
6. Your data rights
You can ask to access the data we hold about you, correct inaccurate account or delivery details, delete your records, and withdraw consent you gave previously (which may make some features unusable). Where applicable law requires it, you may also have rights to restrict or object to processing, to data portability, and to complain to the relevant supervisory authority. The exact scope of these rights and how to exercise them depend on the laws that actually apply where you live. To exercise your rights, contact us by email.
7. Retention and deletion
You can delete an individual reading or quiz record at any time from your history page, or delete all reading and quiz records at once. To delete your entire account, please email us a request (the site does not currently offer one-click account deletion). Once a record is deleted, the related question, chart, AI interpretation, follow-ups, quiz answers and results, associated year-pillar data and that record's public share link are removed from the live service and database and no longer used for your history or personalised service. Please note that some data may persist temporarily in time-limited system backups, security and anti-abuse logs, technical operations, dispute handling, legal, tax or accounting obligations, or a provider's normal retention cycle, and will be deleted or de-identified once that purpose is met or the retention period ends. We cannot guarantee that every copy disappears instantly from all third-party systems and backups at the same moment.
8. Data security
We apply industry-standard safeguards, including HTTPS encryption in transit and database-level access control, so users can only read their own data. Despite our efforts, no internet transmission or electronic storage can be guaranteed 100% secure. If a data security incident occurs and applicable law requires it, we will notify affected individuals and/or the relevant supervisory authority as required.
9. Children's privacy
This service is intended for adults. We do not knowingly collect personal data from anyone under 18 (or the local age of majority). If you are a parent or guardian and believe we have inadvertently collected a minor's data, please contact us immediately so we can delete it.
10. Policy updates and contact
We may revise this policy from time to time in response to legal changes or service upgrades. The latest version is published on this page with its effective date. For any privacy question, or to exercise your rights, contact us at syy136882@gmail.com.