Day Day Sze Mei – Privacy Policy

1. Key Points Up Front

1. 1.1
   Your Data Rights:

   • We never sell your personal data
   • We collect only what you share with us or what is generated when you use our services
   • You can use Sze Mei Astrology under a pseudonym
   • Even if you don't log in, basic technical data (e.g., IP address) is recorded to keep the Service secure and working
   • You may view, download, correct or delete your information at any time
   • Survey responses help us improve our astrology models; participation is always optional

   Questions? Email info@daydayszemei.com

2. How Do We Collect Information?

1. 2.1
   Sensitive Birth Data Collection and Processing. We acknowledge the sensitive nature of birth data used for astrological chart generation. We collect the following specific birth data fields:

   • Full date of birth
   • Precise time of birth
   • Birth location (city, country, latitude/longitude)

   Data Sensitivity and Protection:

   • (a) Birth data is considered highly personal and is subject to enhanced protection measures
   • (b) We anonymize and pseudonymize birth data through advanced cryptographic techniques
   • (c) Raw birth data is never shared with third parties
   • (d) Precise location data is generalized to protect individual privacy
   • (e) AI-generated insights are derived from anonymized, aggregated data sets

2. 2.2
   Cookies. We use first‑party cookies to keep you logged in and remember settings. Third‑party cookies/SDKs include:

   • Google Analytics – site and app usage statistics
   • Facebook Pixel (existing customers only) – ad effectiveness
   • Apple App Analytics / Google Play Console – crash and performance data

   You can disable cookies in your browser or device settings, but core features (e.g., viewing test results) may break.

3. 2.3
   Whether Information Must Be Provided. Contact details are needed to deliver purchases or respond to queries. If you decline to provide necessary data, some features will be unavailable.

3. How Do We Use Your Information?

1. 3.1
   General Data Processing. We rely on legitimate interests, contract, or consent to:

   • Email your astrology chart or purchase receipts
   • Recover passwords and secure accounts
   • Process payments and detect fraud
   • Personalise content (e.g., articles for your chart type)
   • Provide AI‑generated insights via Anthropic's API
   • Analyse usage to improve features (Google Analytics, Apple/Google dashboards)
   • Enforce Terms of Use and protect users (e.g., investigate abuse reports)

   Marketing emails are sent only with your explicit opt‑in; unsubscribe any time via the footer link.

2. 3.2
   AI-Generated Content Disclosure. The following provisions govern AI-assisted content generation:

   • (a) Accuracy and Limitations:
     • AI-generated insights are speculative and for entertainment purposes
     • We log prompts and outputs solely for quality control and model improvement
     • AI interpretations do not constitute professional advice
     • Users are advised to exercise critical judgment when interpreting AI-generated content
   • (b) AI Processing Consent:
     • By using our service, you consent to AI-assisted content generation
     • You may opt-out of AI processing at any time through account settings
     • Anonymized, aggregated data may be used to enhance AI model performance
   • (c) Future Service Expansion:

     We reserve the right to evolve our services, which may include:

     • Enhanced AI-driven astrological insights
     • Personalized recommendation systems
     • Expanded chart analysis features

     Any service expansion will adhere to this privacy policy and applicable data protection regulations.

4. International Transfers

1. 4.1
   International Data Transfers. We're based in Hong Kong but use trusted vendors worldwide. When GDPR applies, transfers outside the EEA/UK rely on Standard Contractual Clauses or equivalent safeguards.
2. 4.2
   Key Sub‑processors. We share only the minimum data each provider needs (e.g., email address for mail delivery).

   Key sub-processors: their purpose, provider name, and data processing location

   Purpose	Provider	Location
   Email newsletters	Mailchimp	USA
   Transactional email	Postmark / Microsoft 365	USA / EU
   Payments	Stripe, PayPal	Global
   Realtime messaging	Pusher	EU / USA
   Analytics	Google Analytics	USA
   Support desk	Zendesk / Help Scout	USA
   Team comms	Slack / Asana	USA
   AI generation	Anthropic	USA

5. Managing Your Information

1. 5.1
   Account Management. In Settings (web/app) you can:

   • Update email or display name
   • Toggle profile privacy
   • Manage notifications
   • Download your chart data
   • Delete your profile (anonymises your account)

   Deletion keeps comments, survey responses and logs—stripped of identifiers—to protect research integrity and site security.

6. How and When We Share Information

1. 6.1
   Data Sharing Practices. We share information in the following circumstances:

   • (a) Public profile & comments – visible to anyone unless you set the profile to private.
   • (b) Service providers – see table in § 4. All are bound by contract to process data only for us.
   • (c) Legal & safety – we may disclose data to law enforcement if required or if someone is in imminent danger.
   • (d) Corporate events – in a merger or acquisition, data may transfer under the same privacy commitments.

   We do not allow third‑party direct marketing and we show no third‑party ads.

7. Retention Periods

1. 7.1
   Data Retention Schedule. We retain different categories of data for varying periods:

   Data retention periods: different categories of data and how long we keep them

   Data category	Typical retention
   Payment & order records	10 years (tax law)
   Activity logs	12 months
   Transient tokens (invites, password resets)	90 days
   Account data	Until deletion or 2 years of inactivity
   Public comments & survey responses	Indefinite (research & free‑speech)

   Data is deleted or anonymised when no longer needed.

8. Children

1. 8.1
   Age Restrictions. The Service is not for users under 13, or under the digital‑consent age in their country. Parents: contact info@daydayszemei.com to request deletion of a child's data.

9. Your Rights (GDPR / UK DPA 2018)

1. 9.1
   Individual Rights. Under applicable data protection laws, you may:

   • Access or export your data
   • Correct inaccuracies
   • Erase certain data (“right to be forgotten”)
   • Restrict or object to processing in specific cases
   • Withdraw consent at any time
   • Lodge a complaint with your local supervisory authority

   Email info@daydayszemei.com from the address linked to your account; we'll respond within 30 days.

10. Security

1. 10.1
   Security Measures. We implement multiple security measures including:

   • TLS encryption in transit
   • AES‑256 encryption at rest for sensitive fields
   • Least‑privilege staff access with audit logs
   • Regular vulnerability scanning and penetration tests

   But no internet transmission is 100% secure—share data at your own risk.

11. Changes to This Policy

1. 11.1
   Policy Updates. We may update this Privacy Policy. Material changes will be highlighted in the app and on the website. Continued use after changes means you accept the new policy.

12. Contact

1. 12.1
   Data Controller:

   Abyss Culture Limited / 淵博文化有限公司

   Room 01, 40/F, 11 Hoi Shing Road, One Midtown, Tsuen Wan, Hong Kong

   info@abyssculture.com