Legal
Privacy Policy
Effective 28 October 2026 · Last updated 28 October 2026
This policy covers the Auspica apps for iPhone and Android (Auspica, Auspica Zi Wei and Auspica Qi Men), the website at meet.auspica.app, and the emails we send. It explains what we collect, why, who else sees it and how to get rid of it.
Contents
1 · Who we are and how to reach us#
The data controller is Propoa Pte. Ltd., a company incorporated in Singapore (UEN 202635624D). "We", "us" and "Auspica" mean that company.
As Singapore's Personal Data Protection Act requires, we have a Data Protection Officer, who you can reach at privacy@auspica.app.
2 · The short version#
- Your chart is calculated on your device.
- No account is needed for the free chart.
- We don't sell personal data, and we don't show ads.
- The app counts how it is used without knowing who you are: that it was opened today, which parts of the app were used, once a day each, a few steps such as finishing setup or seeing an offer, which of a short list of ways you say you found the app, once, and that something was shared. No account, name, birth details or device id goes with these counts. The Android app also collects app usage information, such as which features you use and for how long, together with a random app identifier and, if you are signed in, your account. We use it to improve the app and to help when you contact us. It is kept for up to 180 days. You can turn both off in Settings, App usage analytics. The app reports a crash when one happens, with the screen blanked out.
- You can delete everything at any time: see section 9.
3 · What we collect#
| Category | Examples | When | Why |
|---|---|---|---|
| Birth details you enter | Name or nickname, gender, birth date, birth time (optional), birthplace with coordinates and time zone | When you enter them. They stay on your device, and are copied to our servers only when you sign in to save and sync | To calculate your chart and your daily readings |
| Birth details someone shares with you | Their name, gender, birth date, birth time (optional) and birthplace, which they type in themselves | Only when they send you the link our share page makes. The details travel inside that link and never pass through our servers | To add them to your list, where they are kept like anyone else you add |
| People you add | The same details for family, partners or colleagues | When you add them. Only add people who are happy for you to | To read their chart alongside yours. Deleting a person deletes their data |
| Settings, saved dates, saved searches and your home | Language, theme, calculation settings, dates you saved, Date Finder searches you keep to run again, and for Feng Shui the direction your front door faces and a floor plan sketch if you draw one (rooms as rectangles, never a photo) | As you use the app | To keep the app the way you left it |
| Check-ins | How you said a day went (good, mixed or rough), if you answer the evening check-in | When you answer | To compare your days with their ratings. Kept on your phone, and in your account only when you are signed in |
| Life events (Auspica Zi Wei) | Moments you note on your timeline: a date, a kind (such as work, love, money, home, health or family), a short note of up to 80 characters and, if you add it, how it felt | When you add one | To place them on your chart's years and months. Kept on your phone, and in your account only when you are signed in |
| Your place, year, people and saved hours (Auspica Qi Men) | The place the hour chart is cast for, a city you choose or one named from your phone's approximate location if you tap Use my location, with its time zone; your birth year; the people you add there, a name and a birth year only; and the hours you save to the Journal, with how they went. People saved in your account from Auspica or Auspica Zi Wei also show in Qi Men, read from your account when you are signed in | When you enter them | To cast the hour chart for your place and to find where each birth year sits on it. Kept on your phone and never copied to our servers. The place is used only to cast the chart and point the compass, and leaves the phone only as its name in an issue report you choose to send. The Hour widget shows the hour worked out on your phone for your place, with no name or birth details. Removing a person who came from your account deletes them from your account too |
| Calendar feed (Pro) | A private link made for you, which we keep only in scrambled form. Each time your calendar app checks it, our website reads the birth details and settings saved in your account and works out your good days and clash days for the next 90 days | Only if you turn the feed on in the app, while signed in | To show your good days in your own calendar app. The days are worked out on each check and never stored. Anyone with the link sees those days, never your birth details; making a new link or turning the feed off stops the old one. The calendar app you subscribe with fetches those days and keeps them under its own privacy policy. The calendar file you can export instead is made on your phone and goes only where you send it |
| Account | Email address, or the identifier Apple or Google gives us. Sign in with Apple lets you hide your email | When you create an account | To sign you in and sync across devices |
| Devices signed in to your account | A random identifier the app keeps on the device, which is not a hardware identifier and may change if you reinstall; whether it is an iPhone or an Android phone, the model, the operating system version, the app version and which of our apps it is | When you sign in on a device, and at most once a day when the app opens | To email you when a device you have not used before signs in, with a link that signs out every device, to see how many devices an account really uses, and to see when an account last used each of our apps |
| Purchases | Plan, status, renewal dates, transaction IDs | When you subscribe | To give you Pro and keep records. The app stores and our payment processor handle card details; we never see full card numbers |
| Gifts | If you buy a gift: your email, the note you write for the card, and the payment's identifiers. The gift code is kept only in a one-way form that cannot be read back. If you redeem one: which account redeemed it, and when | When you buy or redeem a gift | To email you the code, to give the person you gave it to their year of Pro, and to handle refunds. The note is deleted once the gift is redeemed or refunded |
| Website quiz | Your email, and the birth details you entered | The chart is worked out in your browser. We store these only if you choose "Save your chart" | To send your chart and a sign-in link |
| iPhone app email | Your email address and the language of the page you gave it on, with the campaign tags on the link you arrived by, the site you came from and your country | Only if you ask on the website to be told when the iPhone app is out | To send you one email to confirm the address, and one on the day the iPhone app is available, and nothing else. Only a confirmed address gets the second. An address not confirmed is deleted seven days after its confirmation email; a confirmed one within seven days of the second email, or at once from the link in it |
| Emails | Sign-in codes, a welcome the first time you sign in to Auspica Zi Wei or Auspica Qi Men, receipts, reminders before a trial ends or a yearly plan renews, and the month email if you tick its box | When you sign in or pay, before a trial ends or a yearly plan renews, and on the day a new BaZi month begins | Marketing email only if you opt in, and every one carries an unsubscribe link |
| Website visit statistics | Pages viewed, browser and device type, approximate country from IP | As you use the website, counted without cookies | To see which pages help. Never birth details |
| Website step counts | Which kind of page was viewed (such as the almanac or the free chart, never its address) and the kind viewed before it in the same visit, which question of the free chart was shown, and that a free chart was finished, a checkout started or finished (with the plan and which app's Pro), a shared page opened, or an App Store or Google Play badge pressed; on the plans page, which app was chosen, that its plan card was seen, that the email field was used and an address looked valid, and whether the sign-in code step was shown, completed or left to change the email (never the address or the code); with the campaign tags on the link you arrived by, the site you came from, your country, and a random number made for the visit | As you use the website, without cookies. If you pay, the campaign is kept with your account until the payment is confirmed | To see which campaigns and links bring people. Never birth details, names, emails or IP addresses |
| App usage counts | That the app was opened on a day, and whether the icon, a notification, a widget or a link opened it, with the app version and update, the phone's platform (iPhone or Android), the app's language, your country, how many days since the app was first opened on that phone, and whether you are signed in and on Pro. Which parts of the app are used, such as Today, the Chart or the Almanac, once a day each. Also a few steps: setup finished, a person added, an offer shown and where, a purchase started or made, and a shared link opening the app. Once, at the end of setup, which of a short list of ways you say you found the app (a friend, social media, a search, the app store, a practitioner, somewhere else), or that you skipped the question. No account id, device id, name or birth details | As you use the app, at most one open a day and one count a day for each part used. Turn them off in Settings, App usage analytics | To see how many people use the app, whether new people come back, and which steps and countries matter, counted in total. Nothing sent can tell one phone or person from another |
| App usage information (Android app) | The features you use and for how long, a random identifier for this install, app version, device type, time zone and country; your account if you are signed in. Never your birth details or what you enter | While you use the app. Off in Settings, App usage analytics | To improve the app and to support you. Linked to your account when you are signed in |
| Share counts | That something was shared from the app, what kind (a card, a day or a link) and your country. Links you share from the app carry a random code made on your phone, and the website counts how often links with that code are opened and lead to a chart | When you share from the app (unless usage counts are off in Settings), and when someone opens a link you shared | To see whether sharing brings people, counted in total. The code is not your account and is never linked to it, your name or your birth details |
| Crash and error reports from the app | What went wrong and where in the code, app version, device model and operating system, the screen you were on, and a recording of the seconds around the error with every word and picture blanked out. Your account identifier is attached when you are signed in | Only when the app hits an error or closes unexpectedly | To find and fix the fault. The recording shows the shape of the screen and where you tapped, never what it said, so your chart, your name and the people you added stay unreadable |
| App update checks | A random identifier for this install of the app, the app version, whether it is an iPhone or an Android phone, and the IP address the request comes from | When the app opens, and when you come back to it after an hour or more | To deliver fixes to the app between store releases. Nothing about you, your chart or your account |
| Ask the Master (when available) | Your questions and chart facts worked out on your phone (never your name, birth date, time or place). In Auspica Zi Wei, when you ask about someone you saved, that person's chart facts worked out the same way, for that question only and labelled Person A. In Auspica Qi Men: the moment you ask about and that hour's chart, the matter, and the year stem (年命, from the birth year) of a person you include, yourself or someone saved; the names of people you mention in a question are replaced by labels such as Person A | Only after you agree in the app | Sent to our AI provider to produce an answer. The conversation itself stays on your phone |
| Support messages | What you write to us, and your email address | When you contact support | To answer you |
| Issue reports (Auspica Zi Wei and Auspica Qi Men) | What you write in Report an issue, an email address if you give one, up to three screenshots you choose, and details of the app and phone: the app version and update, the phone's platform, model and operating system, the app's language and the screen you came from. From Auspica Qi Men, also the place and time zone the chart is cast for, the current hour's chart (its 局 and moment), the theme and whether you are on Pro. Never a birth date or a person's name | Only when you send a report | To answer you and fix what went wrong. A report sent while signed in is tied to your account. You can delete a report, with its screenshots and replies, in the app |
| Not collected | Precise location, health data, advertising identifiers, or your contact list. If you turn on true north in the Feng Shui compass, your phone uses its location to find it, and the location never leaves the phone. Auspica Qi Men asks for your approximate location only when you tap Use my location or open the compass; the phone uses it to name your place and point the compass, and it is never sent to us. The contact picker reads only the name and birthday you choose. | ||
4 · How we use it, and our legal bases#
We use what we collect to calculate charts and readings, to run your account and subscription, to send transactional emails, to answer support, to keep the service secure and to improve it.
If you are in the EEA or the UK, our legal bases are: contract (running your account and subscription), consent (analytics where consent is required, marketing email, AI features, notifications), legitimate interests (keeping the service secure, understanding which pages and app features help from counts that identify nobody and, in the Android app, from app usage information you can turn off in Settings, preventing abuse) and legal obligation (tax and accounting records). You can withdraw consent at any time without affecting what came before.
5 · Who we share it with#
| Kind of provider | What for | Data | Where |
|---|---|---|---|
| Cloud database and sign-in | Your account, and keeping it in step across devices | Account, saved profiles, settings, saved dates, saved searches, home sketch, check-ins, issue reports with their screenshots, the record of signed-in devices, and app usage information from the Android app | Singapore |
| App stores and platform services | Sign in with Apple or Google, app distribution, App Store purchases, push notifications | Account identifier, purchase status, device token | Their own global infrastructure |
| Payment processing | Payments on the website, including gifts, and the billing portal | Email, plan, payment status, transaction IDs, and a gift's note for the card | Outside Singapore |
| Subscription management | Keeping Pro in step between the app stores and the website | Account identifier, plan and status | Outside Singapore |
| Email delivery | Sign-in, welcome, new-device, trial and renewal reminder, gift code, iPhone app, issue report reply and receipt emails | Email address, message content | Outside Singapore |
| Website hosting and security | Hosting meet.auspica.app, DNS, protection from automated abuse, email forwarding, visit statistics without cookies, and working out the calendar feed | IP address, request metadata, pages viewed, browser and device type, approximate country; for the calendar feed, your birth details and calculation settings, for the moment it takes to work out the days | A global network |
| Crash and error reporting | Telling us when the app breaks, so we can fix it | Error details, app version, device model and operating system, account identifier, and a screen recording with all words and pictures blanked out | United States |
| App update delivery | Checking for and delivering fixes to the app between store releases | Install identifier, app version, phone platform, IP address | United States |
| AI provider (Ask the Master, when available) | Answering your question, only with your consent | Your question and the chart facts needed to answer it | Mainland China |
Each provider may use the data only to provide its service to us. Providers can change as the service grows, so we describe them by what they do; write to privacy@auspica.app for the current list.
We may also disclose data where the law requires it (a court order, a regulator, or to protect someone's safety) and, if Auspica is ever sold or merged, to the buyer, who would be bound by this policy until it is replaced. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
6 · International transfers#
Our primary database is in Singapore. Some providers process data in other countries: crash and error reports from the app are held in the United States, app update checks are handled there too, and payment, subscription and email providers are outside Singapore too. The AI provider behind Ask the Master processes questions in mainland China, so the app asks for your consent first and sends chart facts only, never your name or birth details. Where that happens we rely on contractual protections: the European Commission's Standard Contractual Clauses and the UK Addendum where they apply, and comparable-protection undertakings under Singapore's PDPA, and we transfer only the data the provider needs.
7 · How long we keep it#
- Account data: until you delete the account.
- Quiz emails from people who don't subscribe: 12 months after we last wrote to you.
- iPhone app email: if the address is not confirmed, seven days from the confirmation email; if it is, until the one email on the day the iPhone app is available is sent, then at most seven days.
- Payment records: 5 years, as Singapore tax law requires.
- Gifts: kept with the payment records, 5 years. The note for the card only until the gift is redeemed or refunded.
- Crash and error reports: 90 days.
- Website step counts, app usage counts and share counts: 13 months. The campaign kept with a new account at checkout: until the payment is confirmed, and never more than 30 days.
- App usage information (Android app): 180 days, or until you delete the account.
- Calendar feed link: until you turn the feed off, make a new link, or delete the account. The good days it shows are never stored.
- A live reading's line: the details a viewer gives to join a streamer's line are deleted the moment that live session ends, however it ends (section 14). A session that is left open is ended by us ten minutes after the streamer's phone stops reporting in.
- Backups: purged within 30 days.
8 · Your rights#
You may ask us for access to your data, to correct it, to export it (in Auspica: Export my data; for Auspica Zi Wei and Auspica Qi Men, write to us), to delete it, to withdraw consent for AI features, marketing or notifications, and to object to processing based on legitimate interests.
These rights come from Singapore's PDPA, Malaysia's PDPA, the EEA and UK GDPR and California's CCPA/CPRA, depending on where you live. Under the GDPR you also have the right to complain to your data protection authority; in Singapore you may complain to the PDPC. Under the CCPA/CPRA you have the right to know, delete, correct and opt out of sale or sharing, and we do neither. We reply within 30 days, and we do not charge or treat you differently for asking.
9 · Delete your account#
- In the app: Me → Settings → Delete account in Auspica, or People → Settings → Delete account in Auspica Zi Wei or Auspica Qi Men. The three apps share one account, so deleting it in any of them deletes it for all three.
- On the web: meet.auspica.app/account → Delete account (sign in with a one-time email link).
- By email: write to privacy@auspica.app from your account address.
What's deleted: the account, your birth profiles, the people you added, your settings, your saved dates and saved searches, your home sketch, your check-ins, your Zi Wei life events, the issue reports you sent while signed in, with their screenshots, and the app usage information from your account and from the phones signed in to it. Deleting the account in Auspica Qi Men also clears what Qi Men keeps on that phone; to clear only the phone, use Settings → Delete all data on this phone in Qi Men.
What's kept: payment records for 5 years as tax law requires, and crash reports, which carry no birth details and lose the link to you once the account is gone.
Subscriptions: deleting your account cancels a subscription bought on the website, so you are not charged again; the period already paid for is not refunded. It does not cancel an App Store subscription: cancel that in Settings → your name → Subscriptions.
10 · Cookies and local storage on the website#
- Essential: a security cookie set by our hosting provider to protect the site from automated abuse. While you are paying, our payment provider sets its own cookies inside the payment fields, to run the payment and to spot card fraud.
- Visit statistics: counts page views, referrers, browser, device type and approximate country, without cookies or local storage and without tracking you across sites.
- Step counts: the website counts a few steps, such as a free chart finished or a shared page opened, without cookies. It also counts which kind of page you view, such as the almanac or the free chart, and the kind of page you viewed before it within the same visit, so we can see how people find their way around and where they stop; never the page's full address, what you searched for or anything you typed. The campaign tags on the link you arrived by, the site you came from and a random number for the visit are kept in the tab until you close it, and sent with those counts. Nothing that could identify you is sent, and a browser set to Do Not Track or Global Privacy Control sends nothing. On the plans page it also counts, for each app, a tap that chooses the app, its plan card coming into view, the email field being used and an address first looking valid, and the sign-in code step for an address that already has an account being shown, completed or left to change the email; never the address, the code or anything else you type. A checkout started counts the plan and which app's Pro it is. A link shared from the app can carry a random code made on the sender's phone; opening it sends that code with the count, so opens can be counted per code in total, never per person. Pressing an App Store or Google Play badge is counted the same way, and the link passes the campaign tags and the kind of page on to the store, so its install reports can show which campaign an install came from.
- Local storage: your theme choice, and your quiz draft and your chart, are kept in your browser so you can come back to them; the quiz draft and chart for 30 days. Signing in keeps your session there too, until you sign out. Copies of the pages you visit are kept in the browser's cache so they still open offline. The share page keeps the request, or the details someone shared, in the tab only until it is closed. The gift page keeps the email you gave and the length of your note there, for the thank-you page after you pay, and the gift redeem page keeps a gift code there while you sign in. None of this is sent to us, apart from the gift code when you redeem it.
11 · Security#
- Data is encrypted in transit and at rest.
- Each account can read only its own rows.
- Birth details are kept out of logs and crash reports.
- There is no advertising or tracking software in the app of any kind. Its usage counts and share counts carry nothing that identifies you or your phone. App usage information from the Android app carries the random install identifier and, when signed in, your account, and only we can read it. Settings, App usage analytics, turns all of them off.
No system is perfectly secure. If a breach affects you we will tell you and the relevant regulator as the law requires.
12 · Children#
Auspica is not directed to children under 13 (16 in the EEA and the UK), and we don't knowingly collect their data. If you believe a child's data is here, write to privacy@auspica.app and we will delete it.
13 · Practitioner Reports (when available)#
Client birth details and notes exist only in the consultant's browser and in the request that generates the PDF. We store neither the client data nor the finished report.
The consultant is the controller of their clients' data; we process it on their instruction. Of the consultant's own data we keep the email address, billing status, monthly report count and branding settings. See the Consultant Terms.
14 · Live chart readings on stream#
Streamer mode, in Auspica and in Auspica Zi Wei, lets a practitioner read viewers' charts on a live stream. A viewer joins the line from the streamer's link by giving a name to show on stream, a birth date, a birth time or “unknown”, sex and a birthplace, and ticks a line that says what appears on screen. No account is made and we never ask a viewer for a phone number or email.
What goes on stream. The name and the chart (the four pillars in Auspica, the twelve-palace board in Auspica Zi Wei), for as long as the streamer is reading that viewer. The birth date and time (and in Zi Wei the lunar date) appear only when the streamer has switched that on and the viewer did not tick “keep my date and time off stream”; the birthplace is never shown. The stream itself is on the platform the streamer uses (such as TikTok), under that platform's terms, and a recording or clip of it is outside our control.
Who sees the details. The streamer sees the full details on their own phone, to cast the chart. The stage page and other viewers' pages receive only what is shown on stream and an anonymous place in the line. The streamer is responsible for reading responsibly; our Consultant Terms bind them to that.
How long. The queue is deleted when the session ends: when the streamer ends it, when their phone stops reporting in for ten minutes, after 45 minutes with nothing happening, or at the trial limit. A viewer can leave the line at any time before being read, and nothing of theirs is kept afterwards. The streamer cannot save a viewer's details from the line. What remains is a count: how many joined, how many were read, and a random code on the streamer's link that lets us count the installs and subscriptions their lives bring, so creators can be paid a share. That code is never tied to a viewer.
The streamer's own data. A streamer's display name, where they stream, their company and a contact line they chose to show are stored with their account, as section 3 describes for account data, and shown on the stage and to viewers after a reading because the streamer asked for that.
Legal basis and your rights. For a viewer, consent given on the form, which can be withdrawn by leaving the line. For a streamer, our contract with them. Sections 8 and 9 apply in full; because a viewer's details are gone when the session ends, a request about them after that can only confirm that nothing is held.
15 · Sign in with Apple and Google#
When you sign in with Google, Google sends us the email address on your Google Account, basic profile information, and the account identifier Google issues for Auspica. We keep the email address and that identifier, which is all we need to create your account and to recognise you the next time you sign in. Sign in with Apple works the same way, and lets you hide your real address behind a relay address; everything we send works with it.
Auspica requests only the basic sign-in permissions: your email address and basic profile information. We never request access to Gmail, Drive, Contacts, Photos or Google Calendar. The reminders the app can create are written to the calendar on your own phone, with your permission, and never through a Google account. If you subscribe to the calendar feed from a calendar app yourself, that app fetches your good days from the link you gave it; your sign-in plays no part in it.
The email address signs you in, restores your saved people and settings on a new phone, and carries the transactional emails described in section 4: sign-in codes, welcome emails, new-device notices, trial and renewal reminders and receipts. We do not use it for advertising, we do not sell it, and we share it only with the providers in section 5.
Auspica's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google account data for advertising of any kind, including personalised, retargeted and interest-based advertising. We do not sell it, transfer it to data brokers or information resellers, or use it to judge credit-worthiness or for lending. We do not use it to build databases. We do not use it to develop, improve or train artificial intelligence or machine learning models, and the AI feature described in section 5 never receives it. Google account data is encrypted in transit and at rest, as section 11 describes, and it is deleted with your account (sections 7 and 9).
You can disconnect Auspica at any time in your Google Account, under Third-party apps and services, or in your Apple ID settings, under Sign in with Apple. That stops any further sign-in but does not remove what we already hold, so to delete everything, delete your account as well (section 9).
16 · Changes to this policy#
We update the "last updated" date whenever this policy changes. Material changes are announced in the app or by email before they take effect.
17 · Contact#
Propoa Pte. Ltd. (UEN 202635624D), Singapore. privacy@auspica.app for privacy, support@auspica.app for everything else. See also the Terms of Use and Support.