Privacy Policy (PDPA Notice)

Effective Date: January 1, 2026

1. Introduction

This Privacy Policy serves as a notice pursuant to the Personal Data Protection Act 2010 (PDPA) of Malaysia. It explains how YuanYu ('we') collects, uses, and discloses your Personal Data.

2. Collection of Personal Data

We collect the following data to provide our services:

• Metaphysical Data (Required): Birth Date, Birth Time, Gender, and Birth City. Purpose: This is strictly required to calculate your Bazi and Astrology charts using our algorithms. Without this, the App cannot function.
• Identity Data: Username, Email Address, and Profile Picture.
• Family/Third-Party Data: If you create profiles for family members ('Synastry' feature), you warrant that you have obtained their consent to provide their birth data to us.
• Device Data: Location data (for calculating True Solar Time based on longitude) and Bluetooth permissions (for TianMingHe hardware).

3. Use of Personal Data

We process your data for the following purposes:

• Service Delivery: To generate natal charts, daily fortune reports, and TCM health suggestions.
• AI Analysis: To provide natural language interpretations via third-party AI (e.g., OpenAI). We anonymize chart parameters (e.g., sending 'Day Master: Wood' instead of your name) whenever possible.
• Transactions: To process payments for Virtue Coins and Subscriptions.
• Notifications: To send you daily updates via OneSignal.

4. Disclosure of Data

We do not sell your data. We may disclose data to the following third-party data processors:

• Cloud Hosting: AWS/Google Cloud (Secure storage).
• AI Providers: OpenAI (For text generation).
• Payment Gateways: Stripe (For processing MYR payments).
• Law Enforcement: If required by a Malaysian court order or PDRM.

5. Cross-Border Transfer

Your data may be stored on servers located outside of Malaysia (e.g., Singapore or USA). By using the App, you consent to the transfer of your data to these jurisdictions, provided we ensure a standard of protection comparable to the PDPA.

6. Data Security

We implement strong security measures (Encryption, HTTPS, Secure Database access) to protect your data from unauthorized access, loss, or misuse.

7. Data Retention & Deletion

• We retain your data as long as your account is active.
• Right to Delete: You may permanently delete your account and all associated birth data by navigating to 'Account & Settings > Danger Zone' in the App.

8. Your Rights (Access and Correction)

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data (You can do this directly in the 'Profile Management' section).
• Withdraw consent for marketing communications.

9. Language

In accordance with Malaysian law, this Privacy Policy is available in English. In the event of any inconsistency between the English and Bahasa Malaysia versions (if provided in the future), the English version shall prevail.

10. Contact Us

For inquiries regarding your personal data, please contact our Data Protection Officer at: