This page says plainly what we keep, why we keep it, who else sees it, and how to ask us to delete it. No legal gymnastics — just the facts.
When you request a profile or send us a lead, we collect only what is needed to deliver it:
We do not ask for your real name, phone number, home address, gender, occupation, or any financial details. We do not collect data you do not enter. We do not run advertising trackers, fingerprinting scripts, or cross-site analytics on this site.
We use your data for one purpose only: to compute and deliver your profile, and to reply if you ask a follow-up question. We do not use it for advertising, we do not train third-party ad models on it, and we do not build a profile of you for resale.
We set exactly one functional cookie: your language preference (lang = en or zh), so the site remembers which language you chose. It expires after one year. We do not set advertising cookies, analytics cookies, or tracking pixels.
We count page views and tool usage with our own first-party, cookie-free counter hosted on this website. Your IP address is never stored — only a one-way hash that rotates every day, so it cannot identify you across days and cannot be reversed. We also record an approximate country (derived at the network edge by our CDN) and a coarse device and browser family (desktop, mobile or tablet; Chrome, Safari, Firefox and so on). We never store your exact IP address, city, or precise location, and we do not use fingerprinting. This data stays on our Singapore server and is never shared with advertising or analytics companies.
When you generate an AI reading on the BaZi or Qi Men page, the chart data and anything you type into the question field are sent to our AI provider to produce the text. This step is what makes the feature work at all — there is no way to generate a reading without it.
What is sent is limited to:
We do not send your email address, your IP address, or any account information. The request is served through a paid commercial API whose terms restrict use of submitted content to delivering the service; we have no arrangement with that provider permitting any other use. We keep no copy of the AI request on our side after the reading is generated.
The provider operates its servers in mainland China, so this request briefly transfers the data listed above to that region for the sole purpose of generating the text.
If you would rather your data did not leave Singapore, simply do not press the AI reading button — chart calculation itself runs on our own server and involves no third party.
Browsing this site makes no third-party requests. Fonts (Cormorant Garamond, Manrope) are served from our own server, not from a font CDN, so no third party receives your IP address when a page loads. We load no third-party JavaScript, no external stylesheets, no tracking pixels, and no embedded widgets. The only infrastructure involved in delivering a page is our CDN, which terminates the connection and forwards the request to our server in Singapore under a data processing agreement. The two exceptions are the optional AI reading described above, and the payment provider if you buy something.
If you pay for a profile, payment is processed by a third-party payment provider (e.g. Stripe or similar). We never see or store your card number — the provider handles that, and we only receive a confirmation that payment succeeded and the email to deliver the profile to.
Your email is kept on file so we can support follow-up questions and send your profile again if you lose it. Your birth date / time / place is kept only while your profile is active. Logged IP addresses expire within a short window (typically days, not months). If you ask us to delete your data, we remove it from active systems and from backups within the standard backup rotation.
You can, at any time:
To exercise any of these rights, email us at hello@xunhk.com. We will respond within a reasonable time — typically within a week.
For any privacy question, data deletion request, or concern, reach us at: hello@xunhk.com.