How we handle your reading data

Ming Clarity provides Chinese-metaphysics readings and a personal decision compass for reflection and personal direction. This policy explains what personal data we collect, why we collect it, who helps us process it, and how you can ask us to access, correct, or delete it.

Who controls the data

Finnexion Oy, the operator of Ming Clarity, is the data controller for information submitted through the website, mobile APIs, and iOS app. For privacy questions or data requests, contact info@finnexion.com.

What we collect

• Birth details you enter: date, local time or unknown-time choice, city, and gender selection.
• Optional precise birthplace location if you tap the app's current-location button. It is used to refine true-solar-time chart correction and is not background location tracking.
• Your app language, selected focus area, and onboarding profile choices.
• Your email address for paid report delivery or when you choose optional follow-up emails. The free web preview does not require an email address.
• Email delivery status and event timestamps, linked to a hashed email-provider reference, to help diagnose missing report emails.
• Your selected reading focus and optional personal question if you choose to provide one.
• Generated reading data: BaZi chart, Zi Wei Dou Shu summary, I Ching cast, free preview, and paid report.
• Payment status, Stripe Checkout session identifiers for web purchases, StoreKit transaction metadata for iOS purchases, and Google Play purchase metadata for Android purchases. We do not receive or store full card numbers.
• Local notification preference status when the iOS app asks to schedule a daily prompt.
• Basic technical data needed for security, rate limiting, troubleshooting, and abuse prevention.

How we use it

• To calculate your BaZi, Zi Wei Dou Shu, and I Ching context.
• To generate and display your free preview or paid report.
• To process payment through Stripe and fulfill the report after successful checkout.
• To save paid reports to a personal return link and prevent duplicate generation.
• To process iOS and Android in-app purchases, restore purchases, and reconnect purchased reports.
• To email your paid report through Resend, check delivery status, and help resolve failed delivery.
• To send optional follow-up emails only after you actively opt in. We record the wording version, date, source and language of that consent.
• To schedule an optional local daily prompt notification on your device.
• To protect the service from spam, automated abuse, and repeated failed requests.
• To improve the product using aggregated, non-identifying observations where possible.

Legal bases

We process birth details, email, questions, and report data to provide the reading you request or purchase. We process optional precise location only when you choose to provide it in the app. We process payment and transaction records to fulfill purchases, restore access, prevent duplicate report generation, and meet basic accounting obligations. We process limited technical data for legitimate interests such as security, debugging, and fraud prevention. Optional website marketing emails rely on your explicit consent, which you can withdraw using the unsubscribe link. This does not affect delivery of a purchased report.

Service providers

We use carefully chosen processors to run the product:

• Stripe for hosted checkout, payment processing, receipts, and refund handling.
• Apple for App Store in-app purchases, StoreKit transactions, purchase restoration, and App Store refund handling.
• Google for Google Play in-app purchases, purchase verification, purchase restoration, and Google Play refund handling.
• Resend for transactional and reminder email delivery, with one-click unsubscribe for reminder email.
• AI language-model providers (currently Anthropic and Google) that draft the written interpretation from your calculated chart context, chosen topic, and optional question. They do not receive your email address or payment details, and they process this data under their API data-use terms rather than as public content.
• Upstash Redis when configured for durable report storage, lead capture, and rate limiting.
• Hosting and infrastructure providers used to serve the website and APIs.

These providers can process data in countries outside your own. Where required, production deployment should rely on provider data-processing terms and transfer safeguards such as standard contractual clauses.

Retention

• Your web reading draft is kept in session storage in your browser tab for up to two hours of inactivity. It does not include your email address or marketing consent. You can clear it in the reading form; it is cleared after successful paid-report retrieval.
• Optional follow-up email records include your address, selected topic and consent record, not your birth details.
• Cached mobile profile data may be stored on your device so the app can open quickly and refresh in the background.
• Paid reports are cached so the return page, personal report link, and payment confirmation flow do not generate duplicate reports.
• Email delivery event records in production storage expire 90 days after the last recorded event. These records contain statuses and timestamps, not email contents. Our delivery-event handler does not retain email-open or link-click events.
• Payment, StoreKit entitlement, and refund records may be kept as long as needed for tax, accounting, dispute, restoration, and fraud-prevention obligations.
• You can request deletion of reading data unless we need to keep limited records for legal, accounting, or dispute reasons.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. You may also have the right to complain to your local data-protection authority. To exercise a right, email info@finnexion.com.

Cookies and analytics

We do not use advertising cookies. The website uses Google Analytics for product measurement only after you accept it in the consent banner; if you decline, no analytics cookies are set and Google Analytics is never loaded. You can change your choice at any time via the "Cookies" link in the footer. IP anonymization is enabled and we do not use Google signals, remarketing, or cross-site tracking.

We also use Vercel Analytics, which measures page views and traffic sources in aggregate. It sets no cookies, does not store any identifier on your device, and cannot be used to identify or follow an individual visitor, so it runs without a consent banner. It is not affected by your Google Analytics choice.

Important limits

Readings are for reflection and self-discovery. They are not medical, legal, financial, or psychological advice, and they do not predict fate with certainty.