Privacy Policy

This policy explains what Mingpath collects, why, who receives it, how long it is kept and your rights. Controller: the individual operator of Mingpath (hello@mingpath.app). We follow the principles of Singapore's PDPA and the EU GDPR, and comply with the personal-information law of the operator's place of residence.

What we collect

• Birth data (date, time, place, gender): the free BaZi chart is computed in your browser and not uploaded; the Zi Wei chart is computed by our API and discarded straight after, not stored. Birth data is stored in your account when you pick a question and leave an email, save a chart, or buy.
• Email: to sign you in and help you find your way back, and to tell you when a book is ready and before renewals; books are not emailed (they open in My account); no marketing. With Google sign-in we receive only your email address and whether Google has verified it; no contacts or other profile data.
• What you wrote and chose (“What Mingpath remembers”): chosen questions, follow-ups, “this month's river”, things you asked Mingpath to remember, your choice in the Zi-hour check, and facts you stated yourself in follow-ups (never inferences). Used only to make your next book fit you better; delete any line, or all of them, under “What Mingpath remembers” in My account, and it no longer reaches any later book or answer.
• Payment data: handled by our merchant of record, Waffo Pancake (with Dodo Payments as an alternative provider). We receive order and subscription status and amounts, never card numbers, and record when you clicked the buy or subscribe button (agreeing to the terms and refund policy).
• Usage events: anonymous page- and button-level events (e.g. “chart done”, “preview viewed”) without email, birth data or your text.
• Technical data: IP addresses, used briefly for rate limiting and abuse prevention.

Who receives it (processors)

• Cloudflare: hosting, database and queues.
• Anthropic: when a book or answer is written, or “What Mingpath remembers” is summarised, chart facts, your question and notes are sent to its model API; under its API terms they are not used for training.
• Resend: email delivery.
• Google: only if you choose Google sign-in, to confirm your identity and email.
• Waffo Pancake (with Dodo Payments as an alternative provider): payments and tax as merchant of record, an independent controller under its own privacy policy.

These providers may process data outside your country; we use only providers offering appropriate safeguards. We do not sell or share personal data for advertising and do not build profiles.

Cookies and local storage

One strictly necessary sign-in cookie (mp_s, HttpOnly): a limited session when you have only left an email (preview and checkout), a full one once your email is verified. Your chart and preferences are kept in your browser's local storage. No advertising or cross-site tracking.

Retention and deletion

Account data is kept until you delete it. In My account choose “Delete my data”; we email a confirmation link, and opening it deletes your account, charts, books, follow-ups, everything Mingpath remembers and your daily-card subscription on the spot, cancelling an active membership. Transaction records keep only order id, amount and status (no longer linked to you), plus what the merchant of record must keep by law; to handle payment disputes and exceptional refunds we keep a one-way hash of your email and a refund record, not the email itself. You can also write to hello@mingpath.app.

Your rights

You can ask to access, correct, export or delete your data, withdraw consent or object to processing, and complain to your data-protection authority.

Children

The service is for people 18 and over; we do not knowingly collect data from minors.

Last updated 2026-11-08.