Privacy Policy | Destiny Book

The essentials

Your birth time and place are used to calculate your chart and create your content. Stripe handles card payments in Hong Kong and Taiwan, and Alipay payments are handled by a third-party payment provider. We do not receive full card numbers, security codes, or Alipay account verification details. We do not sell personal information or use birth data and questions for advertising targeting. You can export or reset certain content in the product and contact us to request access, correction, or deletion.

1. Scope and contact

This policy applies to the Destiny Book website at mymingshu.com (formerly mingshu.help) and its accounts, BaZi charts, Destiny Book volumes, Book Q&A, cards, purchases, and related support services. “We” means the service provider responsible for operating Destiny Book.

It does not govern third-party sites or services you visit independently. For questions about this policy or our handling of personal information, email support@mymingshu.com.

2. Information we process

The information depends on the features you use and may include:

Account and sign-in data: Your email address, phone number, or the account identifier and basic profile data you authorize Google to provide. If you sign in with Apple, also the identifier Apple provides and, if you agree to share it, your Apple email address (which may be a private relay address); that address is used only to confirm who is asking when you cannot use the app and request deletion or another privacy right. Verification status, sign-in and session records, and hashed IP and browser characteristics used to prevent abuse. We do not store session tokens in plain text.
Birth and chart data: A nickname or name, gender, birth date, birth time and its certainty, birth place, time zone, coordinates and place identifier, together with calculated Four Pillars, Five Elements, Ten Gods, chart strength, Useful Element, other chart facts, and integrity hashes.
Content you submit or generate: Your initial reading, Destiny Book volumes, questions, follow-ups, Book Q&A history, feedback, saved cards, and the generation context, versions, and results kept to maintain consistency.
Orders and access rights: Product, amount, currency, market, payment provider and method, order and delivery status, provider transaction identifiers, Stripe billing or card country, unlocked content, and redemption-code use. The relevant provider processes full card numbers, security codes, and Alipay authentication details directly and does not provide them to us.
Usage, security, and device data: Language, source, coarse feature counts and similar events, plus network request, IP, browser or device type, time, and technical logs needed for security and diagnostics. Product analytics events expressly exclude names, birth date, time and place, questions, answers, and chart hashes. We also use Microsoft Clarity to record clicks, scrolling, and page changes so we can build heatmaps and session replays and improve our page design. Birth details, generated readings and Q&A, and sign-in and payment details are masked on your device and are not uploaded to Clarity.
Support and voluntary submissions: Email, communications, order evidence, language, and country or region that you provide when contacting support, submitting feedback, or joining a beta feature.
Content reports: When you report AI-generated content in the app, we collect the identifier and an excerpt of the reported content, the reason you chose, any note you write, and your language, platform, and app version. We use them only for manual review.
Using the app without signing in: When you use the app without signing in, we create an anonymous guest identity for your device and keep its guest credential in the device’s secure storage. The birth details you save, the charts and content generated for you, and the content and orders you buy in the app are stored on our servers under that guest identity, so we can prepare and restore them and move them into your account when you later sign in. If you uninstall the app or change devices, the guest credential may be lost, and content that has not been moved into an account cannot be recovered.

3. Why we use information

We process information only when relevant and necessary for these purposes:

Provide the core service: Convert calendars and time zones, calculate chart facts, show readings, answer questions, preserve versions, and let you access account content across devices.
Keep content consistent: Connect your question to the correct chart and existing Destiny Book so facts do not conflict across features.
Complete transactions and delivery: Create orders, confirm payments or redemptions, grant access, process refunds, and provide purchase support.
Sign-in and security: Send verification codes, maintain sessions, and prevent fraud, account abuse, unauthorized access, and bypassing paid-content controls.
Necessary communications: Send verification, transaction, and security notices and respond to support requests. We send beta or campaign messages only after you choose to sign up.
Improve the product: Use aggregated events that omit birth data and question content to check whether features work, diagnose failures, and improve the experience.

Depending on the law where you live, our legal bases may include performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in securing and improving the service. Where required, we request separate or explicit consent for birth details that may qualify as sensitive personal data.

4. How AI is involved

Calendar, time-zone, Four Pillars, and foundational chart facts are calculated by deterministic software; AI does not recalculate your chart. To create a reading or answer in your selected language, we send the configured AI service provider only the chart facts, question, relevant conversation, and writing instructions needed for that request.

An external AI processor may briefly retain requests and responses for security and abuse prevention under its service terms and may process them in another country. We do not ourselves use identifiable birth data, private questions, or generated content to train a public general-purpose model, and we do not use them for advertising targeting.

AI output can be incomplete or wrong and is provided for cultural interpretation and self-reflection. We do not make decisions with legal or similarly significant effects about you based solely on AI output. Do not include identity numbers, medical records, financial credentials, or another person's private information when they are unnecessary for your request.

In the app, before you first use AI generation we ask you to agree to send the birth details, chart facts, and questions needed for each request to the AI service provider. You can withdraw that consent in Settings at any time; after that the app starts no new AI generation.

5. Cookies and browser storage

We use cookies and browser storage for sign-in, language preferences and product flows, and for product analytics:

Sign-in and verification: The sign-in session cookie normally lasts up to 30 days; the Google sign-in flow cookie about 10 minutes; and verification codes about 5 minutes. Signing out or clearing cookies ends the relevant browser session. Compatibility and Fortune readings also use a separate guest-access cookie, normally valid for up to one year and renewed during active use. Signing out does not clear it. Clearing this cookie may prevent access to guest reports that have not been saved to an account.
Language preference: A language cookie lasts up to about one year so we can show your selected language on your next visit.
Local and session storage: Used to remember whether daily activity was already counted, the page-entry source, and temporary interface state. You can clear these through your browser settings.
Product analytics: Plausible provides aggregate traffic and feature statistics and does not receive account or guest IDs, birth details, questions, or answers. Microsoft Clarity uses cookies and local storage to recognize a single visit, which powers heatmaps and session replays.

7. International processing

Our infrastructure, sign-in, payment, SMS, or AI providers may process information outside your country or region. Where data is transferred internationally, we use contractual, access-control, or other reasonable safeguards required by applicable law and minimize what is sent. Data-protection rules vary by country.

8. Retention

Account, chart, Destiny Book, question, and generated content is generally retained while your account exists and it is needed to provide the service. Verification codes and temporary sign-in states expire sooner. Security logs, orders, payments, access rights, and anti-fraud records may be kept longer to meet legal duties, resolve disputes, and prevent duplicate delivery or abuse. Guest details and reports for Compatibility and Fortune readings are also stored on our servers for preparation, recovery and account syncing. Clearing browser access credentials does not automatically delete server-side reports or transaction records.

“Start over” deletes your current birth details, initial reading, life cards, Destiny Book content, unlock access, and in-product order history, but it does not delete your account. Payment, security, or dispute records that we must retain by law, along with limited backup copies awaiting normal rotation, may remain for the required period.

You can delete your account in Settings in the app. If you cannot use the app, follow the steps on the Delete your account page at mymingshu.com/account-deletion and we will delete it after confirming your identity. Deletion removes your birth details, charts, AI-generated content and Q&A, PDF files, usage records, content reports, and sign-in details at once, makes them inaccessible, and cannot be undone (the PDF files themselves are cleared in the background and retried if that fails); signing in again the same way creates a new account. Start over is different: it only clears your current details and content.

For reconciliation, refunds, and dispute handling, we keep order records and the related payment provider transaction records (order number, provider transaction ID, product, amount, currency, time, and payment status) for the period required by mainland China's accounting-records rules. During that period, these records can be traced to the payer through the payment provider. When you delete your account, the link between each order and your account is removed. While support emails are still kept, however, they contain the order number and your email address, so an order may still be matched to you. Records that Stripe, Apple, Google, and other payment providers keep themselves are covered by their own policies.

Support emails linked to your account or to one of your orders are kept for 540 days after the account is deleted, to handle chargebacks and refund disputes, and are then deleted. While they are kept they still show your email address and the order number. A message we could not link to an account or an order is treated as an ordinary support record, and the 540-day arrangement does not apply to it.

If a payment reaches us after the account was deleted, we only record it and deliver nothing. Email support@mymingshu.com if you want a refund.

Guest details created while using the app without signing in are stored on our servers in the same way. You can delete them at any time in the app: open Me and choose “Delete guest data on this device”. Content already moved into an account is not affected. The remaining birth details, charts, AI-generated content and Q&A, PDF files, guest credential, and AI data-sharing consent are deleted and cannot be restored. Order and other financial records are kept as described above but no longer point to this device. Deletion is not available while a payment is still being confirmed.

9. Security

We use encrypted transmission, access controls, hashed session tokens, hashed IP and browser characteristics, authorization checks, and paid-delivery validation to reduce unauthorized access, disclosure, and abuse. The relevant third-party payment page processes card details or Alipay authentication details directly.

No internet service can guarantee absolute security. Protect access to your email or phone and contact support@mymingshu.com immediately if you notice an unusual sign-in, content exposure, or suspicious transaction.

10. Your choices and rights

Depending on the law where you live, you may have the right to:

Access and know: Confirm whether we process your information and receive a copy or an explanation of that processing.
Correct: Update inaccurate account or birth data. Changes to birth data will affect later charts and content versions.
Export: Use the download feature in Settings to save the personal content currently available for export.
Delete: Delete Q&A entries where the product offers that control, reset the active workspace, delete your account in Settings in the app, or email support to request deletion of your account and related personal information. Records required for legal, payment, security, or dispute purposes may remain.
Withdraw consent or object: Withdraw consent where processing relies on it, or object to or restrict certain processing where applicable. Features that require the relevant data may then stop working.
Appeal or complain: Appeal our response and, where applicable, complain to your local data-protection authority.

Send requests from the email associated with your account to support@mymingshu.com. To protect your information, we may need to verify your identity. We respond within the period required by applicable law and do not discriminate against you for properly exercising privacy rights.

11. Children

The service is primarily intended for adults. Anyone below the age of majority or digital-consent age where they live should use it only after a parent or guardian reviews and accepts this policy and the Terms. We do not knowingly solicit personal information from children below the applicable minimum age. A guardian who believes a child submitted information without appropriate consent should contact us.

12. Changes and contact

We may update this policy as features, providers, or laws change and will revise the date at the top. When reasonably practical, we will give additional notice of material changes in the product, by email, or through another prominent method.

For privacy requests, account deletion, security incidents, or other questions, email support@mymingshu.com.