Legal · Effective 2026-05-04
Privacy Policy
Quick summary
- SoulSchema is anonymous by default. You do not need an account to use the chart service.
- We collect your birth date, birth time, birth place, gender, and email address only to generate and deliver your chart.
- We use trusted processors: Cloudflare (anti-abuse), Google Places (location search), Resend (email delivery), and large-language-model providers (for English report polishing).
- We do not sell your data, and we do not use it for advertising.
- You can request deletion at any time by emailing support@soulschema.com.
1. Who we are
"SoulSchema," "we," "us," and "our" refer to Arwin Wu, who operates SoulSchema as a sole proprietorship based in Hong Kong SAR and acts as the data controller for the personal information described in this policy. This Privacy Policy explains how we handle personal information when you use SoulSchema.
2. What we collect
To generate and deliver a Four Pillars chart, we ask you for:
- Birth date and time — required to compute the four pillars and timing analysis.
- Birth place (a place you select from Google Places) — required to apply true-solar-time correction and to determine the local time zone.
- Gender (female / male) — required because Four Pillars luck-period direction and a few relationship-related themes depend on this parameter.
- Email address — used solely to send you the link to your chart page so you can find it again later.
We also automatically collect minimal technical signals when you visit: anonymized fingerprints (hashed) for visit and session counting, the page path, your browser-reported language, and approximate environmental context (referrer, user-agent). We do not use third-party advertising trackers.
3. Why we collect it (lawful basis)
Our processing of your birth information and email is necessary to perform the chart generation service you have requested. Where you are in a region with explicit consent rules (such as the EU under the GDPR), the act of submitting the form constitutes your informed consent for us to process the data for the purposes described here. We do not process your data for any other purpose without telling you first.
4. How we use it
- Computing your Four Pillars chart through our calculation engine.
- Generating an English report for the seven theme sections (Core Self, Emotional Pattern, Love & Relationships, Social Style, Career Direction, Money & Resources, Growth Lesson).
- Sending you a one-time email with the link to your chart page so you can return to or share it later.
- Reusing existing computed reports for the same input to avoid unnecessary regeneration cost.
- Operating the site (anti-abuse, error monitoring, aggregate usage statistics).
5. Third-party processors
We rely on the following processors. We only share the minimum data each one needs to do its part:
- Cloudflare Turnstile — verifies that the form is being submitted by a human and not a bot. Cloudflare receives anonymized signals from your browser; it does not see your birth information.
- Google Places (Maps Platform) — powers birth-place search and resolution. Google receives the search text you type and the place ID you select.
- Resend — delivers the chart-page email to you. Resend receives your email address and the chart link.
- Large-language-model providers — we send your bounded chart-assertion package (no email, no exact birth time, no birth place name) to a configured LLM provider (currently Qwen / Alibaba Cloud Bailian, configurable to OpenAI or Anthropic) to polish the English report text.
- Hosting infrastructure — our database and application servers run on Fly.io. Operational backups are managed by Fly.io.
Each of these providers operates under its own privacy policy and applicable data-processing terms.
6. Data location and international transfers
Personal data may be processed in regions outside Hong Kong SAR, including the United States and other jurisdictions where our processors operate. Where required by applicable law, transfers rely on standard contractual clauses or equivalent safeguards.
7. How long we keep it
- Chart history records (your submitted birth info and generated chart): up to 24 months from the last access. After that, records are automatically deleted unless you have explicitly opted in to keep them as part of a future member account.
- Email address: stored alongside the chart record under the same retention policy. We do not move it onto a marketing list.
- Operational logs and failure events: kept for 90 days for debugging and abuse investigation, then deleted.
8. Your rights
You can ask us, at any time, to:
- Tell you what data we hold about you.
- Correct any inaccurate data.
- Delete your data.
- Provide a copy of your data in a machine-readable form.
- Stop processing your data for a specific purpose.
Send your request to support@soulschema.com. Include the email address you used to submit your chart so we can find your records. We respond within 30 days and never charge for these requests.
If you are in the EU/EEA or the UK, you may also lodge a complaint with your national data-protection authority. If you are in California, you have additional rights under the CCPA, including the right to know what personal information is collected and to opt out of any sale of personal information (we do not sell your data).
9. Cookies and tracking
We use only the cookies and local-storage entries that are strictly necessary to make the site work — for example, a small marker that helps the result page recognise the browser that originally created the chart so we show "Your chart is ready" instead of the default share-prompt view. We do not run third-party advertising trackers.
10. Public chart links
When your chart is generated, we issue a randomly generated public link (for example, /natal-chart/abc12345). Anyone who has this link can view that chart page. We do not list the link anywhere public, but it is designed to be shareable. Treat the link the way you would treat a private photo album link: share it deliberately. If you want a chart link permanently disabled, email us and we will remove the record.
11. Children's privacy
SoulSchema is not directed to children. The service is intended for users aged 16 and over. We do not knowingly collect personal data from children under that age. If you believe a minor has submitted information to us, please contact support@soulschema.com so we can delete the record.
12. Security
We use TLS for all traffic, store data in managed PostgreSQL with at-rest encryption provided by our hosting platform, and keep API credentials only as deployment secrets. No system is perfectly secure; we recommend not sharing your chart link with anyone you would not trust with the underlying birth information.
13. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced on the site and the effective date at the top of this page will be updated. Continuing to use SoulSchema after a change means you accept the updated policy.
14. Contact
For any privacy question or request, email us at support@soulschema.com.