Zhai ← Back to site

Privacy Policy

Effective date: 6 June 2026  ·  Last updated: 6 June 2026

This Privacy Policy describes how Home Genie Pte Ltd ("we", "us", "our"), operating the Zhai property-fengshui and BaZi report service, collects, uses, stores, transfers and discloses personal data when you use our services. We aim to align with applicable data-protection laws in the jurisdictions where we operate and where our customers reside — including but not limited to Singapore's PDPA, the EU GDPR, the UK GDPR, and the California CPRA.

By submitting any personal data to us, you confirm you have read, understood and consented to this Policy.

1. What we collect

CategoryExamplesWhy
Identity dataName, email, gender (if provided)To address you in the report and send it to you
Birth dataDate, time, place of birthRequired to compute the BaZi natal chart
Property dataAddress, photos, floor plan (where provided), facing direction, move-in yearRequired for the property fengshui analysis
Partner / family dataBirth data for partner / children, if you choose to provide itOptional; only used if you submit it. You confirm you have permission.
Transaction dataOrder id, amount, payment statusTo fulfil your order (payments handled by our checkout provider)
Technical dataIP address, browser typeFraud prevention and basic site operation

We do NOT collect financial details (card numbers, bank info) — payments run through our payment processor. We never see your full card number.

2. Why we collect it

We use your data only to:

  1. Generate and deliver your fengshui or BaZi report (the "primary purpose")
  2. Communicate with you about your order — delivery, follow-up, questions you raise
  3. Improve our reports — using anonymized, aggregated patterns only. Individual identifiable data is never used for model training without explicit separate consent.
  4. Comply with legal obligations — tax records, regulatory requests, lawful court orders
  5. Send marketing emails — but ONLY where you separately opt in (see §5)

We do not sell or share your data with third parties for their independent marketing, profile you in ways that affect your pricing or eligibility, or use your data for purposes outside what you signed up for.

3. Sensitive data and birth data

Birth date + time is borderline-sensitive personal data in cultural contexts. We treat it with extra care: encrypted at rest, access restricted to the report-generation system, never used outside report generation, and deleted on request subject to the retention obligations in §9.

If you submit data for a partner, child, or third party, you confirm you have their permission (or, for children under 18, that you are their parent or guardian) to share their data with us for report generation. We rely on your representation; we do not independently verify.

4. Where data lives + cross-border transfers

Your data is processed by us and by the third-party providers below, some based outside your country of residence. By using our service you consent to these cross-border transfers:

ProviderWherePurpose
Anthropic (Claude API)United StatesGenerates report content from your intake + chart data
TallyEU (Belgium-hosted)Intake form submissions
ResendUnited StatesEmail delivery of your report
CloudflareGlobal edgeWebsite hosting and delivery
Payment processorUnited States / SingaporePayment processing

On Anthropic specifically: Anthropic does not train its models on customer API data by default. Our use of the Claude API is for one-time report generation only. Each transfer is either to a jurisdiction offering comparable data-protection standards under your applicable law, or is bound by the provider's own enforceable obligations (e.g. Standard Contractual Clauses for EU/UK data subjects).

5. Marketing consent

Buying a report and receiving the report-related emails (delivery, order follow-up) is operational. Receiving marketing emails (newsletters, offers) requires a separate opt-in. We show a clearly-labelled, default-unchecked subscribe option, include a working unsubscribe link in every marketing email, and honor unsubscribes within 7 days. You can withdraw marketing consent any time without affecting operational emails about your order.

6. Children

Our service is for adults (18+). By purchasing a report or submitting an intake form, you confirm you are 18 or older. We don't knowingly collect data from anyone under 18 as a primary customer. If you provide a child's birth data for family-compatibility analysis, you confirm you are their parent or legal guardian.

7. Your rights

Depending on your jurisdiction, you may have rights to: access a copy of your data; correct inaccurate data; withdraw consent; delete your data (subject to §9 retention); data portability; object to processing (e.g. marketing); and non-discrimination for exercising a privacy right.

To exercise these rights, email jiajun@homegenie.com.sg with your request. We respond within the timeframe required by your applicable law (typically 30 days). Withdrawing consent before report delivery may prevent us from completing a paid service; in such cases we refund the unused portion.

8. Data breach notification

We will notify affected individuals and the relevant data-protection authority promptly upon becoming aware of a notifiable breach, within the timeframes required by applicable law (typically 72 hours for EU/UK GDPR; 3 days under Singapore's PDPA regime). Notification will include the nature of the breach, data affected, our response, and what you can do to protect yourself.

9. How long we keep your data

DataRetention
Report + intake data12 months from delivery (follow-up, refunds, disputes)
Transaction recordsAs required by Singapore tax + accounting law (typically 5–7 years)
Anonymized aggregate patternsIndefinite (no longer identifies you)
Email subscription listUntil you unsubscribe
Audit logs12 months

10. Cookies and analytics

Our landing page is intentionally light. We use a single browser localStorage preference to remember your language choice (English / 中文). Our intake form (Tally) sets its own session cookies during submission. We do not use advertising or retargeting cookies, cross-site tracking pixels, or third-party advertising cookies.

11. Changes to this policy

If we change this policy materially, we'll email registered customers at least 14 days before the change and post a notice on the site. Continued use after the effective date constitutes acceptance.

12. Data protection contact

Privacy contact: Jiajun Tan (founder / authorised representative)
Email: jiajun@homegenie.com.sg (monitored; aim for ≤72h response)
Address: Home Genie Pte Ltd, 61 Ubi Road 1, #01-01, Singapore

13. Complaints

If you're unhappy with how we've handled your data, contact us first at the email above (we aim to respond within 7 days). If unsatisfied, you may escalate to the data-protection authority in your jurisdiction — e.g. Singapore: pdpc.gov.sg; UK: ico.org.uk; California: oag.ca.gov/privacy.

This Policy is written in plain English as a starting point. It has not yet been reviewed by a qualified lawyer for every jurisdiction in which we market or accept customers. We are finalising that review.