How Truenoon handles your data

For the free preview we collect the name, birth date, birth time (or an unknown-time choice), birth city or location, and sex selection used for traditional Da Yun direction. We collect a verified account email only when you sign in to unlock or recover a report. From the birth inputs we derive a resolved place label, coordinates, time zone, true-solar-time adjustments, chart facts, previews, and reports.

We also keep account and authentication references; intake, order, and report records; payment status, amount, currency, tax, refund, partial-refund, and dispute events; and limited request, cookie, and application-log data needed for security and troubleshooting. Truenoon does not receive your full payment-card details from Creem.

We use this data to create the requested chart and preview, generate and deliver a purchased report, process and reconcile payment, restore account access, answer support requests, prevent abuse, troubleshoot failures, and meet accounting, tax, dispute, and other legal duties.

Depending on applicable law, processing is based on providing the service you request and performing the purchase contract, legitimate operational and security interests, legal obligations, or consent where consent is specifically requested.

Supabase stores application records and provides authentication. Birth city is chosen from an offline index packaged with the application (SimpleMaps World Cities via city-timezones, plus a Chinese city coordinate set). That lookup runs in Truenoon's own process and does not send your typed location text to a third-party geocoder.

DeepSeek is off by default. Only when the operator explicitly enables it may DeepSeek receive chart facts stripped of direct identifiers to help draft report prose; Truenoon does not send it your name, email, or raw location. Creem acts as merchant of record and receives your email, product, order and session references, and a clean return URL so it can process payment, tax, refunds, and disputes.

Cloudflare Turnstile may receive a challenge token and limited request metadata to prevent abuse on the free intake form. Vercel hosts the application and may process request metadata and application logs. Each provider processes data under its own terms and the operator's account configuration.

Truenoon stores a language-preference cookie for up to one year. Supabase may set authentication-session cookies. Anonymous preview, processing, and report capabilities are held in HttpOnly cookies for up to seven days so secrets do not remain in ordinary page URLs.

Purchased reports open on Truenoon after Google sign-in. Keep account access private and contact support if you believe a session has been exposed.

Anonymous preview data that never enters checkout is automatically removed after the configured retention period shown on this page. Checkout and purchased records are retained while needed to reconcile payment, provide access, handle support, and satisfy accounting, tax, fraud, refund, and dispute obligations.

After a valid deletion request, the operator will delete or de-identify personal and report data that is no longer required. Financial or compliance records that must be kept by law remain only for the required period.

The countries and regions in which data is stored or processed depend on the operator's Supabase, DeepSeek, Creem, Cloudflare, and Vercel configuration. Cross-border processing may occur. The operator must configure any required transfer safeguards before launch; contact the privacy address above for the current setup.

Use the privacy contact above to request access, correction, deletion, restriction, objection, or a portable copy where applicable law provides those rights, or to withdraw consent for processing based on consent. We may need to verify your identity before acting on a request.

You may also complain to the relevant data-protection authority where that right applies. Withdrawing consent does not make earlier lawful processing invalid and does not remove records that must be retained for a legal obligation.

Truenoon is for adults aged 18 or older. Submit your own birth information, or information you are legally authorized to provide. Do not enter another person's data without permission.

We use access controls and private capability links, but no online service can promise absolute security. Keep report links and account access private, and contact support if you believe access has been exposed.