Privacy Policy

1. Who we are

trio operates the Service and acts as the data controller for the personal data described below.

Privacy enquiries: privacy@trika.mindnov.site. General support: support@trika.mindnov.site.

2. Data we collect

Account data: your phone number and/or email address, password hash (we never store plain-text passwords), nickname, language and theme preferences.

Social sign-in data: if you sign in with Google, Facebook or Apple, we receive your account identifier for that platform, and, where available, your email address, public display name and avatar URL. Social accounts may not have a phone number or password.

Birth details: the name label, date, time (or a note that the time is unknown), gender and optional birthplace you enter for yourself or for people whose charts you create.

Readings and usage: the type of reading requested, generated interpretation text, timestamps and daily quota usage.

Technical data: IP address, browser type and version, device type, request logs and error logs.

Payment data: the Service is currently free. If paid plans are introduced, payments will be processed by our payment provider (currently Stripe); we do not store full card numbers.

3. How we use your data

To create and secure your account, verify your email and sign you in.

To calculate charts, the almanac, synastry and AI-generated readings you request.

To enforce daily quotas, prevent abuse, troubleshoot failures and keep the Service stable.

To respond to support requests, comply with legal obligations and enforce our Terms of Service.

4. Legal bases

We process data to perform our contract with you (providing the Service), with your consent (for optional features and social sign-in), for our legitimate interests (security, fraud prevention, service improvement) and to comply with the law.

Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before withdrawal.

We process personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and other laws that apply to us.

5. Sharing and processors

We do not sell your personal data and do not share it for advertising.

We share the minimum necessary data with service providers who help us operate the Service: cloud hosting, SMS delivery, AI model providers used to generate readings, and payment processing where applicable. These providers are bound by confidentiality and data protection obligations.

When you choose social sign-in, the relevant provider (Google, Facebook or Apple) authenticates you under its own privacy policy. We only receive the data listed in section 2.

We may disclose data if required by law, to protect safety, or in connection with a merger or acquisition, subject to appropriate safeguards.

6. International transfers

Our servers and service providers may be located outside Malaysia. Where data is transferred across borders, we take reasonable steps to ensure it receives an adequate level of protection.

7. Retention

Account data is kept while your account is active. Deleting your account removes your birth profiles, readings and account record, except records we must keep for legal, tax or dispute-resolution purposes.

Server logs are kept for a short period, normally no more than 90 days, unless needed to investigate a security incident.

8. Security

We use HTTPS for data in transit, hash passwords, restrict access to production systems and keep software up to date.

No method of transmission or storage is completely secure. Please use a strong, unique password and keep your sign-in credentials private.

9. Your rights

Subject to applicable law, you may access, correct or delete your personal data, withdraw consent, object to or restrict certain processing, and request a copy of data you provided.

You can edit or delete birth profiles and delete your account on the Account page. If you signed in only with a social account, email privacy@trika.mindnov.site and we will verify and delete your account for you.

You may also lodge a complaint with the relevant data protection authority.

10. Cookies and local storage

We use a sign-in cookie to keep you logged in and local storage to remember your language and theme. These are necessary for the Service to work.

We do not use advertising cookies or third-party analytics trackers.

11. Children

The Service is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will delete it.

12. Changes

We may update this policy as the Service evolves. Material changes will be announced in the app, and the "last updated" date above will change.

13. Contact

Questions or requests about privacy: privacy@trika.mindnov.site.

14. Google APIs, social sign-in data and AI-generated content

When you sign in with Google we request only the openid, email and profile scopes. We receive your Google account ID, email address, display name and avatar URL, and use them solely to create and authenticate your account. We do not request or read Gmail, Drive, Calendar, Contacts or any other Google service data.

Google user data is never sold, never used for advertising, and never used to train machine-learning or AI models. Readings are generated by a separate AI model provider from the birth details you type into the Service, not from your Google data.

三知 trio does not use Google APIs for AI NCII (AI-generated Non-Consensual Intimate Imagery). We do not use Google APIs to create, request or distribute non-consensual intimate imagery, sexual content involving any person, or any other content prohibited by the Google APIs Terms of Service or the Google API Services User Data Policy.

You can revoke our access at any time in your Google account settings, and you can delete your account and all associated data as described in section 9.

一、我們是誰

本服務由 trio 營運，我們是下述個人資料的處理者。

隱私相關聯絡：privacy@trika.mindnov.site；一般客服：support@trika.mindnov.site。

二、我們收集的資料

帳號資料：手機號碼及／或電子郵件、密碼雜湊值（我們不保存明文密碼）、暱稱、語言與主題偏好。

第三方登入資料：若你使用 Google、Facebook 或 Apple 登入，我們會收到該平台的帳號識別碼，以及平台提供的電子郵件、公開名稱與頭像網址。純社交帳號可能沒有手機號碼或密碼。

出生資訊：你為自己或他人建立的稱呼、出生日期、時辰（或標記為時辰不詳）、性別與可選出生地。

解讀與使用記錄：解讀類型、生成的解讀內容、時間與每日額度使用情況。

技術資料：IP 位址、瀏覽器類型與版本、裝置類型、請求與錯誤日誌。

付款資料：本服務目前完全免費。若未來推出付費方案，付款將由付款服務商（目前為 Stripe）處理，我們不保存完整卡號。

三、我們如何使用資料

建立與保護你的帳號、完成電子郵件驗證與登入。

計算你要求的命盤、萬年曆、合盤與 AI 解讀內容。

執行每日額度、防止濫用、排查故障並維持服務穩定。

回覆客服請求、履行法律義務並執行服務條款。

四、處理依據

我們基於履行與你的契約（提供本服務）、你的同意（選用功能與第三方登入）、我們的正當利益（安全、防詐、服務改善）以及法律要求來處理資料。

若我們依賴你的同意，你可以隨時撤回；撤回不影響撤回前已進行的處理。

我們依馬來西亞《2010 年個人資料保護法》（PDPA）及適用法律處理個人資料。

五、分享與受託處理者

我們不會出售你的個人資料，也不會將其用於廣告分享。

我們僅向協助營運的服務商提供最少必要的資料，包括雲端主機、簡訊發送、用於生成解讀的 AI 模型服務商，以及（如適用）付款服務商。這些服務商受保密與資料保護義務約束。

當你選擇第三方登入時，Google、Facebook 或 Apple 依其自身隱私政策完成驗證，我們僅接收第 2 節所列資料。

除法律要求、保護人身安全，或合併收購等情形（並採取適當保障）外，我們不會向第三方披露你的資料。

六、跨境傳輸

我們的伺服器與服務商可能位於馬來西亞以外。跨境傳輸時，我們會採取合理措施確保資料獲得適當保護。

七、保存期限

帳號資料在帳號存續期間保存。刪除帳號後，我們會刪除出生檔案、解讀記錄與帳號資料，但依法需保留的交易或爭議處理記錄除外。

伺服器日誌僅短期保存，一般不超過 90 天，除非需要用於調查安全事件。

八、安全

我們使用 HTTPS 傳輸、密碼雜湊、生產環境存取控制並持續更新軟體。

任何傳輸或儲存方式都無法保證絕對安全，請使用高強度且不重複的密碼，並妥善保管登入憑證。

九、你的權利

在適用法律範圍內，你有權查閱、更正或刪除個人資料、撤回同意、反對或限制特定處理，並取得你提供資料的副本。

你可以在「我的」頁面編輯或刪除出生檔案，並刪除帳號。若你僅使用第三方帳號登入，請來信 privacy@trika.mindnov.site，我們會在核實後為你刪除帳號。

你也可以向相關個人資料保護主管機關提出申訴。

十、Cookie 與本機儲存

我們使用登入 Cookie 維持登入狀態，並以瀏覽器本機儲存記住語言與主題；這些是服務正常運作所必需。

我們不使用廣告 Cookie，也不使用第三方流量分析追蹤器。

十一、未成年人

本服務面向 18 歲以上人士。我們不會在知情情況下收集未成年人資料；若你發現未成年人提供了資料，請與我們聯繫，我們會盡快刪除。

十二、政策更新

我們可能隨服務調整更新本政策，重大變更會在站內提示，並同步更新上方「最後更新」日期。

十三、聯絡我們

隱私相關問題或請求：privacy@trika.mindnov.site。

十四、Google API、第三方登入資料與 AI 生成內容

使用 Google 登入時，我們僅請求 openid、email、profile 三個權限範圍，取得你的 Google 帳號識別碼、電子郵件、顯示名稱與頭像網址，且僅用於建立帳號與登入驗證。我們不會讀取你的 Gmail、雲端硬碟、日曆、通訊錄或任何其他 Google 服務資料。

Google 使用者資料绝不出售、不用於廣告，也不用於訓練任何機器學習或 AI 模型。解讀內容由獨立的 AI 模型服務商依你在本服務中輸入的出生資訊生成，與你的 Google 資料無關。

三知 trio 不使用 Google API 生成 AI NCII（AI 生成的非自願私密影像）。我們不使用 Google API 生成、索取或散布非自願私密影像、涉及任何人的色情內容，或任何違反《Google API 服務條款》及《Google API 服務使用者資料政策》的內容。

你可以隨時在 Google 帳號設定中撤銷授權，並可依第九節說明刪除帳號與全部相關資料。