Privacy Policy

Effective date and last updated: October 5, 2026

This policy explains how NOONWAKE TECHNOLOGY (HONG KONG) CO., LIMITED (“Noonwake”, “we”, “us”) handles personal information when you use Zodsy, its mobile application, https://zodsy.noonwake.ai, and related services. Noonwake is the controller of the personal information described here. Zodsy accounts and histories are separate from accounts in other Noonwake apps.

1. Information we handle

• Account information: your email address, account identifier, email verification challenges, sign-in sessions, and records needed to protect your account. Zodsy uses email codes for sign-in.
• Birth profile: the birth date, birth time (if known), and birth city or region you provide, together with city coordinates and time zone used to calculate your chart. Birthplace is a place you choose, not a request for your device’s live GPS location.
• Learning and readings: lesson progress, reading topics and questions, calculated chart facts, AI processing choices, generated readings, follow-up questions, and saved reading and task history.
• AI guidance: messages, reading context, chart facts, responses, and conversation transcripts. In voice mode, we process the audio you explicitly record and AI-generated audio responses. Microphone access is requested for this feature; you may use text instead.
• Technical and security information: IP address, request timestamps, browser or app information included in requests, service errors, rate-limit information, and records used to investigate abuse and operate the service.
• Support communications: your email address, message, and any information or attachments you choose to send us.

Guest learning and profile data may be stored on your device. Signing in does not automatically import another Noonwake app’s data. Where offered, you choose whether to add this device’s birth details and learning progress to your Zodsy account.

2. Why we use information

We use information to sign you in, calculate charts, provide requested readings and guidance, save and synchronize your progress, recover tasks, answer support requests, honor privacy requests, and keep the service reliable and secure. We do not sell personal information or use Zodsy reading content for targeted advertising.

For users in the EEA or UK, the applicable legal basis depends on the processing: performance of our agreement for requested account and reading services; consent for optional AI sharing and microphone features where required; legitimate interests for proportionate service security and maintenance; and compliance with legal obligations. You may object to processing based on legitimate interests and withdraw consent for future optional processing.

3. AI processing and your choices

Before an AI reading request, Zodsy presents the configured provider, model, purpose, and information to be shared. The disclosure may also specify the processing region and provider privacy policy. You must agree to the current disclosure before sending the request. Reading workflows use Dify as orchestration software; the underlying model provider is identified in the in-app disclosure and may change between service configurations.

When you start an AI guide, the selected reading, chart facts, and your messages are shared with Alibaba Cloud (Qwen). Voice mode also shares the audio you choose to record. Depending on the service configuration, this processing can occur in Singapore or mainland China. Check the disclosure for the feature you are using and contact us if you need the current regional details before proceeding.

Zodsy retains conversation text and transcripts for account history where the feature provides it. Raw voice audio is relayed for processing rather than saved as a recording in the Zodsy account database. The AI provider may retain service records under its own applicable terms and privacy policy. We cannot promise that provider systems or backups erase all records immediately. Contact us about requests involving provider-held information.

We use your prompts and context to deliver your requested output. This policy does not authorize us to train our own general-purpose AI models on your private readings or conversations. Do not include passwords, financial account details, medical records, or personal information about someone else without their permission. You can decline AI processing and continue to use available non-AI learning features.

4. Service providers and disclosures

We disclose information as needed to providers that help operate Zodsy:

• Cloudflare: hosting this public website, delivering traffic, and network security.
• Amazon Web Services: application infrastructure and database hosting where used by the deployed service.
• Google Maps / Places: birth-city search, place coordinates, and time-zone resolution. City search text and the selected place are sent to Google for this purpose.
• SendCloud: delivery of sign-in and account-deletion email codes.
• AI providers: the provider named in the reading disclosure, and Alibaba Cloud for enabled AI guidance, as described above.

We may also disclose information when required by law, to protect people or the service, to advisers subject to confidentiality, or as part of a corporate transaction subject to applicable protections. We do not make your readings or conversations public by default.

5. Storage, cookies, and the public website

The public Zodsy website presents product and policy information. It does not provide account registration, take payments, or collect birth details. We do not add advertising pixels, analytics scripts, or marketing cookies to this website. Cloudflare processes network requests for delivery and security. If you email support, your message is processed by our email services.

The app uses local storage for guest details, preferences, and account caches. Native sessions use secure device storage; browser app sessions may use an essential sign-in cookie. Clearing device storage can remove local-only data. Signing out removes the previous account cache but does not delete the account from our servers.

6. Retention and deletion

We keep saved account information while the account is active and as needed to provide the service. Sign-in codes expire after 10 minutes. Other technical records are retained for the operational, security, or legal purpose for which they were collected, rather than indefinitely for unrelated use.

Verified account deletion removes the account’s email and birth profile, learning progress, saved readings, jobs, guidance history, budgets associated with the account, and active sessions from the live Zodsy account store. A minimal opaque deletion record is retained to prevent late-running tasks from recreating deleted data. Limited security records, legally required records, and backup copies may remain for their applicable retention period; access is restricted and they are not used to restore an active account. Provider-held workflow or AI records may require a separate deletion request.

See Account & Data Deletion for the in-app steps and an email request option that works without reinstalling the app. Uninstalling alone does not delete a server account. Guest-only data can be removed by clearing the app’s local data or uninstalling it, subject to your device’s backup settings.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict use of your information, object to certain processing, and withdraw consent. In the app’s Account screen you can export account data or start deletion. You can update your birth profile in the app. For other requests, email support@noonwake.com with “Zodsy privacy request” in the subject. We may verify control of the account email before acting. We respond within the time required by applicable law.

Residents of the EEA or UK may complain to their local data protection authority. Where applicable, US state residents may exercise privacy rights without unlawful discrimination and request an appeal of a denied request by replying to our response. An authorized agent may contact us; we may need evidence of authorization. We do not sell personal information or share it for cross-context behavioral advertising.

8. International processing and security

Noonwake is based in Hong Kong. Infrastructure, email, map services, and AI providers may process information in countries other than yours, including the United States, Singapore, and, for some AI configurations, mainland China. These countries may provide different legal protections. We are responsible for following applicable transfer requirements; accepting this policy does not waive those requirements. Contact us for information about the providers, destinations, and safeguards relevant to your request.

We use access controls, encrypted connections, protected account fields, and session revocation to protect information. No storage or transmission system can be guaranteed completely secure. Avoid sending unnecessary sensitive information.

9. Age and policy updates

Zodsy is intended for adults aged 18 or older and is not directed to children. If you believe a child has provided information to us, contact support so we can investigate and remove it where required.

We publish changes on this page with a new updated date. If a change materially affects how existing personal information is used, we will provide appropriate notice and obtain additional consent when required.

10. Contact the controller

NOONWAKE TECHNOLOGY (HONG KONG) CO., LIMITED

Room 701, Unit 108, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong.

Email: support@noonwake.com