Privacy Policy

Effective date: 13 August 2026 · Last updated: 13 August 2026

Qia ("Qia," "we," "us," or "our") operates the website and application at findqia.com (the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the rights you have over it.

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Qia is operated by Jesslyn Tantomo, trading as Qia (ABN 25 516 818 574), based in Melbourne, Victoria, Australia. For the purposes of Australian privacy law we are the entity responsible for your personal information; for the purposes of the EU/UK GDPR we are the "data controller."

1. A quick summary

• We collect the information you give us to generate your Feng Shui reading — including your floor plan, details about your property, and (optionally) birth details for the people who live there.
• Some of this is sensitive information (for example birth details and life events such as a new baby or a health change). We only use it to create your reading, and only with your consent.
• To generate your reading we send your inputs to Google (Gemini), our AI provider, and to create your PDF we send your reading to a PDF rendering provider. We tell you who these are in Section 6.
• We do not sell your personal information.
• You can access, correct, download, or delete your data at any time — see Section 11.

This summary is for convenience only; the full policy below governs.

2. Information we collect

2.1 Account and identity

When you register or sign in we collect:

• your name and email address;
• a password (stored in hashed form by our authentication provider — we never see it in plain text); and
• if you choose "Continue with Google," basic profile information from your Google account (name, email, account identifier).

2.2 Your space

To produce a reading, we collect what you tell us about your property, including:

• property name, type (house, apartment, etc.), and where you are in your journey with it;
• location details (city, country, floor/storey, and year built or moved in);
• surroundings and environment;
• the rooms or spaces you ask us to read, with any notes and optional photos you add; and
• floor plan files you upload (images or PDFs), and the compass facing/orientation of the property.

2.3 People and birth details (sensitive information)

If you choose to provide them, we collect details about you and the people who live or work in the space, for Chinese zodiac, Kua, and BaZi analysis:

• name and relationship;
• gender (used only to calculate a Kua number); and
• date of birth, time of birth, and place of birth.

Birth details are optional — you can skip them or use the "I don't know the time of birth" option — but they improve the reading. See Section 3.

2.4 Intentions, life context and constraints

To make the reading relevant, we collect:

• your intention for the space (free text);
• recent life events you select (for example a move, a new baby, a job change, a health change, or a loss in the family); and
• practical constraints (renting or owning, rough budget, and notes such as pets or allergies).

Some of this may reveal health-related or other sensitive information. We treat it as sensitive (Section 3) and use it only to tailor your reading.

2.5 Readings we generate

We store the readings we create for you (text and the generated PDF) so you can revisit, download, or delete them from your dashboard.

2.6 Usage and device data

When you use the Service we automatically collect technical information such as IP address, browser and device type, operating system, pages viewed, and dates/times of access, for security, troubleshooting, and to improve the Service.

2.7 Cookies and similar technologies

We use only cookies and similar browser technologies that are strictly necessary to run the Service (for example to keep you signed in). Our website analytics (Cloudflare Web Analytics) is cookieless and does not track you across sites, and we do not use advertising cookies. See our Cookie Policy for details.

3. Sensitive information and your consent

Some information above — birth details, gender, and life events that may reveal health or family circumstances — is "sensitive information" under the Australian Privacy Act and "special category data" under the GDPR.

We collect and use this information only to generate the reading you request, and only where you have given consent by choosing to provide it. We do not use it for advertising or profiling, and we do not disclose it except to the service providers needed to deliver the reading (Section 6). You can withdraw consent at any time by deleting the relevant details or your account (Section 11); this won't affect processing already carried out.

Please avoid entering more sensitive detail than necessary — a reading does not require medical specifics, only the light context the form asks for.

4. How we use your information

We use your information to:

• create, deliver, store, and let you manage your readings and PDFs;
• create and secure your account and authenticate you;
• respond to your requests and provide support;
• operate, maintain, troubleshoot, and improve the Service;
• protect against fraud, abuse, and security threats; and
• comply with our legal obligations.

Where we rely on the GDPR, our legal bases are: performance of a contract (to provide your reading), consent (for sensitive data and any marketing), legitimate interests (to secure and improve the Service), and legal obligation. Under Australian law we collect and use personal information for these related primary purposes and will seek consent for any secondary use of sensitive information.

We will only send you marketing emails if you opt in, and you can unsubscribe at any time. Transactional messages (e.g., account or security notices) are not marketing.

5. AI processing of your reading

Qia generates readings using a third-party artificial-intelligence provider, Google (Gemini). When you request a reading, the inputs you provide — which may include property details, floor plan content, birth details, intentions, and life context — are sent to Google to produce your reading.

• Google processes your data to return your reading and is subject to its own privacy terms. See the Google Privacy Policy.
• As a precaution, please do not include more personal or sensitive detail than the reading requires.

6. Service providers we share data with

We share personal information only as needed to run the Service, with providers who are required to protect it and use it only for the purposes we specify. We do not sell your personal information.

• Lovable / Supabase (Lovable Cloud) — hosting, database, authentication, file storage, and sending account and security emails. Your account, readings, and uploaded floor plans are stored here.
• Google (Gemini) — generates your reading from your inputs (see Section 5). Google Privacy Policy.
• PDFShift — converts your reading into a downloadable PDF; your reading content is sent to PDFShift to render the file. PDFShift privacy policy.
• Google — if you use "Continue with Google" to sign in. Google Privacy Policy.
• Cloudflare — provides our domain, DNS/CDN, and privacy-friendly, cookieless Web Analytics (aggregate usage statistics such as page views and referrers; it does not set cookies or identify you). Cloudflare Privacy Policy.

We may also disclose information where required to protect our rights or comply with law (Section 10), or as part of a business transfer (e.g., a sale of the business), in which case we will require the recipient to honour this policy.

(We do not currently use a payment processor. If we add one — for example when paid features launch — we will update this policy first.)

7. Information about other people

If you enter details about other people who live or work in your space (for example a partner, family member, or child), you confirm that you are entitled to provide that information and, where required, have their consent. If you provide information about a child in your household, you confirm you are their parent or legal guardian. Please only share what is needed for the reading, and let those people know their details are being used.

8. International data transfers

Qia is operated from Australia, and our providers (Section 6) — including Google, Supabase, and Cloudflare — may store or process your information in the United States and/or other countries. Privacy laws in those countries may differ from your own. Where we transfer personal information overseas, we take reasonable steps to ensure it is handled securely and consistently with this policy and applicable law (including, for EU/UK data, appropriate safeguards such as Standard Contractual Clauses where required). By using the Service you acknowledge this transfer.

9. How long we keep your data

We keep your personal information for as long as your account is active or as needed to provide the Service. If you delete a reading or close your account, we delete or anonymise the associated personal information within a reasonable period, except where we must retain it to comply with law, resolve disputes, or prevent fraud. Backups may persist for a short additional period before being overwritten. Uploaded floor plans and generated PDFs are deleted when you delete the reading or close your account.

10. How we protect your data

We use commercially reasonable technical and organisational measures, including encryption in transit, access controls, row-level security on our database, and time-limited signed links for file downloads. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you and any regulator as required by law in the event of a data breach that is likely to cause serious harm.

We may disclose personal information where we believe in good faith it is necessary to comply with a legal obligation or lawful request, to protect our rights or property, to prevent or investigate wrongdoing, or to protect the safety of users or the public.

11. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct information that is inaccurate or incomplete;
• delete your information ("right to erasure");
• download/port your information to another service;
• restrict or object to certain processing; and
• withdraw consent at any time (including for sensitive data and marketing).

Many of these you can do yourself in the app (edit or delete readings, or delete your account). Otherwise, contact us at hello@findqia.com and we will respond within 30 days (or as required by law). We may need to verify your identity first.

• Australia: These rights reflect the Australian Privacy Principles. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
• EU/UK: You may lodge a complaint with your local data protection authority.
• California: You may request disclosure or deletion of your personal information and are entitled not to be discriminated against for exercising these rights. We do not sell or "share" your personal information as those terms are defined under California law.

12. Children's privacy

The Service is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information directly from children under 16. (Note: an adult account holder may include details about children in their household for the purpose of a reading — see Section 7.) If you believe a child has provided us with personal information directly, contact us at hello@findqia.com and we will delete it.

13. Links to other websites

The Service may link to third-party websites or apps we don't control. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

14. Changes to this policy

We may update this policy from time to time. For material changes we will notify you by email and/or a prominent notice in the Service before the change takes effect, and we will update the "Effective date" above. Please review it periodically.

15. Contact us

Questions, requests, or complaints about this policy or your data:

Email: hello@findqia.com