Privacy Policy

AMA — Thai-Chinese Calendar Life Planner

Effective: 1 July 2026

01 Introduction

We as the developer of AMA, is committed to protecting the personal data of all users. This Policy explains how we collect, use, disclose, and protect your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

AMA is a Thai-Chinese calendar life planner app combining Chinese metaphysics, Thai almanac, and dream interpretation for a personalized experience. Content is for entertainment and reflective purposes.

02 Information We Collect

Directly Provided Information

Data	Purpose	Status
First & Last Name	Personalize greetings & content	Optional
Date of Birth	Birth chart, zodiac, annual stars	Required
Time of Birth	Bazi (八字), ascendant, advanced calculations	Required
Place of Birth	Adjust planetary positions by location	Required
Email Address	Registration, auth, notifications	Required
Social account (Facebook/Google/Apple)	SSO login, content sharing	Optional

Automatically Collected

When you use the App, we automatically collect:

Device info: model, OS, Device ID
Usage behavior: screens visited, features used, session duration
IP address and country/region
Ad ID (IDFA for iOS / GAID for Android) for ad measurement

03 How We Use Your Information

Calculate Bazi (八字) charts, annual stars, birthchart
Maintain your usage history and saved content
Send auspicious date alerts and monthly star notifications
Show relevant ads — with your explicit prior consent
Improve the App using anonymized aggregate analytics
Detect and prevent fraud and security threats

04 Legal Basis for Processing (PDPA)

Under Thailand’s PDPA, we rely on the following legal bases:

Consent (Section 24(1)): Name, Social ID for ads, marketing emails
Contract Performance (Section 24(3)): DOB, time & place of birth, account email — required for core service
Legitimate Interest (Section 24(5)): Usage data, fraud prevention, security
Legal Obligation (Section 24(6)): When legally required to disclose

05 Third-Party Disclosure

We work with carefully selected partners bound by Data Processing Agreements (DPAs):

Firebase (Google): Database, authentication, push notifications
Meta / Facebook SDK: Ad measurement, Custom & Lookalike Audiences
Google Ads / Analytics: Usage analytics and campaign measurement
AppsFlyer / Adjust: Mobile attribution and install tracking
Stripe / Omise: Payment processing — we do not store card data
Partner Consultants: DOB, time & place of birth only — for consultation services

Some providers are based outside Thailand. We use Standard Contractual Clauses (SCCs) under Section 29 PDPA for international transfers.

06 Advertising & Marketing

The following data may be used for advertising — always with your explicit prior consent:

Email: transmitted as SHA-256 hash only — raw address never shared
Social ID: for Custom Audiences on Facebook/Instagram
Age group (inferred from DOB): ad audience targeting
Country/Region: geo-targeted ad delivery

⚠ Important: We will request your explicit consent before using personal data such as email or Social ID for advertising.

How to opt out of personalized ads:

Settings → Privacy → Advertising in the AMA app
App Tracking Transparency on iOS 14.5+
Reset or disable Ad ID via Google Settings on Android
Unsubscribe via the link in any marketing email

07 Data Retention

Data Type	Retention Period
Account & birth chart data	Active account + 1 year after deletion
Transaction data	5 years (Thai tax law)
Analytics data	Aggregate 90 days / Identifiable 24 months
Security logs	90 days
Consent records	Active account + 5 years after deletion

08 Your Rights as a Data Subject

Under the PDPA you have these rights — exercise them via Settings → Remove Account or email [email protected]. We respond within 30 days.

Right of Access (S. 30): Receive a copy of all personal data we hold
Right to Rectification (S. 35): Correct inaccurate or incomplete information
Right to Erasure (S. 33): Request deletion of your personal data
Right to Restriction (S. 34): Temporarily suspend processing
Right to Portability (S. 31): Receive your data as JSON or CSV
Right to Object (S. 32): Object to processing for direct marketing
Right to Withdraw (S. 19): Withdraw consent at any time without affecting prior processing

09 Data Security

Encryption: TLS 1.3 in transit / AES-256 at rest
Role-Based Access Control (RBAC): only authorized staff access personal data
SHA-256 hashing of all emails before transmission to ad platforms
Annual penetration testing and quarterly vulnerability assessments
Daily encrypted backups

In the event of a data breach: We will notify the PDPC within 72 hours and inform you immediately if there is a high risk to your rights.

10 Tracking Technologies

The AMA app (mobile) does not use traditional cookies, but uses equivalent technologies:

Firebase SDK: usage data and attribution tracking
Ad Tracking IDs (IDFA/GAID): disableable in device settings
Local Storage: session data and preferences on your device

11 Children’s Privacy

AMA is not intended for children under 13. We do not knowingly collect data from children. If discovered, we delete it immediately. Contact [email protected] if concerned.

12 Contact & Data Controller

Data Controller: AMA TEAM
Address: Dindaeng, Bangkok, Thailand 10400
Data Protection Officer (DPO): [email protected]
Support Email: [email protected]
Website: https://ama.muteluapp.com

If you believe your rights have been violated, you may file a complaint with the Office of the PDPC at www.pdpc.or.th.