SuperMBTI Privacy Policy

1.1 Account information: the email address you provide at registration, used to create and identify your account and send login verification codes. We do not collect passwords (login uses email verification codes).

1.2 Basic profile (optional): gender, age band, and occupation, used to tailor the analysis. You may omit any of these fields.

1.3 Questionnaire content: your answers to the 30 open-ended questions and any follow-up questions during an assessment. This is the core information processed by the Platform.

1.4 Service records: access-code redemption records, assessment creation/completion timestamps, report generation records, and other operational logs.

1.5 We do not actively collect: real names, government IDs, biometric data such as facial images, precise geolocation, contact lists, or financial accounts. Please do not provide such information during registration or in your answers.

2.1 Creating and managing accounts; sending verification codes and service notices;

2.2 Submitting your answers and basic profile to an AI model for analysis and generating personality exploration reports;

2.3 Maintaining assessment progress (resume where you left off), generating and downloading report files (PDF);

2.4 Processing access-code redemptions and referral rewards;

2.5 Keeping the service safe (anti-abuse, anti-fraud, troubleshooting).

2.6 We do not use your information for automated decision-based pricing, personalized advertising, or any purpose unrelated to this service.

3.1 Under the Personal Information Protection Law of the People's Republic of China (PIPL), your answers to open-ended personality questions may reveal your psychological state, emotions, relationships, and life circumstances, and therefore constitute sensitive personal information.

3.2 We process such sensitive personal information only after you check the consent box for the Terms of Service and this Privacy Policy at registration and actually begin answering questions.

3.3 You control how much detail to share and which topics to address. If there is anything you do not wish to be analyzed or retained, please do not include it in your answers.

4.1 Reports are generated automatically by artificial intelligence models. To perform the analysis, the original text of your answers and your basic profile are transmitted to the third-party large-model provider corresponding to the model in use (currently DeepSeek; this page will be updated if providers change).

4.2 Such providers process the relevant information under their own privacy terms. We have contractually agreed that they must not use your data for commercial purposes beyond model processing, but we cannot fully control their internal data management.

4.3 To reduce risk, we recommend: do not include your real name, home address, ID numbers, identifying employer details, or other people's private information in your answers.

4.4 After analysis completes, your answers and results are stored in the Platform's database and do not remain with the model provider for public training purposes.

5.1 The Platform's servers are located in Singapore (Oracle Cloud). Regardless of where you access the service from, your information is processed and stored in Singapore.

5.2 For personal information originating from mainland China, such processing constitutes a cross-border transfer of data. We will fulfill necessary notification obligations and adopt protective measures as required by law; if you do not agree to overseas processing, please stop using the Platform.

5.3 Retention period: account and report data are retained while your account exists. After you request account deletion, we will delete or anonymize your personal information within a reasonable period, excluding records retained as required by law.

6.1 Except where necessary to provide the service, we do not share your personal information with any third party. Current external processors include: large-model provider (generating analysis reports, see Section 4), cloud infrastructure provider (server hosting), email service provider (sending verification emails), and payment provider (payment and refund processing for online purchases, see 6.4).

6.2 We do not sell your personal information.

6.3 In the event of a merger, acquisition, or asset transfer, your personal information may be transferred along with the business. We will require the successor to remain bound by this Policy and notify you before the change takes effect.

6.4 Online payments: when you purchase assessment credits through the Platform's online payment, the transaction is processed by Paddle (Paddle.com Marketplaces Ltd and its affiliates) as Merchant of Record and payment processor. Your payment details such as card numbers are collected and processed directly by Paddle; the Platform does not collect or store full payment information and only receives the order ID, payment status, and the contact email used for the purchase as necessary to deliver the service. Refunds are likewise processed by Paddle via the original payment method. Please refer to Paddle's own privacy policy for its personal information practices.

7.1 Access and copying: you can view your past assessments and reports on the Platform; you may also contact customer service to request a copy of the personal information we hold about you.

7.2 Correction and supplementation: if information is inaccurate or incomplete, you may correct it yourself or ask us to fix it.

7.3 Deletion: where circumstances prescribed by laws and regulations arise, you may request deletion of your personal information.

7.4 Account cancellation: you may request cancellation of your account. After cancellation we will stop providing services and delete or anonymize your data as described in Section 5.

7.5 Withdrawal of consent: you may withdraw consent previously given at any time. Withdrawal does not affect the validity of processing already carried out based on consent before withdrawal.

7.6 We generally respond to requests under this section within 15 business days. If you are dissatisfied with our handling, you may complain to the personal information protection or cyberspace administration authority where you are located.

8.1 Encryption in transit: HTTPS is enabled across the entire site.

8.2 Access control: admin functions use separate authentication; production data is accessed under least privilege.

8.3 Key security: third-party service credentials are stored encrypted and rotated regularly; report files require ownership verification before access.

8.4 Although we take reasonable security measures, no internet environment is absolutely secure. Please keep your email and verification codes safe; contact us immediately if you notice anything unusual with your account.

9.1 The Platform is intended for adults aged 18 and above and is not open to minors.

9.2 If we discover that a minor has used the Platform without guardian consent, we will take measures to delete the relevant data.

10.1 The Platform uses localStorage and similar browser storage technologies only to maintain your login session and language preference — never for cross-site tracking or advertising.

11.1 We may update this Policy from time to time. Material changes (such as new categories of collected information or new external processors) will be published on this page with an updated effective date; where re-consent is required, we will ask for it again.

11.2 Continued use of the Platform after publication constitutes your awareness and acceptance of the updated Policy.

12.1 For any questions, comments, or requests regarding this Policy (including exercising rights listed in Section 7), email supermbti@outlook.com. Operator: SuperMBTI.