Privacy Policy

1. What we collect

Information you enter or submit:

• Birth details: date, time and place of birth, gender, and the name you enter for the reading. That name can be a nickname — we do not require a legal name. A synastry (compatibility) reading also includes the same details for a second person.
• The questions you ask, and the answers generated from them.
• Sign-in information: a phone number (mainland China) or an email address (elsewhere). There are no passwords; sign-in uses a one-time code.
• Feedback: the description you write when submitting in-app feedback, an optional contact address, any screenshots you choose to attach, and accompanying diagnostics (app version, OS version, device model, language setting).

Information recorded automatically:

• A device identifier: a random id generated by the app or browser, used to keep your records while you are not signed in and to account for the free allowance. It is not the IDFA; we do not read your advertising identifier.
• Access logs: time, IP address and request path. When an SMS code is sent we also log the phone number, device id and IP to prevent abuse (each SMS costs money).
• Push token: the APNs token issued by Apple after you enable notifications. We stop sending once you turn notifications off.
• Website analytics: we run a self-hosted Umami instance for page-view counts. It sets no cookies, does no cross-site tracking, and does not store full IP addresses.

What we do not collect:

• Device location. The birth place is typed in and picked from a city list; the Service never requests location permission.
• Contacts, photo library (other than screenshots you deliberately attach to feedback), microphone, or health data.
• Payment information. All in-app purchases are handled by Apple. We receive only a signature-verified transaction receipt (transaction id, product id, timestamp, environment) — never your payment method, card number, or Apple Account password.

2. How we use it

• To calculate charts and generate readings. The chart itself (BaZi pillars, planetary positions, houses, aspects) is computed on our servers with the Swiss Ephemeris; the reading text is generated by a third-party large language model — see section 3.
• To store your readings and question history so they are still there when you sign in on another device.
• To process in-app purchases and subscriptions, and to account for your remaining allowance.
• To send notifications about your own activity (a reading finished, an answer finished) if you have enabled them.
• To prevent abuse, debug failures, and keep the Service secure.

We do not use your data for ad targeting, do not sell your personal information, and do not use your phone number or email for marketing.

3. Who we share it with

Only as far as the functions above require:

• Large language model providers: when a reading or answer is generated, your birth details, the chart data computed from them, and your question are sent over an API to the model provider we use. We currently use DeepSeek primarily, and may change or add comparable providers. We do not send your phone number, email address, or account id to the model provider.
• Alibaba Cloud: to deliver SMS verification codes; receives your phone number.
• Resend: to deliver email verification codes; receives your email address.
• Apple: to process in-app purchases and subscriptions and to deliver push notifications.
• Railway: our server and database host.

Apart from the above, and where required by law or necessary to protect someone’s vital interests, we do not disclose your personal information to third parties.

4. Where the data is held

Our servers and database are hosted on Railway, in the United States. If you use the Service from mainland China, your data is transferred to and stored outside China. By continuing to use the Service you acknowledge this.

5. How long we keep it

• Reading text and question history: until you delete your account.
• Sign-in codes: valid briefly (15 minutes by email, 5 minutes by SMS), then void.
• SMS send logs: retained long-term for abuse prevention and not removed when an account is deleted. They contain only the phone number, device id, IP and timestamp.
• Free-allowance usage records: retained when an account is deleted. Deleting an account and signing up again therefore does not reset the free allowance.
• Purchase and subscription records, and Apple’s transaction notifications: retained for accounting and refund handling.

6. Your choices

• Access: your readings and questions are visible at any time in the app and on the web.
• Account deletion: Settings → Delete Account in the app deletes your account permanently, without contacting us. It removes your account, reading text, question history and push tokens, and invalidates your existing sign-in immediately. This cannot be undone.
• Corrections and other requests: email [email protected].

Two things about the scope of deletion that we think you should know:

• Reading text is addressed by the birth details. If another user enters exactly the same birth details, you are both looking at the same stored text; deleting your account unlinks you from it, and the text itself is deleted only once no other account holds it.
• Deleting your account does not cancel your Apple subscription and does not issue a refund. Cancel separately in iOS Settings → Apple Account → Subscriptions, or via Settings → Manage Subscription in the app. Any question credits you purchased are forfeited with the account.

7. Children

The Service is not directed to children under 14. If you are under 18, please use it with a guardian’s knowledge and consent. If we learn that we have collected information from a child we should not have, we will delete it.

8. Changes

If this policy changes we will update the date at the top of this page. For material changes to what we collect or who we share it with, we will also notify you in the app.