Privacy Policy: Reckoned Yet?

Effective date: July 8, 2026

We collect only what is needed to read your chart and run the conversation. We do not ask for an email, a password, or a tracking profile. We don't sell data. Your raw birth details stay on your device. Only derived chart context (never your raw birth info) is sent to our servers to generate readings and dialogues.

1. What we collect and process

No account, no tracking. The app does not ask for your email address, phone number, or password. On first launch, we create an anonymous account token: a random identifier unique to your device. This identifier stays in your device's secure storage and keeps your chat history across sessions.

Birth data per profile (device-local). Your birth date, time, time zone, city, longitude, and gender stay on your device. This data is never sent to our servers, stored in cloud databases, or shared with third parties. If you delete the app, this data is gone.

Profile metadata (device-local). Display names you assign to profiles (for example, "Me" or "Partner") are stored only on your device.

Conversation messages and daily readings (server-side). The questions you send to the AI, the follow-up replies, and the context of drawn Guanyin Lots are sent to our backend database and stored there, keyed only to your anonymous token.

Derived chart context (server-side, transient). When you request a reading, ask a follow-up question, or draw a Guanyin Lot, your device converts your local birth fields into a text string of chart data (stems, branches, ten gods, luck pillars, and daily elements). We send this derived chart context, never your raw birth date or precise birthplace, to our backend and to third-party AI models to generate the response.

Subscription and quota state (server-side). Your purchase status (free tier, subscription tier, or top-up queries) and daily usage counters are tracked on our servers against an anonymous subscriber identifier. All payment processing is handled by Apple through your Apple ID.

Aggregate telemetry (server-side, de-identified). Performance indicators, latency metrics, and error rates are logged for app maintenance. Your anonymous device token is salted and SHA-256 hashed before it reaches our telemetry databases, so the logged value cannot be linked back to your session.

Apple Sign-In identity (optional, opt-in). If you link your history with Apple Sign-In to keep your purchases across device upgrades, Apple shares a unique identifier for this app, a display name (first sign-in only), and an email address (which you can mask with Apple's "Hide My Email" feature). We use this only to keep your purchases and history available across devices. We do not send emails, and we do not cross-reference this identity with the AI model or any third-party databases. You can remove this link at any time inside the app.

2. What we never collect

• Email address
• Phone number
• Password
• Contacts
• Photos
• Device or hardware location
• Advertising identifiers (IDFA) and tracking pixels
• Data sold by ad networks or data brokers

We do not ask for any of these.

3. How your data is used

To draw your chart. All BaZi calculations run locally on your device. No server is contacted to compute your chart.

To generate AI readings and Oracle lots. When you start a dialogue or draw a lot, the derived chart context and text history are sent to a third-party AI provider's API to return the interpretation. No personal identifiers, emails, or device keys are sent with this request.

To enforce quotas. Quota records are checked on our servers to manage usage. We do not inspect the content of your prompts to do this.

4. Sensitive-category data handling

Because birth charts can reveal private philosophical or spiritual leanings (which may qualify as special-category personal data under frameworks such as GDPR Article 9), we keep this data isolated:

• Raw birth timestamps are not sent over the internet by our app.
• The derived chart data (stems, branches, cycles) cannot be used to recover your precise original birth entry.
• No third-party analytics or advertising platforms receive any of this.
• Server-side chat logs are isolated using row-level security, encrypted at rest, and excluded from our application diagnostic logs.

5. Third-party data subprocessors

We use a small set of subprocessors:

• Cloud infrastructure: Database and hosting providers located in the United States.
• AI interpretation (DeepSeek): Readings are generated by DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd.), reached through our own servers. What is sent: your computed chart (the stems, branches, and cycles derived from your birth date, time, and birthplace), the questions you ask and the conversation you lead, your app language, and, for a compatibility reading, the second chart you choose to compare. What is never sent: your name, contact details, or device identifiers. This data is used solely to generate your readings, never for advertising, and your prompts and charts are not used to train public base models. DeepSeek processes it under API terms that provide protections equivalent to this policy.
• Subscription tracking: An anonymous backend service that tracks subscription status, kept separate from chart data, backed by Apple App Store systems.

The app asks for your permission before anything is shared with the AI provider: your first reading is preceded by an in-app disclosure, and AI readings stay off unless you agree. Your chart itself is computed on your device.

We do not run advertising scripts or third-party behavioral analytics SDKs. For our full subprocessor list, contact support.

6. Data retention and erasure

Device-local storage: Erased when you delete the app or choose "Delete account & charts" in Settings.

Server-side storage: Retained, in anonymized form, to support your chat continuity. Tapping "Delete account & charts" triggers an immediate database wipe that replaces sensitive records with null values and completes within 30 days.

Telemetry: Aggregated system data is kept indefinitely for long-term health monitoring, and is not linked to any identifiable user.

7. Your rights, regional scope, and device portability

You can access, correct, or erase your records directly inside the app. The export path is the in-app "Export my readings" option in Settings, because we hold no email or other personal identifier to verify an external export request against. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority. All backend services run on US East cloud nodes under Standard Contractual Clauses (SCCs) where international transfers apply. This app does not support or operate within mainland China.

Because the app relies on anonymous, device-specific tokens, your chat history and query balances live on the device that created them; they do not automatically migrate if you switch phones. App Store subscriptions do transfer through Apple's receipt system (Settings → Restore Purchases on the new device). Cloud synchronization is planned for a future release.

8. Children

This app is not directed at children under 13. We do not knowingly collect data from children under 13. The app is rated 9+ in the App Store. If you believe a minor is using the app, please contact support and we will guide them through the deletion process.

9. Changes to this policy

If we make a material change (new data collected, new sub-processor, change in retention), we will update the effective date at the top of this page and post a notice in the app for active users. Continuing to use the app after a material change takes effect constitutes acceptance.

10. Contact

Operated by Boxuan Cui, who is the data controller for the personal data described in this policy. Direct all inquiries, erasure verification requests, or due diligence questions to [email protected].