Privacy Policy

XuanZhi AI values your privacy. This policy explains how we collect, use and protect your personal information.

Information collection

We collect the information necessary to provide divination and birth-chart services, following a data-minimization principle.

Types of information we collect:

Service information: Questions, birth dates and times, birthplaces, dream descriptions and other details you choose to submit are used to provide readings and chart analysis.

Technical information: Access logs may automatically record your IP address, visit time, browser and operating-system version for service improvements, security and troubleshooting.

Cookies and local storage: We use browser cookies and storage, including sessionStorage, to remember preferences and temporarily save reading results.

Google sign-in: If you sign in with Google, we receive your account identifier, name, email and profile picture to display your sign-in status. We do not receive your Google password.

邮箱账号信息:如果您选择邮箱注册,我们会保存您提供的姓名、邮箱、邮箱验证时间及密码的单向哈希值,不保存明文密码

We do not collect ID numbers, bank-card numbers or phone numbers for sign-in.

Information use

We use collected information only to provide and improve services, in accordance with applicable laws. Details follow:

Core services: Submitted questions and birth details are used for the Dayan method, BaZi charts, dream interpretation and related services.

Service improvements: Anonymized data may be used to analyze and improve models and user experience without identifying individual users.

Security: Technical information such as IP addresses helps detect security threats, attacks and misuse, and maintain reliable services.

第三方处理:为提供 AI 解读和梦境绘图,相关问题、工具资料及必要的对话上下文会发送给阿里云通义服务。网站也使用 Google 登录及 Google Analytics。发送邮箱注册验证码时,您的邮箱地址和验证码邮件内容会交由 Resend 发信服务处理。我们不出售您的个人信息用于商业营销。

Service providers: Necessary technical providers, including cloud and analytics services, may receive data under confidentiality requirements and may not use it for other purposes.

Data security

We prioritize data security and use multiple layers of protection.

Transmission encryption: Data transfers use HTTPS/TLS 1.3 encryption to protect against interception and man-in-the-middle attacks.

Storage encryption: Sensitive stored data is encrypted to prevent direct access to its original contents if exposed.

Access control: Personal conversation endpoints verify account identity and record ownership. The admin panel requires separate credentials, and authorized administrators can access questions and feedback.

Security audits: Regular audits, vulnerability scans and penetration tests help identify and address security risks.

Data storage: AI questions, tool data, answers and necessary request information are stored on the server. Conversations started while signed in are linked to the account and accessible to the owner and authorized administrators. Browser copies are stored for the current tab. Passwords are hashed.

Personal natal chart exception: details and conversations stay in the current page’s memory and are not saved to this site’s reading records or memory library. Sending a question submits the chart and up to six recent complete turns to the AI service. Refreshing, leaving the page or generating a new chart clears the page content.

Backups: Necessary system data is backed up regularly with encryption and recovery plans.

Your rights

We respect your privacy and the following rights over your personal information:

Information: You may ask what we collect, its sources, purposes, retention periods and whether it is shared with third parties.

Access: You may request access to information we hold about you, if any. We respond within a reasonable period.

Correction: You may ask us to correct or complete inaccurate or incomplete information.

Deletion: You may request deletion of your personal information, subject to legal retention requirements. Requests are handled within a reasonable period.

Withdrawal of consent: You may withdraw consent at any time. We then stop processing based on that consent.

Portability: Where applicable, you may obtain your information in a structured, commonly used, machine-readable format for transfer to another provider.

Cookie management: Browser settings let you view, delete or refuse cookies and local-storage data.

Data removal: You can clear browser copies. This does not delete server records; request their deletion through the feedback page.

Cookies and similar technologies

We use cookies, local storage and similar technologies to support the experience and services. Details follow:

Essential cookies: Required for site operation, session management and security verification; they cannot be disabled through the service.

Functional cookies: Remember interface preferences and improve the experience.

Analytics cookies: Anonymous analytics tools may help us understand site usage and improve services.

Local storage: Result and conversation copies use sessionStorage for the current tab. Language preferences use localStorage and are restored on subsequent visits.

Third-party cookies: Trusted service providers may set their own cookies under their privacy policies.

Cookie management: You can manage or delete cookies in your browser, although this may affect some features.

Data retention

Data is retained according to minimization principles. Retention depends on the data type:

AI conversation records: Questions, tool data and answers are stored on the server. Closing a tab clears only its browser copy. You can request deletion through the feedback page.

Email accounts: Name, email and password hash are retained while the account exists. Request deletion through the feedback page.

Sign-in data: Browser cookies maintain the session while signed in; signing out clears this site's session cookies.

Access logs and technical information are used for security and troubleshooting. Retention and cleanup are managed by deployment operators; no fixed automatic deletion deadline is currently promised.

Anonymous statistics: May be retained long term for improvements and trend analysis, without identifying individuals.

Feedback is retained to handle and follow up on requests. Request deletion when needed. Automatic cleanup based on the resolution date is not currently implemented.

Contact us

If you have questions or suggestions about this policy, or wish to exercise your privacy rights, contact us through the following channels:

Feedback: Use the feedback page to submit privacy questions, comments or suggestions.

Exercising rights: Submit requests for access, correction or deletion through the feedback page.

Response time: We respond within a reasonable period, usually 15 business days after receiving your request.

Complaints: If you are dissatisfied or believe our processing violates applicable laws, you may complain to the relevant regulator.

Policy updates

We may update this policy as laws, business needs or technology change. Significant changes will be announced prominently on the site with appropriate reminders. Continued use indicates acceptance of the updated policy. If you disagree, please stop using the service.