Privacy Policy

1. Information We Collect

We collect only what we need to run the Service:

• Account information: when you sign up or sign in we receive your email address, your name (if provided) and basic profile data returned by any social login you use (such as Google).
• Profile information: the gender and birth year or birth date (including hour) you choose to enter. These are used for Liu Yao chart computation and interpretation and are optional.
• Reading content: the questions you ask, the casting method, coin results, generated hexagrams, AI interpretations, follow-up conversations, and the reflections and outcomes you record in your journal.
• Payment information: payments are processed by Stripe. We keep only the order amount, item type, Stripe customer ID and transaction status. We never store your full card number or security code.
• Usage data: anonymous or pseudonymous analytics such as page views, feature clicks, device type, browser and approximate location, collected through third-party analytics tools.
• Cookies and local storage: sign-in session cookies, your language and theme preferences, an anonymous identifier cookie (yao_aid) used for the Daily Oracle, and short-lived session data that prevents duplicate submissions.
• Technical information: your IP address and the country inferred by Cloudflare, used for rate limiting, abuse prevention, security and choosing a default language.

2. How We Use Information

We use this information to:

• Provide core features: cast hexagrams, generate AI interpretations, save your history and power follow-up questions;
• Manage your account, credit balance, subscription status and referral rewards;
• Process payments, issue receipts and prevent fraud;
• Send service-related emails (such as follow-up reminders, journal check-in reminders and subscription or payment notices);
• Analyze how features are used so we can improve the product;
• Keep the Service secure, prevent abuse and enforce the Terms of Service;
• Comply with legal obligations.

3. AI Processing

To generate a reading, your question, birth year, gender and hexagram details are submitted to an AI service for analysis. This data is not sent together with your name or email address, and it is not used to train models that serve other users.

Please avoid entering sensitive personal data such as government ID numbers, card numbers or full street addresses in your questions — they are not needed to produce a reading.

4. Service Providers

We use third-party services to operate the Service, including account sign-in, payment processing, data storage, hosting and content delivery, AI analysis, analytics and email delivery. These providers process your information only as needed to provide their services to us and are bound by their own privacy policies and data-protection obligations.

5. Sharing of Information

Apart from the providers above, we do not sell your personal information and do not share it with third parties for their own marketing.

We may disclose information to comply with a legal obligation, court order or government request; to protect our rights, property or safety or those of others; or in connection with a merger, acquisition or sale of assets (in which case we will notify you in advance).

6. Cookies and Similar Technologies

We use cookies and browser local storage to keep you signed in, remember your language and theme, recognise anonymous Daily Oracle visitors (the yao_aid cookie, which contains no personal identifiers), and measure usage.

You can delete or block cookies in your browser settings, but some features (such as signing in) may then stop working.

7. Data Retention and Deletion

We keep your account information and readings for as long as your account is active so you can revisit your history at any time.

You can delete any individual reading from the History page. Deleted readings are removed from our database (backup copies are purged on the regular backup rotation cycle).

To delete your entire account and all associated data, email [email protected] from the email address on your account. We will complete the request within 30 days. Certain transaction records may be kept longer where required for legal or financial compliance.

Anonymized analytics data is not personal information and may be retained indefinitely.

8. Email Communications

We may send transactional emails to the address on your account, such as follow-up credit reminders, journal check-in reminders, and subscription renewal or payment-failure notices. These are delivered through a third-party email service.

If you do not want reminder emails, use the unsubscribe link in any reminder or email [email protected] and we will stop them. Essential notices about account security and payments cannot be opted out of.

9. Children's Privacy

The Service is intended only for people aged 18 or older. We do not knowingly collect personal information from minors. If we learn that we have collected such information we will delete it promptly. If you believe we may have collected information from a minor, please contact us.

10. International Data Transfers

Our servers and primary service providers are located in the United States. Wherever you are, your information may be transferred to, stored and processed in the United States, whose data-protection laws may differ from those in your region. By using the Service you consent to this transfer.

11. Your Rights

Depending on where you live (for example under the EU GDPR, the California CCPA/CPRA, or China's PIPL), you may have the right to:

• Access: learn what personal information we hold about you;
• Correction: edit your details in your profile, or ask us to correct inaccurate information;
• Deletion: delete individual readings or request deletion of your whole account;
• Portability: receive a copy of your data in a commonly used format;
• Restriction or objection: limit how we process your information in certain circumstances;
• Withdraw consent: withdraw consent you previously gave, without affecting processing that happened before withdrawal;
• Complain: lodge a complaint with your local data-protection authority.

12. Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), access controls, and delegating sensitive authentication and payment data to specialist third-party providers. No method of transmission or storage on the internet is completely secure, however, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page; for material changes we will notify you in the app or by email. Continuing to use the Service after a change takes effect means you accept the updated policy.

14. Contact

For any questions or requests about this policy or your personal information, email [email protected].