Privacy Policy

We may collect account information such as username, email address, display name, login provider, login status, an anonymous browser session identifier, usage quota, and service activity.

If you choose Google Sign-In, we may receive the account identifier, email address, email verification status, and display name provided by Google for authentication and account management.

When you use the oracle service, we may store your question, selected cards, reading mode, generated response, timestamps, and related service logs so we can provide the service, support users, prevent abuse, and improve quality.

We may collect technical information such as browser type, device information, IP-derived server logs, request timestamps, cookies, and analytics data if analytics tools are enabled.

We use your information to operate the service, authenticate users, manage credits or tokens, generate oracle readings, provide support, detect abuse, debug errors, and maintain security.

We may review anonymized or aggregated usage patterns to improve product quality. We do not sell your personal information.

Your questions and selected card context may be sent to third-party AI providers or API gateways to generate responses. Do not submit highly sensitive information, medical records, legal documents, financial account numbers, government IDs, or information you are not authorized to share.

AI-generated readings are for entertainment, reflection, and self-exploration only. They are not professional medical, legal, financial, psychological, or religious advice.

Purchases are processed by Dodo Payments. Payment credentials and transaction data are handled according to the provider's policy; we receive order status and identifiers needed to deliver credits and support refunds.

We do not store full credit card numbers on our servers. Dodo Payments may collect billing information according to its own privacy policy and legal obligations.

We use reasonable technical and organizational measures to protect user data. No online service can guarantee absolute security.

Service logs may be retained for account management, fraud prevention, support, legal compliance, and product analysis. We may delete or anonymize records when they are no longer needed.

You may contact us to request access, correction, deletion, or export of your personal information, subject to identity verification and applicable law.

You may also stop using the service at any time. Some records may be retained when necessary for security, dispute resolution, accounting, or legal compliance.

If you access the service from outside the country where our servers or service providers operate, your information may be transferred and processed internationally.

For users in regions with privacy laws such as GDPR or similar frameworks, we process personal data based on service necessity, legitimate interests, consent where required, and legal obligations.

For privacy requests, contact us at support@qiyao.app. Please include enough information for us to identify your account and request.