Privacy Policy

We may collect account information such as username, email address, display name, login provider, login status, an anonymous browser session identifier, usage quota, and service activity.

If you choose Google Sign-In, we receive an identity token and may receive the account identifier and display name provided by Google for authentication and account management. If you choose Sign in with Apple, we receive Apple's app-specific account identifier and any display name you choose to share. We never receive your Apple or Google password.

For Sign in with Apple, an encrypted authorization credential may be stored only as needed to revoke the Apple authorization when you delete your account. iOS and website sign-in records are separated by login provider, while service usage is processed by the same Qiyao service.

When you use the oracle service, we may store your question, selected cards, reading mode, generated response, timestamps, and related service logs so we can provide the service, support users, prevent abuse, and improve quality.

We may collect technical information such as browser type, device information, IP-derived server logs, request timestamps, cookies, and analytics data if analytics tools are enabled.

We use your information to operate the service, authenticate users, manage credits or tokens, generate oracle readings, provide support, detect abuse, debug errors, and maintain security.

We may review anonymized or aggregated usage patterns to improve product quality. We do not sell your personal information.

Your questions and selected card context may be sent to third-party AI providers or API gateways to generate responses. Do not submit highly sensitive information, medical records, legal documents, financial account numbers, government IDs, or information you are not authorized to share.

AI-generated readings are for entertainment, reflection, and self-exploration only. They are not professional medical, legal, financial, psychological, or religious advice.

The iOS app sends authentication credentials, questions, selected card context, and service requests to Qiyao only over HTTPS. Apple and Google credentials are verified by the Qiyao server and are not used to access unrelated data in those accounts.

You can permanently delete your account inside the iOS app under Me, Account, Delete Account and Data. After confirmation, Qiyao deletes or anonymizes account data that is not required for security, dispute resolution, accounting, fraud prevention, or legal compliance. When applicable, the associated Sign in with Apple authorization is revoked as part of deletion.

Paid purchases are not currently available. If paid digital content is enabled in the iOS app, purchases will use Apple's In-App Purchase system and will be subject to Apple's payment and refund processes. Other platforms will identify the active payment provider at checkout.

We do not store full credit card numbers on our servers. Payment providers may collect billing information according to their own privacy policies and legal obligations.

We use reasonable technical and organizational measures to protect user data. No online service can guarantee absolute security.

Service logs may be retained for account management, fraud prevention, support, legal compliance, and product analysis. We may delete or anonymize records when they are no longer needed.

You may contact us to request access, correction, deletion, or export of your personal information, subject to identity verification and applicable law. iOS users can also initiate account deletion directly in the app.

You may also stop using the service at any time. Some records may be retained when necessary for security, dispute resolution, accounting, or legal compliance.

If you access the service from outside the country where our servers or service providers operate, your information may be transferred and processed internationally.

For users in regions with privacy laws such as GDPR or similar frameworks, we process personal data based on service necessity, legitimate interests, consent where required, and legal obligations.

For privacy requests, contact us at support@qiyao.app. Please include enough information for us to identify your account and request.