YaoWise Privacy Policy

App Covered by This Policy

• App name: YaoWise - AI I Ching Oracle (Chinese store listing title: 爻知 - AI六爻八字·易经解卦)
• Developer: 北京火粒文化科技有限公司 (Beijing Huoli Culture Technology Co., Ltd.), Google Play developer account name Firegrain

Welcome to YaoWise!

Beijing Huoli Culture Technology Co., Ltd. (hereinafter "YaoWise" or "we"), as the operator of the YaoWise application and related services (collectively, the "Service"), understands how important your personal information is to you. We will protect your personal information in accordance with the law, strictly following the requirements of laws, regulations and standards such as the Personal Information Protection Law of the People's Republic of China (《中华人民共和国个人信息保护法》), the Cybersecurity Law of the People's Republic of China (《中华人民共和国网络安全法》), the Data Security Law of the People's Republic of China (《中华人民共和国数据安全法》), and the Information Security Technology — Personal Information Security Specification (《信息安全技术 个人信息安全规范》, GB/T 35273).

This Privacy Policy will help you understand:

• How we collect and use your personal information
• How we share, transfer and publicly disclose your personal information
• How we transfer your personal information across borders
• How we store and protect your personal information
• The rights you have over your personal information
• Protection of minors
• Updates to this policy
• How to contact us

I. How We Collect and Use Your Personal Information

We collect your personal information only to the extent necessary to provide the Service to you, and we follow the "minimum necessary principle". The specific collection scenarios and types of information are as follows:

1.1 Account Registration and Sign-In

When you register for or sign in to a YaoWise account, we need to collect the following information:

• Mobile phone number: used to receive SMS verification codes, for account sign-in and for identity verification. A mobile phone number is the basic information required by law for real-name verification.
• Email address (optional): used for registering and signing in by email and for receiving service notifications.
• Third-party account information: if you choose to sign in with a third-party account such as WeChat, Apple or Google, we will, with your authorization, obtain from the third-party platform your unique identifier on that platform and necessary public information (such as your nickname and avatar); when you sign in with Apple or Google, this may also include the email address and name you authorize them to provide.

If you do not provide the above information, you will not be able to register an account or use account-related features.

1.2 Using AI Reading Features

When you use YaoWise features such as AI hexagram readings, follow-up questions, daily fortune and birth chart reports, we collect and process:

• Question content: the question you enter, as well as the background details you add and your answers to background questions.
• Hexagram data: hexagram information generated from your actions.
• Conversation history: the record of your follow-up conversations with the AI.
• Profile information (if you select a profile for a question): the profile's name, gender and relationship to you, as well as the date of birth, age, and the birth chart calculated from the birth information.

1.3 Profiles and Personalized Reading Information (Optional)

To improve the accuracy of readings, you may create profiles for yourself or for family and friends, and choose to provide the following information:

• Name, gender and relationship to you: used to distinguish between profiles and to construct the birth chart.
• Date of birth and time of birth: used to calculate the Bazi birth chart.
• Place of birth: used to adjust the time of birth according to the local time at the place of birth (true solar time).
• Your location (the city you are in): used to determine the casting hour for a reading according to the local time of your city. You select your location manually from a list of cities; we do not access your device's location.
• Birth chart calibration feedback: your confirmations or corrections of the strength of the chart and its favorable and unfavorable elements, used to adjust the interpretation of the birth chart.

The above birth information and profile information constitute your sensitive personal information. You may choose not to provide it, and this will not affect your use of the basic hexagram reading features. You can modify or delete profile information in the app at any time (profile bar on the home screen → "Select Profile" → "Manage"; the default profile cannot be deleted), and change your location under "Settings" → "Your location".

1.4 History Records

To make it easy for you to review and manage your hexagram reading records, we save your:

• Hexagram reading records (questions, hexagrams, reading results)
• Follow-up history
• Calendar events

History records are kept for as long as your account exists. At any time, you can delete a single record on the "History" page in the app by swiping left on it, or long-press any record to enter multi-select mode and delete records in bulk.

1.5 Device Information and Log Information

To keep the Service secure, improve the user experience and diagnose faults, we collect:

• Device information: device model, brand, operating system version, screen resolution, device language and time zone, CPU architecture, unique device identifier (IDFV/Android ID), and an installation identifier randomly generated when the app is installed
• Network information: IP address, network operator, network type (Wi-Fi/mobile data)
• App information: app version number, build number, content update version, SDK version, installation source (the app store from which you installed the app)
• Log information: operation logs (including records of feature use, the text you type when searching for a city, and the steps you take and the reasons for failure during sign-in and registration, used to troubleshoot sign-in problems), crash logs, performance data
• Installed software list (installation-status queries for specific applications):
  • Purpose: to correctly display the WeChat Login/WeChat Pay entry and the Alipay payment entry when you use the corresponding features, and to open web links safely (by selecting an available browser application).
  • Method: after you consent to this policy, we use the application-query interface provided by the operating system to check whether WeChat, Alipay and browser applications capable of handling web links are installed on your device.
  • Scope: we only query the installation status (installed or not) of the specific applications listed above, and the query results are used only locally on your device to determine feature availability. We do not collect, store or upload the complete list of software installed on your device. In addition, the WeChat OpenSDK verifies the installation status of the WeChat app on your device, and the OPPO Push Service collects application-list information such as application installation status; see the "Third-Party SDK List" in Section III of this policy for details.
• Device MAC address: our own features do not proactively collect your device MAC address. When you use push notifications on OPPO and its affiliated-brand (OnePlus, realme) devices, the OPPO Push Service (provided by 广东欢太科技有限公司, Guangdong Heytap Technology Co., Ltd.) collects device identifiers including Wlan-Mac (the device MAC address) for device identification and accurate message delivery; when you pay with Alipay, the Alipay SDK collects Wi-Fi parameters (including SSID/BSSID and other wireless access point identifiers) for payment security and risk control. For the specific collecting entities, purposes and scope, see the "Third-Party SDK List" in Section III of this policy and the privacy policies of the relevant third parties.

1.6 Payment Information

When you purchase Yao Coins, subscribe to VIP membership or buy other paid services, we collect:

• Order information: order number, product name, payment amount, payment time, payment status
• Subscription information: subscription type, start time, expiration time, auto-renewal status
• Auto-renewal agreement information: if you activate membership auto-renewal through WeChat Pay, the automatic deduction agreement number and agreement status (signed or cancelled) returned by WeChat Pay, your user identifier on WeChat Pay (OpenID), and the order information for each charge

Please note: YaoWise does not collect or store sensitive payment account information such as your payment password, bank card number or CVV. This information is processed and protected directly by the third-party payment channel you choose (WeChat Pay, Alipay, Apple App Store, Google Play, etc.).

1.7 Customer Service and Feedback Information

When you contact us through the in-app feedback feature, the message form on our website (yaowise.com) or our customer service email, we collect what you proactively provide:

• Feedback content and problem descriptions
• Feedback screenshots (images you choose to upload)
• Contact information (if you choose to leave it; used to contact you about your feedback)
• The name (optional), email address and message you enter in the website message form

If you submit feedback in the app without signing in, we record the device identifier of the device you used, so that our reply can be delivered to that device. If you submit the website message form, we record the page you submitted it from and that page's language, so that we can reply to you in the language you use.

When you write in-app feedback or a rating of a reading, in order to warn you in advance about content that may not be accepted for submission, we run a content safety check on the text you have entered while you are typing. This check is performed by the content safety service provider listed in Section III.

Survey answers you choose to give (for example, how you first heard about YaoWise) are stored with your account and used only to understand how well our promotion is working. When you delete your account, anything you typed into the survey yourself is deleted, and your other answers (the multiple-choice ones) are unlinked from your account and used only for statistics.

1.8 Push Notifications

To send you notifications such as reading completion alerts, calendar event reminders and the daily fortune reminder (called "Daily fortune push" in the app, if you turn it on), we obtain and store your device's push identifier, and record your notification permission status as well as the reminder switches and reminder times you set. The source of the push identifier depends on your device type:

• iOS devices: the device identifier of the Apple push service
• Xiaomi, Honor, OPPO (including OnePlus and realme) and vivo (including iQOO) Android devices: the device identifier of the corresponding manufacturer's push service
• Other Android devices: the device identifier of the Google push service (Firebase Cloud Messaging)

When the above push channels are temporarily unavailable, notifications may be relayed through the Expo push service. The content of notifications (for example, the beginning of your question in a reading completion alert, or the summary of the day's fortune in the daily fortune reminder) is delivered to your device through the above push services.

You can turn off notification permission for this app in your system settings at any time, or turn off "Daily fortune push" in the app ("Settings" → "Notification Settings" → "Notification Types"); after you do so, you will no longer receive the corresponding notifications.

1.9 Personalization Services

YaoWise's current core hexagram interpretation and AI analysis features do not rely on user profiling or behavior-based recommendation algorithms. For paid users such as subscription members, we may provide personalization services within the following scope:

• Scope of personalization: based on your hexagram reading history in this app, your questioning habits and your preference settings, we adjust interpretation style, content depth, calendar reminder cadence, question template suggestions and the like, to better match your long-term usage habits.
• Data involved: only the history records, subscription status, language and theme preferences and similar data you generate within YaoWise. It does not involve device advertising identifiers or cross-app behavior tracking data, and is not used for third-party ad targeting.
• How to turn it off: to turn off personalization features, please email support@yaowise.com and we will help you; you can turn off the personalized display of the Lock Screen widget yourself, see 1.10. Turning it off does not affect the core hexagram interpretation, question and history features.
• Notice of future changes: if we adjust the scope, data types or algorithmic mechanisms of personalization services, we will inform you through a prominent in-app notice or by obtaining your consent again.

1.10 iPhone Widgets

After you add a YaoWise widget to your iPhone Home Screen or Lock Screen, in order to display the day's fortune on the widget, the app saves the following information on your phone, in local storage shared by the app and the widget:

• The profile name and profile identifier;
• A summary of the birth chart calculated from the birth information (such as the day master and the favorable and unfavorable elements);
• A summary of the day's fortune reading (for members) and the titles of up to 3 calendar reminders for that day;
• Your time zone, interface language, and the status of the Lock Screen personalization switch.

This information is saved only on your phone. The widget itself does not connect to the internet, and this information is not sent to us or to any third party because of the widget. This information is cleared when you sign out, delete your account or delete the profile.

By default, the Lock Screen widget displays the day's prompts related to your birth chart. If you do not want others to see this content on your Lock Screen, you can turn off "Show personalized fortune on lock screen" under "Settings" → "Notification Settings" → "Lock Screen Widget"; after it is turned off, the Lock Screen no longer displays content related to your birth chart.

II. Device Permissions We Request

To provide the related features of the Service, we need to request certain system permissions from you. We request a permission only when you actively trigger the related feature, and you can refuse authorization or turn off a granted permission in your system settings at any time.

2.1 Android Permissions

YaoWise 3.1.0 and later

The installation package of the YaoWise Android version (3.1.0) declares the following 15 permissions in total, 2 of which are defined by this app itself and can be used only by this app. Many of them are declared by the third-party components we use for push notifications, payments, notifications and so on.

Please note: this app does not request permissions for the camera (CAMERA), microphone (RECORD_AUDIO), location, contacts and the like. As for external storage: the write permission (WRITE_EXTERNAL_STORAGE) is requested only on phones running Android 12 and earlier, and is used only to save images to your photo gallery; the system shows a prompt asking for your permission the first time you save an image. We do not request the read permission (READ_EXTERNAL_STORAGE). Under Android's rules, on Android 12 and earlier, once you allow writing, the system also treats reading external storage as allowed; we do not use it to read your photos or other files.

YaoWise 2.27.0 to 3.0.x

The installation packages of YaoWise Android versions 2.27.0 to 3.0.x declare the following 34 system permissions in total. Many of them are declared by the third-party components we use for push notifications, payments, notifications and so on; for features we do not use, we will not request the corresponding permissions from you and will not use them.

Please note: this app does not request permissions for the camera (CAMERA), microphone (RECORD_AUDIO), external storage read/write (READ/WRITE_EXTERNAL_STORAGE), location, contacts and the like.

2.2 iOS Permissions

You can manage the above permissions at any time in iOS "Settings → YaoWise".

2.3 Auto-Start and Associated Launch

To make sure you receive notifications and reminders on time, this app may be launched in the background (without opening any screen) in the following situations:

• After the device restarts: to restore the calendar event reminders you have set (a restart of the Android system clears scheduled tasks, which then need to be registered again). This takes effect only after you grant notification permission.
• After the app is updated: to register the notification service again so that notifications are delivered normally.
• When a push message arrives: the push services of phone manufacturers such as Xiaomi, Honor, OPPO and vivo, as well as the Google push service, may wake this app's push-receiving component in the background when delivering a notification to you.

You can turn off auto-start, associated launch or notification permission for this app in your system settings at any time.

III. How We Share, Transfer and Publicly Disclose Your Personal Information

3.1 Information Sharing

We share your personal information with third parties only in the following circumstances, following the principles of "minimum necessary" and "explicit consent":

3.1.1 Third-Party SDK List

To provide the corresponding features, this app integrates the following third-party SDKs. When the SDKs are used, the relevant SDK service providers may collect some of your personal information:

You can click the "View" links on the right to visit the official privacy policy of each SDK for more information, or contact us at any time to obtain the latest SDK list.

3.1.2 Backend Service Providers

In addition to client-side SDKs, our backend services also share necessary information with the following third-party service providers:

3.2 Disclosure in Circumstances Prescribed by Law

We may disclose your personal information in accordance with the law in the following circumstances:

• Where it relates to national security or national defense security
• Where it relates to public safety, public health or major public interests
• Where it relates to criminal investigation, prosecution, trial, enforcement of judgments and the like
• Where it is for the purpose of protecting the life, property or other significant lawful rights and interests of you or other individuals, but it is difficult to obtain your consent
• Personal information that you have made public to the general public on your own
• Personal information collected from lawfully and publicly disclosed information (such as lawful news reports and government information disclosure)
• As required by laws and regulations or by mandatory requirements of competent government authorities

3.3 Transfer of Information

We will not transfer your personal information to any third party, except in the following circumstances:

• Where we have obtained your explicit consent in advance
• In the event of a merger, acquisition or bankruptcy liquidation, if a transfer of personal information is involved, we will require the new company or organization holding your personal information to continue to be bound by this Privacy Policy; otherwise, we will require that company or organization to seek your authorization and consent again

3.4 Public Disclosure of Information

We publicly disclose your personal information only in the following circumstances:

• After obtaining your explicit consent
• Disclosure based on law: where required by law, legal process, litigation or mandatory requirements of competent government authorities

IV. How We Transfer Your Personal Information Across Borders

4.1 Recipients of Cross-Border Transfers and Data Types

4.2 Compliance Safeguards for Cross-Border Transfers

For the above cross-border transfers, we have taken or will take the following measures to safeguard your personal information:

• By agreeing to this Privacy Policy, you agree that we may provide the information described above to the overseas recipients as set out in this section. If you do not agree, you may contact us using the contact details in Section IX of this policy to withdraw your consent, or stop using the relevant features.
• We minimize the content transferred, transferring only the information necessary to complete the feature.
• Except for the account information you provide directly to Apple or Google when you choose to sign in with an Apple or Google account (see 4.1), we do not provide overseas recipients with information that directly identifies you, such as your name, mobile phone number or email address.
• We transfer data through HTTPS/TLS encrypted transmission channels.
• We regularly assess the data security and privacy protection capabilities of overseas recipients.

4.3 Your Choices

If you do not want your personal information to be transferred across borders, you may:

• Turn off push notifications (this will affect your receipt of notifications such as reading completion alerts)
• Choose to register and sign in with a mobile phone number or email address instead of an Apple or Google account

Please note: crash reporting and app content update checks are necessary to keep the app running stably and cannot be turned off separately; app content update checks run every time the app is launched, including the first launch, before you have agreed to this Privacy Policy; in-app purchases on iOS devices must be completed through Apple.

V. How We Store and Protect Your Personal Information

5.1 Storage Location

Personal information collected and generated in the course of our operation of the Service within the People's Republic of China is stored on servers within the People's Republic of China.

5.2 Retention Period

We retain your personal information only for the period necessary to achieve the purposes described in this policy. The specific retention periods are as follows:

After the above retention periods expire, we will delete your personal information or anonymize it in accordance with the law.

5.3 Security Measures

We use industry-standard security technologies and management measures to protect your personal information:

• Transmission encryption: all communications between the client and the servers are encrypted using the HTTPS/TLS protocol
• Storage encryption: your password and sensitive information are stored hashed or encrypted
• Access control: internal access to personal information is strictly limited and granted only to staff who need it, who receive privacy protection training
• Security audits: security audits and vulnerability scans are carried out regularly
• Data backup: data is backed up regularly to prevent data loss

Although we take reasonable measures to protect your personal information, please understand that, because of the nature of transmission over the internet, absolute security of information cannot be guaranteed. If a personal information security incident occurs, we will promptly activate our emergency response plan in accordance with the law, report to the regulatory authorities as required by law, and inform you by means such as in-app notifications and email.

VI. Your Rights Over Your Personal Information

Under the Personal Information Protection Law of the People's Republic of China and related laws and regulations, you have the following rights over your personal information. We provide convenient ways to exercise them within the app, and you may also contact us using the contact details in Section IX of this policy.

6.1 Right of Access

You have the right to access the personal information we hold about you.

How to exercise: open the YaoWise app → menu button (☰) at the top right → "Settings" → pencil icon at the top right of the membership card → "Profile", where you can view your account information and birth information; you can view your hexagram reading history via the menu button (☰) at the top right → "History".

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information.

How to exercise: open the YaoWise app → menu button (☰) at the top right → "Settings" → pencil icon at the top right of the membership card → "Profile" → "Edit" at the top right; change your nickname, avatar, birth information and so on, then tap "Save". To change your mobile phone number: on the "Profile" page, under "Linked Accounts", tap "Change" on the "Phone" row. To change an email address that is already linked, please contact us by emailing support@yaowise.com.

6.3 Right to Erasure

You may ask us to delete your personal information in the following circumstances:

• The purpose of processing has been achieved, cannot be achieved, or the processing is no longer necessary to achieve that purpose
• We stop providing the Service, or the retention period has expired
• You withdraw your consent
• We process personal information in violation of laws, administrative regulations or our agreement with you

How to exercise:

• Delete hexagram reading history: open the YaoWise app → menu button (☰) at the top right → "History" → swipe left on a record → "Delete", then confirm; or long-press any record to enter multi-select mode, select the records, tap "Delete", then confirm
• Delete personal data: the nickname, gender and birth information in your profile can be changed at any time (menu button (☰) at the top right → "Settings" → pencil icon at the top right of the membership card → "Profile" → "Edit" → "Save"), but they cannot be cleared individually; if you want them deleted, please delete your account or email support@yaowise.com and we will help you
• Delete your account: open the YaoWise app → menu button (☰) at the top right → "Settings" → pencil icon at the top right of the membership card → "Profile" → "Delete Account" at the very bottom of the page; when prompted, type "DELETE MY ACCOUNT" and tap "Confirm Deletion". After you submit the request there is a 24-hour cooling-off period, during which you can cancel at any time; when the cooling-off period ends, the system carries out the deletion and your personal information is permanently deleted

6.4 Right to Withdraw Consent

You may withdraw at any time the consent you previously gave us to process your personal information. Withdrawing consent does not affect the validity of personal information processing carried out on the basis of your consent before the withdrawal.

How to exercise:

• Withdraw notification permission: turn off notification permission for YaoWise in your system settings
• Withdraw photo library permission: turn off photo library permission for YaoWise in your system settings
• Withdraw authorization for AI readings: stop using the AI hexagram reading feature
• Turn off personalized display on the Lock Screen (iPhone): "Settings" → "Notification Settings" → "Lock Screen Widget" → turn off "Show personalized fortune on lock screen"
• Turn off the daily fortune reminder (members): "Settings" → "Notification Settings" → "Notification Types" → turn off "Daily fortune push"

Please note: withdrawing consent may mean that you can no longer use the corresponding features or some parts of the Service.

6.5 Right to Data Portability

You have the right to obtain a copy of the personal information we hold about you. To export your personal information, please contact us using the contact details in Section IX of this policy; we usually reply within 7 working days, and in any case within no more than 15 working days.

6.6 Right to Complain and Report

If you believe that our processing of personal information has harmed your lawful rights and interests, you may:

• Complain to us through the in-app "Help & Feedback" feature ("Settings" → "Help & Feedback")
• Contact us using the contact details in Section IX of this policy
• Report to the 12377 Illegal and Harmful Internet Information Reporting Center of the Cyberspace Administration of China
• File a lawsuit with a People's Court

6.7 Handling After Account Deletion

After you actively delete your account, we will stop providing the Service to you and will delete or anonymize your personal information as required by applicable law (except where laws and regulations provide otherwise; for example, transaction records must be retained for at least 10 years in accordance with the law).

VII. Protection of Minors

We attach great importance to protecting the personal information of minors.

7.1 Special Rules for Children Under 14

In accordance with the Provisions on the Cyber Protection of Children's Personal Information (《儿童个人信息网络保护规定》):

If we discover that we have collected personal information from a child under 14 without first obtaining verifiable consent from a parent or guardian, we will take measures to delete the relevant data as soon as possible.

7.2 Minors Aged 14 to 18

If you are a minor aged 14 or above but under 18, please read this Privacy Policy together with your guardian, and use the Service and provide personal information only after obtaining your guardian's consent.

7.3 Rights of Guardians

If you are the parent or guardian of a minor, you may contact us using the contact details in Section IX of this policy to request:

• Access to, modification or deletion of the minor's personal information we hold
• Withdrawal of the authorization previously given for us to process the minor's personal information
• Deletion of the minor's account

After receiving your request, we will promptly verify it and handle it as required by law.

VIII. Updates to This Policy

We may revise this Privacy Policy in light of laws and regulations, regulatory requirements, business adjustments, technical upgrades and similar circumstances.

For material changes (for example, expanding the purpose or scope of personal information processing, adding or adjusting important features, adding SDKs or third-party service providers, or changing the recipients of cross-border transfers), we will notify you through prominent in-app notices (such as home-screen announcements), push notifications and similar means; where a change involves a matter for which the law requires your separate consent, we will seek that consent from you separately.

You can check the "Last Updated" date at the top of this page to find out about the latest version of this policy.

If you do not agree to the updated Privacy Policy, you may choose to stop using the Service. Continuing to use the Service will be deemed acceptance of the updated Privacy Policy.

IX. How to Contact Us

If you have any questions, comments or suggestions about this Privacy Policy or the processing of personal information, or if you wish to exercise any of the rights granted to you by this policy, please contact us through the following channels:

• Email of the person in charge of personal information protection: privacy@yaowise.com
• Customer service email: support@yaowise.com
• In-app feedback: open the YaoWise app → menu button (☰) at the top right → "Settings" → "Help & Feedback"
• Operating entity: 北京火粒文化科技有限公司 (Beijing Huoli Culture Technology Co., Ltd.); its business registration information can be looked up in the National Enterprise Credit Information Publicity System

We usually reply within 7 working days of receiving your request, and in any case within no more than 15 working days; for complex matters, we will explain the reasons for the extension to you.

If you are not satisfied with our reply, in particular where our processing of personal information has harmed your lawful rights and interests, you may also file a complaint or report with the regulatory authorities of the People's Republic of China, or file a lawsuit with the People's Court with jurisdiction at the defendant's domicile.