Privacy Policy

• Accounts and verification: email, optional display name, password hash, verification status, and hashed records needed for verification and abuse prevention. Account passwords are not stored in plain text.
• Analysis inputs and outputs: names, gender, birth dates and times, birthplaces, compatibility details, dreams, questions, environment descriptions or photos you submit, as well as calculated charts, AI readings and follow-up conversations. Categories depend on the features you use.
• Transactions and benefits: order identifiers, products, amounts, payment channels and status, credit history, membership and report entitlements. Orders may also record hashed IPs and city, region and country information provided by the hosting platform for security and transaction analysis.
• Referrals and withdrawals: referral relationships and reward records. If you request a reward withdrawal, payment method, recipient name and account are used to verify and pay the reward.
• Usage and technical data: visited pages, feature interactions, analytics session identifiers, browser identifiers, request and error logs, and network information required for security. Internal events may be linked to a signed-in account.
• Support: emails, issue descriptions and payment evidence you send us. Provide only information needed to resolve your request.

We use information to create and protect accounts, generate and store readings, associate guest reports, process payments and refunds, deliver credits and memberships, verify referral rewards, provide support, prevent fraud and diagnose faults. Usage analytics help us understand features and improve the product.

Depending on applicable law, grounds include performing the service you request, legal obligations, necessary security and operational interests, or your consent. Reading this policy does not replace consent for optional processing requiring consent. Withholding required information may prevent the relevant feature from working, without affecting unrelated features.

Current emails concern registration, verification, security, orders or other necessary service information. Any future marketing requiring consent will be explained separately with an unsubscribe method.

Face and palm readings send your photo to a third-party vision model. Current report records store the analysis mode and results, not the uploaded original image. This does not mean model or network providers never process temporary copies or logs. Photos can identify people; consider carefully before uploading.

Text readings send relevant inputs, calculation results and necessary context. Follow-ups include required report and conversation content. We use DeepSeek, Qwen and related models through Alibaba Cloud DashScope. We will update relevant disclosures if model providers change. Contact our privacy email for provider details before submitting sensitive information.

We do not actively use your inputs to train our own general-purpose AI model. Third-party processing, logs and retention follow applicable provider agreements and policies. We do not make an unverified promise of third-party zero retention or exclusion from training.

Obtain authorization before submitting another person's information. Do not submit unrelated sensitive material such as identity documents, payment card details or medical records. If you do not want relevant information processed by AI providers, do not submit that analysis request.

We use Vercel hosting and Web Analytics, Neon databases, Resend transactional email, and AI and payment providers. Hosting processes requests and necessary logs, databases store business records, email services process recipient addresses and verification messages, and AI services process necessary analysis content.

Analytics include Google Analytics, Vercel Web Analytics and internal events. Google Analytics can process page URLs, device and usage data. Internal events may include session and account identifiers, interactions, browser identifiers and hashed IPs. Avoid placing sensitive personal information in URL parameters.

Current payments use WeChat Pay or Alipay, or external redemption-code stores. If your actual checkout identifies Waffo Pancake, that channel processes payment information for the transaction. We do not collect or store full card numbers or security codes; we receive information needed for orders and fulfillment.

We do not sell your personal information. Disclosure is limited to necessary service provision, sharing you request, legal obligations, security and protection of rights, or other authorized purposes. If a business transfer involves personal data, we will explain the recipient and applicable safeguards.

Authentication and security cookies maintain sessions and protect against forged requests. The tj_guest_session cookie associates guest reports and orders, usually for 30 days, with possible extensions for active membership benefits. Language preferences and some interface state may also be stored in your browser.

Internal analytics use the local storage identifier tj_analytics_sid. Google Analytics may use its own analytics cookies. These identifiers and analytics are not required for login. Manage or clear cookies and local storage in your browser, or use Google's analytics opt-out tool. Opting out of Google Analytics does not also disable internal or Vercel analytics.

The site currently has no unified cookie preference panel. Blocking necessary cookies or clearing guest credentials may sign you out or prevent access to unclaimed guest reports.

• Locked reports: generally expire 30 days after creation and become eligible for scheduled cleanup more than 3 days after expiry. Actual deletion depends on the scheduled task running.
• Unlocked reports and conversations: retained for history access. Expiry of follow-up access does not automatically delete conversations. You can request deletion through support.
• Verification records: codes are valid for 10 minutes. Expired or consumed verification records are removed by scheduled cleanup.
• Guest sessions: usually 30 days, extendable by continued use or active membership. Expired sessions without related reports or orders are eligible for scheduled cleanup.
• Account, order, credit, referral, support and analytics records: kept as necessary for service, disputes and applicable recordkeeping obligations. There is currently no uniform automatic deletion period for these categories. Ask us to delete information or explain retention for specific records. Legally required records have restricted purposes.
• Browser storage: remains until you clear it or the relevant feature updates or removes it. Provider logs and backups may follow separate cycles; deletion requests are handled according to actual capabilities and applicable requirements.

Report links you create may expose previews or full readings. Anyone with a valid link can access and potentially copy the selected content; treat these links as public. Exported images may include names, birth details, photos or readings. Review hiding options and the final image before sharing.

Obtain permission before generating or sharing reports about others. Deleting source information cannot automatically recall images, text or copies others have saved. External sites have their own privacy rules.

Measures include password hashing, session validation, access checks and request rate limits. The live site uses HTTPS. Orders and internal analytics store hashed IPs in the business database, but hosting or network providers may still process original network information to provide their services.

No network or storage method guarantees absolute security. If an incident may affect your personal information, we will take remedial action and notify affected users and competent authorities as required by applicable law. Report suspected exposure or account issues to support@ai-tianji.com.

Hosting, database, email, analytics and model providers may process information outside your location, including in the United States, Singapore and China. Actual locations vary with services and deployment. Cross-border processing is limited to service needs and is subject to applicable safeguards or required authorization.

Contact our privacy email if you need details about recipients, processing locations or safeguards for particular information.

Subject to applicable law, you may request access or a copy, correction, deletion or account closure, restriction, objection, withdrawal of consent or a portable copy. Email support@ai-tianji.com from your registered address and identify the account or report. Guests may provide report identifiers and necessary order evidence.

We will verify your identity using only necessary information and respond or explain limitations within the period required by applicable law. Deletion may prevent use of history, balances or benefits. Records legally required to be retained are not immediately deleted and remain limited to the required purposes. Withdrawal does not affect earlier lawful processing.

If you disagree with our handling, contact us again or complain to a competent privacy or consumer protection authority where you live.

The site is intended for users aged 18 or older. We do not knowingly offer paid services to minors or collect their personal information. Do not submit minors' photos or other personal information. Guardians who believe we received such information should contact us for verification and deletion.

We update the date when this policy changes. Material changes to purposes, information categories or recipients will be communicated by site notice or registered email. Additional consent will be requested before processing where required.

Personal information controller: Songjian Shiyue Studio (松间拾月工作室). Privacy, security, deletion and account closure requests: support@ai-tianji.com. Customer support QQ: 3359722626.