問吉 隱私權政策
生效日期：2026 年 10 月 29 日
本政策說明「問吉」iOS app 及其後端服務（以下稱「本服務」）收集哪些資料、如何使用與保存，以及你可以如何刪除。
我們收集的資料
- 帳號資料：你以 Apple 或 Google 登入時，我們取得登入服務提供的識別碼、email 與姓名（目前沒有使用姓名）。使用 Apple 登入並選擇隱藏 email 時，我們只會取得 Apple 提供的轉寄 email。
- 聯絡 email（選填）：你在會員中心自行填寫的聯絡 email。
- 提問與解讀紀錄：你輸入的問題、卦象、AI 解讀結果、收藏狀態，以及每天的本日洞察卦象。
- 次數與購買紀錄：次數餘額與每一筆贈送、購買、扣除、退回、退款與人工調整的紀錄；Apple 交易編號、商品與交易環境。我們不會取得你的信用卡或付款資料，付款由 Apple 處理。
- 服務紀錄：使用量紀錄（每次解析的問題、解讀、使用的模型與用量，用於費用統計與客服）、為防止濫用的短期請求次數紀錄，以及系統運作的 log（含 IP 位址、會員識別碼與交易編號，不含你的問題內容、AI 解讀或登入憑證）。
- 客服來信：你寄到客服信箱的信件，包括你的 email 地址、寄件人名稱、信件內容與附件。
我們不收集位置、聯絡人、照片或裝置上其他 app 的資料。
資料的使用
資料只用於提供與維護本服務：登入與識別帳號、產生解讀、保存與同步紀錄、計算次數與處理購買與退款、防止濫用、客服與排除問題。我們不將你的資料用於廣告或追蹤，不出售你的資料，app 也沒有使用任何第三方分析、廣告或當機回報工具。
第三方 AI 服務供應商
產生提問解讀時，我們會將你輸入的問題與卦象傳送給第三方 AI 服務供應商 OpenAI 或 Anthropic（皆位於美國），由其模型產生解讀；沒有輸入問題時，只傳送一段固定的說明文字。我們不會傳送你的姓名、email、會員識別碼或其他帳號資料；請求由我們的伺服器送出，AI 服務供應商看不到你的 IP 位址。第一次送出提問前，app 會說明並取得你的同意；你可以在「會員中心 → AI 解析資料分享」撤回同意，撤回後將無法使用提問解析。本日洞察的內容只依卦象產生，不包含你輸入的任何文字。AI 服務供應商對資料的處理受其各自的政策規範。若改用其他 AI 服務供應商，我們會更新本政策，並在 app 中再次取得你的同意。
其他服務提供者
- Amazon Web Services：主機、資料庫、登入服務（Amazon Cognito）與客服信箱收信（Amazon SES），存放上述資料。
- Apple：Sign in with Apple、App 內購買與退款通知。
- Google：Google 登入；客服往來信件存放於 Gmail。
- OpenAI、Anthropic：產生解讀（見「第三方 AI 服務供應商」）。
這些服務提供者只為上述用途處理資料。除法律要求外，我們不將你的資料提供給其他人。
保存期間
- 帳號、提問與解讀紀錄、使用量紀錄、次數與購買紀錄：保存到帳號永久刪除為止。你在 app 中刪除的單筆提問紀錄會從畫面移除，資料則保留到帳號永久刪除時一併刪除。
- 解析工作紀錄：約 7 天後自動刪除。
- 短期請求次數紀錄：數分鐘後自動刪除。
- 客服來信：收信系統中的原始信件保存 30 天後自動刪除；轉入客服信箱的往來信件，保存到你的詢問處理完畢且不再需要為止。客服信件與 app 帳號沒有關聯，不會隨帳號刪除；如需刪除，請來信告知。
- 系統 log：保存 90 天。
刪除帳號
你可以在 app 的「會員中心」頁面最下方點「刪除帳號」，再按「申請刪除帳號」。以 Apple 登入者申請時，我們會向 Apple 撤銷本服務的登入授權。申請後 7 天內可隨時在 app 中取消，期滿後永久刪除：
- 刪除：登入身分、email、姓名與聯絡 email、提問與解讀紀錄（含已從畫面刪除的）、本日洞察紀錄、使用量紀錄與解析工作紀錄。剩餘次數作廢。
- 去識別化後保留：次數與購買紀錄改以隨機代碼保存、不再關聯到你的帳號，只保留帳務所需欄位與 Apple 交易編號，用於會計紀錄與處理刪除後才到的退款。
- 單向雜湊紀錄：若你曾購買「一元復始」，或因退款而有尚未抵扣的負數次數，我們會以登入身分的單向雜湊值永久保留這兩項資訊（不含 email、姓名或登入服務的識別碼），以防止優惠重複使用或欠款因刪除帳號而勾銷。你以同一個 Apple 或 Google 帳號重新註冊時，這兩項會延續到新帳號。其他帳號不保留此紀錄。
- 系統 log 依「保存期間」所列的期間自動刪除。
為保障帳號安全，帳號刪除與取消只能由你本人在 app 中進行。對資料處理有其他請求，請來信聯絡。
資料安全
資料傳輸全程加密（HTTPS）。登入憑證存放在裝置的鑰匙圈（Keychain）。後端依最小權限原則存取資料。
兒童
本服務適用於 13 歲以上的使用者，未滿 13 歲請勿使用。未成年人使用前，建議先取得家長或監護人的同意；購買受 Apple 的家長控制（例如「購買前詢問」）管理。我們不會在知情的情況下收集未滿 13 歲兒童的個人資料；若你是家長或監護人，發現孩子提供了個人資料並希望刪除，請來信聯絡我們。
政策變更
本政策如有變更，將更新本頁並修改生效日期；重大變更會在 app 中告知。
聯絡我們
Email：asktheoracle@hchhrs.cc
Ask the Oracle (問吉) Privacy Policy
Effective date: October 29, 2026
This policy explains what data the Ask the Oracle (問吉) iOS app and its backend services ("the Service") collect, how it is used and stored, and how you can delete it. If the Chinese and English versions differ, the Chinese version prevails.
Data we collect
- Account data: when you sign in with Apple or Google, we receive the identifier, email address and name provided by that service (the name is currently not used). If you use Sign in with Apple and hide your email, we receive only Apple's relay address.
- Contact email (optional): an email address you enter yourself in the member center.
- Questions and interpretations: the questions you enter, the hexagrams, the AI interpretations, favorites, and the hexagram of each day's daily insight.
- Credits and purchases: your credit balances and a record of each bonus, purchase, use, return, refund and manual adjustment; Apple transaction IDs, products and transaction environment. We never receive your card or payment details; payments are handled by Apple.
- Service records: usage records (the question, interpretation, model and usage of each interpretation, for cost tracking and support), short-lived request counts used to prevent abuse, and system logs (containing IP addresses, member identifiers and transaction IDs, but not your questions, interpretations or sign-in credentials).
- Support emails: messages you send to our support address, including your email address, sender name, message content and attachments.
We do not collect location, contacts, photos, or data about other apps on your device.
How we use data
Data is used only to provide and maintain the Service: signing in, generating interpretations, saving and syncing history, managing credits, processing purchases and refunds, preventing abuse, customer support and troubleshooting. We do not use your data for advertising or tracking, we do not sell it, and the app contains no third-party analytics, advertising or crash-reporting tools.
Third-party AI providers
To generate an interpretation, we send your question and hexagram to a third-party AI provider, OpenAI or Anthropic (both in the United States), whose model produces the interpretation; if you enter no question, only a fixed placeholder text is sent. We do not send your name, email, member identifier or other account details, and the request is sent from our servers, so the AI provider cannot see your IP address. Before your first question, the app explains this and asks for your consent; you can withdraw consent in 會員中心 (Member center) → AI 解析資料分享, after which interpretations are unavailable. Daily insights are generated from the hexagram only and contain no text you entered. Each AI provider's handling of data is governed by its own policies. If we switch to a different AI provider, we will update this policy and ask for your consent again in the app.
Other service providers
- Amazon Web Services: hosting, databases, sign-in (Amazon Cognito) and receiving support email (Amazon SES); stores the data above.
- Apple: Sign in with Apple, In-App Purchase and refund notifications.
- Google: Google sign-in; support correspondence is stored in Gmail.
- OpenAI, Anthropic: generating interpretations (see Third-party AI providers).
These providers process data only for the purposes above. We do not share your data with anyone else unless required by law.
Retention
- Account, questions and interpretations, usage records, credits and purchases: kept until your account is permanently deleted. A record you delete in the app is removed from view and its data is deleted when your account is permanently deleted.
- Interpretation job records: deleted automatically after about 7 days.
- Short-lived request counts: deleted automatically after a few minutes.
- Support emails: original messages in our mail-receiving system are deleted automatically after 30 days; correspondence in our support mailbox is kept until your request has been handled and is no longer needed. Support emails are not linked to your app account and are not deleted with it; to have them deleted, please email us.
- System logs: kept for 90 days.
Deleting your account
To request deletion, open 會員中心 (Member center) in the app, tap 刪除帳號 (Delete account) at the bottom, then tap 申請刪除帳號. If you signed in with Apple, we revoke the Service's authorization with Apple when you request deletion. You can cancel within 7 days in the app; after that the account is permanently deleted:
- Deleted: sign-in identity, email, name and contact email, questions and interpretations (including those already removed from view), daily insight records, usage records and job records. Remaining credits are forfeited.
- Kept in de-identified form: credit and purchase records are moved under a random code that is no longer linked to your account, keeping only accounting fields and Apple transaction IDs, for accounting and for refunds that arrive after deletion.
- One-way hash record: if you bought the one-time starter pack, or have a negative balance from a refund not yet covered, we permanently keep these two facts under a one-way hash of your sign-in identity (no email, name or sign-in provider identifier), to prevent repeated use of the offer or clearing a debt by deleting the account. If you register again with the same Apple or Google account, they carry over. No such record is kept for other accounts.
- System logs are deleted after the period listed under Retention.
For your security, deletion and cancellation can only be done by you in the app. For other requests about your data, please email us.
Security
All data is encrypted in transit (HTTPS). Sign-in credentials are stored in the device Keychain. Backend access follows the principle of least privilege.
Children
The Service is intended for users aged 13 and over; children under 13 may not use it. Minors should obtain consent from a parent or guardian before use; purchases are subject to Apple's parental controls such as Ask to Buy. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data you want deleted, please email us.
Changes
We will update this page and its effective date when this policy changes, and announce significant changes in the app.
Contact
Email: asktheoracle@hchhrs.cc