Privacy Policy
Qiflow ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use and store it, and the rights you have. If you have questions, contact us at [email protected].
This policy covers:
- What information we collect and why
- Where your data is stored
- How we share data with third parties
- How to manage or delete your data
- Children's privacy
- How to contact us
1. Information We Collect
1.1 Account Information
When you register, we collect your email address for authentication and account security. You may also sign in with Apple or Google, in which case we receive only the account identifier permitted by your authorization.
1.2 Birth Profile
To generate BaZi charts, Five Elements analysis, and compatibility readings, we need your date of birth, time of birth, and gender. Charts are calculated on your device and on our servers. When you save your profile to your account, this birth information is stored on our servers so it stays in sync across your devices and sign-in methods. The lunar-mansion identifier calculated from your birth data will be used to perform matching calculations with friends you authorize.
1.3 Compatibility History
Partner records you save (nickname, birth data, analysis results) are stored on our servers and linked to your account so they stay available across your devices. You can delete individual records in the app, and deleting your account removes them permanently.
1.4 AI Content and I Ching Interpretations
When you use the AI Energy Guide or request an I Ching interpretation, we process your question or message, relevant conversation context, prior follow-up summaries, and a compact energy-profile summary where available. Before the first AI request, the app asks for your explicit permission to send this content to our AI processors.
Requests are primarily processed by SiliconFlow using DeepSeek or MiniMax models. If that service is unavailable, Cloudflare Workers AI may process the request using a Meta model. SiliconFlow states that it does not collect or store API interaction data and processes it only under customer instructions. Cloudflare states that Workers AI customer content is not used to train models or improve services without explicit consent. These services may perform automated content-safety review and retain limited operational or abnormal-request logs as required to operate securely and comply with law.
Our backend does not retain AI Guide chat text after delivering the response. Generated I Ching interpretations are cached in access-controlled backend storage for up to 7 days solely for recovery and idempotent retries; the original question is not stored as a separate backend field, although generated text may paraphrase it. Non-content generation metadata, such as hexagram numbers, question category, model name, status, and latency, is retained for up to 180 days for support, security, and reliability review. Your chat and inquiry history is also stored locally on your device until you delete it or delete your account.
1.5 Subscription and Purchase Data
Your subscription status and purchase history are managed by Apple App Store and RevenueCat. We receive your subscription status (whether you are a Premium member) and your credit balance, which we store on your account so it stays in sync across devices. We do not store payment card details.
1.6 Usage and Diagnostic Data
The app generates a random device identifier and sends first-party usage records to our backend, including feature interaction events, event parameters, app version, platform, and timestamps. We use this information to understand feature use, diagnose failures, and improve reliability. If you are signed in, these records may be linked to your account. They are retained for up to 180 days and are not used for advertising or tracking you across other companies' apps or websites.
2. Where Your Data Is Stored
- Our servers: Account information (email, subscription status, credit balance), your saved birth profile, saved compatibility records, first-party usage and diagnostic records (including a random device identifier and product interactions, retained for up to 180 days), limited AI generation metadata, and the temporary 7-day I Ching interpretation cache are stored on our backend infrastructure (Cloudflare global network; servers may be located outside your country of residence).
- On your device: Daily energy records, cached charts, and app settings are kept on your phone for offline use. Calculations can run locally without a network connection.
- RevenueCat: Subscription data is stored by RevenueCat on servers located in the United States.
3. Third-Party Services
We share data only with the following parties as necessary to operate the service:
- Apple Inc. — Sign in with Apple (optional)
- Google LLC — Sign in with Google (optional)
- RevenueCat Inc. — Subscription management and receipt validation
- Cloudflare Inc. — Backend infrastructure and security
- SiliconFlow — AI inference using DeepSeek or MiniMax models, automated content-safety review, and service security
- Cloudflare Workers AI. — Backup AI inference when the primary service is unavailable
- Legal authorities — When required by applicable law or government order
We do not sell or rent your personal information.
4. Data Security
All data in transit is protected by TLS encryption. Account credentials are stored using one-way hashing. We periodically review access controls. No security measure is absolute; if a data incident occurs, we will notify you as required by law.
5. Your Rights
- Access and correction: Update your profile at any time in the app
- Deletion: You can delete your account and all associated data within the app via the "Sign In / Profile" page. You may also request account deletion without installing the app by visiting our web portal at https://getqiflow.com/delete-account.
- Withdraw consent: Open Settings → AI Data Processing to withdraw permission. No new AI request will be sent unless you agree again.
- Data portability: Contact us to request a copy of your account data
Upon account deletion, directly associated data is removed from active systems, locally stored AI memory and inquiry history are cleared from the device, and billing webhook records are de-identified. Residual recovery copies in our current Cloudflare Free infrastructure may remain inaccessible in backups for up to 7 days before expiry.
6. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have specific rights regarding your personal information:
- Right to Know & Access: You may request details about the personal information we collect and how we use it.
- Right to Delete: You may request the deletion of your personal information at any time.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
Notice of Collection: We collect identifiers (email address, account identifier, and a random app-generated device identifier), characteristics (birth data), commercial information (subscription and purchase status), internet or other electronic activity (product interactions), and user content (questions, messages, and saved compatibility records) for the service, security, support, and first-party analytics purposes described above. We do not "sell" or "share" your personal information for cross-context behavioral advertising as defined under the CCPA.
7. Children's Privacy
Qiflow is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
8. Changes to This Policy
We will notify you of material changes through a prominent in-app notice before they take effect. Continued use of the app after the effective date constitutes acceptance of the updated policy.
9. Contact Us
For privacy inquiries, email [email protected]. We aim to respond within 15 business days.