Privacy Policy

Applies to the Tianyi mobile app (iOS / Android).
Effective: [TBC: launch date] · Last updated: 5 August 2026

This is a technical draft. The data fields, recipients and security measures described here match the implementation. Items marked [TBC] — retention periods, governing law, data protection contact — require legal review before this can be published as a binding policy.

1. What we collect

Category	Details	Required?
Birth details	Birth date; birth time, birth longitude, gender (all optional)	Date required, rest optional
Conversations	Messages you send and Tianyi's replies	Required to use chat
Memory records	Life-event summaries, types and confidence scores extracted from your conversations; periodic conversation summaries	Generated automatically; deletable
Check-ins & feedback	Mood rating (1–5), free-text notes on how you feel and what you plan; relevance ratings and notes on daily readings	Optional
Account	Anonymous identifier; email and display name once you link Apple / Google	Identifier required, linking optional
Purchases	Store transaction ID, product ID, verification status, expiry	Required to purchase
Push subscriptions	Device push token, platform, time zone, preferred delivery time	Required for reminders
Attribution & device	Advertising identifier and install attribution events (via AppsFlyer)	Requires your consent; follows App Tracking Transparency on iOS

About your birth details

Birth time and birth longitude are used for true solar time correction, which improves chart accuracy. Together they point, to some degree, at your place of birth, so we treat them as sensitive: used only for chart calculation and the readings built on it, never for advertising, and never joined with attribution data. You can omit both and the app still works.

What we don't collect

No contacts, no photo library contents, no precise location, no microphone or camera data. Shareable chart cards are rendered on your device after you confirm and saved to your photo library — they never pass through our servers.

2. What it's used for

Charts and readings — computing your chart from birth details and combining it with the current day.
Conversational continuity — retaining conversations and memory records so you don't re-explain your background.
Periodic reviews — aggregating your check-ins and feedback into weekly and monthly views.
Entitlements — verifying store transactions to determine what paid content you can access.
Reminders — sending your daily prompt at the time you choose.
Security and compliance — detecting abuse, diagnosing faults, meeting legal obligations.
Marketing measurement — measuring campaign performance, where you have consented.

We do not use your birth details, conversations or memory records for ad targeting, and we do not sell this data.

3. Who processes it

Recipient	What they receive	Why
DeepSeek	Chart summary, current-day data, conversation content	Generating replies and reading text
Supabase	Account identifier, linked email and display name	Authentication; stores no application data
Apple / Google	Transaction receipts	Verifying purchases and subscription status
AppsFlyer	Device and attribution identifiers	Campaign measurement (with your consent)
Amazon Web Services (Singapore)	Storage and runtime for the above	Server hosting

These recipients act as processors on our behalf and may not use the data for their own purposes. Data is stored in Singapore; calls to DeepSeek transmit data to the region where that service operates.

[TBC] The lawful basis for cross-border transfers and the contractual clauses relied on require legal input. Listing in the EU or UK would additionally require standard contractual clauses and a transfer impact assessment.

4. Your rights and how to exercise them

View and delete memories — under Me → What Tianyi remembers about you, every extracted record is listed and can be deleted individually. Low-confidence entries are held as unconfirmed and never enter a conversation.
Stop notifications — turn off daily reminders under Me, or withdraw notification permission in system settings.
Withdraw attribution consent — on iOS, disable it under system Tracking settings; on Android, reset your advertising identifier.
Unlink a provider — you may unlink Apple / Google, but at least one sign-in method must remain, or you will not be able to recover your account on another device.
Delete your account — available in the app under Me → Account → Delete account; no need to contact us. On confirmation we immediately delete your chart, all conversations, memory records, check-ins and feedback, push subscriptions, purchase records, and your account record in the identity service. This cannot be undone. Anonymous users can delete too.

Deleting your account is not a refund and does not cancel an auto-renewing subscription — subscriptions are billed by Apple or Google and can only be cancelled in their subscription settings. If you have an active subscription, cancel it in the store first, then delete your account.

One record does not go away on deletion: the store-notification deduplication ledger. It holds only the store's event ID and processing status, no personal information; removing it would allow a redelivered store notification to be applied twice.

5. How long we keep it

While you use the service, your chart, conversations and memory records are retained to maintain continuity. Purchase and verification records are retained separately for financial and compliance reasons.

[TBC] Specific retention periods and the mechanism for deletion on expiry need to be set with legal input and written into this section.

6. Children

Tianyi is not offered to people under [TBC: age threshold], and we do not knowingly collect their personal information. If you believe we hold such information, contact us and we will delete it.

7. Security

HTTPS end to end; release builds refuse cleartext connections to the API.
API calls require an identity token; session data is isolated per account and cross-account access is refused.
Verification keys and service-account credentials live only in a restricted directory on the server and are never shipped with the app.
Birth details and conversation content are not written to access logs.

No measure guarantees absolute security. If a breach affects you, we will notify you within the timeframe required by applicable law.

8. Changes

When this policy changes we update the "Last updated" date at the top; material changes are surfaced in the app.

9. Contact

For data questions, contact privacy@aicofi.com.

[TBC] The data controller's legal name and registered address, the data protection officer (if applicable), and the governing law and dispute resolution mechanism require legal input.