隐私政策 / Privacy Policy
易妈咪（YiMaMi，网址：www.yimami.com）重视您的隐私。本隐私政策说明我们如何收集、使用和保护您的个人信息。
1. 我们收集的信息
我们可能收集以下类型的信息：
- 账户信息：注册时提供的邮箱地址及加密存储的密码
- 使用数据：命盘数据、占卜记录、择日记录、合八字记录
- 交易数据：点充值记录（不含信用卡号等支付细节，支付由第三方处理）
- 技术数据：IP 地址、浏览器类型、访问时间等日志信息
- 设备数据（Android 应用）：加速度计传感器数据（仅用于占卜摇卦功能，不存储原始传感器数据）
- 使用分析数据：功能使用模式（如浏览页面、使用功能的频次）和匿名会话信息，用于改善服务质量，数据存储在我方服务器
2. 信息使用目的
我们将收集的信息用于：
- 提供和改善本服务的功能
- 处理点充值与退款
- 发送与账户相关的通知（如充值成功确认）
- 防止欺诈和滥用行为
- 遵守适用的法律法规
3. 信息共享
我们不会出售您的个人信息。仅在以下情况下可能共享信息：
- 支付处理商：PayPal（网页端）和 Google Play Billing（Android 应用）处理您的付款（受各自隐私政策约束）
- AI 服务：Anthropic Claude API 处理您的卦象数据以生成解读（数据不用于模型训练）
- 云服务：Cloudflare Workers 和 Neon PostgreSQL 用于服务运行和数据存储
- 法律要求：依法院命令或相关法律法规要求披露
4. 数据安全
我们采取合理的技术措施保护您的数据：
- 密码经哈希加密存储，绝不明文保存
- 所有数据传输使用 HTTPS 加密
- API 访问采用 JWT 身份验证
- 数据库访问受严格权限控制
尽管我们尽力保护您的信息，但任何互联网传输都无法保证 100% 安全。
5. 数据保留
您的账户数据将保留至账户注销为止。注销后，我们将在合理时间内删除您的个人数据，但法律要求保留的数据除外。
6. Cookie 和本地存储
我们使用浏览器 localStorage 存储登录状态（访问令牌）。我们不使用追踪性第三方 Cookie。
在 Android 应用中，登录令牌通过 Android EncryptedSharedPreferences 安全存储在设备本地，使用 AES-256 加密。
7. 您的权利
您有权：
- 访问和导出您的个人数据
- 更正不准确的信息
- 删除您的账户及相关数据
- 撤回对数据处理的同意（可能影响部分功能）
如需行使上述权利，请联系 yiyuan663366@gmail.com。
8. 未成年人隐私
本服务不面向 18 岁以下未成年人。我们不会故意收集未成年人的个人信息。
9. 政策更新
本政策可能会不定期更新，更新后继续使用本服务即表示接受新政策。
10. 联系我们
如有隐私相关问题，请联系：yiyuan663366@gmail.com
YiMaMi (www.yimami.com) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information.
1. Information We Collect
We may collect the following types of information:
- Account Information: Email address provided at registration and securely hashed password
- Usage Data: Ba Zi natal charts, I Ching hexagram readings, Ganzhi date selection records, and compatibility analysis records
- Transaction Data: Credit purchase history (excludes payment card details, which are handled by third parties)
- Technical Data: IP address, browser type, access times, and other log information
- Device Data (Android App): Accelerometer sensor data (used solely for the coin-shake hexagram-casting feature, an analog of the traditional three-coin method; raw sensor data is not stored)
- Usage Analytics: Feature usage patterns (e.g., pages viewed, feature frequency) and anonymous session information, used to improve service quality, stored on our servers
2. How We Use Your Information
We use collected information to:
- Provide and improve our service features
- Process credit purchases and refunds
- Send account-related notifications (e.g., purchase confirmations)
- Prevent fraud and abuse
- Comply with applicable laws and regulations
3. Information Sharing
We do not sell your personal information. We may share information only in the following cases:
- Payment Processor: PayPal (web) and Google Play Billing (Android app) process your payments (subject to their respective privacy policies)
- AI Service: Anthropic Claude API processes your hexagram data to generate readings (data is not used for model training)
- Cloud Services: Cloudflare Workers and Neon PostgreSQL for service operation and data storage
- Legal Requirements: Disclosure required by court order or applicable law
4. Data Security
We take reasonable technical measures to protect your data:
- Passwords are hashed and never stored in plain text
- All data transmission uses HTTPS encryption
- API access uses JWT authentication
- Database access is strictly permission-controlled
While we strive to protect your information, no internet transmission can be guaranteed 100% secure.
5. Data Retention
Your account data is retained until account deletion. After deletion, we will delete your personal data within a reasonable time, except where retention is required by law.
6. Cookies and Local Storage
We use browser localStorage to store login state (access tokens). We do not use tracking third-party cookies.
In the Android app, login tokens are securely stored on the device using Android EncryptedSharedPreferences with AES-256 encryption.
7. Your Rights
You have the right to:
- Access and export your personal data
- Correct inaccurate information
- Delete your account and associated data
- Withdraw consent for data processing (may affect some features)
To exercise these rights, contact yiyuan663366@gmail.com.
8. Children's Privacy
This service is not directed at persons under 18. We do not knowingly collect personal information from minors.
9. Policy Updates
This policy may be updated periodically. Continued use of the service after updates constitutes acceptance of the new policy.
10. Contact Us
For privacy-related questions, contact: yiyuan663366@gmail.com