We may collect the following categories of information when you use the service:

• Account data：Email address, nickname, avatar, and other registration information.
• Birth details：Birth date, time, and location used for traditional culture interpretation.
• Usage records：Conversation history, request history, feature usage logs, and browsing patterns.
• Device information：Device type, operating system, browser type, IP address, and similar diagnostics.
• Payment information：Payment and subscription records are processed by secure payment providers, including Creem when selected, so we can complete checkout, subscription status sync, invoices, refunds, and fraud prevention.
• Communications：Emails, messages, and other communications you send to us.

Collected data is used for the following purposes:

• Operate and improve the service, including performance optimization and bug fixes.
• Generate personalized analysis and recommendations based on your birth details and usage patterns.
• Deliver service notices, updates, and promotional communications.
• Maintain account security and prevent fraudulent activities.
• Respond to your inquiries and provide customer support.
• Comply with legal obligations and regulatory requirements.

We may share your information in the following circumstances:

• Vision features may send uploaded face or palm images from our backend to AI model providers only to create the requested analysis and annotated report image. We also screen the final text prompt with Creem Moderation before image generation; the user image itself is not sent to Creem.
• With service providers who assist us in operating the service (e.g., payment processors, hosting providers).
• When required by law, regulation, or legal process.
• To protect the rights, property, or safety of JIEYI, our users, or others.
• In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of the transaction.

We implement comprehensive security measures to protect your personal information:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Strict access controls and authentication mechanisms.
• Regular security audits and vulnerability assessments.
• Employee training on data protection best practices.
• Data breach response procedures to address security incidents.

Depending on applicable law, you may exercise the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data under certain circumstances.
• Withdrawal of consent: Withdraw consent for processing where we rely on your consent.
• Data portability: Request export of your personal data in a structured format.
• Objection: Object to processing of your personal data under certain circumstances.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal obligations, resolution of disputes, and enforcement of our agreements. The retention period varies depending on the type of data and the purpose for which it is used.

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will publish the latest version here, and for material changes, we may notify you by email or site announcement. Your continued use of the service after any changes constitutes your acceptance of the updated policy.