Privacy Policy

Version v1.0 · Effective 2026-09-21

1. Who we are

This service is operated by Xuanxue Culture (Hainan) Co., Ltd., covering the website xuanxueai.com.cn, the XuanxueAI mobile app and the WeChat mini program. We process personal information in accordance with applicable laws and regulations.

2. Information we collect

1. Account: mobile number, email, password (stored only as a hash), and the WeChat openid when you sign in with WeChat.

2. Charting input: date and time of birth, gender, birthplace (used for true-solar-time correction and time-zone conversion).

3. Usage and device: device identifier (account/handset binding and abuse prevention), IP address (daily free-allowance check), and necessary operation logs.

4. Payment: order number and the transaction reference returned by the payment channel. We do not store card numbers or payment passwords; payments are processed by WeChat Pay and Alipay.

5. Content you upload: images submitted for physiognomy analysis, used only for that analysis.

3. How we use it

To provide charting, interpretation, reports and membership services; for identity and account security; for free-allowance and risk control; for customer service and lawful compliance audits.

4. Third parties

1. AI interpretation: a third-party large-model service (DeepSeek) is called server-side; only the chart result and your question text are transmitted, never your mobile number or email.

2. SMS verification codes are delivered by a cloud communication provider.

3. Payments are processed by WeChat Pay and Alipay; we only receive the payment result notification.

5. Storage and retention

Personal information is stored on servers located in mainland China. Account data is kept until you delete your account; operations logs are kept for security needs, generally no longer than 12 months.

6. Sharing, transfer and disclosure

We do not share, transfer or publicly disclose your personal information except as required by law or with your separate consent.

7. Your rights

You may request access, correction, deletion, withdrawal of consent or account deletion via the Contact page. We will verify your identity and act within a reasonable period.

8. Minors

This service is intended for adults. If you are under 18, please use it with a guardian and provide personal information with the guardian’s consent.

9. Security

We use HTTPS transport encryption, password hashing, service-to-service shared-secret authentication, least-privilege access and access auditing.

10. Updates and contact

Any update will be published on this page with a version and effective date. For questions, please reach us via the Contact page.

This page describes our actual data practices and service terms. Contact us for the formal legal text.