Updated: October 26, 2026
This policy applies to Fateverse (Chinese name: 命运万象, Android package cn.zhiwo.app) and the related Fateverse website and services.
This policy explains how we handle personal information when providing BaZi, Zi Wei Dou Shu, Qi Men Dun Jia, Da Liu Ren, Qi Zheng Si Yu and TCM Wellness content, AI readings, relationship-topic records, community, generative AI, reminders and related services.
Birth date, time, location, gender, name and personal exploration records are highly personal. When you create and save a record, this data and its derived content are stored on our servers, and may be sent to DeepSeek for AI reading features you enable. Do not submit others' personal information without authorization.
| Category | Data | Purpose |
|---|---|---|
| Website analytics (optional) | After consent: cookie identifiers, public page paths, referring website origins, browser and device information; Google receives IP addresses needed for network requests. URL query parameters, personal charts, birth details, questions and health inputs are excluded | Measuring public page visits and search traffic |
| Account | User ID, account, nickname, password hash, creation time | Registration, login and profile display |
| WeChat identity | Temporary login code, openid, binding status | WeChat login and account binding |
| Session & security | Session ID, token hash, IP, user agent, expiry | Login persistence and security |
| Personal data & exploration records | Name, gender, birth time, location, coordinates, generated content | Generating, storing and retrieving exploration records |
| AI & credits | Questions, personal exploration data, AI output, usage and credits | AI readings, credit limits and history |
| Photo readings | Optional palm, face or room photos, compressed images, thumbnails, file IDs and related questions | Uploading, storing and displaying photos and generating AI readings |
| Wellness inputs | Physical condition, lifestyle and health-related descriptions voluntarily included in wellness questions | Answering wellness questions, not medical diagnosis |
| Community | Posts, replies, tags and linked exploration records | Publishing and displaying community content |
| Relationships & sharing | Relationship type, exploration record IDs, reports and share tokens | Relationship reports and share links |
| Usage records | Daily content prompts, progress and reminder settings | History and progress tracking |
| Content safety and blocks | Reporter account, reported content and identifiers, report reason, notes, review status, and blocked users | Moderating content, handling reports, and restricting interactions between blocked users |
| Payments & orders | Order number, payment ID, Google Play purchase token and obfuscated app account identifier, product, credits, currency, amount, purchase and refund status | Payment, refund and reconciliation |
| Payment SDK telemetry | Android PayPal payment events, timestamps, order IDs, app package and version, SDK and OS versions, device manufacturer, model and emulator flag | Payment-flow analytics and diagnostics |
We use HttpOnly session cookies, CSRF cookies and necessary client-side state to keep you signed in and protect sessions. Clearing local storage does not delete server-side data.
Optional Google Analytics scripts and analytics cookies are enabled only after you choose Allow analytics. Declining does not affect core features. Use Analytics preferences on this page to change your choice or stop future collection. Your choice is stored in this browser; clearing browser storage resets it. Advertising features and automatic form tracking are disabled. Counts also cover calculations, saves, registration, completed readings and confirmed payments, without account, chart, question or order identifiers or payment amounts. Private pages do not send Google analytics. Only the public entry path, successful event type and timestamp are stored in this browser with a seven-day attribution and reporting validity window; expired records are cleaned on return, and browsers without cross-tab locks use tab-only storage and reported on a consented return to a public page. Users who do not return, decline analytics or clear browser storage are not fully represented; these counts are not total orders or readings. Delayed counts use the reporting day, not the original success day. Withdrawing consent clears entry attribution and queued events.
| Third party | Data sent | Purpose |
|---|---|---|
| Google Analytics and Windsor.ai (website only) | With consent, public-page analytics are sent to Google Analytics. Windsor.ai reads authorized aggregated Analytics and Search Console reports for site operations | Analyzing traffic, search visibility and content performance |
| Cloudflare (Google Play edition) | Network connection information and proxied login requests, session credentials, personal data, questions, photos, responses, Google Play purchase and access tokens, and signed assertions; does not receive our Google service account private key or checkout card details | API request and response delivery and security for the Play edition, and network relay for server-side Google purchase verification and notifications |
| Google Play | App package, product ID, purchase token, obfuscated app account identifier, purchase and refund status; Google processes payment accounts and payment details directly through its checkout | Play edition billing, account and entitlement verification, consumption acknowledgement, and refund reconciliation |
| DeepSeek | Questions, chat context, personal exploration data, focus areas, and photos and wellness descriptions actively submitted by users | Generating AI reading content |
| Tencent WeChat | Login code, openid and subscription-message data | WeChat login and reminders |
| AMap Open Platform | Administrative areas and coordinates (no user input) | Building area-selection data |
| PayPal | Order number, item description, amount, payment status, and Android payment SDK event and device telemetry listed above | USD collection, refunds, reconciliation, payment analytics and diagnostics |
| Alipay | Order number, item description, amount and payment status | CNY collection, refunds and reconciliation |
For AI chat, reading content and glossary explanations, relevant questions, personal exploration data and context are sent to DeepSeek. Some messages and reports are saved to the database.
Photo readings are optional. When you choose or take a photo and submit it, a compressed image and thumbnail are stored on our servers, and the image is sent to DeepSeek for the requested reading. Photos are not processed only on your device or only temporarily in memory. Upload only your own photos or material you have permission to use. Wellness descriptions you submit are processed with your question and may be stored in chat history.
Do not enter ID numbers, bank cards, payment passwords, medical records or precise addresses. AI output is probabilistic; for health-related content, see a doctor if you have persistent symptoms.
Community posts and replies are visible to other users. Relationship reports can be viewed by anyone with the share link. Do not include unnecessary personal information in public content.
Deleting your account also removes its community content, exploration records and reports from the online database.
The Google Play edition uses Google Play Billing. Our server verifies completed purchases with Google before granting credits and consumes each purchase after delivery. Pending payments do not grant credits. The purchase is bound to an obfuscated identifier for the app account used at checkout. Website credit packs use PayPal in USD; the independent CNY Android app uses Alipay.
Independent Android GLOBAL builds use PayPal and CHINA builds use Alipay; PLAY builds use Google Play Billing and do not start PayPal checkout. When you use PayPal, its Android SDK sends the payment events and app and device information listed above to PayPal for analytics and diagnostics. Card details entered at a payment provider checkout are handled by that provider; our app does not store your card number or payment password.
Google Play purchase tokens are retained while delivery or consumption confirmation needs retrying and cleared from the retry record after consumption is confirmed. Order and reconciliation records may be retained where required for accounting, fraud prevention, refunds, or legal obligations after account deletion; they are not used to restore a deleted account. Reports and block lists associated with your account are removed when it is deleted.
Our production business databases, application logs and their backups are stored within the People's Republic of China. Data is kept while your account is active and is deleted per your requests or legal requirements.
For uploaded photos, deleting the related conversation or requesting deletion starts cleanup of stored images and associated DeepSeek files. Cleanup may be asynchronous; third-party files and backups follow their applicable retention rules. Contact russell@wangqi.net to request deletion of specific photos or records without deleting your account.
Cloudflare network relaying, Google Play payment processing, PayPal and DeepSeek requests, and optional Google Analytics and Windsor.ai reporting may involve cross-border transfer or processing. These providers' processing and retention follow their respective policies. We do not send irrelevant sensitive information to AI models.
We use bcrypt password hashing, store only SHA-256 session-token hashes, use HttpOnly/SameSite/Secure cookies, apply CSRF protection and revoke sessions on password change.
You may request to access, correct or delete your personal information, or delete your account at any time in Settings. If you cannot access the app, use the external account-deletion page.
Fateverse on Google Play is intended for adults aged 18 and over. For other Fateverse services, minors should use paid, public-sharing, community-posting or personalized AI-support features under guardian supervision.
We update this policy when data fields, AI services, SDKs, payment channels or storage locations change. For questions, contact russell@wangqi.net.