BanXian Privacy Policy

Effective date: July 14, 2026 Last updated: July 14, 2026

This Privacy Policy explains how BanXian ("the App", "we", "us") collects, uses, stores, shares, and protects your personal information. Please read it carefully before using the App. By using the App, you acknowledge that you have read and understood this Policy.

In one line: We collect your birth details and conversations to generate fortune-telling readings; this content is sent to a third-party AI provider (DeepSeek) for processing — DeepSeek is operated by a company based in China and your data may be processed on servers in China; we do not sell your data; you can export or permanently delete your account and all your data at any time. The App is for entertainment and cultural companionship purposes only.

1. Who we are (data controller)

• Product name: BanXian (半仙)
• App identifier: ai.banxian.app
• Operator: The BanXian project operator (see "Contact us"; the registered legal entity is as shown in our App Store Connect seller information)
• Contact email: support@banxian.ai
• Website: https://banxian.ai

We act as the "data controller" for the personal data processed under this Policy.

2. What information we collect

2.1 Information you provide

⚠️ About sensitive data: Your birth date/time and conversation content may reveal health, emotional, belief-related, or other sensitive circumstances. You understand and agree that we process this information to provide fortune-telling readings. Please do not enter highly sensitive information you do not wish to be processed (e.g., government ID numbers, bank card numbers, passwords) into conversations.

2.2 Information collected automatically

2.3 What we do not collect

• We do not collect your precise location (GPS).
• We do not access your contacts, photos, microphone, or other sensitive device permissions unless a feature explicitly requests it and you consent.
• We do not track you across other apps or websites for third-party advertising (see Section 6 on ads).

3. How we use your information

We process your information only for the following purposes:

1. Provide the core service: Run our chart-calculation engines (BaZi / Zi Wei / Liu Yao, etc.) on your birth details and, together with the conversation, generate readings, chart cards, annual/daily forecasts, and detailed reports.
2. Maintain your account and subscription: Identify your account, sync profiles across devices, manage free quota and subscription benefits, and process referral rewards (promo codes).
3. Daily readings: Generate a daily reading card in your local morning based on your time zone and (with your permission) remind you via notifications.
4. Safety and compliance: Apply output safety filters (blocking prohibited content on death/medical/investment topics, crisis-care referrals), prevent abuse and fraud, and comply with legal obligations.
5. Improve the service: Analyze crash and aggregate usage data to fix issues and improve the experience (not for individual profiling or targeted marketing).
6. Communicate with you: Respond to support requests and send important service or policy-change notices.

We do not use your personal information for automated decisions that produce legal or similarly significant effects on you.

Legal bases (GDPR, where applicable): performance of our contract with you (providing the service); your consent (processing sensitive data, sending push notifications); our legitimate interests (security, abuse prevention, service improvement); and compliance with legal obligations. You may withdraw consent at any time (see Section 9).

4. Third-party services and data sharing

We do not sell your personal information, and we do not share it for third parties' independent marketing purposes. To provide the service, we share information with the following necessary processors:

4.1 AI processor DeepSeek — Important disclosure ⚠️

Fortune-telling readings in this App are generated by the third-party large language model service DeepSeek. To generate readings:

• We send your birth information, chart-calculation results, and conversation content to DeepSeek's API for processing.
• DeepSeek is operated by a company based in the People's Republic of China, and your data may be transferred to and processed on servers located in China. This processing is subject to DeepSeek's own privacy policy and applicable Chinese laws.
• We call the service via API and require the processor to use the data only to generate the current reading. However, once data leaves our systems and enters a third-party processing environment, its security and retention are governed by that third party's policies, and we cannot offer the same complete control as within our own systems.
• DeepSeek privacy policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html (refer to their latest official version).

Your choice and informed consent: If you do not want your birth information and conversations transferred for processing in China, do not use the App's conversation and reading features. On first use we will clearly notify you of this third-party processing and seek your consent.

Future changes: We may migrate AI processing to hosting environments located in the United States or Singapore. If such a material change occurs, we will update this Policy and notify you in-app. Always refer to the latest version of this Policy.

4.2 Other processors

We enter into data processing agreements (DPAs) with these processors requiring them to process data only on our instructions and to apply appropriate security measures.

4.3 Legally required disclosures

Where required by law, or as necessary to protect the legitimate rights of us and our users and to prevent fraud or harm, we may disclose information to competent authorities.

5. International data transfers

The App serves overseas Chinese-speaking users, and we and our processors are located outside mainland China. Your data will be transferred to and stored outside your country/region, and as described in Section 4.1 may be transferred to an AI processor located in China. Data-protection laws in these countries/regions may differ from those where you live.

For users in the European Economic Area (EEA)/UK: for transfers to countries without an adequacy decision (including China), we rely on appropriate safeguards (such as Standard Contractual Clauses) or your explicit consent. Your use of the conversation features constitutes your explicit consent to transfer your sensitive data to the third-party processing described in Section 4.1.

6. Advertising (free tier)

Subscribers get an entirely ad-free experience. The free tier may show: (1) a top banner ad; and (2) an optional rewarded-video ad (watch to earn extra question quota). Ads are served by Google AdMob. AdMob may collect advertising identifiers (such as the IDFA, which requires your permission via App Tracking Transparency) and device/usage data for ad delivery and measurement.

• If we show personalized ads, we will first request your permission through the iOS App Tracking Transparency (ATT) prompt as required by the platform; you may decline, in which case only non-personalized ads are shown.
• AdMob data practices: see Google's Privacy Policy at https://policies.google.com/privacy

Note: Advertising features may be introduced after the initial release. If your version does not include ads, this section does not currently apply.

7. Data storage and security

• Storage location: Data is stored in a cloud database outside China (Supabase/PostgreSQL).
• Retention periods:
• Conversation memory: For free users, retained 7 days on a rolling basis, then deleted; for subscribers, retained until you delete the profile/conversation or your account.
• Chart profiles and reports: Retained until you delete them or your account.
• Account and subscription records: After you delete your account, we may retain the minimum necessary records for legal, financial, and anti-fraud obligations (typically no longer than required by billing and tax regulations, e.g., transaction records), after which they are deleted or anonymized.
• Security measures: Transport-layer encryption (HTTPS/TLS), access controls, per-user data isolation (row-level), and least-privilege principles. Despite reasonable measures, no internet transmission or storage can be guaranteed absolutely secure.

8. Children's privacy

The App is not directed to children under 16 (or 13 in some regions, per local law), and we do not knowingly collect their personal information. The App Store age rating is set accordingly.

• The App is positioned as an entertainment product for adults.
• If a chart's calculated age is under 18, "Li BanXian" provides only positive guidance on study/interest directions and does not address romance, wealth, or health topics.
• If we learn we have inadvertently collected information from a child below the applicable age, we will delete it promptly. If you believe a child has provided us information, contact support@banxian.ai.

9. Your rights

Wherever you are, we strive to let you exercise the following rights:

• Access and export: Obtain a copy of the personal information we hold about you.
• Correction: Correct inaccurate information (e.g., mistyped birth details).
• Deletion: Permanently delete your account and all associated data (chart profiles, conversations, reports) with one tap in the App under "Me → Account → Delete Account." Deletion is irreversible.
• Withdraw consent: Withdraw consent to sensitive-data processing or notifications at any time (withdrawal may make related features unavailable).
• Restrict/object: Restrict or object to certain processing under applicable law.
• Data portability: Receive your data in a structured, common format.
• Non-discrimination: Exercising your rights will not result in discriminatory treatment or pricing.

Region-specific rights

• EU/UK (GDPR/UK GDPR): You have all the rights above and the right to lodge a complaint with your national data-protection authority.
• California, USA (CCPA/CPRA): You have the right to know, delete, correct, and opt out of "sale/sharing." We do not sell your personal information, nor share it for cross-context behavioral advertising. California users may exercise rights via support@banxian.ai.
• Japan (APPI): We process your information as a personal-information handling business operator; for provision of personal data to a third country (including China), we provide the required notice and obtain consent as required by law. You may request disclosure, correction, or cessation of use.
• Canada (PIPEDA): You have the right to access and challenge the accuracy of the personal information we hold.

To exercise your rights, use the in-app controls or email support@banxian.ai. We will respond within the period required by applicable law (typically within 30 days) and may need to verify your identity.

10. Cookies and similar technologies

The App is a native mobile app and does not use browser cookies. We use only on-device storage (UserDefaults) to keep necessary app state (such as the anonymous user ID, login state, and preferences). Our website may use necessary cookies, as described on the site.

11. Changes to this Policy

We may update this Policy from time to time. For material changes (especially regarding the location of third-party AI processing or substantial changes to data use), we will notify you via in-app notice or email and update the "Last updated" date at the top. Continued use after a change constitutes acceptance of the updated Policy.

12. Contact us

For any questions, requests, or complaints about this Policy or your data:

• Email: support@banxian.ai
• Website: https://banxian.ai

All fortune-telling content provided by the App is for entertainment and cultural companionship purposes only and does not constitute medical, legal, financial, or investment advice. See the Terms of Service for details.