YiMatrix Web Privacy Policy

This policy applies to the YiMatrix website at yimatrix.com and its localized pages (the “Website”). The mainland China mobile applications retain their own in-app privacy notices and are not replaced by this Web policy.

YiMatrix is operated under the Nanhara Tech brand. Nanhara Tech is the controller of personal data processed through this Website. For privacy questions or requests, contact support@nanhara.com. If the legal operating entity changes, this policy will be updated before that change takes effect.

1. Data We Process

Depending on the feature you choose, we may process:

Account and verification data: email address, telephone number, one-time verification status, account identifier, sign-in time, and account status.
Profile and chart data: nickname, gender, birth date and time, birth timezone, location selected for chart calculations, longitude and latitude when provided, daylight-saving and true-solar-time settings, and saved profiles.
Service content: chart inputs and results, divination questions and results, saved records, report requests and generated reports, AI consultation messages, favorites, reading progress, feedback, and screenshots you submit to support.
Image analysis data: palm or face images that you deliberately upload for an AI analysis feature, plus the resulting report.
Technical and security data: IP address, browser and device type, request time, language, referring page, error and security logs, and abuse-prevention signals.

The Website currently does not accept online payment and does not collect card details. Existing mobile-app membership and credit balances may be displayed after sign-in. Before Web payments are enabled, this policy and the checkout notice will identify the payment processor and data flow.

2. Why We Process Data

We process data to:

create and secure your account;
calculate charts, divination results, calendars, and requested reports;
save and synchronize records that you ask us to keep;
provide AI-assisted explanations and follow-up conversations;
respond to support requests and operate account deletion;
prevent fraud, abuse, and unauthorized access;
maintain, diagnose, and improve service reliability; and
comply with applicable legal obligations.

Where applicable, our legal bases are performance of the service you request, your consent for optional sensitive features such as image analysis, our legitimate interests in security and service reliability, and compliance with law. You may withdraw consent for future optional processing at any time, but withdrawal does not undo processing already completed at your request.

3. Deterministic Calculations and AI Assistance

Core chart and calendar outputs are calculated from structured rules and the inputs you provide. Optional AI features receive the information required for the report or conversation and generate explanatory text. AI output may be incomplete or inaccurate and is provided for cultural learning and personal reference. It is not medical, legal, financial, psychological, or other professional advice, and it should not be used as the sole basis for consequential decisions.

For palmistry and physiognomy, the upload starts only after an explicit in-product confirmation. Source images are scheduled for deletion from our server within 7 days. Generated reports remain in your account until you delete them or the account is deleted, subject to legal and security retention requirements.

4. Service Providers and International Processing

We use processors only to operate requested features. Current categories include:

Alibaba Cloud services for email or SMS delivery, object storage, and some AI image processing through Model Studio / DashScope;
AI model providers, including DeepSeek-compatible text-generation services, for requested reports and conversations;
hosting, database, cache, content-delivery, security, and customer-support infrastructure.

These providers receive only the data reasonably needed for their task and process it under contractual or platform terms. Because YiMatrix serves users internationally, data may be processed in a country different from where you live. Where required, we use applicable contractual, security, and transfer safeguards.

We do not sell personal data. We do not share personal data for cross-context behavioural advertising. We may disclose data when required by law, to protect users and the service, or as part of a business reorganization with appropriate notice and safeguards.

5. Cookies and Browser Storage

As of the effective date, YiMatrix Web does not load advertising cookies, behavioural advertising tools, or optional analytics scripts. We therefore do not display a general cookie-consent banner.

The Website does use first-party browser storage, including localStorage and limited sessionStorage, for features you request:

a sign-in session and basic account state;
chart and display preferences;
a small number of guest BaZi, SixYao, Plum, LiteSixR, Chenggu, and Daily Hexagram records;
calendar favorites, Academy reading preferences, and recent workflow choices; and
a record that you accepted the image-analysis data notice.

This storage is used to provide the requested service, remember a choice, or keep an unauthenticated result on your device. It is not used for advertising. Guest browser records remain on that browser until you delete them, clear site data, or the browser removes them. The storage controls below this policy allow you to clear non-account browser data or clear all local data and sign out.

If we later introduce non-essential analytics or advertising storage, it will remain off until an appropriate consent choice is presented. The policy will identify the provider, purpose, duration, and withdrawal method.

6. Retention

We keep data only for the period needed for the stated purpose:

one-time verification records expire after the verification flow;
guest records and preferences remain only in your browser until cleared;
palm and face source images are scheduled for deletion within 7 days;
account records, saved charts, reports, and conversations remain while your account is active or until you delete them;
after an account-deletion request, a 7-day recovery period applies before permanent deletion; and
limited security, audit, transaction, or legal records may be retained when required to establish, exercise, or defend legal claims or comply with law.

When data is no longer needed, we delete or de-identify it.

7. Your Choices and Rights

Subject to applicable law, you may request access, correction, export, deletion, restriction, or objection; withdraw consent for future optional processing; and lodge a complaint with your local data-protection authority. You may edit profile information, delete individual records where controls are provided, clear browser storage, or request account deletion from account settings.

Send a request to support@nanhara.com from the email associated with your account. We may need to verify your identity before acting on a request.

8. Security

We use access controls, encrypted transport, credential protection, monitoring, and data-minimization measures appropriate to the service. No Internet service can guarantee absolute security. Keep your sign-in code and devices secure, sign out on shared devices, and contact us if you suspect unauthorized access.

9. Children

YiMatrix is not directed to children who cannot lawfully consent to online services in their jurisdiction. A minor should use the service only with a parent or guardian where required. If you believe a child supplied personal data without the required authorization, contact us so we can review and delete it.

10. Changes and Contact

We may update this policy when features, processors, or legal requirements change. Material changes will be highlighted on the Website or in the product before taking effect. The date and version above identify the current policy.

Privacy contact: support@nanhara.com