Privacy Policy

I. Basic Principles

• Local-First. Fundamental calculations for the calendar, hexagrams, and casting readings are performed entirely on your device without requiring an internet connection; when you are not signed in, your records remain saved strictly on your local device.
• Data Minimization. We collect only information strictly necessary to provide the features you use; optional features process corresponding data only when you choose to enable them.
• Saved with Account. Signing in indicates your consent to store relevant information in accordance with this Policy; your records synchronize with your account and can be restored simply by signing in on a new device.
• No Sale of Personal Information. We do not sell or rent your personal information, nor do we use the contents of your records for targeted advertising.

II. Information We Collect

1. Information You Voluntarily Provide

• Account Information: When signing in via email, Apple, Google, or other supported methods in the future, we collect your email address, third-party account identifiers, and the nickname and avatar you authorize us to receive.
• Castings and Records: Timestamps, timezones, scenarios, points of focus, and method inputs used during casting; casting results; and your favorites, seal impressions, reflection texts, photos, voice recordings, titles, and tags.
• Preferences and Presets: Frequently used timezones, locations, material themes, sounds, fonts, reminder times, and other settings, as well as presets you save.
• Companion Information: Names/appellations, relationships, and age groups you enter for accompanying family members or friends. Please record only information that the other party has agreed you may record.
• Birth Information (Optional): When using features related to birth time, such as Natal identity, you may enter your birth date, double-hour (Shichen), and birthplace timezone. We use this information to provide the corresponding features, such as calculating your Chinese zodiac, Nine Stars, Nayin, and Natal Hexagram, and allowing subsequent castings to incorporate your Natal profile. Once signed in, birth information is saved with your account and restored upon signing in on a new device; when not signed in, it is stored locally on your device. Casting records store identifiers derived from birth information to recalculate the identical reading across different devices. You may modify or clear this information at any time; when you delete your account, cloud-stored birth information is permanently deleted along with all account records.
• Payment and Shipping Details: Order details when purchasing memberships, question packs, content packs, or physical merchandise (product, transaction ID, purchase time, and the store used), and membership status (plan, expiry date, whether it renews automatically, whether it is in a free trial); recipient name, shipping address, and telephone number when purchasing physical goods. Payments are processed by the App Store or Google Play, and RevenueCat verifies purchases and keeps subscription status up to date. Card and other payment details are held only by the stores.
• Communications: Email address and correspondence provided when you apply for beta testing, subscribe to newsletters, submit feedback, or contact us.

2. Information Generated Through Use of the Services

• Device and Log Information: Device model, operating system version, app version, language, timezone, device identifiers, IP address, access timestamps, and request results, used for login security, troubleshooting, and abuse prevention.
• Location and Orientation Information: Upon your authorization, used to display local astronomical phenomena (such as sunrise, sunset, moon azimuth and altitude), orientation, and route distance, as well as to automatically set your timezone and location. You may also manually configure your location without granting location permission.
• Usage and Crash Data: To spot problems early and improve the App, the App records a small set of usage steps (whether onboarding was completed, how far sign-in progressed, and the outcome of interpretation requests) and crash information (error type, where the error occurred, device model, and OS and App version), and sends them to Google Firebase together with an app instance identifier generated by the provider. This information is used only for statistics and troubleshooting and is kept separate from your account. Both are on by default, and you can turn each off in Settings; turning off crash reports also clears any reports not yet sent.

3. Website koyonari.com

The compass dial and casting readings on the website are calculated locally within your web browser, using the timezone provided by your browser. The website may use web analytics; if cookies are used, we will provide advance notice and obtain consent where required by law.

III. Device Permissions

Koyonari requests permissions only when you use the corresponding features. You can enable or disable these at any time in your system settings:

• Camera and Photos: To capture or select a photo for the back of a reading card, and to save card images to your photo library;
• Location: To display local astronomical phenomena, orientation, and route distance, and to configure your timezone and location;
• Motion and Heading Sensors: To provide the tactile rotational response of the compass dial and detect device orientation;
• Microphone: To record voice reflections (where available);
• Notifications: For daily casting, solar term, and reflection reminders;
• Calendar (where available): To read or write casting-related schedule events when chosen by you.

Compass orientation is derived from device sensors or your manual configuration, and its source is clearly indicated in the interface.

IV. How We Use Information

• To provide core features including casting, reading, recording, reflection, and favorites;
• To authenticate sign-ins, and save, synchronize, and restore your records across your devices;
• To provide AI analysis and interpretation, astronomical and orientation displays, reminders, and related features when enabled by you;
• To process orders for memberships, question packs, content packs, and merchandise, and fulfill delivery and after-sales support;
• To send verification codes, service notices, and beta or informational emails you subscribe to (which you may unsubscribe from at any time);
• To respond to inquiries and feedback, and process your requests regarding your legal rights;
• To ensure service security, troubleshoot malfunctions, and improve products and content;
• To comply with legal obligations and satisfy lawful governmental or regulatory requests.

If we need to use your information for purposes not specified in this Policy, we will inform you in advance and obtain your consent.

V. Artificial Intelligence Features

Koyonari's Readings are generated by a third-party language model. The calendar and hexagram are computed by deterministic algorithms, which the model does not take part in or alter.

• Data is processed only when you actively use these features. Each request transmits only the content strictly required to fulfill that specific query, such as the sentence you enter and the current hexagram and scenario; by default, historical journal entries, names, precise birth details, and precise location coordinates are not sent.

Requests are processed by third-party AI service providers for these purposes: generating readings, transcribing your recordings, and safety checks (spotting questions where you may need support, and checking that a reading stays within cultural appreciation and everyday suggestions). To keep the service reliable, the same purpose may be handled by different providers, or moved to another provider when one is unavailable.

What is processed: your question this time, the sign and its setting, earlier questions and answers in the same conversation, and any notes, photos or recordings you choose to include. Safety checks also process your two most recent questions in the same conversation and the reading text, as text only.

We only use providers whose contracts or terms say they will not train models on request content; retention follows each provider's terms. The current providers' names, countries, purposes and contact details are listed on the AI Service Providers page (https://koyonari.com/en/privacy/ai-providers/). When providers change, we update that page and let you know in the app.

• Readings offer cultural appreciation and everyday suggestions drawn from traditional symbols.
• Temporary results generated online are generally deleted within 7 days after completion; interpretations that you choose to save are stored together with your personal records.

VI. Sharing and Making Information Public

You may share readings with others by generating images or web links. Shared content strips names, birth details, and precise location by default, and you decide whether to make it public and with whom to share it. Public links can be revoked at any time; once revoked, others will no longer be able to access the reading via that link, though copies previously saved by others remain beyond our control.

VII. Storage, Security, and Cross-Border Processing

• Records and photos saved with your account are hosted on our chosen cloud infrastructure and require your authentication credentials to access. Data is encrypted in transit and encrypted at rest on storage servers.
• Before photos are saved and uploaded, embedded metadata such as location coordinates is automatically stripped.
• System logs by default do not record the raw text of your journals, exact birth times, or precise geographic coordinates.
• We are located in Japan, and our Services may be hosted on servers distributed across multiple countries and regions. Your information may be processed outside of your country or region of residence; we protect it through technical and organizational measures.

The AI features share the content described in Section V with providers, which may include providers outside Japan. These providers are located only in the United States, Japan, member states of the European Economic Area, the United Kingdom and Singapore. The specific providers, their countries, and reference material on each country's personal information protection rules are listed on the AI Service Providers page (https://koyonari.com/en/privacy/ai-providers/). If we ever need a provider in another country, we will first update this policy and notify you as required by law.

RevenueCat, Inc. verifies in-app purchases and manages subscription status in the United States. It processes your account identifier, the product, the transaction ID and the subscription status.Reference information on personal data protection in the United States is also listed on the AI Service Providers page (https://koyonari.com/en/privacy/ai-providers/).

You may request access to, correction of, or deletion of information processed by these providers through the email address in Section XIII "Contact Us"; we will contact the provider to handle your request.

No security measure is completely infallible. If a security incident occurs that may affect you, we will notify you and relevant supervisory authorities promptly in accordance with applicable laws.

VIII. Third-Party Services

To deliver the Services, we utilize the following categories of third-party services. They process your information strictly within the scope required to execute their respective functions and are bound by contractual obligations:

• Cloud hosting, databases, storage, and email delivery (currently primarily Cloudflare);
• Account authentication (Apple, Google, etc.);
• App stores and payments: App Store, Google Play. In-app purchase verification and subscription status: RevenueCat, Inc. (United States), which processes your account identifier, products, transaction IDs and subscription status;
• Artificial intelligence model and safety-check services (when you use corresponding features; providers are listed on the AI Service Providers page);
• Map and location search, and astronomical data (when you use corresponding features);
• Push notifications;
• Crash analytics and usage statistics: Google Firebase (Crashlytics and Google Analytics), provided by Google LLC; information may be processed in the United States and elsewhere. See Section 2, Part 2 for what is sent and why.
• Logistics and after-sales service providers for physical merchandise.

Except for the situations above, requirements of law, or with your consent, we will not disclose your personal information to third parties. In the event of a merger, acquisition, or asset transfer, we will require the successor entity to remain bound by this Policy and will notify you in accordance with the law.

IX. Retention Period and Deletion

• Local Device Data: Stored locally on your device; deleted when the App is uninstalled or data is cleared. You can export a backup from within the App at any time.
• Cloud Records: Retained during the lifespan of your account; when you delete an individual record or photo, the corresponding cloud content is deleted accordingly.
• Account Deletion: You can delete your account from within the App. Upon deletion, login authorizations and all sessions terminate immediately, and cloud records and photos are generally purged completely within 30 days.
• Order and Transaction Records: Retained for the statutory retention periods required by tax, accounting, and related laws. After an account is deleted, its transaction records are unlinked from it; only the transaction ID, product and time are kept, so the same purchase is never credited twice.
• Logs: Retained for the duration necessary for troubleshooting and security, and deleted or de-identified upon expiration.
• Subscription Emails: Retained until you unsubscribe or request deletion.

X. Your Rights

Within the scope of applicable law, you have the right to access, copy, correct, supplement, or delete your personal information, export your data, withdraw consent, opt out of marketing communications, and request explanations of our processing rules. Most operations can be completed directly within the App; for other requests, please contact us by email, and we will respond within the statutory timeframe upon verifying your identity. You also have the right to lodge a complaint with your local data protection supervisory authority.

XI. Minors

Koyonari is designed for adults. Minors should use the Services only with the consent and guidance of a legal guardian; the personal information of children under 14 years of age may be provided only with guardian consent. Parent-child scenarios are to be operated and managed by adults, and please refrain as much as possible from entering identifiable information such as children's real names into records. If we discover that personal information of a child has been collected without guardian consent, we will delete it promptly.

XII. Policy Updates

This Privacy Policy may be updated to reflect feature releases and changes in law. Following an update, we will publish the revised policy on this page; for material changes concerning the scope of data collection, processing purposes, or third-party sharing, we will notify you through the App or via email, and obtain renewed consent where required.

XIII. Contact Us

InCosmos KK
Email:
hi@koyonari.com

The operator's address and related details are listed in the Notice under the Act on Specified Commercial Transactions (https://koyonari.com/ja/tokushoho/).