Introduction
The operation entity of "靈籤小廟" (also referred to as "Muyu", the "App"), Wicheer limited, whose registered office is located in Hong Kong (collectively referred to as "we", "us" or "our"), knows the importance of personal information to you and will make every effort to protect the safety of your personal information. We are committed to maintaining your trust, and we abide by the following principles when handling your personal information: purpose limitation, minimal collection, consent, security, openness and transparency.
This Privacy Policy (the "Policy") explains what personal information we collect when you use the App and related services, how we use, share and protect it, and the rights you have in respect of your personal information. By using the App, you acknowledge that you have read and understood this Policy and agree to the processing described in it.
This Policy applies to the 靈籤小廟 App and its related services.
This Policy covers the following topics:
- Information we collect from you and its purposes
- Device permissions
- How we share and disclose your personal information
- International data transfer
- Links to other websites or applications
- How we protect your personal information
- How you can manage your personal information
- Children
- Changes and updates to this Policy
- Third-party services
I. Information We Collect and Its Purposes
"Personal information" means all kinds of information recorded by electronic or other means that can, independently or in combination with other information, identify the identity of a specific natural person or reflect the activities of a specific natural person. We collect and use your personal information for the following purposes:
(1) Device identifier and account. When you first use the App, we generate a random device identifier on your device and use it, together with the account information we assign to you, to create and maintain your account and to provide the App's services (drawing fortune slips, interpreting slips, and managing your records). The device identifier is stored locally on your device and transmitted to us to keep your account and records available across devices.
(2) Date of birth and birth details. Before you use the App, we ask for your date of birth to verify that you are 13 years of age or older. When you use the slip interpretation feature, you may choose to provide your birth hour, birthplace, zodiac sign, star sign and a brief description of your current situation, which we use to provide the personalised interpretation you request. These fields are optional (except date of birth for the age gate) and are used solely to provide the feature you request.
(3) Content you generate. When you use the App, we collect the content you generate, including the fortune slips you draw, the interpretation sessions you start, and the text you enter during an interpretation dialogue. If you choose to ask a reading about another person, you may enter that person's name and your relationship to them; please do not enter another person's personal information without their consent. We use this content to provide the interpretation service and to maintain your history in the App. To generate your personalised slip interpretation, the text you enter, together with your birth details (as described in (2) above) and the fortune slip you drew, is transmitted in encrypted form to Amazon Bedrock, AWS's managed large language model service, for processing on our behalf; the interpretation text we receive back is returned to you and stored as part of your session history.
(4) Purchase and payment records. If you purchase virtual coins (an in-app consumable) through the App, the transaction is processed by Apple's App Store (for iOS) or Google Play (for Android). We receive the transaction record from these platforms, including the purchased product, the amount and coin quantity, and a transaction identifier, which we use to credit your coin balance, keep order records, and prevent fraud. We do not collect or store your credit card or other payment method details — these are handled solely by Apple or Google.
(5) Platform binding. If you choose to link your account to a third-party identity provider (such as Apple or Google) so that you can recover your account, we store the platform user identifier returned by that provider (e.g., the Apple or Google account identifier). We do not access your password for that provider.
(6) Device, network and usage information. We collect basic information about the device you use (device type, operating system version, network status, connection information) and logs of your use of the App (such as the time of use and the requests you make) to provide stable service, detect abnormal account states, and prevent security incidents.
We do not collect your phone number, gender, contacts, photo album, microphone, camera, location, or advertising identifiers (such as IDFA, OAID, IMEI). The App does not contain advertising and does not include third-party advertising or analytics SDKs.
II. Device Permissions
The App does not request access to your photo album, microphone, camera, location, contacts, or notifications. We do not request any runtime permissions that require your explicit consent. The App only uses the network connection, and may use the device vibration for the wooden-fish interaction, which does not require a permission.
III. How We Share and Disclose Your Personal Information
1. We do not sell your personal information. We do not share it for advertising purposes.
2. We may disclose your personal information to our group companies (entities that control us, are controlled by us, or are under joint control with us) where necessary for operating the service, customer management, security and compliance.
3. We may disclose your personal information to service providers who process information on our behalf, including cloud and server hosting providers, the app stores that process payments (Apple App Store and Google Play), and Amazon Web Services (AWS), which processes your interpretation requests through Amazon Bedrock, its managed large language model service, to generate slip interpretations. These service providers may access personal information necessary to perform their functions, but may not use it for any other purpose.
4. We will access, use or share your personal information with regulators, law enforcement agencies or others where we reasonably believe such disclosure is required to: (a) comply with applicable laws, regulations, legal procedures or governmental requests; (b) enforce our User Agreement, including investigating potential violations; (c) detect, prevent or otherwise address illegal or suspected illegal activity, security or technical issues; or (d) protect the rights, property or safety of our company, our users or the public.
5. Transfer. We will not transfer your personal information to any company, organisation or individual except: (a) with your express consent; or (b) in the event of a merger, acquisition or bankruptcy liquidation, in which case we will require the new holder to continue to be bound by this Policy, or to obtain your consent afresh.
IV. International Data Transfer
Your personal information may be processed by us or our trusted service providers in jurisdictions outside the country or region in which you reside, including in countries or regions whose data protection laws may differ from those in your jurisdiction. In accordance with applicable data protection laws and regulations, we will take appropriate steps to ensure your personal information remains protected and secure when transferred, including, where applicable, entering into data transfer agreements implementing standard data protection clauses.
V. Links to Other Websites or Applications
The App may contain links to other websites, mobile applications or third-party content (such as our account-deletion page hosted on the web). When you click such a link, you will be taken to another entity's property, which may collect information from or about you. We have no control over, do not review, and are not responsible for these third-party websites or applications or their content. This Policy does not apply to them.
VI. How We Protect Your Personal Information
We take reasonable security measures to protect your personal information against unauthorized access, disclosure, loss and damage. These measures include: encryption in transit (TLS, i.e., wss://), encrypted storage of locally cached credentials on your device (encrypted shared storage on Android and the Keychain on iOS), access control based on the principle of least privilege so that only authorised personnel can access personal information, and security awareness training for our employees.
If you believe your account has been compromised, please contact us immediately so that we can take appropriate measures.
VII. How You Can Manage Your Personal Information
1. Access. You can view your fortune-slip history and coin balance in the App. If you are unable to access particular personal information through the App, you may contact us using the contact details below, and we will respond to your request within 15 days.
2. Correct or supplement. If you find that the personal information we process about you is inaccurate, you may request that we correct or supplement it.
3. Delete your account and personal information. You can delete your account and the personal information associated with it at any time:
- In the App: go to the account screen and tap "Delete Account".
- On the web: visit the account-deletion page at https://shrine-h5.saree3.live/delete-account.html and follow the email steps there, or email us directly at developer@mail.saree3.live. We will process deletion requests within 15 days.
After you delete your account, you will not be able to recover it or its records. We may retain certain information for as long as necessary for security, safety, anti-fraud and legal compliance purposes (for example, to prevent the re-registration of accounts closed for abuse), and records required by law.
4. Coins are non-refundable. Virtual coins you purchase are consumable entitlements to use the interpretation feature. Unless required by applicable law or by the app store's refund policy, purchases are non-refundable, and deleting your account does not refund them.
5. Push notifications. The App does not send push notifications and does not require notification permission.
VIII. Children
We do not knowingly collect or maintain personal information from anyone under the age of 13. The App requires you to verify that you are 13 years of age or older before you can use it. If we learn that we have collected personal information from a person under the age of 13, we will take appropriate steps to delete such information. If you believe that we have improperly collected information from a person under the age of 13, please contact us at the email address below.
IX. Changes and Updates to This Policy
We may modify or revise this Policy from time to time. We may notify you of material changes through the App, and you should periodically check for the latest version. If we change this Policy, the date of the change will be reflected in the "Last Updated" date at the top. By continuing to access or use the App after the changes take effect, you agree to be bound by the revised Policy.
X. Third-Party Services
The App uses the following third-party services:
- Apple App Store / Google Play billing — for processing your in-app purchase of virtual coins. Payment and refund handling are subject to the app store's terms and privacy practices.
- Amazon Bedrock (AWS large language model service) — for generating personalised slip interpretations. When you use the interpretation feature, your interpretation text, birth details and the fortune slip you drew are transmitted to AWS in encrypted form and processed by Amazon Bedrock to return an interpretation to you. Your information is used solely for this purpose and is not used to train AWS's foundational models. AWS's processing of data in connection with these services is subject to AWS's Privacy Notice.
- In-house WebSocket communication SDK — for the secure network connection between the App and our servers.
The App does not integrate third-party advertising, analytics, or tracking SDKs. Third-party processing (such as the AWS large language model services described above) occurs on our servers and never through a software development kit embedded in the App.