问真岛 Privacy Policy

We handle the following information according to the functions you actually use:

1. Account and login information

Including the phone number and email address you give us, your account profile, and the verification information needed to log in with a password or a code.

When you sign in with a third party such as Google, we receive the account identifier and the basic details that third party provides under your authorisation, so that we can create, recognise and sign you in to a 问真岛 account.

2. Analysis material you submit

Including your name or the name you go by, your date, time and place of birth, and the gender, the number you want analysed (a mobile, licence plate or house number, for example), questions and other background information you submit for a particular function.

Where a function supports images or file uploads, we handle that content only when you upload it. Uploaded material may contain information about you or about third parties, so please confirm you have the relevant permission before submitting, and avoid including private material that has nothing to do with the analysis.

3. Conversations and generated content

Including your questions, your follow-up explanations, the context of a conversation, and the replies, readings and reports the system generates — used to complete the analysis, hold a continuous conversation and let you look back at your history.

4. Order and entitlement information

Including the plan you buy, the order number, the time of the transaction, the amount, the currency, the payment status, your membership period, your credit balance, your consumption and your refund records — used to confirm payment, deliver the entitlements, calculate usage, handle after-sales issues and reconcile the accounts.

Payment details you submit directly to a payment provider are handled by that provider under its own rules. The platform receives the transaction information needed to complete the order and handle after-sales issues.

5. Customer service and privacy request information

Including the contact details, the description of the issue, the order information, screenshots and the account verification material you provide when you contact customer service — used to answer your question, solve the problem and handle privacy requests.

6. Information about how the site runs

While the site is running, technical information may be produced such as your IP address, your browser and device type, your login state, the time of access, and records of feature use and errors — used to keep you signed in, limit devices, troubleshoot faults and protect the site.

The information needed for registration and for paid services should be provided as the page asks for it. Without the necessary account or transaction details, you may not be able to register, sign in, complete a purchase or obtain your membership entitlements.

Different analysis functions need different material. Without the necessary birth details, name or other input, the corresponding analysis may not be produced, or the result may not be complete.

Optional material and optional uploads are yours to decide on. Please do not submit identity documents, payment passwords or other highly sensitive material that has nothing to do with the function you are using.

We use the relevant information within the following scope:

1. creating and managing accounts, and verifying sign-ins and account ownership;
2. providing AI conversations, analyses, readings and reports from what you input;
3. keeping the session context needed to hold a conversation, and letting you look back at recent history;
4. confirming orders, granting membership and credits, recording consumption and processing refunds;
5. answering customer service enquiries, and handling incidents and privacy requests;
6. sending important notices about orders, account security, membership and changes to the service;
7. troubleshooting faults, and preventing account theft, fraud, attacks and other abuse;
8. meeting applicable legal, accounting and dispute-handling obligations.

Service notices and marketing messages are different uses. If we run marketing activity that requires your consent, we will explain it separately under the applicable law and give you the corresponding choice.

When you use an agent, your input, the necessary session context and the analysis material are used to generate the answer, reading or report.

Completing these functions may involve AI processing providers and cloud providers. In that case, the relevant provider handles the information needed to complete your request.

This policy describes the handling of personal information. It does not disclose the platform's prompts, the contents of the knowledge base, the system architecture or other internal technical material.

If the purpose for using personal information changes substantially, we will tell you separately under the applicable law and obtain the relevant consent where required. The general wording of this policy cannot stand in for an explanation of a new purpose.

[To be confirmed: whether the platform and the relevant providers use user material for model training, fine-tuning, improving the knowledge base, advertising or any other purpose not described in this policy. If so, the actual purposes, the scope of processing and the applicable authorisation or choice mechanism should be added.]

Your conversations, birth details and generated reports are not shown to other users as public community content on the site.

To provide the service, we may share the relevant information with the following categories of provider, to the extent necessary:

The relevant processing is limited to what is actually needed, and the necessary confidentiality, security and access restrictions are put in place under the applicable law.

We may also share relevant information to the extent necessary where the law requires it, in response to a valid judicial or regulatory request, or to handle fraud, security incidents and legitimate disputes.

If there is a merger, acquisition or transfer of business involving the transfer of personal information, we will describe the change under the applicable law and require the recipient to take on the corresponding protection obligations.

When you share a report, a conversation or a screenshot yourself, the recipient may store it or pass it on. Please check before you share whether it contains private material belonging to you or to others.

The site may use cookies, browser local storage and similar technologies to keep you signed in, save the preferences that are necessary and support the running of the site.

You can manage or restrict these technologies through your browser, but disabling necessary cookies or local storage may affect signing in and some functions.

If we enable non-essential analytics, advertising or tracking tools, we will describe their purpose under the applicable law and provide the required consent or management options.

[To be confirmed: whether the login, payment, analytics, security and other providers actually in use collect and receive information consistent with this policy, and whether advertising pixels, session recording or other tracking tools are used. If so, the actual data types, purposes, categories of recipient and the user choices required should be added.]

Account details, recent conversations and reports are kept according to the state of the account and the needs of the relevant function, so that you can use the service and look back at your records.

A history is not a promise of permanent storage. How long each kind of information is kept is determined by the needs of the service, the necessary accounting records, dispute handling and the applicable law.

Information that is no longer needed should be deleted or properly anonymised. Material kept because of a legal obligation, a transaction dispute or a security incident continues to be kept only to the extent necessary.

Material in backups may be cleared gradually as the backups are rotated, and may not be deleted at the same moment as the records in the live system.

[To be confirmed: the actual retention periods, or the criteria for determining them, for account details, conversations, reports, transaction records and logs; whether customer service can carry out deletion, anonymisation and account closure requests; and the mechanism for clearing backups. Please revise this section and section ten according to the rules you can actually carry out.]

We take technical and administrative measures proportionate to the risk of the processing, to restrict unauthorised access, use, modification or disclosure.

Staff and contracted providers should access the relevant information only within what is necessary to perform customer service, maintenance, security and other necessary duties, and must not look at or use user material at will merely because they can reach the back end.

Transmission over the internet and electronic storage cannot be guaranteed to be absolutely secure. You should also protect your password, your verification codes and your devices, and contact customer service promptly if you notice anything unusual.

Where an information security incident occurs that may affect your rights, we will take the measures required under the applicable law and notify the relevant users and supervisory authorities where needed.

Your location, the site's infrastructure and the relevant providers may be in different countries or regions, and providing the service may involve storage, transmission or access outside your region.

Where cross-border processing takes place, we will take the necessary protective measures according to the actual situation and the applicable law, and meet the applicable notification, authorisation and other requirements.

This policy does not promise that all information is handled only in your own country or region. Where a statement about the specific regions or recipients involved is necessary, it will be provided separately.

Through “Contact us” at the bottom of the site, you can ask what personal information the platform holds about you, and make requests to look at it, correct it, delete it, stop the relevant processing, or exercise any other right the applicable law gives you.

To prevent impersonation, we may need to verify that the account is yours before we act. The material used for verification should be limited to what the request actually requires.

The self-service cancellation or deletion function has not yet been settled, and this does not affect your ability to make a request through customer service. We will assess the request against its content, what we can actually do and the applicable law, and explain the outcome; where it cannot be met in full, we will explain why and on what basis.

Some necessary transaction records, dispute material or information that must be kept by law may not be deletable immediately. A deletion request is also not the same as a refund application or a cancellation of auto-renewal — those are handled separately.

Paying to change the information bound to an account and making a legally grounded request to correct personal information are handled separately, and the account change fee is not automatically applied to every privacy request.

Before you submit another person's name, birth details, phone number, images or background information, make sure you have the appropriate permission.

Please do not use the platform to collect, analyse or spread third-party material that you have no right to handle. Requests involving a third party's personal information will be handled according to the actual situation and the applicable law.

Registration, purchase and use on this platform are limited to users aged 18 or over.

If you find that a minor has registered and is using the service on their own, or if a guardian believes the platform has handled a minor's material improperly, contact customer service to have it checked.

An adult submitting a minor's details should also have the relevant permission and meet the applicable requirements for protecting minors' information. An adult account must not be used as a way around those requirements.

We may update this policy as functions, data handling practices or legal requirements change, and we will mark the date of the update and when it takes effect.

Where there is a significant change to the scope of collection, the purposes of use, third-party processing or your rights, we will give notice through a practical channel such as an announcement on the site, email or a message in your account.

Where fresh consent is required by law, we will seek it separately, and will not treat your continued use of the service or your failure to reply as consent on its own.

For any question about collecting, using, looking at, correcting or deleting information, or any other privacy matter, please submit a request through “Contact us” at the bottom of the 问真岛 website and mark it “privacy request”.

Customer service hours: 9:00 to 22:00 Beijing time.

Replies at weekends and on public holidays usually come within 24 hours. The time to the first reply is not the same as the time it takes to complete a privacy request; each request is handled according to the applicable law and the actual situation.