Privacy Policy

1. Information We Collect

1.1. Authentication Information

When you sign in with Google, we collect:

• Email address
• Name and profile picture
• Google account identifier
• Authentication tokens

1.2. Consultation Data

When you use our I Ching consultation service, we collect:

• Oracle input (6 numbers you provide)
• Generated hexagrams and mutations
• Consultation timestamps
• Session duration and interaction patterns

1.3. Usage Analytics

We collect anonymized data about:

• Page views and navigation patterns
• Device type and browser information
• Performance metrics (load times, errors)
• Feature usage statistics

Note: We use Plausible Analytics, a privacy-first service that doesn't use cookies or track personal information.

2. Legal Basis for Data Processing

We process your personal data under the following legal bases:

• Consent – When you authenticate with Google and agree to our terms
• Legitimate Interest – To provide I Ching consultation services and improve user experience
• Contractual Obligation – When data is necessary to deliver the spiritual consultation service

3. How We Use Your Information

3.1. Service Delivery

• Authenticate your access to the application
• Generate and display personalized I Ching consultations
• Maintain your consultation history for personal reflection
• Provide seamless navigation through Oracle → Mutation → Hexagram flow

3.2. Service Improvement

• Analyze usage patterns to enhance user experience
• Optimize application performance and loading times
• Develop new features based on user behavior insights

4. Data Storage and Security

4.1. Data Location

• User data is stored securely using Firebase (Google Cloud)
• Hexagram data is stored locally in JSON format within our application
• All data transfer uses HTTPS encryption

4.2. Security Measures

• OAuth 2.0 authentication via Google
• Encrypted data transmission
• Regular security audits and updates
• No sensitive personal data stored beyond authentication requirements

4.3. Data Retention

• Authentication data: Retained while your account is active
• Consultation history: Retained until you request deletion
• Analytics data: Anonymized after 90 days
• Session data: Automatically deleted after 30 days of inactivity

5. Your Rights Under GDPR

As a user, you have the following rights:

• Right to Access – Request a copy of your personal data
• Right to Rectification – Correct inaccurate personal information
• Right to Erasure – Delete your account and consultation history
• Right to Restrict Processing – Limit how we process your data
• Right to Data Portability – Export your consultation history
• Right to Object – Object to processing based on legitimate interests
• Right to Withdraw Consent – Revoke consent at any time

To exercise these rights, contact us at: ichingsync@gmail.com

6. Contact Information