Privacy Policy

Last Updated: 2026-07-28

Welcome to Here's Shiny. This Privacy Policy explains what information we collect, how we use it, where it may be processed, how long we keep it, and how you can exercise your privacy rights.

1. Who We Are

The App is operated by Fule Yang, an independent developer. Developer location: Nanchang, China Contact: gghong15538@gmail.com

Depending on deployment and routing, the backend server, cloud hosting provider, Apple services, and third-party AI providers may process data in the United States, China, or other regions. We do not sell personal information.

2. Information We Collect

Automatically collected:

• Device identifiers or anonymous device IDs, used to maintain sessions, quotas, preferences, and anti-abuse controls.
• IP address, used for security, rate limiting, approximate regional routing, and selecting the appropriate service path.
• Device and system information, such as OS type, app version, language preference, and basic diagnostics.
• In-app activity records, such as usage counts, feature events, subscription entitlement status, and error logs.

Provided by you:

• Apple Sign-In information, such as Apple user identifier, name, and email when Apple provides them.
• Chat messages, AI conversation context, tarot draw records, mirror affinity or retention state, selected persona, and saved/favorite responses.
• Voice input or speech transcripts when you use voice features.
• Support messages, screenshots, order information, and Support ID if you contact us.

Device permissions:

• Microphone: for voice wake-up and push-to-talk; only when you actively trigger it.
• Speech recognition: iOS may use Apple Speech for speech-to-text.
• Camera: only for the live mirror preview in “Astral Eye”; activated only when you open it. The preview is not recorded or uploaded.

We do NOT collect: contacts, SMS, precise GPS location, browsing history, or biometric data.

3. Legal Basis for Processing

Where applicable, we process personal information based on:

• Consent: voice input, camera, and optional AI features you choose to use.
• Contract performance: providing AI chat, tarot, subscription entitlements, restore purchases, and account features.
• Legitimate interests: security, abuse prevention, debugging, service quality, regional routing, and anonymous analytics.
• Legal obligations: transaction records, tax, compliance, and required platform records.

4. How We Use Your Information

We use information to:

• Generate AI text, voice, tarot, and mirror-persona responses.
• Maintain conversation continuity, affinity or retention state, preferences, and favorites.
• Verify subscriptions, restore purchases, enforce free usage limits, and prevent abuse.
• Provide customer support and investigate bugs, crashes, quota errors, or payment issues.
• Route traffic to appropriate AI providers and comply with regional requirements.
• Improve service quality using aggregated or de-identified operational data.

5. Third-Party Services

Before the first AI feature is used, the App clearly identifies the enabled processors and the data types shared, and requires an affirmative in-app checkbox for third-party AI processing. When voice playback is used, generated reply text is sent to MiniMax for speech synthesis. Conversation content is minimized where practical and is not intentionally sent with your real name, Apple ID, email, user ID, or raw device identifier. You should avoid entering highly sensitive personal information into AI chat.

We share user data only with third parties that commit to providing the same or equivalent protection stated in this Policy and required by applicable Apple guidelines, supported by contractual safeguards, access controls, encryption in transit, and data minimization.

6. Cross-Border Data Transfer

Because the App is operated internationally and relies on third-party AI and platform services, your data may be processed in countries or regions different from where you live, including the United States, China, and other locations used by our providers. We use contractual, technical, and organizational safeguards appropriate to the service, including HTTPS transport and provider-side data processing arrangements where available.

7. Data Storage and Security

• HTTPS encryption in transit.
• Chat records, conversation state, affinity/retention data, favorites, privacy settings, and profile data are retained while needed to provide the App, unless you delete them or request deletion.
• After account or data deletion, chat records and conversation state are deleted from active systems within 30 days where technically feasible, subject to legal, security, and backup limitations.
• Operational logs are anonymized or minimized where practical and retained for no more than 30 days, unless a longer period is necessary for security, fraud prevention, legal claims, or compliance.
• Purchase and entitlement records may be retained as required for billing, restore purchases, fraud prevention, tax, accounting, and legal obligations.
• Security or privacy audit logs may be retained as necessary to prove that a privacy request was handled.
• We do not sell, rent, or disclose your personal information to unrelated third parties.
• In the event of a data breach, we will notify affected users and authorities when required by law.

My Spreads / Tarot History

After you complete a draw, we store its time, spread, cards, interpretation, App language, and selected persona identifier on our server under your account or device identifier so you can review it. The same record may be cached locally on your device for offline review. This history does not store the question or AI prompt context used for that reading; any separately saved chat content remains subject to the chat-record rules.

Readings drawn while Free are retained for 30 days. Readings drawn while a paid membership is active are retained long term until you delete them, delete your account/data, or exceed the 360-record limit per account or device, in which case the oldest records are removed. You may delete one record or clear all records in My Spreads, and Settings → Privacy & Data → Delete Data also removes them.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information.

You can use in-app privacy controls where available:

• Withdraw third-party AI consent in Settings → Privacy & Data. Withdrawal stops future content sharing with third-party AI services, and the App will ask again before another AI feature is used.
• Privacy settings: /api/user/privacy-settings
• Data export: /api/user/data-export
• Reset affinity or retention state: /api/user/reset-retention
• Delete data: /api/user/data-delete

You can also contact gghong15538@gmail.com. Deleted data may not be recoverable. Some records may remain if required for legal, security, billing, or fraud-prevention reasons.

EU/UK users: You may also have rights under the GDPR or UK GDPR, including restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

California and similar U.S. state privacy rights: We do not sell or share personal information for cross-context behavioral advertising. Where applicable, you may request access, deletion, correction, and information about categories of data processed.

9. Children's Privacy

The App is not intended for children under 13, under 16 in the EU and Japan, or under 14 in South Korea. We do not knowingly collect personal information from children below the applicable age threshold. If you believe a child provided personal information, contact us and we will take appropriate action.

10. AI and Entertainment Disclaimer

All AI, fortune, tarot, mirror, and companion content is generated for entertainment purposes only. It is not medical, legal, financial, psychological, emergency, or other professional advice. Do not rely on App content for important decisions.

11. Changes to This Policy

We may update this Policy from time to time. Significant changes will be communicated through the App or another reasonable method. When legally required, we will request renewed consent before the update takes effect.

12. Contact

gghong15538@gmail.com

*For users in other language regions (Español, Français, Português, Deutsch, Italiano), the English version above applies.*