Privacy Policy / 隱私權政策

English 繁體中文

English

Effective date: October 24, 2026

This English version is a translation of the Traditional Chinese original. If the two versions conflict, the Traditional Chinese version prevails.

This document describes what the Two Designs app (the “Service”) actually collects, where it sends it, how long it keeps it, and how it is deleted. If any statement here does not match what the Service actually does, that is a defect; please let us know.

Summary

Who collects your data

The Service is developed and operated by Coyotech, which collects and controls the data described below. Contact: support@coyotech.app.

What we collect, and why

Account and sign-in

Birth details

Your account keeps one set of birth details, your own: the name you give, a date of birth, a time of birth (“unknown” is an option), a city of birth, and the latitude, longitude, and time zone derived from that city. The city is chosen from a list built into the app; your device’s location is not used. These data are the sole basis for calculating the birth chart and Human Design chart. You can change the name at any time in the app under Account → My birth details; you can also change the birth details there as long as no analysis has been purchased for them.

Conversations

The questions you ask the reading assistant and its answers, together with the number of tokens used and the billing source (trial, subscription, or credits), are stored on the server. We store them to show your conversation history, to let the assistant build on the preceding messages, and to track your usage allowance. Please do not enter in a conversation any information you do not want stored (for example, health conditions or national ID numbers).

Daily readings

Subscribers’ daily readings are stored by date and by the name of the device’s time zone they were written for, so viewing one again on the same day in the same time zone does not require generating it again. A reading states times in that time zone’s local time, so reading on the same day in another time zone (while travelling, or on a second device) gets a reading of its own.

Device time zone

Every request the app sends to the server includes the name of the device’s time zone (for example, Asia/Taipei). It is used to determine which day “today” is and to tell the reading assistant your local date and time; the timing of push notifications is calculated from it as well. It is stored with your daily readings (see “Daily readings”) and with your push token (see “Push notifications”).

Language and country/region

Every request also includes the language the app is displayed in (for example, en). When you ask the reading assistant a question, that request also includes, if the device can tell, a two-letter code for the country or region where the device is (for example, US): on Android, the mobile network’s country, otherwise the SIM card’s country, otherwise the country of the system language setting; on iOS, the Region setting, otherwise the country of the system language setting. No location permission is used, and nothing is sent if the country is unknown. The language determines the language of the content the server returns and of the reading assistant’s answers; daily readings are stored separately for each language, and a push token is stored with the language the app had when it registered, so notifications are sent in that language. The country or region is used only to choose which crisis hotlines the reading assistant provides in a conversation (where we have hotlines for that country; otherwise it points you to a hotline directory and your local emergency number); the server does not store it.

Purchases

We store the reports you have purchased, a record of additions to and deductions from your credits, your subscription plan and period of validity, and store transaction IDs. Payment itself is processed by the App Store or Google Play; we never receive your credit card or payment account details.

Pair links

You can link your birth details with another person’s, through an invitation link or a QR code, to get the synastry and composite analyses of the two of you. This is the only way your data is shown to another user of the Service.

Push notifications

Only after you have allowed notifications on your device does the app obtain the device’s push token and send it to us, together with the platform (iOS/Android) and the time zone name, so that we can send subscribers today’s transits for their birth details at 8 a.m. local time, and tell you when someone accepts your pair invitation. A daily notification contains the headline of that day’s main transit (for example, “Finding a new you in familiar routines”), plus the identifier of the birth details and the date; a pair notification contains the name of the person who accepted and the pair’s identifier. Either one lets tapping it open the right screen. When the push service reports that a token is no longer valid, we delete it.

Share cards

The share cards (your Human Design and today’s transits as an image) are made on your device, and nothing about them is sent to us. A card never shows your birth date, time or place, and shows your name only if you turn that on. What happens to a card is up to you: it goes only where you send it (Instagram, LINE, Threads, or the system share sheet), under that service’s own terms. Saving a card to your photos asks for permission to add photos only (on Android 10 and earlier, the system’s storage permission); the app never reads your photo library.

The free Human Design test on fortune.coyotech.app

The test at fortune.coyotech.app needs no account. The birth date, time (or “I don’t know”) and city you enter are sent to our server only to compute your chart, and are not stored: nothing is written to our database, and the request is not logged. What comes back is the derived chart (type, inner authority, profile, and the gates that draw the bodygraph) and the reading of your type. The city search sends the letters you type, to suggest cities. To limit abuse, the server counts requests per IP address in its memory only; the address is never written to disk or to a log, and is forgotten when the server restarts. Of the test we keep only daily totals: how many charts were computed and how many shared results were opened, with no personal data.

A result’s link holds only that derived chart, never your birth date, time or place, and it sits after the “#”, the part of a link your browser does not send to fortune.coyotech.app. Anyone who opens the link sees the same result; their browser asks our server only for the text of that type’s reading. The share image is made in your browser and is not sent to us. The test’s pages (the form, the type results and the pricing page) use Google Analytics to count visits: it sets Google Analytics cookies and receives the page’s address without the part after the “#”, so it never receives the chart in a result’s link. The report and pair pages load no analytics.

The answer also carries a signed copy of the full derived chart (each planet’s gate and line, and the variables), which your browser keeps only in that tab’s session storage and sends back only if you start a purchase of the full report; we do not store it.

The full Human Design report bought on fortune.coyotech.app

When you buy the full report, we create an order that stores: the derived chart the report is built from (type, inner authority, profile, definition, each planet’s gate and line on the personality and design sides, and the variables), the language of the purchase, the random order token that makes up your report link, when you agreed to waive the 7-day right of withdrawal and which version of the terms that was, the order status (pending, paid, refunded), Portaly Payment’s checkout session ID and payment reference, the email address Portaly Payment passes us after you pay, when the order was created and paid, and when the report link was emailed (or, while it has not been, why the last attempt failed). The order never stores your birth date, time or place, and is not linked to an app account. To be transparent: each planet’s line and the variables are computed from the moment of birth, so someone holding them could estimate the birth date and an approximate time of birth; this is why the report link is private and only its holder can open it.

The email address is used for two things only: to email you your report link once after payment, so you do not lose it (sent through Resend, see “Where your data goes”; if sending fails we retry for up to 48 hours), and to find your order if you write to us (for example, a lost link or a refund). We do not send marketing email. Opening the report sends the order token to our server; anyone with the link can open it.

Crash reports

When the release version of the app crashes or hits an unhandled error, it sends a crash report through Firebase Crashlytics. The report contains the error message, the stack trace, and device information (such as device model, operating system, and app version), along with an installation identifier Crashlytics generates to count affected users. We do not set a user identifier. Development builds do not send crash reports.

System logs

When a request fails (for example, an internal server error or a temporary connection failure), and when the hourly scheduled job (daily push notifications, cleaning up timed-out questions) encounters an error, the system logs may record your IP address, User-Agent, device time zone, the request path and account identifier, and the error message; the processing status of purchase notifications is also logged. These logs are used for troubleshooting and are kept for the server’s log rotation period, then overwritten. The system logs do not intentionally record the content of your questions or your birth details.

What we do not collect

Where your data goes

OpenAI (generating readings)

When you ask a question, the server sends OpenAI the chart content calculated from the birth details (for example, “Sun in Gemini,” the Human Design type, and whether the time of birth is known), that day’s transits together with your current local date and time (the time zone name itself is not sent), the most recent messages in your conversation, and your question, along with the language to answer in and the names and numbers of the crisis hotlines for your country or region where we have them (see “Language and country/region”); the country or region code itself is not sent. For daily readings, only the reading passages selected for that day, when each of those transits begins, peaks and ends in your local time, today’s local date, and the language to write in are sent. The server does not send names, dates of birth, times of birth, places of birth, or account identifiers; however, anything you type into a question yourself (including any of these details) is sent as is.

When we call OpenAI, we request that the response not be stored (store: false). Under OpenAI’s API data policy, API content is not used to train models by default; regardless of the settings above, however, OpenAI by default retains content in its abuse monitoring logs for up to 30 days, and retains it longer only when required by law or to protect its services or third parties.

Your permission: when you first start the app, its welcome screen explains that answers and daily readings are generated by a third-party AI service and what that service receives, links these terms and this policy, and asks you to agree by tapping “Agree and start.” Nothing of yours is sent to OpenAI before that. To withdraw your permission, stop using the reading assistant and daily readings, or delete your account (see “Deleting your account”).

RevenueCat, the App Store, and Google Play (purchases)

Purchases are managed through RevenueCat. RevenueCat receives your account identifier and store transaction records (item, time, price, transaction ID), as well as the device and app information its SDK needs to operate. RevenueCat and the stores retain these records under their own privacy policies.

Portaly Payment (web report purchases)

The checkout for the full report on fortune.coyotech.app is hosted by Portaly Payment (Taiwan). On its page you give Portaly your name, email address (which it verifies), mobile number if it asks, and your card, which is charged through its payment gateway; Portaly issues the e-invoice. We send Portaly the plan, the order number, and the links to return to; Portaly sends us back the session ID, the payment status and reference, the amount, and your email address. We never receive your card details. Portaly retains its records under its own privacy policy.

Resend (emailing the report link)

After a web purchase is paid, we email the report link through Resend (Resend, Inc., United States), which delivers it on our behalf as our processor. Resend receives your email address and the message: the report link, which includes your order token, in the language of the purchase. It receives no birth data and no chart. Resend keeps delivery logs under its own privacy policy and data processing terms.

Google Firebase (push notifications and crash reports)

Push notifications are delivered through Firebase Cloud Messaging (and, on iOS, then through the Apple Push Notification service); their content is as described above. Crash reports are sent to Firebase Crashlytics. Google Analytics is not enabled in the Service’s Firebase project.

Apple, Google, and LINE (sign-in, optional)

When you choose to link one of these, sign-in takes place on that service’s screen, and we receive only the account identifier, name, and profile picture address described above.

The app loads your profile picture directly from Google’s or LINE’s servers, so that service receives your device’s IP address and User-Agent when it is shown.

Your device and cloud backups (restoring sign-in)

So that you return to the same account after reinstalling the app or switching phones, the app stores the account identifier and a sign-in credential in: the iOS Keychain (synced to your other Apple devices if iCloud Keychain is turned on); and, on Android, Google Block Store (backed up to Google’s cloud only when end-to-end encryption is supported; otherwise kept only on that device). These data are held by Apple or Google; we cannot read your cloud backups.

Where data is stored

Our servers and database are located in Google Cloud’s us-central1 region (Iowa, United States). OpenAI, RevenueCat, Firebase, and Resend may also process data in the United States or other countries. By using the Service, you acknowledge that your data will be transferred outside Taiwan.

Retention and deletion

Data on the server has no automatic deletion period; it is kept until you delete it or delete your entire account.

Birth details

Your birth details are deleted with your account, not on their own. Once an analysis has been purchased for them, they cannot be changed in the app, because the analysis was purchased for those birth details; to correct them, email support@coyotech.app.

Deleting your account

In the app, go to Account → Settings → Delete account. Deletion takes effect immediately, with no grace period, and cannot be undone:

Deleting your account does not cancel your App Store or Google Play subscription; cancel it in the store’s subscription management.

What is still retained after you delete your account:

For how to delete your account without the app, see Delete your account.

Web report orders

Orders for the full report on fortune.coyotech.app are kept for 5 years after purchase, for accounting and to handle refunds, and then deleted. You can have your report deleted earlier: email support@coyotech.app with your report link (or the order token after the “#”). We then delete the order, which ends the link; Portaly Payment keeps its own record of the payment and the e-invoice, as the law requires of it. Deleting an app account does not affect web orders, which are not linked to it.

Prolonged inactivity

If an anonymous account’s app is not opened for 30 days, its sign-in credential expires, and that account can no longer be accessed from any device; its data, however, is not deleted automatically. If you plan to stop using the Service, please delete your account in the app before then.

Security

Your rights

Under Article 3 of Taiwan’s Personal Data Protection Act, you may request to inquire into or review your personal data, to obtain copies of it, to supplement or correct it, to have its collection, processing, or use stopped, and to have it deleted. Correction: you can change the name in your birth details in the app at any time; you can change the birth details in the app as long as no analysis has been purchased for them, and after a purchase, email us to have them corrected. Deletion: you can do this yourself in the app. For any other request, email support@coyotech.app and include the Account ID shown under Account → Settings in the app; we will handle the request for that account.

For a full report bought on fortune.coyotech.app, which has no account, include the report link or its order token instead.

Children

The Service is not designed for anyone under 13, and we do not knowingly collect their data. A parent who finds that their child is using the Service may email us to request deletion.

About conversation content

Readings from the Service are for entertainment and self-exploration only and are not medical, psychological, legal, or financial advice. When a conversation mentions self-harm or an emergency, the reading assistant provides crisis hotlines and emergency numbers; the system does not automatically notify any person or organization based on conversation content. The list of hotlines under “Need help?” in the app is always available and works without an internet connection.

This web page

This is a static web page: no cookies, no analytics, and no third-party resources are loaded.

Changes to this policy

When we change this policy, we will update the effective date above. If a change means we start keeping a new kind of data, the app tells you where that data is collected, before we collect it.

繁體中文

生效日：2026 年 10 月 24 日

本文件以繁體中文版為原文，英文版為翻譯；兩者如有歧異，以繁體中文版為準。English version

這份文件描述 Two Designs 這個 app（以下稱「本服務」）實際上蒐集什麼、送到哪裡、存多久、怎麼刪。如果哪一句和實際行為不符，那是缺陷，請告訴我們。

重點

誰在蒐集

本服務由 Coyotech 開發與營運，是下列資料的蒐集者與保有者。聯絡方式：support@coyotech.app。

我們蒐集什麼，為什麼

帳號與登入

出生資料

每個帳號保存一份出生資料，就是你自己的：你取的名稱、出生日期、出生時間（可選「不知道」）、出生城市，以及由城市換算出的經緯度與時區。城市是從 app 內建的城市清單中選的，不使用你裝置的定位。這些資料是計算星盤與人類圖的唯一依據。名稱隨時可以在 app 的「我的 → 我的出生資料」修改；出生資料在沒有買過分析時也可以在那裡修改。

對話

你向解讀助手提出的問題與它的回答，連同使用的 token 數與計費來源（試用、訂閱或點數），都保存在伺服器上。保存它們是為了顯示對話紀錄、讓助手能接著前幾句回答，以及計算額度。請不要在對話中輸入你不希望被保存的資訊（例如健康狀況、身分證號碼）。

每日運勢

訂閱者的每日運勢依日期與寫作時所用的裝置時區名稱保存，同一天在同一個時區重看不必重新產生。運勢裡的時間都是那個時區的當地時間，所以同一天在另一個時區（旅行中，或另一台裝置）讀，會另外產生一份。

裝置時區

app 送給伺服器的每個請求都附上裝置的時區名稱（例如 Asia/Taipei），用來決定「今天」是哪一天，以及告訴解讀助手你當地的日期與時間；推播的時間也依它計算。它會連同每日運勢（見「每日運勢」）與推播 token（見「推播通知」）一起保存。

語言與國家／地區

每個請求也附上 app 顯示的語言（例如 zh-Hant）。你向解讀助手提問時，該請求另附裝置所在國家／地區的代碼（例如 TW），有取得時才送：Android 取自行動網路所在的國家，沒有就用 SIM 卡的國家，再沒有就用系統語言設定中的國家；iOS 取自「地區」設定，沒有就用系統語言設定中的國家。不使用定位權限，無法得知時不送。語言用來決定伺服器回傳內容與解讀助手回答所用的語言；每日運勢依語言分開保存，推播 token 也連同註冊時的 app 語言保存，讓推播以該語言送出。國家／地區只用來挑選解讀助手在對話中提供的求助專線（有該國專線時提供專線，沒有則提供查詢專線的網站與當地的緊急電話），伺服器不保存它。

購買

我們保存你買過的分析、點數的增減紀錄、訂閱的方案與有效期間，以及商店交易編號。付款本身由 App Store 或 Google Play 處理，我們拿不到你的信用卡或付款帳戶資料。

雙人連結

你可以用邀請連結或 QR code，把你的出生資料與另一個人的連結起來，取得你們兩人的合盤與合圖分析。這是本服務唯一會把你的資料顯示給另一位使用者的情況。

推播通知

只有在你允許通知之後，app 才會取得裝置的推播 token，並把它與平台（iOS／Android）、時區名稱交給我們，用來替訂閱者在當地早上 8 點送出出生資料的今日行運，以及在有人接受你的雙人邀請時通知你。今日行運通知的內容是當天主要行運的標題（例如「心意與認同之間的拉扯」），另附出生資料的識別碼與日期；雙人通知的內容是接受者的名字與這組的識別碼。點開通知時都能打開對的畫面。推播服務回報 token 已失效時，我們會刪除它。

分享卡片

分享卡片（把你的人類圖或今日行運做成的圖片）在你的裝置上產生，相關內容都不會傳給我們。卡片不會出現你的出生日期、時間或地點；只有你打開「顯示我的名字」時才會出現名字。卡片只會送到你選擇的地方（Instagram、LINE、Threads 或系統的分享選單），並適用該服務自己的條款。把卡片存進相簿時，app 只要求「加入照片」的權限（Android 10 以前為系統的儲存空間權限）；app 從不讀取你的相簿。

fortune.coyotech.app 上的免費人類圖測驗

fortune.coyotech.app 的測驗不需要帳號。你輸入的出生日期、時間（或「不知道」）與城市，只為了計算你的人類圖送到我們的伺服器，不會儲存：不寫入資料庫，請求內容也不記入系統紀錄。回傳的是推導出的圖（類型、內在權威、人生角色，以及畫出人類圖所需的閘門）與你的類型解讀。搜尋城市時，會送出你輸入的文字以提供城市建議。為了防止濫用，伺服器只在記憶體中依 IP 位址計算請求次數；IP 位址不寫入硬碟或系統紀錄，伺服器重新啟動就消失。關於測驗，我們只保留每日總數：算了幾張圖、分享的結果被開啟幾次，不含任何個人資料。

結果的連結只包含推導出的圖，從不包含你的出生日期、時間或地點，而且放在「#」之後，也就是瀏覽器不會送給 fortune.coyotech.app 的那一段。任何人打開連結都會看到同樣的結果；他的瀏覽器只向我們的伺服器要那個類型的解讀文字。分享圖片在你的瀏覽器裡產生，不會傳給我們。測驗的網頁（表單、各類型結果頁與價格頁）使用 Google Analytics 計算造訪：它會設定 Google Analytics 的 cookie，並收到不含「#」之後內容的網址，所以永遠不會收到結果連結裡的圖。報告頁與雙人邀請頁不載入任何分析工具。

回傳內容還附有一份經簽章的完整推導圖（每顆星體的閘門與爻，以及變數），只保存在你瀏覽器該分頁的工作階段儲存空間，只有在你開始購買完整報告時才會送回伺服器；我們不儲存它。

在 fortune.coyotech.app 購買的完整人類圖報告

購買完整報告時，我們會建立一筆訂單，保存：產生報告所需的推導圖（類型、內在權威、人生角色、定義型態、個性與設計兩側每顆星體的閘門與爻，以及變數）、購買時的語言、構成你報告連結的隨機訂單代碼、你同意不適用七日解除權的時間與當時的條款版本、訂單狀態（待付款、已付款、已退款）、Portaly Payment 的結帳工作階段 ID 與付款編號、付款後 Portaly Payment 傳給我們的 Email、訂單建立與付款的時間，以及報告連結寄出的時間（尚未寄出時，則是上次寄送失敗的原因）。訂單從不保存你的出生日期、時間或地點，也不與 app 帳號連結。坦白說明：每顆星體的爻與變數是由出生時刻計算出來的，持有它們的人可能據此推估出生日期與大約的出生時間；因此報告連結是私人的，只有持有連結的人能打開。

Email 只用於兩件事：付款後把報告連結寄給你一次，讓你不會弄丟（透過 Resend 寄送，見「資料會送到哪裡」；寄送失敗時，我們會在 48 小時內重試），以及你來信時找到你的訂單（例如遺失連結或申請退款）。我們不寄送行銷信件。開啟報告時會把訂單代碼送到我們的伺服器；任何拿到連結的人都能打開報告。

當機紀錄

正式版 app 當機或發生未處理的錯誤時，會透過 Firebase Crashlytics 送出當機報告，內容包含錯誤訊息、錯誤堆疊與裝置資訊（例如裝置型號、作業系統與 app 版本），以及 Crashlytics 為計算受影響人數而產生的安裝識別碼。我們不設定使用者識別碼。開發版不送出。

系統紀錄

請求失敗時（例如伺服器內部錯誤或暫時無法連線），以及每小時排程工作（每日推播、清理逾時的提問）出錯時，系統紀錄可能記下你的 IP 位址、User-Agent、裝置時區、請求的路徑與帳號識別碼，以及錯誤訊息；購買通知的處理狀態也會記錄。這些紀錄用於排除故障，依伺服器的系統紀錄輪替期間保存後覆寫。系統紀錄不刻意記錄提問內容或出生資料。

我們沒有蒐集的

資料會送到哪裡

OpenAI（產生解讀）

你提問時，伺服器送給 OpenAI 的是：由出生資料算出的盤面內容（例如「太陽在雙子座」、人類圖類型，以及出生時間是否已知）、當天的行運與你當地現在的日期時間（不送時區名稱本身）、你最近的幾則對話、你的問題，以及要用來回答的語言和你所在國家或地區的求助專線名稱與電話（有該國專線時；見「語言與國家／地區」），不送國家／地區代碼本身。每日運勢只送當天選出的解讀段落、這些行運以你當地時間計算的開始、最強與結束時刻、當地今天的日期，以及要使用的語言。伺服器不送姓名、出生日期、出生時間、出生地點或帳號識別碼；但你自己在提問中輸入的任何內容（包括這些資料）會原樣送出。

我們呼叫 OpenAI 時要求不保存這次回應（store: false）。依 OpenAI API 的資料政策，API 的內容預設不會被用來訓練模型；但不論上述設定，OpenAI 預設會把內容保留在濫用監控紀錄中最長 30 天，只有在法律要求、或為保護其服務或第三方時才會保留更久。

你的同意：你第一次開啟 app 時，歡迎畫面會說明回答與每日運勢由第三方 AI 服務產生、該服務會收到哪些內容，附上服務條款與本政策的連結，並請你點「同意並開始」表示同意。在此之前，不會把你的任何內容送給 OpenAI。若要撤回同意，請停止使用提問與每日運勢，或刪除帳號（見「刪除帳號」）。

RevenueCat、App Store、Google Play（購買）

購買透過 RevenueCat 管理。RevenueCat 會收到你的帳號識別碼與商店交易紀錄（品項、時間、價格、交易編號），以及其 SDK 運作所需的裝置與 app 資訊。RevenueCat 與商店依各自的隱私權政策保存這些紀錄。

Portaly Payment（網頁報告的購買）

fortune.coyotech.app 上完整報告的結帳頁由 Portaly Payment（台灣）提供。你在該頁面提供給 Portaly 姓名、Email（由其驗證）、其要求時的手機號碼，以及信用卡（透過其金流服務扣款）；電子發票由 Portaly 開立。我們傳給 Portaly 方案、訂單編號與付款後返回的網址；Portaly 回傳給我們結帳工作階段 ID、付款狀態與編號、金額，以及你的 Email。我們不會取得你的卡號。Portaly 依其隱私權政策保存其紀錄。

Resend（寄送報告連結）

網頁購買付款完成後，我們透過 Resend（Resend, Inc.，美國）寄出報告連結；Resend 是代我們寄送的受託處理者。Resend 會收到你的 Email 與信件內容：含訂單代碼的報告連結，以購買時的語言撰寫。它不會收到出生資料或圖。Resend 依其隱私權政策與資料處理條款保存寄送紀錄。

Google Firebase（推播與當機紀錄）

推播經由 Firebase Cloud Messaging（iOS 再經由 Apple 推播服務）送達，通知內容如上所述。當機報告送到 Firebase Crashlytics。本服務的 Firebase 專案沒有啟用 Google Analytics。

Apple、Google、LINE（登入，選用）

你選擇綁定時，登入在該服務的畫面上進行，我們只收到上面說的帳號識別碼、名字與頭像網址。

app 顯示頭像時，會直接從 Google 或 LINE 的伺服器載入，因此該服務會收到你裝置的 IP 位址與 User-Agent。

你的裝置與雲端備份（還原登入）

為了讓你重裝 app 或換手機後回到同一個帳號，app 會把帳號識別碼與一組登入憑證存在：iOS 的鑰匙圈（開啟 iCloud 鑰匙圈時會同步到你的其他 Apple 裝置）；Android 的 Google Block Store（只有在支援端對端加密時才備份到 Google 雲端，否則只存在這台裝置）。這份資料由 Apple 或 Google 保管，我們無法讀取你的雲端備份。

資料存放地點

我們的伺服器與資料庫位於 Google Cloud 的 us-central1 區域（美國愛荷華州）。OpenAI、RevenueCat、Firebase 與 Resend 也可能在美國或其他國家處理資料。使用本服務即表示你的資料會傳輸到台灣以外的地方。

保存期間與刪除

伺服器上的資料沒有自動刪除期限，會一直保存到你刪除它，或刪除整個帳號。

出生資料

出生資料隨帳號一起刪除，不單獨刪除。買過分析之後，出生資料就不能在 app 內修改，因為分析是為那組出生資料購買的；需要修正請來信 support@coyotech.app。

刪除帳號

在 app 的「我的 → 設定 → 刪除帳號」。刪除立即生效，沒有寬限期，也無法復原：

刪除帳號不會取消你在 App Store 或 Google Play 的訂閱，請到商店的訂閱管理取消。

刪除帳號後仍會保留的：

沒有 app 時的刪除方式見刪除帳號。

網頁報告的訂單

fortune.coyotech.app 上完整報告的訂單，為了會計與處理退款，自購買起保存 5 年後刪除。你也可以要求提早刪除報告：請寄信至 support@coyotech.app，附上報告連結（或「#」之後的訂單代碼）。我們會刪除該筆訂單，連結隨即失效；Portaly Payment 依法保存其自身的付款紀錄與電子發票。刪除 app 帳號不影響網頁訂單，因為兩者沒有連結。

長期未使用

匿名帳號 30 天沒有開啟 app，登入憑證會失效，之後在任何裝置上都無法再進入那個帳號；但它的資料不會自動刪除。如果你打算停用，請在那之前先在 app 裡刪除帳號。

安全

你的權利

依《個人資料保護法》第 3 條，你可以就你的個人資料請求查詢、閱覽、製給複製本、補充或更正、停止蒐集處理利用，以及刪除。更正：出生資料中的名稱隨時可在 app 內修改；出生資料在沒有買過分析時可在 app 內修改，買過分析之後需修正請來信。刪除：可在 app 內自行完成。其他請求請來信 support@coyotech.app，並附上 app「我的 → 設定」中的帳號 ID，我們會依該帳號處理。

在 fortune.coyotech.app 購買的完整報告沒有帳號，請改附上報告連結或其訂單代碼。

兒童

本服務不是為未滿 13 歲的人設計的，我們也不刻意蒐集他們的資料。家長發現孩子使用本服務，可來信要求刪除。

關於對話內容

本服務的解讀僅供娛樂與自我探索，不是醫療、心理、法律或財務建議。對話中提到自我傷害或緊急狀況時，解讀助手會提供求助專線與緊急電話；系統不會因為對話內容自動通報任何人或機構。app 內「需要幫助？」的專線清單隨時可用，不需要網路。

這個網頁

這是靜態網頁：沒有 cookie、沒有分析、沒有載入任何第三方資源。

政策變更

修改時會更新上方的生效日。若變更後開始保存新種類的資料，app 會在收集該資料的地方、收集之前告知你。