For data-related inquiries, contact our Data Protection Officer at privacy@cihang.app.

Cihang is intended for users in Singapore, Malaysia, and the global Chinese-speaking diaspora. Cihang does not target or serve users in mainland China (PRC). This service has not obtained the Internet Religious Information Services Permit (互联网宗教信息服务许可) required under PRC law for religious content services. Users in the PRC access this service at their own discretion.

We collect only the data necessary to provide the service (data minimisation):

• Account identifiers (e.g. email address or third-party auth token) when you create an account.
• Saved fortune draws and shrine offerings are stored on our server for both guests and account holders. A signed browser session protects guest access; signing in can transfer that session’s records to your account.
• Anonymised usage analytics (page views, feature interactions) to improve the service. No personal identifiers are attached.
• Standard server logs (IP address, user agent) retained for up to 90 days for security and abuse prevention.

Devotional activity may reveal your religious beliefs. Before we save offerings, fortune draws or AI usage, we ask for explicit consent. Guests and account holders can withdraw devotional-data consent from Profile; this stops new devotional records until consent is granted again. Existing records can be accessed or deleted by contacting privacy@cihang.app.

We process your data for the following purposes and on the following legal bases (GDPR Article 6):

• Providing and maintaining the service — lawful basis: performance of a contract (GDPR Art. 6(1)(b)).
• Security monitoring and fraud prevention — lawful basis: legitimate interests (GDPR Art. 6(1)(f)).
• Service improvement through anonymised analytics — lawful basis: legitimate interests (GDPR Art. 6(1)(f)).
• Compliance with applicable law — lawful basis: legal obligation (GDPR Art. 6(1)(c)).

Account data is retained while your account is active and deleted within 30 days of account deletion.

Server logs are retained for up to 90 days.

Anonymised analytics data may be retained for up to 24 months.

Dharma Mirror and Ciyun Chat interaction logs are retained for rate-limiting purposes for 90 days, then permanently deleted.

Fortune drawing records (lot number, timestamp, encrypted question) are retained while your account is active and deleted within 30 days of account deletion.

Shrine offering records (type and timestamp) are retained while your account is active and deleted within 30 days of account deletion.

Encrypted database backups are retained for up to 30 days and then automatically purged.

Cihang uses AWS Amplify for hosting, AWS Cognito for authentication, Neon PostgreSQL in Singapore for application records, and Umami Cloud for usage analytics. Google processes Google sign-in when you choose it. When enabled, Ciyun sends your submitted question and relevant lot text to Xiaomi MiMo to generate a response. We do not send your account identity to MiMo or store your chat text in our usage records. Xiaomi processes submitted text under its own service and privacy terms; avoid including identifying or sensitive personal details. Providers may process data outside Singapore. Public donations are currently closed. Administrator sandbox payments use Stripe test mode. If live donations open later, Stripe will process card details; Cihang will retain the payment reference, amount, status, consent and account link for the term shown at checkout. Account deletion removes that account link; Stripe retains its own records under its terms. New donation-interest email opt-ins expire after 90 days.

Depending on your jurisdiction, you have the following rights regarding your personal data:

To exercise any of these rights, contact our Data Protection Officer at privacy@cihang.app. We will respond within 30 days (or within the timeframe required by applicable law).

Cihang is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately so we can delete it. If you are between 16 and 18, use of Cihang requires the consent of a parent or legal guardian.

Fortune questions are encrypted in your browser with AES-256-GCM. Their per-question keys are wrapped using a separate server-managed encryption key before storage. Authorized server operations can decrypt questions for their owner; this is not end-to-end encryption. API ownership checks protect records, and signing in transfers only records proven to belong to the current signed guest session.

We use a limited number of third-party services (e.g. authentication provider, cloud infrastructure). Each is bound by a data processing agreement and is only permitted to process your data as directed by us for the specified purpose.

We may update this policy from time to time. Material changes will be notified via in-app notices. The 'Last updated' date at the top reflects the most recent revision. Continued use after a change constitutes acceptance.

For privacy requests, data subject rights exercises, or questions about this policy, contact our Data Protection Officer at privacy@cihang.app.