Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

1.2 Information Collected Automatically

1.3 Sensitive Personal Information

For BaZi fortune-telling analyses, the Services require your date of birth, time of birth, and place of birth. While this may be considered sensitive in some jurisdictions, it is essential for core functionality. By providing this data, you acknowledge and consent to its use as described herein.

2. How We Use Your Information

We do NOT sell your personal information as defined by CCPA/CPRA or any other applicable privacy law.

3. Sharing of Information

We may share information in limited circumstances:

3.1 Service Providers

All service providers are contractually obligated to protect your information and use it only for specified purposes.

3.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request — including responding to subpoenas, court orders, complying with applicable laws, protecting rights/safety, and detecting fraud.

3.3 Business Transfers

In the event of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email or prominent notice.

4. Data Security and Retention

4.1 Security Measures

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256);
• Access controls and authentication mechanisms;
• Regular security assessments and vulnerability testing;
• Employee training on data protection practices.

No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

4.2 Data Retention

• We retain personal information while your account is active or as needed to provide Services;
• We also retain information necessary to comply with legal obligations, resolve disputes, detect fraud;
• When no longer needed, we securely delete or anonymize your data;
• Upon account deletion request, we delete within thirty (30) days (some info retained where legally required).

4.3 Storage Location

Your data is primarily stored on servers located in Mainland China. International users' data may also be processed in other jurisdictions as described in Section 6.

5. Your Rights and Choices

5.1 General Rights (PIPL Compliant)

To exercise these rights, contact us at [email protected].

5.2 GDPR Rights (EEA, UK, Switzerland Users)

Legal Basis: Consent, contract performance, legitimate interests, legal obligations.

5.3 CCPA Rights (California Residents)

We respond to verifiable requests within forty-five (45) days.

5.4 Additional Choices

6. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions whose data protection laws may differ from those of your country.

For EEA, UK, and Switzerland Users: Where we transfer data to countries without an adequacy decision, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

Contact us at [email protected] to obtain a copy of safeguards we rely on.

7. Children's Privacy

We do not knowingly collect personal information from children under the applicable age without parental consent. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a parent/guardian and believe your child has provided us personal information, please contact us immediately at [email protected].

COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect PII from children under 13.

8. Third-Party Services

The Services may integrate with third-party websites, applications, or services not operated by us. These include:

• Social Media Platforms: For optional sharing features (if available)
• App Stores: Apple App Store and Google Play for distribution
• Analytics Tools: As described in Section 3.1

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before interacting with them.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, session management, and understanding usage patterns.

You can manage cookie preferences through device settings and browser controls. For details, see aboutcookies.org.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy with a revised "Last Updated" date;
• Notify you through the App (in-app notification or banner) for significant changes;
• If required by law, obtain your consent before the updated policy takes effect.

Your continued use after the effective date constitutes acceptance of changes.

Version History:

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Website: https://curioboxai.com

Response Timeline: We aim to respond to all privacy-related inquiries within thirty (30) days. For complex requests, up to an additional thirty (30) days may be needed.

1. 信息收集

1.1 您主动提供的信息

1.2 自动收集的信息

1.3 敏感个人信息特别说明

为生成八字算命分析，本服务需要您的出生日期、出生时间和出生地点。虽然此类信息在某些司法管辖区可能被视为敏感信息，但它是核心功能的必要条件。提供此数据即表示您确认并同意按本文所述方式使用。

2. 信息使用

我们不会出售您的个人信息。我们不会按照《加州消费者隐私法》（CCPA）或任何其他适用隐私法定义的方式出售个人信息。

3. 信息共享

我们仅在以下有限情况下共享信息：

3.1 服务提供商

所有服务提供商均通过合同义务保护您的信息，仅将信息用于指定目的。

3.2 法律法规要求

如法律、法规、法律程序或政府机关依法要求披露信息，包括响应传票、法院命令、遵守适用法律、保护权利/安全和检测欺诈等情形，我们可能会披露信息。

3.3 业务转让

如发生合并、收购或资产出售，您的信息可能作为交易的一部分被转让。我们将通过邮件或显著通知告知您。

4. 信息存储与安全

4.1 安全措施

• 传输中采用 TLS 1.2+ 加密；静态数据采用 AES-256 加密；
• 访问控制和身份验证机制；
• 定期安全评估和漏洞测试；
• 员工数据保护培训。

互联网上的任何传输方式都无法保证 100% 安全，我们不能保证绝对安全。

4.2 数据保留

• 在您的账户存续期间或为提供服务所需的期间内保留个人信息；
• 同时保留履行法律义务、解决争议、检测欺诈所必需的信息；
• 不再需要时，我们将安全删除或匿名化您的数据；
• 收到账户删除请求后，将在三十（30）天内删除（法律要求保留的信息除外）。

4.3 存储位置

您的数据主要存储在位于中国大陆的服务器上。国际用户的数据也可能在其他司法管辖区进行处理（详见第 6 节）。

5. 您的权利与选择

5.1 一般性权利（《个保法》合规）

行使以上权利请联系：[email protected]

5.2 GDPR 权利（欧洲经济区、英国、瑞士用户）

处理的法律依据：同意、合同履行、合法利益、法律义务。

5.3 CCPA 权利（加利福尼亚州居民）

我们将在四十五（45）天内回复可核实的请求。

5.4 其他选择

6. 国际数据传输

您的信息可能被传输至、存储于您居住国以外的国家（包括美国及其他数据保护法律可能与您所在国不同的司法管辖区）并进行处理。

对于欧洲经济区、英国和瑞士用户：如我们将数据传输至欧盟委员会未认定具有充分保护水平的国家，我们将实施适当的保障措施，包括欧盟委员会批准的标准合同条款（SCC）。

如需获取我们所依赖的保障措施副本，请联系 [email protected]。

7. 儿童隐私

我们不会故意在未经家长同意的情况下收集适用年龄以下儿童的个人信息。如发现已收集此类信息，我们将立即采取删除措施。

如您是家长或监护人，发现孩子向我们提供了个人信息，请立即联系 [email protected]，我们将采取适当行动。

COPPA 合规：我们遵守《儿童在线隐私保护法》（COPPA）。我们不会故意收集 13 周岁以下儿童的个人信息。

8. 第三方服务

本服务可能集成非由我们运营的第三方网站、应用或服务，包括：

• 社交媒体平台：用于可选分享功能（如有）
• 应用商店：Apple App Store 和 Google Play 商店用于分发
• 分析工具：如第 3.1 节所述

我们不对这些第三方的隐私实践负责。建议您在与其交互前查阅其隐私政策。

9. Cookie 与追踪技术

我们使用 Cookie 和类似技术进行身份验证、会话管理和了解使用模式。

您可通过设备设置和浏览器控件管理 Cookie 偏好。详情参见 aboutcookies.org。

10. 政策更新

我们可能会不时更新本隐私政策。重大变更时，我们将：

• 发布更新后的政策并修订"最后更新日期"；
• 通过应用内通知或横幅通知您重大变更；
• 如法律要求，在新政策生效前征得您的同意。

生效日期后的持续使用即构成接受变更。

版本历史：

11. 联系我们

如有关于本隐私政策或数据处理实践的疑问、投诉或建议，请联系：

网站： https://curioboxai.com

回复时限：我们将在三十（30）个工作日内回复所有隐私相关咨询。对于复杂请求，可能需要额外三十（30）天，届时我们会在初始 30 天期限内通知您。