• Account data: email address, hashed password, display name, and consent preferences you provide at registration.
• Birth information (sensitive): birth date, birth time, and gender you enter to generate a cultural personality profile. We treat this as sensitive personal data and use it solely to compute your profile.
• Usage data: feature requests and counts (for quota enforcement), timestamps, and subscription tier at time of use.
• Billing data: handled by our payment processor LemonSqueezy. We do not store your full card number; we receive only subscription status and the last four digits / card brand for display.

• To generate and display your cultural personality profile and related insights.
• To operate AI chat features (your messages may be processed by our AI provider).
• To enforce plan quotas and manage your subscription.
• To send essential service communications (e.g., billing, security).
• Marketing emails are sent only if you opt in, and you can unsubscribe anytime.

Where the EU/UK GDPR applies, we process your data on the bases of: your consent (birth data and marketing), performance of a contract (providing the service you subscribe to), and our legitimate interests (security, fraud prevention, service improvement).

We do not sell your personal data. We share data only with processors necessary to run the service:

• LemonSqueezy — payment processing and subscription billing.
• AI provider — to generate advisor responses from your prompts.
• Hosting / database providers — to host the application and store your account.

We retain account and profile data while your account is active. If you delete your account, we remove personal data within 30 days, except where retention is required by law (e.g., tax/billing records). Usage logs are retained for up to 12 months for abuse prevention and analytics.

Subject to your jurisdiction (including GDPR and California CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict processing of your data, and to withdraw consent. To exercise any of these rights, email privacy@yiwen-ai.com. California residents may also request disclosure of categories of data collected and opt out of any “sale” or “sharing” (we do not sell data).

Passwords are stored hashed. Data is transmitted over HTTPS. While we use reasonable safeguards, no method of transmission or storage is 100% secure.

Yiwen AI is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us for removal.

We may update this policy; material changes will be posted here with a new date. Questions? Contact privacy@yiwen-ai.com.