Privacy Policy

Last updated: 2026-10-29.

Summary

Qelunai needs an account. You sign in (Email, Google or Apple) and agree to backup, then enter your name, birth date and birth time.
Your birth profiles, Kinh Dịch cast history and memorial days are saved to your account so they appear on every device you sign in on.
Each use of your data has its own consent box, none ticked in advance. You can withdraw at any time.
All calculations still run on your device.
Usage statistics and crash reports are sent only if you turn them on (off by default).
The free version may show ads from Google AdMob; Qelunai Plus has no ads. Ads never receive your birth profiles or cast history.
We do not sell your data.

The app asks for each use separately, one box each, none ticked in advance:

Confirming you are 16 or older (required to use the app).
Using birth dates to build charts (required before you create a birth profile).
Backing up to your account (required before you sign in).
Sending anonymous usage statistics and crash reports (optional).

Each time you agree or withdraw, the app writes one record: the purpose, agreed or withdrawn, the time, and the version of this policy. These records are stored only on the device, are never sent to your account, and are never edited or removed. You can see and change your choices in Profile > Manage consent.

Withdrawing consent to use birth dates deletes every birth profile from the device and from your account (if any). The cast history stays.
Turning off backup means deleting your account (see Deleting your account below).

Account

The app uses Firebase Authentication (Google LLC) for sign-in. Stored data:

Your email address (with Apple, possibly a private relay address provided by Apple).
A user identifier created by Firebase, the sign-in provider, and the creation and last sign-in times.
Your password (Email sign-in only), stored hashed by Firebase; we cannot read it.

Data stored in your account

When you sign in and agree to backup, the app stores the following in Cloud Firestore (Google LLC), located in the Singapore region (asia-southeast1):

Birth profiles you create in the Charts tab: name, solar birth date, birth time (if given), gender, and when the profile was created and changed.
Kinh Dịch cast history: when each cast happened and its six lines.
Memorial days (Sổ giỗ): the name of the person who passed away, their family relation, the lunar date of death (and the year if you enter it), notes, reminder settings, and when each entry was created and changed.
Technical sync data: each item's id, data version, update time, and a "deleted" marker for items you delete (the marker holds no name, birth data or cast).

Only your account can read or write this data. It is used only to show it back to you on the devices you sign in on. Google's privacy policy: https://policies.google.com/privacy

Data stored on your device

App settings: language, light/dark mode, whether the introduction has been completed.
The consent records (see Your consent).
A copy of the account's birth profiles and cast history, so the app works offline. Changes made offline are uploaded at the next sync.
The readings pack (the note for each I Ching line and each numerology number), downloaded from Cloud Firestore when a new version is out. The pack is the same for everyone and holds none of your data; the download sends only your sign-in session, not your profiles or history. It stays on the device after you sign out.

When you sign out, this copy is removed from the device; the data stays in your account and comes back when you sign in again. Uninstalling the app (or clearing the site's data in your browser) also removes the copy.

Deleting data

One profile: open it in the Charts tab > Delete profile.
One cast: open it in the history > Delete this cast; or Clear all history in the Charts tab.
Everything: Profile > Delete all profiles and history.

These delete the data from the device, and from your account (on every device) at the next sync if you are signed in.

Deleting your account

Go to Profile > Delete account in the app. The app deletes, in this order: all of the account's data in Cloud Firestore, then the copy on the device, then the sign-in account. If the server data cannot be deleted (for example, offline), nothing is deleted and the app asks you to try again. If Firebase requires a recent sign-in, the data is already deleted; the app takes you to the sign-in screen so you can sign in again and delete the account once more.

In-app purchases (Qelunai Plus)

When a build offers Qelunai Plus, the purchase and the payment are handled entirely by Apple (App Store) or Google (Google Play). Qelunai does not see or store your card number or payment details. The app only receives from the store whether you are subscribed and which plan (monthly or yearly), and keeps that result on your device to turn the Plus features on. Qelunai does not send transaction information to its own servers. Cancellation, refunds and free trials are managed by the store under its own policies.

Usage statistics and crash reports

Only if you turn on Send anonymous usage statistics and crash reports (in Profile > Manage consent, off by default), the app sends to Google (Firebase):

Google Analytics for Firebase: screens opened, time in the app, device type, operating system, app version, approximate country, and an app installation id.
Firebase Crashlytics: a report when the app fails (where in the code, device, operating system, app version).
Firebase Performance Monitoring: app start time, screen rendering speed, and the duration of network calls.

This data holds no name, birth date, birth time, cast or memorial day, and is not used for ads. When you turn it off, sending stops at once; crash reports still on the device are not sent.

The free version may show ads from Google AdMob (Google LLC): a banner at the end of result pages, and sometimes a full-screen ad when you choose to cast again (at most once every 5 minutes). There are no ads on the sign-in screen, while casting, in the camera compass, or in widgets. Qelunai Plus subscribers see no ads.

To show and measure ads, Google receives the device's advertising id (IDFA on iPhone, Advertising ID on Android), the IP address, the device type and how you interact with ads. The app does not send Google your name, birth date, profiles or cast history.
On iPhone, Apple asks whether you allow tracking. If you decline, ads still show but are not personalised by the advertising id.
Where the law requires it (for example the European Union and the United Kingdom), the app shows Google's consent form before loading ads; you can change your choice in Profile > Manage consent > Ad privacy options.
On Android, you can reset or delete the advertising id in the device Settings.

How Google uses data from apps: https://policies.google.com/technologies/partner-sites

What Qelunai does NOT do

We do not sell your data.
No birth profiles, cast history or memorial days are sent to Google Analytics or to ads.
No external AI server calls.

Device permissions

Camera: only when you open the compass over the live view or scan a zodiac-card QR code. The picture is only shown on screen; it is never taken, saved or sent.
Tracking (iPhone): asked only in versions with ads, as in Ads above.

The app does not request location, contacts, microphone, or any other sensitive permission.

Future changes

If Qelunai adds a feature that sends more data off the device (e.g. an AI Advisor through a server), this policy will be updated before that feature is enabled, stating exactly what data is sent, where, and how you can opt out.

Privacy questions: email [email protected].