Privacy policy

1. Information collected

The Platform collects the following information during registration:

  • Phone number: used for registration and login, and kept secure.
  • Password: stored as a pbkdf2_sha256 hash, never in plain text.
  • Invite code: generated to record invitation relationships.
  • Google sign-in: when you sign in with Google we receive your Google account ID, email address and display name, and use them to create and identify your account.
  • AI conversations: the questions you ask the AI analyst and the answers it returns are stored, so that you can reopen past sessions.
  • Feedback: whatever you send us through the feedback channels or our official group, together with the account it came from.

2. Use of information

Collected information is used only to:

  • Provide authentication and data access.
  • Control data access by user level.
  • Record invitation relationships and support invitation features.

The Platform does not sell, rent or otherwise provide user information to third parties.

3. Information security

  • Password security: stored as a pbkdf2_sha256 hash, never in plain text.
  • Login token: valid for 7 days.

4. Data access

The Platform controls data access by user level. See “User levels and access” in the Terms of service.

5. Account security

  • Provide a genuine, working phone number; losses caused by failing to receive verification codes are borne by the user.
  • Keep account credentials secure; the user is responsible for losses caused by disclosure.
  • Concurrent login control is enabled; by default, one phone number may use one device at a time.
  • Users may log out at any time; the current device token is immediately invalidated.

6. Privacy policy changes

The Platform may amend this privacy policy at any time. Amendments will be published and continued use constitutes acceptance.

7. Where your data is stored

The Platform's servers are located in Singapore (Alibaba Cloud). The information above is stored and processed there.