Shiyi

Privacy Policy

Effective November 11, 2026 Also published in Chinese. For users of the service in English, this English version applies.

Shiyi (at shiyi.linquan.app, “the service”) is run by Linquan, a sole proprietorship registered in Ontario, Canada (“we”, “us”). We designed its data flows on two rules: work out in your browser whatever can be worked out there, and upload only what is needed for the thing you asked for. This policy explains what the service actually collects, where it is kept, who it is sent to, how long it is kept, and how you can see and delete it.

In short: when you are not signed in, charts, the calendar and hexagram casting are all worked out in your browser, and your data stays in that browser. Once you sign in, your charts (including birth time and place), readings and divination records are kept in your account on our server in Japan, with daily backups in the United States. When you ask for a hexagram reading or a natal chart reading, we send the question you wrote and the hexagram, or the results worked out from your chart such as the Four Pillars, to the Claude model of Anthropic, a US company, which writes the reading. We do not send your email address, or your birth date and place as you entered them. Payments are handled by Stripe; we never see your card number. The site has no ads, does no tracking for statistics, and sells no data.

1. When you are not signed in: information that stays in your browser

The Calendar (with “This day”), casting a BaZi chart (with an outline for each month and year), and casting a hexagram with its texts are all worked out by our code in your browser and need no account. The following is stored in your browser’s local storage and is not uploaded:

• charts drawn up and divination records made while you are not signed in;
• your approximate longitude: when you choose “Use my location”, your browser first asks for your permission. We keep only the longitude, to work out true solar time; we do not keep the latitude, and upload neither. Without permission, we estimate from your time zone.

Clearing this site’s data in your browser deletes this information.

2. Information kept in your account once you sign in

When you sign in, the charts and records already in that browser are merged into your account; after that, changes you make on any device are synced. Your account holds:

• Account: your email address;
• Charts: the name you give each chart, the Gregorian date and time of birth, the birthplace’s name and coordinates, the time zone and gender;
• Chart profiles: the summary produced by the natal chart reading: the Day Master’s strength, the chart structure, and the favourable and unfavourable elements;
• Readings: the natal chart readings and hexagram readings written for you, and which ones you have read;
• Divination records: the question asked, the casting method and time, and the hexagrams;
• Reading credits: your balance and the history of credits added and used (gifts, purchases, uses, returns, adjustments);
• Device credentials: each browser you sign in on has a device ID and an access credential (the server keeps only a hash of the credential), with the times it signed in and last connected.

3. Information sent when you request a reading

When you request a hexagram reading or a natal chart reading, your browser sends our server what that reading needs; the server prepares it and passes it to Anthropic’s Claude model, which writes the text. What is sent:

• for hexagram readings: your question, when you cast, the Four Pillars of that moment worked out from your approximate longitude, and the hexagrams with their texts;
• for natal chart readings: results worked out from your chart (gender, the Four Pillars, the chart structure, the solar term of your birth and how many days after it you were born, and each ten-year luck period with its start and end years and ages), and the chart’s name, used only to address you.

Not sent: your email address, your birth date and time as entered, or your birthplace’s name and coordinates.

The request and the reading written are held on our server for about an hour so that your browser can collect them, and then deleted. The reading is also saved in your account (see section 2).

4. Payment

When you buy reading credits, you are taken to a payment page hosted by Stripe. Your card number, expiry date and security code are collected and processed by Stripe directly; we cannot see them and do not store them. The payment page also asks for the parts of your billing address needed to work out tax (usually your country and postal code): Stripe uses them to find your province or territory and calculate the GST/HST to add; Stripe keeps this address information, and we do not store it. We fill in your account’s email address on the payment page so that Stripe can send you a receipt. After payment, we receive from Stripe and keep the payment session and payment IDs, the pack bought, the amount, the tax, the currency, and the payment status and time, to add the credits to your account, to handle refunds and for tax filing. We also take from Stripe the name you enter on the payment page, only to put it in your purchase confirmation email; we do not store it.

5. Sign-in codes and email

When you sign in, we send a 6-digit code to the email address you enter. The server keeps only a hash of the code, which is voided and deleted once it is used, expires or is replaced by a new one. Emails are sent through Resend (United States). Apart from sign-in codes, we write to you only about your account, payments (such as the purchase confirmation after a payment), or important changes to this policy or the Terms of Service; we send no marketing email.

Before a code is sent, the sign-in page runs a bot check with Cloudflare Turnstile (usually with nothing for you to do; now and then it asks for a click), so that no one can use a script to flood other people’s inboxes through our sign-in page. It looks at technical signals from your browser and device to decide; we receive only whether the check passed. It is not used for advertising or cross-site tracking.

6. Storage, retention and deletion

• Our server is in Osaka, Japan, and hosted by Oracle Cloud; daily backups of the database are kept in the United States (Google Cloud). Data is stored and processed in Japan, the United States and elsewhere; there it is subject to local law and may be accessed lawfully by local courts, law enforcement or national security authorities.
• Information in your account (section 2): kept until you delete the item concerned, or your account.
• Reading requests held on the server: deleted after about an hour (see section 3).
• Server logs: used to trace faults and prevent abuse. They record the IP address of each connection, the time, path and outcome of each request, and, at sign-in, the email address and device ID. They do not record sign-in codes, or the content of charts, questions or readings. Logs are overwritten as they reach their size limit (about 30 MB in total), and older entries are deleted as they are.
• Database backups: the database is backed up once a day to a private storage bucket on Google Cloud (United States). Backups are deleted automatically after 14 days. Data you delete is cleared from the older backups within the 14 days that follow.
• Deleting your account: choosing “Delete account” on the Account page deletes from our server your account, your device credentials, all the information in your account and your reading credit history, and cannot be undone. The copy in the browser you are using is cleared at the same time; copies in other browsers where you signed in should be cleared in those browsers.
• Gift records: the new-account gift comes once per email address. To keep it that way, for each email address that has received the gift we keep a one-way hash worked out from it (after removing aliases such as a plus suffix). It can only be used to check whether a given address has had the gift; the address cannot be worked out from it. It is not deleted when you delete your account, so that the same address cannot sign up again for a second gift.
• Block list: email addresses used in breach of the Terms of Service (for example, scripting the sign-in page to flood other people with codes, or signing up in bulk to collect the gift) are placed on a block list and can no longer sign in. The list records only the address, the reason and the date, and an entry stays until it is lifted.
• Payment records: the payment ID, pack bought, amount, tax, currency and time are tax records. When you delete your account they are not deleted but detached from it (they no longer carry your email address and cannot be linked back to your account), and are kept, as Canadian tax rules require, until 6 years after the end of the year they relate to, and then deleted.
• Anthropic: handles the requests we send under its commercial terms. It generally deletes them from its systems within 30 days and does not use them to train its models (cases such as breaches of its usage policies are handled under its own policies).

7. Third-party services

The site uses no advertising, statistics or cross-site tracking tools, and does not sell or rent your personal information to anyone.

8. Cookies and local storage

The site does not use cookies for statistics, advertising or tracking. Your sign-in credentials, charts, readings, divination records and so on are kept in your browser’s local storage (localStorage). When you sign out on the Account page, this data is cleared from that browser; what is in your account is not affected.

9. How we use this information

Only to: provide the chart calculations, syncing and readings you ask for; record and check reading credits and payments; handle refunds and your messages; trace faults, prevent abuse and keep the service secure; and meet legal obligations. We do not use your information for advertising, and do not use your charts, questions or readings to train any model.

We collect and use the information above with your consent: by creating an account, syncing charts and requesting readings, you agree to its handling as this policy describes.

10. Your rights

• Access and correction: you can see your charts, readings and divination records directly on the website, and change your charts there; to get a copy of the data we hold, write to us.
• Deletion: you can delete items one by one, or your whole account (see section 6).
• Withdrawing consent: stop requesting readings and nothing more is sent to the model; what is already stored can be deleted as described in the item above.

We will reply within 30 days of receiving a request. If you are not satisfied with our reply, you can complain to the Office of the Privacy Commissioner of Canada; if you are in another place with a data protection authority, you may also complain to that authority.

11. Minors

The service is meant for adults aged 18 and over. It is not directed at minors, and we do not knowingly collect personal information from minors.

12. Security

All traffic is encrypted (HTTPS). Access credentials and sign-in codes are stored only as hashes. The service’s interface is reached only through Cloudflare and is not exposed directly to the internet. Only the operator can sign in to the server or access the database. If a data breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

13. Changes to this policy

If this policy changes in substance, we will announce it on the website and update the effective date on this page; major changes will also be sent by email. If a change involves collecting a new kind of data, or using data for a new purpose, we will ask for your consent first.

14. Contact us

For privacy questions, copies of your data or deletion requests, write to: hi@linquan.app

Operator: Linquan

Address: 121 Rickson Ave, Guelph, ON N1G 4T9, Canada

Phone: +1 510-516-6880