Dewen attaches importance to the protection of your personal information and privacy. This Policy explains how we collect, use, store, share, and protect your personal information, and how you may exercise your relevant rights.
We will not forcibly collect your personal information in a bundled manner merely because you agree to this Policy. Only when you use the relevant functions, or when it is necessary in order to fulfill the requirements of laws and regulations or to safeguard account and service security, will we process the relevant information within the necessary scope.
If you do not agree to this Policy, you may be unable to use the relevant functions that require processing personal information, but this does not affect your use of other functions that can be provided without such information.
This Policy is provided by 四川得闻至道文化科技有限公司 (English name for reference only: Sichuan Dewen Zhidao Culture Technology Co., Ltd.; the Chinese name is the authoritative legal entity name).
1. How We Collect and Use Personal Information
| Scenario | Information that may be processed | Purpose of use |
|---|---|---|
| Registration, login, and account management | Mobile number, verification code, third-party authorization identifier, account ID, login status | Creating an account, login verification, account security, account recovery |
| Profiles of yourself and related persons | Nickname or form of address, avatar, gender, birth date, time of birth, relationship notes, and other information you proactively provide | Providing divination assistance, report generation, Q&A assistance, and profile management |
| AI conversation and content generation | The text, voice, images, files, questions, context, and feedback you input, as well as the generated results | Understanding your requests, generating replies, reports, or other content, and saving service records |
| Image processing | The images you proactively submit, the request content, the required image features and analysis results, and the necessary person-association information | Uploading, displaying, or analyzing images for the disclosed purposes, and completing result viewing and necessary security review |
| Authorization management | The necessary authorizing subject, information subject, authorization purpose, consent and withdrawal records, and verification information | Managing authorization from others and from guardians, and handling rights requests and related disputes |
| Report viewing, downloading, and sharing | Report content, sharing status, share link, access records, de-identified display information | Displaying, downloading, exporting, and sharing reports, and safeguarding sharing security |
| Paid services | Order number, product or benefit information, benefit source and validity period, top-up/redemption and deduction records, payment amount, payment status, refund status, subscription records, invoice or after-sales information | Completing transactions, issuing and accounting for benefits, managing subscriptions, handling refunds, after-sales, and reconciliation |
| Invitations and campaigns | Invitation code, campaign participation records, reward records, attribution relationships | Calculating campaign rewards, identifying abnormal participation, and handling campaign disputes |
| Install-source identification | Device platform, screen size and pixel density, time zone, language/region; and the Dewen install token in the clipboard (with the corresponding consent, the clipboard text for that one time is read to look for the install token; unrelated content is not saved, not uploaded, and not used for any other purpose) | Identifying which share or promotion link you installed Dewen from, used for install-source statistics; device-feature comparison records are retained for 72 hours, and the install token is retained according to its validity period; not used for billing, not used for referral commissions, and not used for user profiling |
| Ad attribution (iOS app only) | When you tap a Xiaohongshu ad, the click information Xiaohongshu provides: click ID; ad account, campaign, unit and creative IDs; placement; click time; device identifier digests (IDFA digest, CAID digest); a digest of the IP address; device model and OS version. When you register for Dewen: device model, OS version, a digest of the IP address, and, if you allow tracking in the system prompt, a digest of the advertising identifier (IDFA). IP addresses are stored only as irreversible digests, never in plain text | To determine whether you downloaded and registered for Dewen through a Xiaohongshu ad, and to send a "registration" event back to Xiaohongshu to measure ad performance |
| Application updates | Device platform, running app version, update channel, and necessary network request information | Checking the applicable version and providing update content |
| Customer service and feedback | The questions you submit, contact information, communication records, and the necessary account and order information | Handling inquiries, complaints and reports, personal information rights requests, and after-sales issues |
| Security and risk control | Device information, network information, log information, IP address, abnormal-behavior records | Safeguarding account security and service stability, and preventing cheating, attacks, fraud, and unlawful or non-compliant behavior |
2. Sensitive Personal Information
In some functions of Dewen, you may proactively provide your birth date, time of birth, or information related to others, or input relatively private content in conversations. Once such information is leaked or improperly used, it may affect the personal dignity, property security, or other rights and interests of you or others.
We will process sensitive personal information only on the premise of having a specific purpose, full necessity, and strict protective measures, and will explain in advance the scope of processing, its necessity, and its impact on individual rights and interests. Where separate consent is required by law, we will separately obtain your consent in the specific scenario.
Photos do not inherently constitute biometric information, but the sensitive content therein and the biometric information produced through processing shall be protected as sensitive personal information. Leakage or misuse of photos or private content may affect privacy, portrait, personal dignity, or personal and property safety. General profile authorization does not automatically cover newly added photos and their analysis purposes, and information needed for a service you have not used is not collected in advance.
All personal information of a child under 14 years of age is sensitive personal information; its processing requires the consent of the corresponding guardian and is subject to the Children's Personal Information Protection Rules (《儿童个人信息保护规则》; reference translation of the Chinese title). Submitting another person's images or information requires lawful authorization for the specific purpose; a relationship as relatives or friends, an employment relationship, or the uploader's own declaration cannot substitute for valid authorization.
3. Permission Invocation
Dewen may request necessary permissions when you use the relevant functions, for example, photo album, camera, microphone, file access, clipboard, or message notifications. We will not enable these permissions by default, nor will we invoke them when the function does not require them.
Among these, the clipboard is read only once, when you first open the Dewen App after agreeing to this Policy, and only to identify whether it contains a Dewen install token; on iOS, the system will prompt you about this, and you may refuse. Refusal does not affect your use of other functions of Dewen.
You may refuse or disable the relevant permissions. After disabling, you may be unable to use the corresponding function, but this does not affect the normal use of other functions. System permissions do not substitute for consent to personal information processing; allowing camera or photo-album permission does not amount to consenting to all image analysis, model training, or public-disclosure purposes, and disabling a permission does not automatically delete information that has already been uploaded.
Message Push SDK in the Native App
The native App integrates Aurora Mobile (JIGUANG) JPush/JCore, used for device push registration, notification delivery, and click handling. The SDK may process device, application, network, push-registration identifier, and crash information; we start the push SDK only after you agree to the Privacy Policy, and we do not pass private conversations, report body text, login tokens, or mobile numbers to the Aurora Mobile push SDK.
Consent to the Privacy Policy and system notification permission are handled separately. Whether to allow system notifications is chosen by you in the system permission prompt or system settings; refusing notifications does not affect login and conversation. The data-processing description of the push SDK can be viewed at: https://www.jiguang.cn/license/privacy.
App Tracking Transparency (iOS)
After you agree to this Policy, iOS will ask whether you allow Dewen to track. If you allow it, we read the advertising identifier (IDFA) and upload only its digest, for ad attribution; declining does not affect your use of Dewen. You can change this at any time in Settings > Privacy & Security > Tracking.
4. Model Training and Experience Optimization
Completing the reply, analysis, or report you request is a different purpose from separately using personal information for model training or model performance optimization. For the latter purpose, we explain the purpose, method, and scope in this Policy; by registering and accepting this Policy, you consent to Dewen's use of your conversations, images, reports, personal information, or related-person information for that purpose. This processing is enabled by default, and you may turn it off in the settings at any time.
Children's information, images, analysis information, reports, and conversations involving children are not used for model training or model performance optimization. Authorization from an adult account does not cover children's information, nor does it cover others' independent rights.
You may refuse authorization; for authorization already given, you may withdraw it via the means provided by the product or through support@dewen.com, without affecting services that do not rely on such authorization. After withdrawal, we stop subsequent processing based on that consent and delete or anonymize the relevant personal information in accordance with law; this does not affect processing already carried out based on valid authorization prior to the withdrawal.
We may use anonymized data that cannot identify a specific individual and cannot be restored, for product statistics, quality evaluation, security risk control, and service improvement. Merely deleting names, switching to numbering, or aggregating does not inherently constitute anonymization; information that can still identify an individual continues to be protected under this Policy.
5. How We Share, Entrust the Processing of, and Publicly Disclose Personal Information
We do not sell your personal information.
In order to realize the Dewen service, we may provide necessary information to entrusted service providers for processing, including service providers for login authentication, message delivery, cloud storage, content security, model capabilities, statistical analysis, customer service, and transaction technical support. We will agree with them on the purpose, duration, method, scope of information, and security responsibilities of the processing, and will supervise them; they may not use it for other purposes or train on it themselves without authorization. Content such as images and conversations that requires server-side processing may be transmitted to the corresponding servers or entrusted parties, and is not stored only on your device.
Where we need to provide your personal information to an independent personal-information processor, we will, in accordance with law, state the recipient's name, contact information, processing purpose, method, and types of information, and obtain the separate consent required by law. Accepting this Policy does not constitute a blanket authorization to provide information to any third party whatsoever.
After you select the corresponding payment method, we interact with that channel regarding the following necessary transaction information to complete payment, subscription, refund, and verification; being listed in this table does not mean that information is provided to all channels:
| Payment channel and service provider | Purpose, method, and scope of information | Contact information and processing rules |
|---|---|---|
| WeChat Pay: Tenpay Payment Technology Co., Ltd. (财付通支付科技有限公司) | Initiating transactions and receiving results through the payment interface; processing the order number, product description, amount and currency, transaction identifier, payment and refund status, as well as the user identifier and network IP address required for the corresponding scenario, used for payment settlement, verification, and after-sales | 0755-86013860; Tenpay_dataprivacy@tencent.com; Tenpay Privacy Policy |
| Apple In-App Purchase: the App Store service provider for the Chinese mainland is Apple Distribution International Ltd. | Initiating a purchase or subscription through the App Store; receiving and verifying the product identifier, transaction receipt and identifier, amount and currency, purchase and expiration time, and payment/refund and subscription status, used to provide benefits and handle after-sales | Apple Privacy Contact; App Store & Privacy; Apple Privacy Policy |
The channels independently bear responsibility, under their own rules, for their own processing of payment accounts, identity verification, transaction security, and the like, which does not exempt Dewen from the liability it should bear in accordance with law. The correspondence between the Apple service entity and the region to which the account belongs is set out in the Apple Media Services Terms and Conditions.
Public disclosure of personal information requires separate consent in accordance with law; a child's information requires the consent of the corresponding guardian, and profile-creation or analysis authorization does not substitute for public-disclosure authorization.
Under the following circumstances, we may disclose necessary information in accordance with law: complying with laws and regulations or with the requirements of judicial or administrative authorities; protecting the personal and property safety of users, Dewen, or the public; and handling violations of laws and regulations, fraud, attacks, infringement, or disputes.
Ad Attribution
When you download and register for Dewen through a Xiaohongshu ad, we provide Xiaohongshu (Xingyin Information Technology (Shanghai) Co., Ltd.) with the ad click ID, the registration event and its time, and, if you allow tracking, a digest of your IDFA. Xiaohongshu uses this information to measure ad conversions. We do not provide your phone number, conversations or profile information.
6. Information Retention
We will retain your personal information for the shortest period necessary to achieve the purposes described in this Policy. Where laws and regulations have requirements on the retention period, we will act in accordance with the laws and regulations. Retention periods are determined by the following methods:
- Profiles, conversations, reports, and images and analysis information retained as service records are limited to the period needed to provide the information management, result viewing, and related services you have chosen; when you make a valid deletion request, withdraw the corresponding consent, or deregister your account, the corresponding retention ends in accordance with law.
- Temporary uploads are retained only for the period needed to complete the upload, submission, and necessary retries, and are deleted when canceled, when failed and no longer retried, or when the temporary copy no longer has any purpose, and are not retained as long-term service records.
- Transaction, authorization, and security records are limited to the period needed to handle the corresponding transaction, after-sales, and disputes, and to perform statutory retention obligations, and are deleted or anonymized when the corresponding basis no longer exists, and this does not thereby extend the retention time of unrelated images or content.
- Ad click records are kept for 30 days, and attribution and postback records for 90 days, after which they are deleted.
When the processing purpose has been achieved, cannot be achieved, or is no longer necessary, when the period expires, when consent is withdrawn, or when other circumstances requiring deletion in accordance with law arise, we will delete the relevant information in accordance with law and require entrusted parties to implement the same. Merely ceasing to display does not equate to completing deletion. Where the statutory retention period has not expired or deletion is technically difficult, we will only store the information and apply necessary security protection, and delete it in accordance with law once conditions permit.
Children's personal information is stored within the territory of the People's Republic of China. Cross-border service channels such as Apple may, according to their own privacy rules, process outside the territory the information needed for the service; selecting a payment channel does not amount to consenting to provide unrelated photos, conversations, or children's information. Where we genuinely need to provide personal information outside the territory, we will perform the applicable statutory procedures, inform you of the overseas recipient, the matters of processing, and the means of exercising rights, and obtain the separate consent required by law.
7. Your Rights
You enjoy the following rights in accordance with law:
- Access and copy your personal information;
- Correct and supplement inaccurate or incomplete information;
- Delete relevant personal information;
- Withdraw authorization or consent already given;
- Deregister your account;
- Consult, complain, or report regarding the personal information processing rules;
- Other rights provided by laws and regulations.
You may submit a request through support@dewen.com. We will process it within a reasonable period after verifying your identity.
Please understand that after you delete information, withdraw authorization, or deregister your account, some functions may no longer be usable.
8. Security Protection
We will adopt security measures commensurate with the service to protect your personal information, including access control, encrypted transmission, permission management, log auditing, security monitoring, and internal management systems.
However, the internet environment is not absolutely secure. In the event of a personal information security incident, we will, as required by laws and regulations, inform you of the circumstances of the incident, its possible impact, the measures we have taken or will take, and the preventive suggestions you may adopt, and will report to the regulatory authorities.
9. Policy Updates
We may update this Policy based on laws and regulations, regulatory requirements, product changes, or operational needs.
If this Policy undergoes material changes, we will notify you through page prompts, pop-ups, in-app notifications, or other reasonable means. Where re-obtaining consent is required by law, we will separately obtain your consent.
10. Contact Us
If you have questions about this Policy, personal information processing, account deregistration, complaints and reports, or after-sales issues, you may contact us at support@dewen.com.