Privacy policy

1. Charts and saved information

The app calculates charts on your device. Saved names, birth details, calculated results, My chart selection, report access records, downloaded PDFs and article bookmarks are stored locally. These saved records are excluded from normal backups and are not synced by Elemii to other devices. Your language choice is stored separately as an app preference.

Ordinary chart calculation does not automatically send your saved names, birth details or results to our report service or to an AI provider. There is no customer account or cloud chart library.

2. Online articles and optional city search

Elemii requests public articles and images hosted through Cloudflare. Those requests do not contain your saved names, birth details or results. Cloudflare receives normal connection information, such as your IP address, to serve the content.

For optional true solar time, Apple handles city search and timezone lookup. Those lookups use search text and selected coordinates without your name, birth date or birth time. Elemii does not request access to your current location.

3. Visiting this website

This is a static information website. It has no account sign-in, payment form, chart submission form, advertising or analytics scripts added by Elemii. It does not set cookies or use browser storage for those purposes.

When hosted on GitHub Pages, GitHub receives connection information, including your IP address, and logs it for security purposes. See GitHub’s privacy statement. Google also receives information when you visit its linked services. Their policies govern their own processing.

4. Contacting support

If you choose to email support, we receive your email address, message and any attachments you provide. We use them to answer your question and investigate the issue. A report support draft may include only the report reference, app version and status. You review and send it yourself. The app does not automatically attach access keys, birth details, report text, charts, screenshots or logs. A reference alone does not grant access to a report.

Support messages are kept in the developer’s email account while needed to handle the request and related follow-up. A fixed deletion period for support mail has not yet been adopted. You can ask us to delete your correspondence; separate copies may remain in your own mailbox or with email providers under their policies.

5. Personal PDF reports

Elemii offers an on-device calculator and optional personal PDF reports purchased through Apple’s In-App Purchase system. This website does not accept report orders or collect birth information for generation.

Before submitting a new report request for the first time, Elemii names Cloudflare and OpenAI, explains what each receives, and asks for explicit permission. Choosing Not now sends no report details and does not open checkout; the free calculator remains available. Acceptance is remembered on that device for the current disclosure version. You can withdraw permission for future requests in Settings → Privacy; reports already submitted continue processing and existing PDFs remain accessible. With permission, tapping Buy sends the selected calculation and supporting evidence, plus the name and birth details displayed on the PDF, optional birth longitude and the selected report language, to Cloudflare before Apple checkout opens to bind the order. Cloudflare coordinates generation, renders the PDF and stores it privately. OpenAI receives a derived chart brief, the selected report language and writing instructions, not the display name, email address or raw birth date/time. Derived chart information can still be personal information.

For new orders using the 24-hour unpaid-content policy, personal birth/chart details are scheduled for cleanup 24 hours after order creation if no payment has been verified. Reopening or repeating checkout does not extend that deadline. Minimal order, access and payment-binding records remain; this cleanup does not cancel an Apple payment or remove the chart on your device. After a late verified payment, the app can resend the original saved details for that same order. Paid reports waiting for processing are excluded from unpaid cleanup and follow the seven-day paid-waiting rule below. Older development orders are not automatically enrolled in this policy.

Starting with version 1.1, new reports are available in English or Simplified Chinese. The report language follows your selected app language and is shown before checkout. Each purchase provides one report in that language. Changing the app language later does not translate or replace an existing report; earlier English reports remain English. The PDF is available for 30 days from when it becomes Ready, with no extension when it is downloaded again. Once the PDF is verified and stored, active temporary input, AI response/reading text and layout-check content are removed. Minimal purchase, private access, status, error, checksum and usage/cost records remain. For new orders using the seven-day paid-waiting policy, if a verified paid order cannot start processing, its temporary birth/chart details are kept for seven days from first payment verification, then cleaned up and the order is referred to support. Reopening or resubmitting does not extend that deadline. The original purchase record remains; the customer is not asked to purchase that same report again. A job that has already started keeps the working content needed to finish and is not closed under the waiting-order rule. For new reports that stop before a PDF is ready, temporary personal content is kept for seven days from the first recorded failure, then automatically cleaned up. Reopening the report or attempting repair does not restart that period. New repairs stop at the deadline; after cleanup, support cannot rebuild the PDF from that reading. Unresolved spending reservations remain recorded. Minimal payment, reference, access, error and spending records are retained as needed to verify purchases, handle refunds and support, prevent duplicate or fraudulent use, and account for service costs. These records are separate from temporary report content. Contact us about deletion requests; retaining payment integrity and unresolved transaction records may still be necessary.

Your chart is saved before Apple’s checkout opens. Find its report in Saved → Charts → your chart → Personal PDF report. After download, the protected local PDF is used for saving and sharing, including offline. Local report records and PDFs are excluded from normal backups and are not synced to another device. A PDF saved separately to Files is independent of Elemii and remains after the online copy expires or Elemii is deleted.

Removing server working files does not immediately erase provider logs, backups or existing development exports. Provider-held copies follow their own policies. See OpenAI’s privacy policy and Cloudflare’s privacy policy.

Earlier email-delivery tests

Earlier tests used consenting recipients and approved sample reports. Gmail delivery is not the current customer delivery route. Those existing development records are separate from the new PDF-download cleanup.

For those tests, Cloudflare sent an approved recipient address, message and sample PDF to Google’s Gmail API. Google may retain copies in the sender’s Sent mailbox and the recipient’s mailbox. Recipients did not authorize Gmail access or share Google credentials with Elemii.

The developer authorized a sender Gmail account through Elemii Email Test, requesting only permission to send email, not to read inbox messages or contacts. The old email-test Worker has been retired. Any remaining local development credentials are private, not part of this website or public source files. Removing that Worker does not itself revoke the sender’s Google authorization.

Google API data is used for the requested email delivery, not advertising, sale, profiling or training general-purpose AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

6. Retention, removal and your choices

You can remove ordinary charts and article bookmarks in Saved. Charts with a pending or purchased report are protected from deletion. Deleting Elemii removes local charts, report access records and app-held PDFs, with no recovery through Elemii; it does not immediately delete Cloudflare copies or purchase records. Offloading the app may retain its data.

Private test reports, delivery receipts and authorization records are retained during development for review and troubleshooting. There is currently no automatic deletion schedule for these development records. Test participants can contact us to request removal. The sender can revoke access through Google Account connections; credentials must also be removed from our configured storage when the integration is retired.

Copies already delivered to another mailbox are controlled by that mailbox owner and its email provider. Deleting a development file does not recall a delivered email. Access to these records is limited to the developer and the providers involved in the test.

7. Future features and policy changes

We keep the app’s pre-purchase privacy information consistent with the deployed service. TestFlight and sandbox purchases are for testing; public purchases are billed by Apple.

We will update the date above when this policy changes. Contact chenle.yong16+elemii@gmail.com with privacy questions or requests.