This Privacy Policy describes how ALGOFI PTE. LTD. ("we", "us", or "our"), the operator of the xiaoling mobile application and the website xiaoling.io (collectively, the "Service"), collects, uses, discloses, and protects your personal information.

By using xiaoling, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Who We Are

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, nickname, xiaoling name, and account preferences when you register or sign in by email.
• Conversational Content: Messages you send to xiaoling and conversation history stored for your account.
• Reflective Inputs: Birth date, birth time, birth city, gender, generated chart data, wishes, blessing reflections, and other details you voluntarily provide.
• Support Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Essential Technical Data: Our authentication, hosting, email-delivery, and security providers may process IP address, request time, and limited device or network metadata required to deliver and protect the Service.
• Local App Data: The App stores consent versions, cached content, and pending synchronization data on your device so the Service can work reliably.

We do not currently use third-party advertising or behavioral analytics SDKs, and the App does not request precise GPS location.

3. How We Use Your Information

• To provide and personalize the xiaoling experience, including AI-generated reflections.
• To authenticate accounts, send one-time verification codes, synchronize your content, and provide customer support.
• To send selected inputs to DeepSeek only after you give the separate in-app AI data consent.
• To send service-related communications (account verification, security alerts, important policy updates).
• To detect, prevent, and address fraud, abuse, security issues, or violations of our Terms.
• To comply with legal obligations.

4. AI-Generated Content Disclosure

With your separate consent, xiaoling sends the information needed for a requested AI feature to DeepSeek. For chart readings, this may include birth details, chart data, gender, and a structured analysis summary. For chat, this includes the message you send and relevant account context. You may decline or later withdraw this consent in the App; doing so stops new transmissions to DeepSeek but does not by itself delete information already stored in your xiaoling account.

All AI-generated content is for entertainment and self-reflection purposes only. It does not constitute medical, psychological, financial, or legal advice. AI outputs may be inaccurate, incomplete, or inappropriate.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Supabase: Account authentication, database, server functions, and related infrastructure.
• Resend: Delivery of account verification and security emails.
• DeepSeek: AI chart readings and conversational responses, only after the in-app AI data consent.
• Cloudflare: Delivery and security of the xiaoling.io website.
• Legal Compliance: When required by law, subpoena, court order, or governmental request; or to protect rights, safety, and security.
• Business Transfers: In connection with a merger, acquisition, or transfer of all or part of our business assets, with notice to affected users.
• With Your Consent: Any other sharing with your explicit consent.

6. International Data Transfers

Your information may be processed outside your country or region, including in Singapore and locations where Supabase, Resend, DeepSeek, and Cloudflare operate. Those locations may have different data-protection laws. We use service-provider terms and other safeguards required by applicable law.

7. Data Retention

• Account information and user-linked content are retained while your account is active, unless you delete particular content sooner.
• When you use the in-app “Delete Account” action, we delete the active account and user-linked production data. Limited copies may remain temporarily in protected backups or security logs and are not used for ordinary product operation.
• De-identified chart-reading cache entries that are no longer linked to your account may be retained and reused to avoid duplicate AI generation.
• On-device caches may remain until the App clears them during sign-out/account deletion or you remove the App.
• Legal compliance records: retained as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal information.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Portability: Receive your data in a structured, commonly used format.
• Restriction / Objection: Limit how we process your information.
• Withdraw Consent: Where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

xiaoling is not intended for users under the age of 17. We do not knowingly collect personal information from individuals under 17. If we become aware that we have collected such information, we will delete it promptly. If you believe a minor has provided us with personal information, please contact [email protected].

10. Crisis & Mental Health Notice

xiaoling is not a substitute for professional mental health support. If you are experiencing a crisis, please contact qualified professionals or local emergency services. Certain crisis-related messages receive a preset safety response directing the user to professional or emergency resources instead of ordinary AI generation.

11. Security

We employ administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest. However, no system is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Policy from time to time. Where required, we will provide notice in the App, by email, or through the Service. The "Effective Date" at the top indicates the most recent revision.

13. Contact

For any questions, requests, or concerns regarding this Privacy Policy, please contact:

← Back to xiaoling