Privacy Policy
Duanlian helps you maintain no contact after a breakup. This policy explains how information is stored on your device, when it is processed through our servers, how long it is retained, and how you can delete it.
1. Local storage and account sync
When you are not signed in, memorial stones, writing, letters, screenshots, photos, calendar entries, and other records are stored on your iPhone. These local features work offline. After you sign in, relationship identifiers, inscriptions, relationship background, and reports are encrypted and synced with your account. Birth information is synced only after you consent to chart calculation. We do not display advertising or integrate third-party analytics, advertising, or tracking tools.
The Toolkit may connect to the internet to refresh the article catalog. Public stories are disabled in the current version; older versions with that feature may fetch approved public stories. Bundled editorial articles remain available on your device for offline reading. Fetching the catalog does not upload your journals, letters, conversations, or other private records.
If you back up your iPhone with iCloud or a computer, this data may be included in the backup and is handled by Apple under its privacy policy.
2. Online features you choose to use
Account sign-in, Moon conversations and reports use online services. The following explains processing for each feature:
- Account sign-in. Use Apple or an SMS verification code for a mainland China phone number. You can explicitly link the other sign-in method from Account. Apple sign-in does not request your name or email. Phone numbers are optional and are not required for person profiles. Linking does not automatically merge two existing accounts.
- SMS verification. When you request a code, your phone number is sent to Alibaba Cloud SMS for delivery. Duanlian stores a keyed phone digest, a masked number, code digests, and hashed random device and network identifiers. It does not store plaintext phone numbers or codes, or send them to AI. Codes expire in five minutes and are single-use; rate-limit records are retained for up to 48 hours. Sign-in and third-party AI processing permission are separate.
- Third-party AI replies. Messages you send to the Moon and some context about the current relationship, such as time since the breakup and the situation selected during onboarding, pass through our server to a third-party AI service. The context categories are listed in “What the Moon remembers” at the top right of the conversation screen, and each can be disabled. Letters are excluded by default. Letter text, including sealed letters, may be sent to the AI service only if you enable letter access in those settings. When “Personal charts” is on in those settings, personal charts and reports you created in the chart tool may also be sent with the conversation. If you have agreed to use both birth details, the Moon may calculate each person’s chart and the relationship chart when needed, and those results may also be sent.
- Encrypted conversation storage. To let you continue a conversation on a new device, your messages and the Moon’s replies, together with the relationship nickname, are stored with your account using AES-GCM encryption until you clear the conversation or delete your account.
- Shared Moon memory. The three Moons share one memory for each relationship: goals you have stated explicitly (for example, wanting to get back together or wanting to move on) and suggestions the Moons have given. It is stored on our server with your account using AES-GCM encryption so that a different Moon, or a later conversation, can pick up where you left off. You can ask the Moon to forget it; it is deleted when you clear that conversation, delete the relationship, or delete your account.
- Screenshot interpretation. When you confirm a screenshot in a disappointment record, or attach and send one in a conversation, a compressed image passes through Duanlian’s server to a third-party AI service. The relay does not store the original image in its database. The interpretation is saved beside the screenshot.
- Relationship charts. With your explicit consent, both people’s birth information is used on Duanlian’s server to calculate Bazi, Zi Wei Dou Shu, Indian astrology and Western astrology charts. Calculation results, explanatory material, and the relationship experiences you enter are sent to a third-party AI service for analysis. Chart positions are calculated by software, and generated text is checked against the source chart. Birth information and reports are encrypted with your account and deleted when the relationship or account is deleted. These interpretations are traditional cultural references, not diagnoses or guarantees about the future.
- Personal reports and rehearsal. When you confirm a personal report, your own birth information is used for chart calculation on Duanlian’s server. Calculation results and your question are sent to a third-party AI service; another person’s birth information is not invented. Rehearsal sends only the scenario and personality description you confirm, plus relationship experiences you have allowed the Moon to access and selected for that request. It does not automatically send letters, journals, or images. Rehearsals describe possible scenarios and are not saved as real contact events. Personal reports, rehearsal results, and drafts are stored locally. Server-side results may be cached in encrypted form for up to 24 hours to support retries and are cleared when the account is deleted. You may export reports to PDF on your device and choose whether to save or share them.
- Membership, report purchases and usage. For in-app memberships, passes and single-report credits purchased through Apple, our server verifies Apple-signed transactions and records the billing period and feature usage to avoid duplicate deductions. Encrypted results may be cached for up to 24 hours to support retries after a network interruption. Relevant caches are cleared when you delete a relationship, clear a conversation, or delete your account. Order identifiers and usage counts are used for verification, refunds, and preventing duplicate deductions; they do not contain screenshots, birth information, or conversation text.
Our server is hosted by Alibaba Cloud in Guangzhou, China. Access logs record IP addresses and access times for troubleshooting and attack prevention, for no more than 14 days. Conversation text is not included in these logs.
Third-party recipients used for Moon conversations, image interpretation, rehearsals and reports may include Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd., OpenRouter, Inc. and Google LLC. The service used depends on the feature and service availability. These services may process the information you authorize outside China. We do not send them your account identifier or sign-in credentials. The relevant feature explains the scope of information being sent and asks for your confirmation.
Public stories in the Toolkit
Public stories are disabled in the current version. The following applies to older versions and previously submitted data. Story drafts remain on your device and are not automatically uploaded. Only the public nickname, title, text, situation, and illustration you confirm for submission are uploaded and stored on Duanlian’s server. Human reviewers approve submissions before they are made available to other readers. Submissions are not sent to AI. Public author identifiers are separate from sign-in account identifiers, and readers cannot see your account credentials. Journals, letters, conversations, and relationship records are never automatically turned into public stories.
Report reasons, report times, and blocked author identifiers are stored with your account to address inappropriate content and filter your recommendations. They are not disclosed to other users. In “My stories,” you can edit, withdraw, or delete submissions and unblock authors. Withdrawn work is no longer public; deleting it removes its text and related reports. Deleting your account also removes all submissions, reports, blocks, and local story drafts. To request deletion of a report you made about another author, contact hi@yuhexi.tech.
3. Photo library permission
In “Photos of them,” photo library permission is requested when you choose to bury or burn selected photos, so the app can delete only the photos you selected. The system asks you to confirm before deletion. Saving an image, such as a share card, requires permission to add photos. We do not read, save, or upload other content from your photo library. These photos stay on your device.
4. Notifications
All reminders are off by default. If enabled, they are scheduled locally by the operating system and do not pass through the network. Notifications do not display the relationship nickname you entered.
5. Crisis support
If a conversation includes possible self-harm, the Moon may display 12356, China’s national psychological assistance hotline. Duanlian is not a medical or psychotherapy service and does not replace professional help.
6. Deleting your data
- You can clear Moon conversations from the conversation screen. The corresponding server-side content and the Moons’ shared memory for that relationship are deleted as well.
- You can delete your account under “Me › Settings › Account.” This deletes the account, linked sign-in identities, conversations, relationship information, birth information, reports, submissions, reports of content, blocked authors, local drafts, and short-term result caches. Order identifiers and anonymous usage counts used for order verification and preventing duplicate consumption are retained separately. Deletion from a phone-authenticated session requires a fresh phone verification code. When an Apple authorization confirmation code is provided, the associated authorization is revoked.
- Deleting your account does not cancel an Apple subscription. Manage or cancel renewal in Apple’s subscription settings.
- “Me › Settings › Clear all data” deletes all app content on the phone. Deleting the app also removes its local data. Deleted data cannot be recovered.
7. Minors
Duanlian is intended for adults. If you are under 18, use it only with a guardian’s consent and support.
8. Policy changes
If the information we send, its recipients, or our storage practices change, we will update this policy first and explain the changes in the app.
9. Contact
For privacy questions or requests to delete specific information, email hi@yuhexi.tech. We will respond within 15 business days.