Privacy Policy

Effective Date: June 27, 2026　|　Last Updated: October 28, 2026

立波人工智能文化科技有限公司 (Libo Artificial Intelligence Limited) ("we", "us") understands the importance of personal information and is committed to protecting it. We follow principles including consistency of rights and responsibilities, clear purpose, consent, data minimization, security, individual participation, and transparency.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use "Kanglibo Guoxue" (the "App"), and the rights you have.

Please carefully read and understand this entire Policy before using the App, especially bolded clauses. Birth information related to chart casting, precise location, and destiny archives derived therefrom may constitute sensitive personal information. In key scenarios—first launch, registration/login, first processing of sensitive personal information, first use of AI Q&A / Xuantian Reports, enabling system permissions, or using data for model training—we will obtain your explicit or separate consent via pop-up, checkbox, or on-page confirmation. If you disagree with a particular processing, you cannot use the corresponding feature, but other features that do not require that information remain available.

1. How We Collect and Use Personal Information

We collect and use personal information only for the purposes stated in this Policy.

1. Account Registration and Login

When you register or log in, we collect your mobile number or email and verify identity via SMS/email code or password, to create the account, secure it, and provide services.

You may also choose to sign in with a third-party account such as Google, Apple, or WeChat. In that case we receive from that provider your unique user identifier, email address, and basic profile such as display name and avatar, used solely to create your account, link it to an existing account, and authenticate you. We do not request access to your mail, cloud files, contacts, or any other data held by that provider, and we do not use this information for advertising. If the email returned by the provider has been verified by that provider and matches an existing account, we link both to the same account so your membership benefits and destiny archives are not split across accounts; if the email is unverified, we create a separate account instead.

2. Chart Casting (including sensitive personal information)

When you use Four Pillars, Qimen Dunjia, Purple Star Astrology, Da Liu Ren, or similar features, we collect date of birth, time of birth, gender, birthplace / latitude-longitude that you enter, to calculate charts, generate destiny charts, and save archives.

Notice: The above birth information, birthplace / coordinates, and destiny information derived therefrom may be treated as sensitive personal information that can identify personal characteristics. We process it only within the scope necessary for chart casting, archive storage, and AI interpretation after you actively enter or authorize it. If you do not provide or withdraw authorization, related chart, geocoding, or interpretation features will be unavailable, without affecting other App features.

2A. Archive Screenshot Recognition and Import

When you actively use Archive Import, screenshots you select are transmitted temporarily to an AI model service to extract visible fields such as names, birth details, Four Pillars, gender, and place. Screenshots may contain sensitive personal information; original images are used only for the immediate recognition request and are not retained long-term. We retain only an image hash needed to prevent duplicate quota charging, structured recognition results, and processing status. Selected data is written to your archive only after you review and confirm each record.

3. AI Q&A and Xuantian Deep Reports

When you use AI Q&A or Xuantian Deep Reports, we collect your questions, selected chart context, and dialogue history, and transmit them to AI large-model services that provide compute for the App, to generate interpretations and maintain continuity. You may also add notes to saved charts; notes may be provided to the model as part of chart context for more tailored interpretations.

4. Membership and Payment Information

When you purchase membership or recharge points, we collect order information, transaction status, and points records. Actual payment is handled by third-party payment providers; we do not collect or store your full bank card number, payment password, or similar payment-sensitive data.

5. Device, Logs, and System Permissions

To keep the Service running, secure, and improved, we may collect device model, OS, app version, language settings, IP address, crash and runtime logs.

On mobile clients, the App may request the following permissions. We will explain the purpose via system dialog or in-app notice before use; you may refuse or disable them in system settings, which only affects the related feature.

6. Settings Sync

To support cross-device use, we associate your language settings, chart preferences, and similar app settings with your account and sync them to the cloud.

7. Model and Agent Training, Evaluation, and Improvement

To improve interpretation quality and agent capability, with your separate consent we may use interaction data (questions, AI dialogues, feedback, report ratings, etc.) for training, evaluation, tuning, and improvement. Before such use, we anonymize, de-identify, or desensitize identifiable personal information (e.g., remove or replace name, phone, email, precise birth data, detailed address) and apply access control and sample screening to reduce re-identification risk. Refusing or withdrawing this consent does not affect basic features or purchased benefits.

8. Usage Statistics

To understand how people use the App and where they run into difficulty, so that we can improve its features and experience, we record how you use the App:

• which pages and pop-ups you open, where you opened them from, how long you stay, and how far down a page you scroll;
• which buttons and entry points you tap, and where on the screen. For buttons we record only the App's own wording, not your personal content shown on the page such as names, birth details or account details; apart from the questions you ask the AI, we do not record what you type into input fields;
• the full text of the questions you ask the AI and your ratings of the answers, as well as the time and outcome of actions such as running out of quota, placing an order, paying, getting a refund, starting a membership, registering, signing in and signing out;
• device model, operating system, browser, app version, screen size, language settings, whether the App was opened inside WeChat, whether you were a member at the time, and the country or region inferred from your IP address (the IP address itself is not kept in the statistics);
• how you arrived at the App, such as the website that referred you, the source tags in a promotional link, or an invitation link.

These records are linked together by a random device identifier and a session identifier on your device; once you sign in, the records from the same device (including those from before you signed in) are associated with your account.

This data is kept on our own servers, is not provided to third parties and is not used for advertising. The text of your questions is kept for 12 months and other records for 13 months, after which they are deleted automatically; after that, all we keep are daily totals, such as how many times each page was viewed and each button was tapped, which contain no personal information. Only authorized staff can view the statistics; the text of questions and an individual user's activity records can be viewed only by designated administrators, and every viewing is logged. When you delete your account, these records associated with it are deleted as well.

If your IP address indicates that you are in the European Economic Area, the United Kingdom or Switzerland, we do not collect the statistics described above.

We do not collect personal information unrelated to the Service, nor use it for purposes not stated here. For other uses, we will seek consent again.

2. Cookies and Similar Technologies

1. Local storage used by the app itself

To keep you signed in, remember your preferences, diagnose faults and compile usage statistics, we store the following information locally on your device (browser localStorage / sessionStorage, or the client app's data): sign-in credentials (including the device session token and its expiry), interface language and app preferences, a random device identifier (used to group crash and error reports, and for the usage statistics described in section 8 of Part 1 of this Policy), a session identifier for the statistics, the source of your first visit, the statistics settings and statistics records not yet sent, and unsaved drafts or page state. This information is used only to provide the service and compile usage statistics, not for advertising or cross-site tracking. The app itself does not write cookies to your browser (apart from the Cloudflare security cookies described in section 3 below), and does not include Microsoft Clarity or any other third-party analytics or advertising scripts; we compile the usage statistics ourselves, as described in section 8 of Part 1. Visit analysis for the website libokang.com is described in section 5 below.

2. Cookies that third-party services may set

When you actively use the following features, the relevant third party may set cookies under its own domain or read local information in accordance with its own privacy policy. We cannot access or control those cookies:

• Third-party sign-in: when you choose "Sign in with Google" or "Sign in with Apple", the sign-in component of Google (accounts.google.com) or Apple runs on your device;
• Payments: when you are redirected to the checkout page of WeChat Pay, Alipay or Stripe to complete a payment;
• Opening inside WeChat: WeChat's in-app browser and Mini Programs inject their own components to provide sharing and payment features.

3. Infrastructure security cookies

This service is delivered and protected through Cloudflare. To tell real users from automated attack traffic, Cloudflare may set strictly necessary security cookies in your browser (such as those named __cf_bm and _cfuvid). These cookies contain no information that directly identifies you, are not used for advertising or profiling, and normally expire within 30 minutes or at the end of the session.

4. Your choices

You can delete the local storage and cookies described above by clearing your browser data or app data. After disabling or clearing them you will need to sign in again, and some features (such as staying signed in or remembering your language) may not work properly.

5. Website Visit Analysis

This section applies only to the website libokang.com, and not to the app or to web pages inside the app.

The website uses Microsoft Clarity, a website experience analytics service provided by Microsoft, to understand whether pages work properly and where visitors get confused, so that we can improve the browsing experience. Clarity records your clicks, scrolling and mouse movement on the website, together with device and browser information (such as device type, operating system and browser type), and uses your IP address to determine your general region.

Content typed into input boxes is masked by default and is not uploaded to Clarity, so information you enter there, such as birth details, is not collected by Clarity.

Clarity sets the following cookies in your browser. _clck and _clsk are first-party cookies set by this website: _clck keeps a pseudonymous Clarity user ID and your preferences, and _clsk links multiple page views in one visit into a single session recording. Microsoft also sets third-party cookies (such as MUID, CLID, MR, SM and ANONCHK) that help recognize the same browser across Microsoft websites. Microsoft states that cookies such as MUID are also used for advertising and operational purposes; we do not use this data for advertising.

Data is processed by Microsoft and used and protected in accordance with the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement). Session recordings are generally retained for 30 days; certain recordings that are flagged or kept as random samples may be retained for up to 9 months.

For visitors from the European Economic Area, the United Kingdom and Switzerland, Clarity requires a valid consent signal before it sets the cookies above or stores session data. Where no consent signal has been given, Clarity runs in a cookieless limited mode: it sets none of the cookies above, does not use cookies to persist session data, and assigns a unique temporary ID to each page view.

You can refuse or delete these cookies at any time. Disabling cookies for this website in your browser stops Clarity from setting cookies; you can also clear _clck, _clsk, MUID and other existing cookies, or install a browser extension that blocks third-party analytics scripts. You may also opt out of Microsoft's collection of visit data at https://optout.aboutads.info/. Clarity does not currently respond to the browser Do Not Track setting.

3. Entrusted Processing, Sharing, Transfer, and Public Disclosure

1. Entrusted Processing and Sharing

To achieve the purposes in this Policy, we may share with or entrust processing to the following types of partners, requiring confidentiality, security, and no use beyond scope:

• AI large-model providers: transmit questions and related chart context to generate AI interpretations/reports;
• Cloud computing and storage providers: servers, databases, and storage infrastructure;
• Payment providers: membership and points transactions;
• SMS / email verification providers: registration and login verification;
• App stores and client distribution platforms: download, IAP subscriptions, refund review, updates, crash analysis;
• Analytics, risk-control, and security providers: detect abnormal login, fraud, cheating, attacks, or failures; on the website libokang.com, we use Microsoft Clarity to analyze how visitors use pages (see section 5 of Part 2 of this Policy).

Detailed third-party SDK/service lists and data types may change with business needs. We provide the latest details via in-app pages, Privacy Policy appendices, SDK lists, or support. If third parties involve sensitive personal information, cross-border transfer, or changed purposes, we will fulfill notice, separate consent, and other compliance duties as required by law.

2. Transfer

We will not transfer your personal information except: (1) with your prior explicit consent; (2) in merger, acquisition, or reorganization, requiring the new holder to continue under this Policy, or obtaining your consent again.

3. Public Disclosure

We disclose personal information only with your explicit consent, or where required by laws, judicial, or administrative authorities.

4. How We Store Personal Information

1. Storage location and cross-border transfer: Personal information collected and generated in the PRC is in principle stored in China. To generate AI interpretations/reports, we may call different AI providers based on capability, stability, and configuration. If a provider is overseas, or processing may transfer your personal information overseas (including overseas models, cloud, or support), before transfer we will prominently inform you of the overseas recipient name/type, contact, purpose, method, categories, retention period, and how to exercise rights, and obtain your separate consent; we will also complete security assessment, certification, standard contract filing, or other legally required measures. Without such notice and separate consent, we will not proactively provide your personal information to overseas recipients for generation services.
2. Retention: We retain personal information only as long as needed for the purposes herein, unless law requires otherwise. After account deletion, we will delete or anonymize your personal information within a reasonable period (generally no more than 15 business days); where legal obligations require continued retention (e.g., transaction records), we will delete or anonymize after the statutory period.

5. How We Protect Personal Information

1. We use industry-standard measures, including encrypted transmission (e.g., HTTPS) and access controls for storage, to prevent unauthorized access, disclosure, use, alteration, or destruction.
2. Despite such measures, please understand that due to technical limits and malicious means, the internet is not 100% secure. If a personal-information security incident occurs, we will notify you as required by law and activate contingency plans.

6. Your Rights

Under applicable laws, you have rights to:

1. Access and correction: query and correct account info, chart archives, notes, etc. in the App;
2. Deletion: request deletion where legally permitted;
3. Withdraw consent: withdraw authorization for specific processing by disabling features/permissions or contacting us; withdrawal does not affect processing already done based on prior consent;
4. Account deletion: apply via in-app entry, or via the email in this Policy if unavailable; after deletion we delete or anonymize as required by law (unless otherwise required);
5. Copy, portability, and explanation: where legally provided, request a copy of your personal information or an explanation of processing rules;
6. Complaints: contact us if you believe our processing harms your lawful rights.

7. Children's Personal Information

1. The App is primarily for adults. If you are a minor, use the App and provide personal information only with guardian consent and guidance.
2. If you are under 14, guardians must carefully read this Policy and consent before use and information provision. We strictly protect children's personal information under applicable regulations.
3. If we find we collected children's information without prior guardian consent, we will delete it promptly.

8. Policy Updates

We may revise this Policy from time to time. For material changes we will notify you via in-app announcement, push, pop-up, or page prompt. For material changes to processing purposes, methods, categories, sharing/cross-border recipients, sensitive personal information, or training uses, we will obtain consent or separate consent again where legally required; ordinary changes take effect after a reasonable period following publication.

9. Contact Us

For questions, comments, complaints, or to exercise rights regarding this Policy or personal-information protection:

• Personal information processor (operator): 立波人工智能文化科技有限公司 (Libo Artificial Intelligence Limited)
• Email: support@libokang.com

We will verify and respond within the period required by law where applicable.

The Simplified Chinese version prevails in case of discrepancy. 简体中文