Privacy Policy

Last updated: September 4, 2025

At Ask Yi, we keep things simple: collect the minimum, use it only to deliver your I Ching reading, and give you clear choices. This policy explains what we (do and don't) collect, how we use it, and your rights.

Who we are

Ask Yi ("we," "us," "our") provides a coin-based I Ching reading experience on askyi.app.

What we collect (minimal by design)

Input you provide

Your question (text you type) – processed to generate your reading.

Optional context created by the app (e.g., hexagram, changing lines, and internal flags used to structure the explanation).

Automatic site data

Basic logs (IP address, user agent, timestamp, page URL) generated by our web servers for security and reliability.

Analytics events (see "Analytics & cookies" below).

What we do not collect

×

No account, password, or login.

×

No government IDs, payment details, or precise location.

Please avoid sensitive data.

Don't enter health, financial, or other sensitive personal details into the question box.

How we use your information

Generate your reading. We use only the text necessary (your question + computed hexagram details) to produce a plain-English I Ching explanation.

Improve the product. Aggregate analytics help us understand feature usage and performance (e.g., which pages are slow or confusing).

Security. Short-lived logs help us detect abuse and keep the site reliable.

We do not sell your data. We do not profile you for targeted advertising.

AI processing

To generate readable guidance, we send your question and derived hexagram details to our AI text-generation service (a third-party processor). We do not include account identifiers (there are none) and we take steps to minimize what's shared. The AI vendor processes your input to return a response to us. Their handling of data is governed by their own privacy terms; we limit what we send and retain only what we need to deliver the result.

We do not use your question for model training by us. For third-party providers, training/retention practices are subject to their policies—see their documentation for details. We aim to use settings that minimize retention where available.

Analytics & cookies

We use:

Google Analytics 4 (GA4) for page-level metrics (e.g., pageviews, device types).

Microsoft Clarity for privacy-aware session insights (e.g., clicks, scroll depth). We configure Clarity to mask text inputs; we do not send your question text to analytics.

Cookies / storage used

Essential cookies/local storage (e.g., to keep the site working, remember basic preferences).

Analytics cookies or similar identifiers (to measure usage).

You can block cookies in your browser. GA opt-out tools are available from Google. Using the site without cookies may affect some features but the reading itself still works.

Legal bases (EEA/UK)

Where GDPR applies, we process:

To provide the service (performance of a contract) – generating your reading.

Our legitimate interests – basic security, fraud prevention, and product analytics with minimal data.

Where required, we'll seek consent for non-essential cookies/analytics.

Data sharing (limited)

We share data only with:

Hosting and infrastructure providers that keep the site running (e.g., servers, CDNs).

Analytics vendors (GA4, Microsoft Clarity).

AI processing vendor (to generate your reading).

All act as processors on our behalf and only for the purposes described above. We do not sell data to third parties.

Retention

Question text & hexagram data: kept only as long as needed to generate and return your reading (short-lived, not persisted to user accounts).

Server logs: retained short-term for security and troubleshooting.

Analytics: retained per vendor defaults/configuration; we choose the shortest practical windows consistent with product needs.

Security

We use industry-standard technical and organizational measures (encryption in transit, access controls, least-privilege practices). No method is 100% secure, but we work to keep your data protected and scoped to the minimum necessary.

Your choices & rights

Use anonymously. No account or login is required.

Cookie/analytics controls. You can block cookies or use GA opt-out.

Access/erasure. You can request details about any data associated with you and ask us to delete it where applicable.

California (CPRA). We do not "sell" or "share" personal information as defined by CPRA. You can still contact us with any opt-out request.

EEA/UK. You may have rights to access, rectify, erase, restrict, object, or portability. You also have the right to lodge a complaint with your local data authority.

To exercise rights, email moonyaan@gmail.com. We may need limited information to confirm we're communicating with the right person.

International transfers

If data is processed outside your country, we rely on appropriate safeguards (e.g., standard contractual clauses) with our vendors.

Children

Ask Yi is not directed to children under 13. If you believe a child provided us data, contact moonyaan@gmail.com and we'll delete it.

Changes to this policy

We may update this policy as our product or regulations evolve. We'll post the new effective date above and, if changes are material, provide a reasonable notice on the site.

Contact

Questions or requests: moonyaan@gmail.com