Privacy Policy

Meowkey
Last updated: October 6, 2026

This Privacy Notice for Meowkey ("we," "us," or "our") describes how and why we access, collect, store, use, and share ("process") your personal information when you use our mobile application Meowkey and any website that links to this Privacy Notice (together, the "Services"). If you do not agree with our policies and practices, please do not use the Services.

Entertainment-only notice. The charts, fortune readings, and interpretations provided by this app are for entertainment and cultural reference only, and do not constitute medical, legal, financial, or psychological advice. Users are responsible for their own decisions.
How this policy applies across our Services.
  • Both iOS and web: account credentials (email or SSO identifier), transactional email (verification, password reset), your profile and the charts stored with your account, and product analytics so we can understand which features people use.
  • Web application: product analytics through Mixpanel and Vercel Web Analytics.
  • iOS app: product analytics through PostHog.
  • We do not include third-party advertising SDKs on any surface, and we do not sell your personal information.

Summary of key points

Table of contents

  1. What information do we collect?
  2. How do we process your information?
  3. When and with whom do we share your personal information?
  4. How do we handle your social logins?
  5. How long do we keep your information?
  6. How do we keep your information safe?
  7. What are your privacy rights?
  8. Controls for Do-Not-Track features
  9. Do we make updates to this notice?
  10. How can you contact us?
  11. How can you review, update, or delete your data?

1. What information do we collect?

In short: we collect information you give us when you create an account and use the app.

Information sent to our servers (both iOS and web)

The iOS app also keeps a cache of your profile and charts on the device. Deleting the app removes only that cache.

Sensitive information

We do not process sensitive information as defined by GDPR Art. 9, CCPA, or comparable laws.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

In short: to provide and improve the Services, communicate with you, and comply with law. We do not use your data for advertising.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

3. When and with whom do we share your personal information?

In short: only with the processors who run the service for us.

Processors / subprocessors

Third-party services for geocoding and timezone lookup

To turn the city name you type into coordinates, and the coordinates into an IANA timezone, the app calls a small number of public geocoding services directly from your device. We do not proxy these requests through our own servers and we do not store the queries.

These services may log standard request metadata (IP address, user-agent string, timestamp) under their own privacy policies. We do not receive or store that metadata.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and update this notice if your data becomes subject to a different privacy policy.

Legal requests

We may disclose your information when required by law, valid legal process, or to protect the rights, property, or safety of users or the public.

We do not sell your personal information, do not share it for cross-context behavioural advertising, and do not include any advertising SDK on any surface. Product analytics is described above: Mixpanel and Vercel Web Analytics on the web, PostHog on iOS.

4. How do we handle your social logins?

In short: if you sign in with Apple or Google, we receive the identity payload they return. For Apple, we also store a refresh token so the authorization can be revoked when you delete your account.

Sign in with Apple

When you sign in with Apple, Apple returns a stable user identifier and an email address. If you choose Hide My Email, the email is a private relay address — we receive only that relay, and any email from us is delivered to your real address through Apple's relay. We respect your choice and will not attempt to obtain your underlying address.

On iOS we also receive a one-time authorization code. We exchange it with Apple for a refresh token and store that token on our servers, tied to your account. When you delete the account, we send the token to Apple to revoke Sign in with Apple, then delete our copy. We do not use the token for anything else.

Sign in with Google

When you sign in with Google, we receive your name, email address, profile picture URL, and Google account identifier. Our use of this data follows the Google API Services User Data Policy and the Limited Use requirements.

We do not access your contacts, calendar, files, or any other Apple or Google account data beyond what is necessary to identify you. We do not post to your social accounts.

5. How long do we keep your information?

In short: only as long as needed for the purposes in this notice.

6. How do we keep your information safe?

In short: reasonable technical and organisational measures, but no system is 100% secure.

Despite our safeguards, no electronic transmission or storage is fully secure. You should keep your device and account credentials safe and contact us immediately if you suspect unauthorised access.

7. What are your privacy rights?

In short: you can review, change, or terminate your account at any time.

Account control

EU / EEA / UK users (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights of access, rectification, erasure, restriction, portability, and objection. Our processing relies on contract (Art. 6(1)(b)) for delivering the service and on legitimate interests (Art. 6(1)(f)) for security and fraud prevention. International transfers from the EU/UK to Supabase in the United States are protected by Supabase's Standard Contractual Clauses. You have the right to lodge a complaint with your local supervisory authority.

California users (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell or share personal information.

8. Controls for Do-Not-Track features

Most browsers and some mobile operating systems include a "Do-Not-Track" (DNT) feature. No uniform standard for honouring DNT signals has been finalised; we therefore do not currently respond to DNT signals. We do not use advertising SDKs. Product analytics is described in §3.

9. Do we make updates to this notice?

We may update this notice from time to time. The updated version is indicated by a new "Last updated" date at the top of this page. Material changes will be announced in the app and, where required, by email.

10. How can you contact us?

If you have questions or comments about this notice, contact us at contact@meowkey.io.

11. How can you review, update, or delete the data we collect from you?

Different rights map to different paths:

Adapted from a template generated by Termly's Privacy Policy Generator and customised for Meowkey's actual data practices.

本《隐私政策》适用于 Meowkey · 妙计(下称"我们"),说明我们在您使用本移动应用及任何链接至本政策的网站(合称"服务")时如何访问、收集、存储、使用与共享(合称"处理")您的个人信息。如您不同意本政策,请勿使用本服务。

娱乐参考声明。本应用所提供的星盘、运势及解读仅供娱乐与文化参考,不构成医疗、法律、财务或心理咨询建议。请用户自行判断并对相关决策负责。
本政策在不同平台的适用范围。
  • iOS 与 Web 均适用:账户凭据(邮箱或 SSO 标识)、事务性邮件(验证、密码重置)、与账户一并存储的资料与命盘,以及用于了解功能使用情况的产品分析。
  • Web 应用:产品分析使用 Mixpanel 与 Vercel Web Analytics。
  • iOS 应用:产品分析使用 PostHog。
  • 我们不在任何平台使用第三方广告 SDK,也不出售您的个人信息。

要点摘要

目录

  1. 我们收集哪些信息?
  2. 我们如何处理您的信息?
  3. 何时以及与谁共享个人信息?
  4. 如何处理社交登录?
  5. 保留信息的时间?
  6. 如何保护您的信息?
  7. 您的隐私权利?
  8. 关于 Do-Not-Track 的说明
  9. 本政策的更新
  10. 如何联系我们?
  11. 如何查阅、更正或删除您的数据?

1. 我们收集哪些信息?

简言之:我们收集您在注册和使用应用时主动提供的信息。

传输至我们服务器的信息(iOS 与 Web 均适用)

iOS 应用还会在设备上保留资料与命盘的一份缓存。卸载应用只删除这份缓存。

敏感信息

我们不处理任何在 GDPR 第 9 条、CCPA 或同类法律下被定义为"敏感"的信息。

Google API

我们对 Google API 接收到的信息的使用遵循 Google API Services User Data Policy,包括其 Limited Use 要求。

2. 我们如何处理您的信息?

简言之:用于提供并改进服务、与您沟通,并履行法律义务。我们不将您的数据用于广告。

我们不会做出对您产生法律或类似重大影响的自动化决策或画像。

3. 何时以及与谁共享个人信息?

简言之:仅与为我们运营服务的处理方共享。

处理方 / 子处理方

用于地理编码与时区查询的第三方服务

为将您输入的城市名转换为坐标,并将坐标解析为 IANA 时区,应用会从您的设备直接调用若干公共地理编码服务。这些请求不经我们的服务器中转,我们也不会保存查询内容。

上述服务可能依据其自身的隐私政策记录标准的请求元数据(IP 地址、user-agent 字符串、时间戳)。我们不会接收或存储该等元数据。

业务变更

如我们涉及合并、收购或资产出售,您的信息可能作为相关交易的一部分被转让。我们将通知您,并在您的数据适用不同隐私政策时更新本政策。

法律请求

当法律、合法的法律程序要求,或为了保护用户或公众的权利、财产或安全时,我们可能披露您的信息。

我们不会出售您的个人信息,不会用于跨上下文的行为广告,且任何平台均不集成广告 SDK。产品分析如上所述:Web 端为 Mixpanel 与 Vercel Web Analytics,iOS 端为 PostHog。

4. 如何处理社交登录?

简言之:如您选择 Apple 或 Google 登录,我们接收其返回的身份信息。对于 Apple,我们还会保存一枚刷新令牌,以便在您删除账户时撤销该授权。

Sign in with Apple

使用 Apple 登录时,Apple 会返回稳定的用户标识以及邮箱地址。若您选择 Hide My Email(隐藏邮箱),返回的将是私密中继地址 — 我们仅收到该中继地址,所有邮件通过 Apple 中继转发至您的真实邮箱。我们尊重您的选择,不会尝试获取您的真实地址。

在 iOS 上,我们还会收到一次性授权码。我们用它向 Apple 换取刷新令牌,并将该令牌保存在服务器上、与您的账户关联。当您删除账户时,我们将令牌发回 Apple 以撤销 Sign in with Apple,然后删除我们保存的副本。该令牌不作其他用途。

Sign in with Google

使用 Google 登录时,我们将接收您的姓名、邮箱、头像 URL 以及 Google 账户标识。我们对该数据的使用遵循 Google API Services User Data Policy 与其 Limited Use 要求。

除识别您身份所必需的范围外,我们不会访问您的通讯录、日历、文件或 Apple/Google 账户中的其他数据,也不会向您的社交账户发布内容。

5. 保留信息的时间?

简言之:仅在本政策所列目的所需期间内保留。

6. 如何保护您的信息?

简言之:我们采取合理的技术与管理措施,但任何系统都无法做到 100% 安全。

尽管如此,互联网上的任何传输或存储都不能保证绝对安全。请妥善保管您的设备与账户凭据,如发现可疑访问,请立即与我们联系。

7. 您的隐私权利?

简言之:您可以随时查阅、修改或终止您的账户。

账户控制

欧盟 / 欧洲经济区 / 英国用户(GDPR)

如您身处欧洲经济区或英国,您享有访问、更正、删除、限制处理、可携带与反对处理等权利。我们处理您的数据时所依据的法律基础包括:为履行合同(GDPR 第 6(1)(b) 条)以提供服务、以及为保障服务安全与反欺诈的合法利益(第 6(1)(f) 条)。从欧盟/英国向 Supabase 位于美国的服务器进行的跨境传输,由 Supabase 提供的标准合同条款(SCC)作为合法依据。您有权向您所在地的监管机构投诉。

加州用户(CCPA / CPRA)

加州居民享有知晓所收集信息、请求删除、更正不准确信息以及就出售或共享个人信息选择退出的权利。我们不出售也不为跨上下文行为广告而共享个人信息。

8. 关于 Do-Not-Track 的说明

多数浏览器与部分操作系统提供 "Do-Not-Track"(DNT)功能。目前关于响应 DNT 的统一标准尚未确立,因此我们暂不响应 DNT 信号。我们不使用广告 SDK。产品分析见 §3。

9. 本政策的更新

我们可能不时更新本政策。更新后的版本将通过页面顶部的"最近更新"日期标识。重大变更会通过应用内通知,必要时通过邮件告知。

10. 如何联系我们?

就本政策有任何问题或意见,请联系:contact@meowkey.io。

11. 如何查阅、更正或删除您的数据?

不同权利对应不同的实现路径:

本文档结构改编自 Termly 隐私政策生成器,并根据 Meowkey 的实际数据实践进行了定制。