Privacy Policy

Last Updated: 2026-07-22
Effective Date: 2026-07-22

This Privacy Policy explains how NextMove ("we", "us") collects, uses, stores, shares, and protects personal data when you use our Services via the website and iOS App. If versions conflict, the latest online version prevails.

1. Information We Collect

1.1 Account and Identity Data

• Email address, phone number (based on selected login method);
• Basic profile details from third-party sign-in providers (if applicable);
• Account security data such as login timestamps and suspicious-login indicators.

1.2 Service Input and Business Data

To provide charting/divination/calibration, Life features, and AI replies, you may provide:

• Birth date, birth time, birth place, and gender (may be sensitive personal data; processed only when you choose to provide it);
• Chat prompts, uploads, divination questions, archive content, and calibration confirmations;
• Other text or attachments you submit.

1.3 Device and Log Data

We may automatically collect:

• Device model, OS, browser or App version;
• IP address, access time, feature usage, error and risk logs;
• If you enable App notifications, a push token and reminder preferences.

1.4 Cookies and Similar Technologies

On the website we use cookies and local storage for session continuity, preferences, security, and analytics. See our Cookie Policy. The native App may use local storage for similar purposes and generally does not load web marketing scripts.

2. Purposes of Processing

We process data only as necessary to:

1. Provide, maintain, and improve the Services;
2. Authenticate users and protect account/system security;
3. Support history, record management, and user-requested features;
4. Send service notices and operational communications;
5. Comply with legal obligations and lawful regulatory requests.

3. Legal Bases and Restrictions

Where applicable, we process data based on contract performance, legitimate interests, legal obligations, or your consent.

• We do not sell personal data.
• We do not use personal data for personalized advertising profiling without consent.
• We do not use your data for unrelated AI training without your explicit authorization.

4. Sharing, Transfer, and Disclosure

We may share data only when:

1. You provide explicit consent;
2. Sharing is necessary with processors/service providers for service delivery, including cloud infrastructure; web payments (Alipay/Stripe) and Apple App Store for in-app purchases; and contracted third-party AI providers that may process your prompt and voluntarily provided personalization data to generate a reply;
3. Required by applicable laws, regulations, or lawful requests by authorities;
4. In case of merger, acquisition, or restructuring, subject to equivalent protection obligations.

We apply contractual and technical safeguards to shared data.

5. Storage, Retention, and Cross-Border Transfer

5.1 Retention

• Account data: retained while account is active;
• Service records: retained as needed for feature delivery, and removable by user where available;
• Security/operation logs: generally retained up to 90 days unless a longer period is legally required.

After account deletion, data is deleted or anonymized within a reasonable period, unless retention is required by law.

5.2 Cross-Border Data Transfers

Where cross-border transfers are necessary, we apply safeguards such as contractual protections, encryption, access controls, and where applicable, Standard Contractual Clauses (SCCs) or equivalent mechanisms.

6. Your Data Rights

Subject to applicable law, you may have rights to:

• Access;
• Rectification;
• Erasure;
• Restriction or objection to processing;
• Data portability;
• Withdrawal of consent;
• Account deletion.

You may submit requests via in-product channels or email. We aim to respond within 30 days, subject to legal extensions where applicable.

7. Children's Privacy

Our Services are not intended for users below the minimum legal age in their jurisdiction. If we learn that data was collected without required guardian authorization, we will delete it promptly.

8. Security Measures and Incident Response

We implement technical and organizational safeguards, including encryption in transit/storage, access control, least-privilege principles, and security monitoring. If a security incident affects your rights, we will notify as required by applicable law.

9. Policy Updates

We may update this Policy due to legal, operational, or product changes. Material changes will be communicated through in-product or website notice. Continued use after update constitutes acceptance.

10. Contact

For privacy inquiries, rights requests, or complaints, contact:
contact@nextmove-pay.cn