Document date: 9 October 2026 Scope: The I Ching Studio Android app (com.Framanen.iChingstudio) and its account-deletion website.
Developer / data controller: Framanen
Privacy and support contact: bdumanster@gmail.com
I Ching Studio offers readings, reflection prompts and personal notes. This policy explains the information processed, its purposes, recipients and your choices. Local readings, the library and notes do not require an account. Signing in with Google does not back up your local history or notes to our server.
Your question, reading lines, hexagram results, timestamps, personal notes, outcome notes, favourites and unfinished readings are stored in app files on your device. Language, sound, vibration and certain usage preferences are also stored locally. Local backup or recovery copies may exist.
Personal-note and outcome-note fields are not included in AI requests. However, requesting an AI reflection sends your reading question and reading information for online processing as described below. Operating-system or device backups are subject to their separate settings and terms.
When you choose Google sign-in, Google and Firebase Authentication process account identifiers, email, profile and session information to authenticate you. The app may display your account name. Your Google password is not sent to our app server.
Our server verifies a Firebase identity token and uses an identifier derived from your identity to associate usage and membership records with your account. This identifier is not treated as anonymous. The identity provider may also process IP addresses and browser/device details for security. See Firebase privacy information.
After the in-app confirmation, an AI request sends your question, six line values, primary/resulting hexagram numbers, language and request/reading identifiers to our Cloudflare-hosted server. It forwards the question, language and validated reading to Google Gemini to generate a reflection. Your Google account name and email are not included in the Gemini prompt; personal information that you write in the question will be included.
Do not enter identity numbers, passwords, payment-card details or sensitive health or other personal information about yourself or others. You may use local features without requesting AI. AI responses can be inaccurate and are not professional advice.
We provide AI reflections through the Gemini API using a Google Cloud project with active billing. Under Google's Paid Services terms, Google does not use your prompts or AI responses to improve its products or models. Google may retain logs for a limited period for security, abuse prevention and legal obligations. See the Gemini service terms.
If you choose Report AI response, select a reason and submit it, we store the reported AI response, reason, language, time, request identifier, review status and a derived account identifier in Cloudflare D1 for safety review and service improvement. Your journal notes and a separate copy of your question are not sent with the report; the AI response may itself repeat information from your question. Reports are optional and do not consume AI allowances. We remove reports after 30 days through daily cleanup (normally within 31 days), or when your app account is deleted. Provider backup retention and exceptional infrastructure delays may apply as described below. Only authorized operators can review reports.
Free use may include Google AdMob ads. The ads SDK may process IP addresses and inferred approximate location, ad/app interactions, diagnostics, advertising IDs and other device identifiers for advertising, measurement and fraud prevention. The app does not request precise-location permission; approximate location can still be inferred from an IP address.
Personalisation and advertising data use depend on your region, choices, device settings and Google's terms. Use the consent screens when presented and Ad privacy choices in Settings when available. Android advertising-privacy settings provide additional controls.
If you choose a rewarded ad, an account-linked pseudonymous identifier, reward ticket, ad transaction ID and timing information are processed to verify the reward and enforce daily limits. Client completion alone does not grant credit; Google's server verification is required. Your personal journal notes are not sent to AdMob for ad targeting.
Google advertising data disclosures · Google Privacy Policy
Google Play processes payments. Our app server does not receive your payment-card number or security code. Purchase tokens, product identifiers, subscription status, expiry and account-association information are processed to verify Premium access, restore purchases and prevent fraud. Google Play maintains its own payment and transaction records.
Deleting an account or uninstalling the app does not automatically cancel a Google Play subscription. Manage it through Google Play subscriptions.
Online providers may process IP addresses, request times, network/device information and service logs to deliver, secure and troubleshoot their services. Our server's ad diagnostics focus on status/error codes and reward state rather than content or access tokens. This does not mean that infrastructure keeps no technical logs.
If you email us, your email address, message and attachments are processed to handle your request. Do not send passwords or payment-card details.
We process information to provide requested features, authenticate accounts, manage membership/rewards/quotas, offer support and secure the service. Depending on applicable law, processing may rely on providing the service, legal obligations, legitimate interests such as security, or your consent where required. Reading this policy is not by itself consent to processing that requires a separate choice.
The main providers are Google/Firebase for identity, Google Gemini for AI, Google AdMob/UMP for advertising and preference management, Google Play for payments/subscriptions and Cloudflare for server hosting. Support emails are handled through Google's email service.
Provider systems may operate outside Türkiye; data may be processed where those services operate. We do not promise storage exclusively in Türkiye. Applicable data-protection and transfer requirements remain relevant. See Cloudflare privacy information and the Google/Firebase information linked above. Information may also be disclosed to authorities where required by law or necessary to protect legal rights.
| Information | Retention approach |
|---|---|
| Local readings, notes and drafts | On your device until deleted or app data is cleared; manage device backups separately |
| Firebase account | Until account deletion; provider deletion/backup procedures also apply |
| Server AI response/request-matching records and daily quotas | Records older than seven days are periodically removed, targeting approximately eight days under normal operation; outages may delay cleanup |
| Ad reward/transaction/daily attempt records | Periodic removal of records older than seven days; short-lived tickets expire separately |
| Subscription verification | Retained to verify membership; expired/invalid purchases are removed during refresh checks. Some anti-replay records may remain until account deletion |
| Deleted-account marker | Kept to reject old sessions/callbacks; contains no content or purchase token and currently has no automatic expiry |
| Daily anti-abuse record | Prevents account deletion/recreation with the same Google account from bypassing daily limits. A secret-derived identifier changes each UTC day and holds usage/attempt counters, reward state and random operation IDs. It expires 48 hours after that UTC day begins and is scheduled for automatic deletion. No raw Google identity, email, question, response or note is stored in it |
| Support correspondence | As needed for the request, disputes or applicable retention obligations |
Our cleanup schedule does not cover every provider's logs and backups. Firebase explains that removal of some live/backup authentication data can take up to 180 days after account deletion. Google Play payment records follow its own rules. Separate periods may apply for providers' legal obligations and security processes.
Contact bdumanster@gmail.com for requests. We may verify ownership to protect your account; we do not ask for your Google password. Contact us if automatic deletion cannot be completed.
The AI feature is for people aged 18 and over. Do not submit children's personal information in AI questions. Contact us if you believe a child's data has been processed inadvertently.
Online communication uses HTTPS/TLS and access controls. No system can guarantee absolute security. Protect your device and Google account, and sign out on shared devices.
We update this policy and its date when the service or data practices change. Additional notice or consent will be provided for significant changes where applicable law requires it.
I Ching Studio — Framanen
Contact: bdumanster@gmail.com
© 2025 Created by Framanen
