Privacy Policy
Last updated: 24 September 2026
SageSight is a Vignis product operated by Vignis LLC, a limited liability company registered in Wyoming, USA ("we", "us", "our"). This Policy explains how we collect, use, disclose, retain, and protect information when you use the SageSight application and website (the "Service"). The Service is operated internationally from the United States; availability and data-processing requirements may differ by region.
1. Information we collect
| Category | Examples |
|---|---|
| Account | Email address, display name, and sign-in identifiers (e.g., Google/Apple ID or password-based credentials) |
| Profile & preferences | Chosen goals, mentor preferences, language, and — if you use divination/astrology features — inputs you provide such as birth date, time, and place, and names for naming features |
| Property & surroundings | If you choose automatic Feng Shui surroundings analysis, the community name or physical address and city you enter, the coordinates resolved from that location, and nearby-feature and terrain results |
| Content you create | Your chat messages, journal entries, questions, saved charts and readings, conversation history, feedback, and images, voice recordings, or transcripts you choose to submit |
| Transaction | Subscription tier, Lingxi virtual-credit balance and history, and purchase records |
| Usage & device | Feature usage, in-app events, approximate access times, device/browser type, language, and log data such as IP address |
| Local storage | Settings and some divination data stored on your own device (see Section 9) |
| Payment | For web purchases, Dodo Payments independently processes checkout and payment information as merchant of record; we receive order identifiers, product, currency, amount, status, and limited customer or billing metadata. For iOS App Store purchases, Apple independently handles payment credentials; we receive signed transaction and product identifiers, status, dates, and related purchase history. We do not receive your full card or wallet credentials. |
Some inputs (for example birth details, or the content of your journal) may reveal or be treated as sensitive information in your jurisdiction. Please provide only what you are comfortable sharing, and do not submit others' personal data without their consent.
2. How we use your information
- To provide and operate the Service — including generating AI responses, meditation guidance, and divination-style readings, and maintaining your journal and archives;
- To create and manage your account, subscription, and virtual-credit balance, and to process payments;
- To personalize your experience (e.g., daily prompts, mentor selection);
- To maintain security, prevent fraud and abuse, and enforce our Terms and usage limits;
- To provide customer support and respond to your requests;
- To analyze and improve the Service; and
- To comply with legal obligations.
We do not sell your personal information or disclose it for cross-context behavioural advertising. We do not use your journal or conversation content to train a SageSight foundation model. Third-party AI providers process submitted content under their own applicable data-use terms; please do not submit information you do not want processed by them.
3. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we process your data on these bases: performance of a contract (to provide the Service you request); consent (which you may withdraw at any time, e.g., for optional inputs or communications); legitimate interests (to secure, maintain, and improve the Service, balanced against your rights); and legal obligation.
4. AI processing & automated content
Core features rely on third-party AI models. When you interact with a mentor, upload an image, use a voice feature, cast a reading, or request analysis, the relevant prompt, content and context may be transmitted to the applicable provider named below to generate the result. For text-to-speech, we send the text to be spoken and the selected voice or style settings; those synthesis providers do not receive your microphone recording through this flow. AI output is automatic and may be inaccurate; it is for entertainment and self-reflection and is not professional advice. We do not use these features to make decisions producing legal or similarly significant effects about you. Microphone, photo, and notification access is requested only when you choose the related feature and may be withdrawn in your device settings.
If you request automatic Feng Shui surroundings analysis, the community name or address and city you enter are sent through our server to AMap or OpenStreetMap Nominatim for geocoding. The resulting precise coordinates are used with AMap or sent to the FOSSGIS Overpass API and Open-Meteo to retrieve nearby features and terrain. SageSight does not request GPS or device-location permission for this feature; however, the address and derived coordinates may describe your home or another property you choose, so we disclose them as Physical Address and Precise Location for App Privacy purposes. The resolved result is cached only on your device for up to 30 days; external services may keep operational or security logs under their own policies.
5. Third-party services we use
The services below receive data only as needed for the stated function. Some act as processors under contract, while payment, sign-in and public geodata services may act under their own terms and privacy notices:
Before you first use an AI feature, the app asks for your permission. You can withdraw it at any time in Me → General Settings → AI data sharing; after that, no new content is sent to these AI providers.
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, and storage of account, profile, and user content |
| Google Gemini | AI processing of prompts, images, audio, relevant context, and generated responses. Under Google's current abuse-monitoring terms, submitted prompts, contextual information, and outputs may be retained for up to 55 days for abuse detection and prevention. |
| OpenRouter (provider logging) / Anthropic | Certain long-form and oracle analyses: OpenRouter routes the prompt and relevant reading context to the selected Anthropic model and returns the generated text. OpenRouter and the underlying provider apply their own logging and retention settings; SageSight does not promise zero-data-retention for this route. |
| Alibaba Cloud Model Studio (DashScope: Qwen / CosyVoice) | Optional speech synthesis. The exact text to be spoken and voice, language, speed or style settings are transmitted to generate audio. |
| ByteDance Volcano Engine (Doubao speech) | Optional speech synthesis. The exact text to be spoken and voice, speed or emotion settings are transmitted to generate audio. |
| Google / Apple | Optional sign-in when you choose the corresponding authentication provider. The current iOS Google sign-in SDK privacy manifest also declares processing of name, email address, phone number, user ID, coarse location, device ID, other data and other usage data for app functionality or analytics. SageSight does not ask you to enter a phone number and does not request device-location permission; provider-side processing remains subject to the provider's policy. Apple may also process speech for inputs on which you invoke Apple speech recognition. Apple also processes App Store purchases, subscription administration, receipts, refunds and related purchase history for iOS transactions. |
| Dodo Payments | Independent merchant of record for web checkout, payment methods, tax, receipts, fraud review, disputes, and refunds |
| Vercel | Hosting, content delivery, security, and operational request logs |
| Resend | Transactional account, purchase, and support email |
| PostHog | Limited service and purchase events used to understand reliability and product usage; not journal or conversation text |
| Upstash Redis / Vercel KV | Time-limited request-limit and concurrency keys used to prevent abuse, protect availability, and enforce usage limits. Per-user request-limit keys can embed an account identifier and IP address alongside the counter. |
| AMap Web Service | When configured, geocodes the community or address and city you submit and retrieves nearby points of interest for the requested Feng Shui surroundings analysis |
| OpenStreetMap Foundation Nominatim | Fallback geocoding of the community or address and city you submit. This is a public external service, not a SageSight-contracted processor. |
| FOSSGIS Overpass API | Retrieves nearby mapped features around the coordinates resolved for the property. This public instance is independently operated. |
| Open-Meteo | Retrieves terrain elevation for the resolved property coordinates; its current terms state that API IP addresses and requested URLs may be logged and individual logs deleted after 90 days. |
Processors act under applicable contracts and instructions where legally required. Dodo Payments acts as an independent controller for buyer and transaction information. Public geodata services and other independent providers apply their own terms and privacy notices. Your use of connected services may also be subject to those terms and notices.
6. How we share information
Beyond the services above, we may disclose information: (a) to comply with law, legal process, or lawful government requests; (b) to protect the rights, safety, and security of our users, the public, or Vignis LLC; and (c) in connection with a merger, acquisition, financing, or sale of assets, in which case we will seek to ensure continued protection of your data. We do not sell or "share" (as defined under U.S. state privacy laws) your personal information for cross-context behavioral advertising.
7. International data transfers
We operate from the United States and use providers that may process data in the U.S. and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers. By using the Service, you understand that your information may be transferred to and processed in these locations.
8. Data retention
We keep your personal data while your account is active and for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we delete or de-identify it. Google may retain prompts, contextual information, and generated outputs submitted to Gemini for up to 55 days for abuse monitoring under its current provider terms. OpenRouter and its underlying Anthropic route, Alibaba Cloud Model Studio, Volcano Engine, and the mapping services apply their own operational, security, and legal retention terms; we do not represent that those requests have zero retention. Open-Meteo's current terms state that its individual API logs are deleted after 90 days. SageSight-controlled rate-limit keys and counters stored in Upstash are configured to expire automatically after the applicable enforcement window: minute-level request counters normally expire after about 90 seconds, daily operation counters shortly after the next UTC day, and concurrent-work markers no later than twice their configured maximum task age. Provider logs and backups follow the provider's policy. Deleting your SageSight account does not shorten an independently applicable provider retention period. You can delete individual content in the app, and you can delete your account and associated SageSight account data yourself, in the app, at any time — Me → Settings → Delete account (see Section 10).
9. Cookies & local storage
We use essential cookies and browser local storage to keep you signed in, remember settings and language, and store some reading or practice data on your device. We may also record limited server-side product events for security, delivery, and aggregate analytics. We do not use third-party advertising cookies. You can clear local storage and cookies via your browser; doing so may sign you out, remove locally stored records, or reset settings.
10. Your privacy rights
Subject to your jurisdiction and applicable law, you may have the right to:
- Access the personal data we hold about you and obtain a copy;
- Correct inaccurate data;
- Delete your data ("right to erasure");
- Port your data to another service;
- Restrict or object to certain processing;
- Withdraw consent at any time (without affecting prior processing);
- (California/CPRA) know, delete, correct, opt out of "sale"/"sharing", limit use of sensitive personal information, and not be discriminated against for exercising your rights; and
- (EEA/UK) lodge a complaint with your local supervisory authority.
Deleting your account. You can do this yourself in the app — Me → Settings → Delete account — and no email request is needed. Any unfinished Dodo checkout must first be completed or cancelled; we verify its provider status and do not delete the account while a payment may still arrive or awaits delivery. Any linked Dodo recurring subscription is cancelled immediately before deletion so it cannot renew. App Store subscriptions remain separately managed by Apple. Once deletion completes successfully, account access ends immediately and cannot be restored through the app: we remove your profile and sign-in credentials, points balance and user-facing points ledger, membership and unlocked content, mentor conversations, cloud journals, archives and readings, and dossier PDFs from active systems. Unused points and any remaining membership are forfeited. Residual copies may remain temporarily in routine encrypted backups or security logs until normal rotation, or longer where a security hold or law requires; they are isolated from ordinary product use and are not used to recreate the account except where necessary for disaster recovery, security or legal compliance. We retain only the minimum non-directly-identifying Apple and Dodo payment, purchase-ownership, checkout-delivery, subscription-cancellation and refund records needed for renewals, refunds, chargebacks, entitlement recovery, reconciliation, fraud and replay prevention, and applicable legal or tax obligations. These records remain for the longer of the applicable statutory or tax recordkeeping period and the relevant provider refund, chargeback, dispute, reconciliation, security, fraud-prevention or replay-prevention window. Because those periods vary by jurisdiction and provider, no single fixed retention period applies; the records may remain after account deletion and are not used for advertising or ordinary product profiling.
You can also export your practice data in the app (Me → Settings → Export practice data). For access, correction, portability, restriction and any other request, contact us at contact@sagesight.ai; we will respond within the timeframe required by law. We will verify your request and will not discriminate against you for exercising your rights.
11. Security
We use reasonable technical and organizational measures — including access controls and encryption in transit — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Keep your account credentials confidential.
12. Children
The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this Policy & contact
We may update this Policy from time to time; the "Last updated" date reflects the latest version, and material changes may be highlighted in-app. Questions or requests: contact@sagesight.ai (Vignis LLC, Wyoming, USA).
隐私政策
最后更新：2026 年 9 月 24 日
SageSight 是 Vignis 旗下产品，由在美国怀俄明州注册的有限责任公司 Vignis LLC（下称“我们”）运营。本政策说明我们在你使用 SageSight 应用与网站（下称“本服务”）时，如何收集、使用、披露、留存并保护信息。本服务从美国面向国际运营，不同地区的可用性与数据处理要求可能不同。
1. 我们收集的信息
| 类别 | 示例 |
|---|---|
| 账户 | 邮箱地址、显示名、登录标识（如 Google/Apple ID 或密码凭据） |
| 个人资料与偏好 | 所选目标、导师偏好、语言；若使用术数/星象功能，则包括你提供的出生日期、时间、地点，以及取名功能所用姓名等输入 |
| 房屋与周边 | 若你选择自动风水周边分析，包括你输入的小区名或实际地址与城市、由该地点解析出的坐标，以及附近设施与地势结果 |
| 你创建的内容 | 你的对话消息、日记、提问、保存的命盘与解读、对话历史、反馈，以及你主动提交的图片、语音或转写文字 |
| 交易 | 订阅档位、灵犀虚拟点数余额与记录、购买记录 |
| 使用与设备 | 功能使用、应用内事件、大致访问时间、设备/浏览器类型、语言，以及 IP 地址等日志数据 |
| 本地存储 | 保存在你自己设备上的设置与部分术数数据（见第 9 条） |
| 支付 | 网页购买由 Dodo Payments 作为记录商户独立处理收银台与付款信息；我们收到订单编号、商品、币种、金额、状态及有限的客户或账单元数据。iOS App Store 购买由 Apple 独立处理支付凭据；我们收到已签名交易与商品标识、状态、日期及相关购买记录。我们不获取你的完整银行卡或钱包凭据。 |
部分输入（例如出生信息或你的日记内容）在你所在司法管辖区可能属于或被视为敏感信息。请仅提供你愿意分享的内容，未经他人同意请勿提交其个人数据。
2. 我们如何使用你的信息
- 提供与运营本服务——包括生成 AI 回应、冥想引导与术数风格解读，维护你的日记与档案；
- 创建与管理你的账户、订阅与灵犀余额，并处理付款；
- 为你个性化体验（如每日一念、导师选择）;
- 维护安全、防止欺诈与滥用，并执行我们的条款与用量限制；
- 提供客户支持并回应你的请求；
- 分析并改进本服务；以及
- 遵守法律义务。
我们不出售你的个人信息，也不为跨情境行为广告而披露个人信息。我们不使用你的日记或对话内容训练 SageSight 自有基础模型。第三方 AI 服务商会依据其适用的数据使用条款处理你提交的内容；请勿提交你不希望其处理的信息。
3. 处理的法律依据（欧洲经济区/英国用户）
在适用 GDPR 或英国 GDPR 时，我们基于以下依据处理你的数据：履行合同（为提供你所请求的服务）、同意（你可随时撤回，如对可选输入或通讯）、合法利益（为保障、维护与改进本服务，并与你的权利相权衡）、以及法律义务。
4. AI 处理与自动生成内容
核心功能依赖第三方 AI 模型。当你与导师对话、上传图片、使用语音、起卦或请求分析时，相关提示词、内容与上下文可能被传输给下述相应服务商以生成结果。使用文字转语音时，我们会发送需要朗读的原文及所选音色或风格设置；该合成流程不会把你的麦克风录音发送给语音合成服务商。AI 输出为自动生成，可能不准确；其仅供娱乐与自我觉察，不构成专业建议。我们不会以这些功能对你做出产生法律或类似重大影响的决定。麦克风、照片与通知权限仅在你主动使用相关功能时请求，你可在设备设置中撤回。
若你请求自动风水周边分析，你输入的小区名或地址与城市会经我们的服务器发送给高德地图或 OpenStreetMap Nominatim 进行地理编码；解析出的精确坐标用于高德周边检索，或发送给 FOSSGIS Overpass API 与 Open-Meteo 查询附近设施与地势。此功能不请求 GPS 或设备定位权限；但该地址及解析坐标可能描述你的住所或你选择的其他房屋，因此在 App Privacy 中按「实际地址」与「精确位置」披露。解析结果只在你的设备上缓存最长 30 天；外部服务可能依其政策保留运行或安全日志。
5. 我们使用的第三方服务
下列服务仅在实现相应用途所需时接收数据。其中部分依合同受托处理；支付、登录及公共地理数据服务也可能依据其自身条款与隐私通知独立处理：
首次使用 AI 功能前，App 会先征得你的同意；你可以随时在「我的 → 通用设置 → AI 数据共享」撤回，撤回后我们不再向上述 AI 服务商发送新的内容。
| 服务商 | 用途 |
|---|---|
| Supabase | 认证、数据库，以及账户、资料与用户内容的存储 |
| Google Gemini | 处理提示词、图片、音频、相关上下文及生成结果。依 Google 当前的滥用监测条款，所提交的提示词、上下文信息及输出可能为侦测和防止滥用而最长保留 55 天。 |
| OpenRouter（服务商日志说明）/ Anthropic | 部分长篇及术数分析：OpenRouter 将提示词与相关解读上下文路由给所选 Anthropic 模型，并返回生成文字。OpenRouter 与底层服务商分别适用其日志和留存设置；SageSight 不承诺该链路为零留存。 |
| 阿里云百炼 Model Studio（DashScope：Qwen / CosyVoice） | 可选语音合成。为生成音频，会传输需要朗读的原文及音色、语言、语速或风格设置。 |
| 字节跳动火山引擎（豆包语音） | 可选语音合成。为生成音频，会传输需要朗读的原文及音色、语速或情绪设置。 |
| Google / Apple | 你选择相应认证方式时提供可选登录。当前 iOS Google 登录 SDK 的隐私清单还申报：为应用功能或分析处理姓名、邮箱地址、电话号码、用户 ID、粗略位置、设备 ID、其他数据及其他使用数据。SageSight 不会要求你填写电话号码，也不请求设备定位权限；服务商侧处理仍适用其自身政策。对于你主动调用 Apple 语音识别的输入，Apple 也可能处理语音；对于 iOS 交易，Apple 还处理 App Store 购买、订阅管理、收据、退款及相关购买记录。 |
| Dodo Payments | 作为独立记录商户处理网页收银台、支付方式、税务、收据、风控、争议与退款 |
| Vercel | 托管、内容分发、安全与运行请求日志 |
| Resend | 账户、购买与支持相关事务性邮件 |
| PostHog | 用于了解可靠性与产品使用情况的有限服务/购买事件；不含日记或对话正文 |
| Upstash Redis / Vercel KV | 使用有期限的请求限流键与并发键，防止滥用、保障可用性及执行用量限制；其中单用户请求限流键可能随计数写入账户标识与 IP 地址。 |
| 高德地图 Web 服务 | 配置可用时，对你提交的小区名或地址与城市进行地理编码，并为所请求的风水周边分析检索附近兴趣点 |
| OpenStreetMap Foundation Nominatim | 对你提交的小区名或地址与城市进行备用地理编码。该公共外部服务并非 SageSight 签约的受托处理方。 |
| FOSSGIS Overpass API | 按房屋解析坐标查询附近地图设施；该公共实例由独立机构运营。 |
| Open-Meteo | 按房屋解析坐标查询地形高程；其现行条款说明可能记录 API 请求 IP 与网址，并在 90 天后删除单条日志。 |
在法律要求时，受托处理方依适用合同与我们的指示处理数据。Dodo Payments 对买家与交易信息作为独立控制者处理；公共地理数据服务及其他独立服务商适用其自身条款与隐私通知。你使用连接的服务时也可能受这些条款与通知约束。
6. 我们如何共享信息
除上述服务外，我们可能在以下情形披露信息：（a）为遵守法律、法律程序或合法政府要求；（b）为保护用户、公众或 Vignis LLC 的权利、安全与利益；（c）在合并、收购、融资或资产出售中，此时我们将尽力确保你的数据继续受到保护。我们不会为跨情境行为广告而出售或“共享”（依美国各州隐私法定义）你的个人信息。
7. 跨境数据传输
我们在美国运营，并使用可能在美国及其他国家处理数据的服务商，这些国家的数据保护法律可能与你所在地不同。在法律要求时，我们依据适当保障措施（如标准合同条款）进行此类传输。使用本服务即表示你了解你的信息可能被传输至上述地点并在当地处理。
8. 数据留存
在你的账户有效期内，以及为提供本服务、遵守法律义务、解决争议与执行协议所需的期间，我们会保留你的个人数据。当不再需要时，我们会予以删除或去标识化。依 Google 当前的服务商条款，提交给 Gemini 的提示词、上下文信息及生成结果可能为滥用监测而最长保留 55 天。OpenRouter 及其底层 Anthropic 链路、阿里云百炼、火山引擎与地图服务分别适用其自身的运行、安全及法定留存条款；我们不表示这些请求均为零留存。Open-Meteo 现行条款说明其单条 API 日志在 90 天后删除。由 SageSight 控制、存于 Upstash 的限流键与计数配置为在相应执行窗口后自动到期：分钟级请求计数通常约 90 秒，单项日计数于下一个 UTC 日之后不久到期，并发任务标记最迟不超过其设定任务最长时限的两倍。服务商日志与备份依其政策处理。删除 SageSight 账号不会缩短服务商独立适用的留存期。你可在应用内删除单条内容，也可随时在应用内自行删除账号及 SageSight 账号相关数据——「我的」→ 设置 → 删除账号（见第 10 条）。
9. Cookie 与本地存储
我们使用必要 Cookie 与浏览器本地存储，以保持登录状态、记住设置与语言，并在你的设备上存储部分解读或功课数据。我们也可能记录有限的服务端产品事件，用于安全、交付与聚合分析。我们不使用第三方广告 Cookie。你可通过浏览器清除本地存储与 Cookie；此举可能使你退出登录、移除本地记录或重置设置。
10. 你的隐私权利
在你所在司法管辖区与适用法律允许的范围内，你可能享有以下权利：
- 访问我们持有的你的个人数据并获取副本；
- 更正不准确的数据；
- 删除你的数据（“被遗忘权”）;
- 可携你的数据至其他服务；
- 限制或反对某些处理；
- 随时撤回同意（不影响此前处理）;
- （加州/CPRA）知情、删除、更正、选择退出“出售”/“共享”、限制敏感个人信息的使用，并不因行使权利而受歧视；以及
- （欧洲经济区/英国）向你当地的监管机构投诉。
删除账号。你可在应用内自行完成——「我的」→ 设置 → 删除账号，无需发邮件申请。尚未结束的 Dodo 收银台须先完成或取消；当付款仍可能到达或尚待交付时，我们会核验服务商状态并暂停删除。如账号绑定 Dodo 自动续费订阅，我们会在删除前立即取消，以防再次扣款；App Store 订阅仍由 Apple 单独管理。删除成功完成后，账号访问权限立即终止，且不能在应用内恢复：我们会从现行系统清除你的档案与登录凭据、灵犀余额及用户可见流水、会员资格与已解锁内容、与导师的全部对话、云端日记、档案与占卜存档，以及为你生成的命书 PDF；未用完的灵犀与未到期会员一并作废。常规加密备份或安全日志中可能暂时留有残余副本，直至正常轮换完成；如安全保全或法律另有要求，留存期可能更长。这些副本与日常产品使用隔离，除灾难恢复、安全处置或履行法定义务外，不用于重建账号。我们仅为续订、退款、拒付、权益恢复、交付与对账、订阅取消证明、反欺诈/防重放及适用的法定或财税义务，保留最小化、不可直接识别个人的 Apple 与 Dodo 支付、购买归属、收银台交付、订阅取消及退款凭证。其留存期取适用的法定或财税记录期限，与服务商退款、拒付、争议、对账、安全、反欺诈或防重放窗口两者中较长者；因司法辖区及服务商期限不同，不存在统一固定期限。这些记录可能在账号删除后继续保留，但不用于广告或日常产品画像。
你也可在应用内导出修行数据（「我的」→ 设置 → 导出修行数据）。访问、更正、可携、限制处理及其他请求，请联系 contact@sagesight.ai；我们将在法律要求的期限内回应。我们会核验你的请求，并不因你行使权利而歧视你。
11. 安全
我们采取合理的技术与组织措施——包括访问控制与传输加密——保护你的数据。但没有任何传输或存储方式是 100% 安全的，我们无法保证绝对安全。请对账户凭据保密。
12. 儿童
本服务面向成年人，不面向 18 岁以下儿童。我们不会在知情情况下收集儿童个人数据。若你认为有儿童向我们提供了数据，请联系我们，我们将予以删除。
13. 政策变更与联系方式
我们可能不时更新本政策；“最后更新”日期体现最新版本，重大变更可能在应用内提示。如有疑问或请求：contact@sagesight.ai（Vignis LLC，美国怀俄明州）。