Welcome to Alitha. This policy explains how 上海南凰科技有限公司 (Shanghai Nanhuang Technology Co., Ltd., referred to as “we,” “us,” or “our”) collects, uses, stores, and provides personal information when you register, sign in, create profiles, chat with AI, view daily guidance, set an avatar, share content, make purchases, or delete your account. It also explains how you can exercise your rights. Please pay particular attention to AI services, international processing, and information retained after account deletion.
1 Scope
This policy applies to the Alitha mobile app, related webpages, interfaces, and services that expressly refer to it. It does not apply to independently operated third-party websites or apps. Review their terms and privacy policies before using their services.
Alitha is released in mainland China and the United States. Availability for download and use depends on the actual availability shown in the app store and the app. Our servers are in Shanghai, China, and relevant information from users in the United States is transferred to China for processing. This policy does not limit rights that users in each region have under mandatory applicable law.
We process information lawfully, fairly, necessarily, and transparently. We do not sell personal information or share it for third-party targeted advertising. We do not read your system contacts or SMS messages, or use device GPS to obtain your birthplace or place of residence.
2 How We Collect and Use Personal Information
1 Registration Sign-In and Account Security
You may register or sign in using the username and password, phone or email verification code, or Apple account options offered on the relevant page. We process the corresponding username, phone number, email address, salted password hash, verification status, internal user identifier, sign-in session, and necessary security records. Apple sign-in also involves your Apple user identifier, authorization credentials, and any name or email actually returned by Apple. We do not receive your Apple account password.
Each sign-in method requires only the information needed for that method. You do not have to provide a phone number, email address, and Apple account together. New accounts must complete profile setup as prompted. Available sign-in and account-linking methods are shown on the current page. You can manage supported linked accounts and passwords through Account Security.
2 Personal and Relationship Profiles
During profile setup, we process your nickname, gender, birth date, birth time, lunar or solar calendar type, and manually selected birthplace. Profiles may also include an avatar, place of residence, profile name, and relationship labels such as self, partner, family, or friend. Required fields are identified on the current page. The relevant birth information is needed to complete profile setup and perform personalized calculations.
We use this information to save and manage profiles, perform traditional cultural calculations, and provide daily guidance and personalized conversations. Before creating someone else's profile, explain the purpose and obtain the necessary authorization. Do not submit information you have no right to provide.
3 AI Conversations Daily Guidance and History
We process your questions, messages, conversation titles, selected agent and mode, selected profiles, relevant birth information, and necessary history to generate replies, present structured interpretations, and save history. When you view or refresh daily guidance, we also process the selected date and period, generated results, and refresh records.
Do not enter passwords, verification codes, identity document numbers, bank card numbers, or health, religious, precise location, or other sensitive information unrelated to your question. Birth information, private conversations, or relationship details may involve sensitive personal information in some circumstances. Where separate consent is required by law, we will first explain why the processing is necessary and its effect on your rights, and request your consent.
4 Avatars Saving and Sharing
When setting an avatar, the image you actively select is uploaded to our service systems, creating an avatar file and access URL. Granting photo permission does not cause us to upload your entire photo library. Images may contain people or other personal information. Ensure that you have the right to use an image before uploading it.
When saving a sharing card, the app generates an image locally and writes it to your photo library. When sharing, content and links are passed to the system share sheet and your chosen app or recipient. Check the content yourself. Links may include an invitation source identifier. We record necessary information about link visits, invitation attribution, and sharing rewards, without reading your contacts or private messages.
5 Search Favorites Likes and Preferences
We process agent search terms, likes, favorites, conversation actions, language, and theme preferences to provide search, interactions, history management, and a personalized interface. Recent searches and some favorites and chat caches are stored on your device. Search requests you submit and interactions that need to be saved across devices are sent to the server for processing.
6 Subscriptions Credits and Purchases
We process subscription plans, credit balances and ledgers, rewards, consumption and adjustment records, and Apple product and transaction identifiers, purchase times, amounts, currencies, transaction status, environment, and signed transaction credentials. We use these to verify purchases, deliver entitlements, restore purchases, and handle refunds. Apple processes payment information. We do not directly receive complete payment card details.
7 Feedback Reports and Content Safety
We process feedback, contact details you voluntarily provide, report reasons, and necessary verification records for customer support, complaints, and appeals. User inputs and AI outputs may undergo automated content screening and generate separate review records, including content excerpts of up to 2,000 characters, risk categories, and screening results. Content that passes screening may also be recorded. Where necessary, authorized personnel review it only as required to perform their duties.
8 Diagnostics Usage Statistics and Attribution
We process random installation identifiers, account or session identifiers, version, platform, language, page and feature actions, usage duration, interface status, request duration, time to the first generated character, error types, network information, and IP addresses. We use this information to diagnose faults, maintain security and stability, and analyze product use. Some identifiers and events can be associated with an account and are not anonymous. Diagnostic events are not intended to collect conversation text, passwords, or birth information. Content safety review records are handled separately under item 7 of this section.
If you choose to answer a questionnaire about your reasons for using the app, we record your selections. Leaving it unanswered does not affect other features. When you arrive through a promotion or invitation link, we may record channel, campaign, touchpoint, and conversion attribution. When Apple Ads download attribution is enabled, the app may obtain an Apple AdServices token, which the server verifies with Apple to record campaign and download sources. The current attribution feature does not read IDFA or use it to track activity in other apps.
3 System Permissions and Local Storage
Photo access: Requested when you choose to set an avatar, so that you can select an image. If you refuse, you cannot set an avatar from your library, but unrelated features such as chat are unaffected.
Photo writing: Requested when you choose to save a sharing card, so that the generated image can be written to your photo library. Refusing prevents saving the image but does not affect viewing guidance.
Clipboard: We write the selected content when you tap Copy and do not proactively read your clipboard.
Other permissions: These workflows do not use camera capture, microphone recording, speech recognition, GPS, or contacts. Playing audio or video supplied with the app does not mean that we collect your voice or image.
You can manage photo permissions in iOS Settings or, where supported, allow access only to selected photos. Turning off permission does not delete images already uploaded. To request their deletion, use account deletion or contact us with a personal information request.
The app stores sign-in credentials, basic profile information, language, theme, chat caches, favorites, searches, and pending attribution records locally. Signing out clears the current session and related account caches, but does not delete your server account or all system caches. Uninstallation, system cleanup, and sharing copies saved by third parties are governed by their respective rules.
The webpages displaying this policy and the User Agreement do not set advertising tracking cookies or load third-party analytics scripts. Website hosting and security systems may still record IP addresses, access times, paths, and browser information to operate and secure the website.
4 AI Services and Third-Party Providers
We connect directly to the official DeepSeek API to generate AI replies, sending DeepSeek your current question, necessary conversation history, and profiles and birth information relevant to the question, together with the selected agent and corresponding instructions. Avatar files, sign-in passwords, and verification codes are not sent as text conversation context. We do not make decisions about employment, credit, insurance, healthcare, or other matters with legal or similarly significant effects on you solely on the basis of AI outputs, or provide outputs to relevant institutions for those decisions.
DeepSeek (杭州深度求索人工智能基础技术研究有限公司 and related service entities): Processes questions, necessary conversations, and related profile context through its official API to provide model generation services. See the DeepSeek Privacy Policy and Open Platform Terms of Service. Privacy contact: privacy@deepseek.com. Open platform support: api-service@deepseek.com.
DeepSeek Privacy Policy | DeepSeek Open Platform Terms of Service
Apple: Provides distribution, Apple sign-in, in-app purchases, and download attribution verification when enabled, processing the corresponding authorization, transaction, or attribution information. See the Apple Privacy Policy.
Apple Privacy Policy
Tencent Cloud SMS: When you use SMS verification, processes the phone number, verification message content, and delivery status to send and verify codes. It does not receive your full profiles or conversations for that purpose.
Alibaba Cloud enterprise email SMTP: When you use email verification, processes sender and recipient email addresses, verification email content, and delivery status to send verification emails. It does not receive your full profiles or conversations for that purpose.
Tencent Cloud: Hosts and stores app servers, databases, avatar files, and backups in Shanghai, China, processing the business and network information needed to operate the services.
We do not collect conversations for the purpose of training our own general-purpose models. Calling the official DeepSeek API does not mean that inputs and outputs are deleted immediately after processing, or that a third party will not use data to improve services or models. DeepSeek's processing is governed by its rules applicable to API services and its agreements with us. Settings for its consumer chat product are not equivalent to the settings of this app's API service. We do not guarantee third-party “zero retention” or “no training.” You can ask us about the relevant processing rules using the email address in this policy.
Where separate consent is required by law to provide personal information to a third-party AI service, process sensitive personal information, or transfer information internationally, we will explain the recipient, purpose, and scope before processing and request your consent. You may refuse or withdraw consent. This may prevent AI replies that depend on the information, but does not affect unrelated features or the exercise of your personal information rights. Acceptance of a general agreement does not replace separate consent.
If we replace or add a model provider, or change the recipient, purpose, scope of information, or processing location, we will update this policy and the relevant disclosures and, where required by law, request consent again before processing. Accepting this policy does not mean that you agree to our providing information to any future provider without restriction.
5 Sharing Transfers and Public Disclosure
We provide information only as necessary for services, transactions, security, complaints, and legal obligations, and restrict its use through contracts and access controls. Where required by law, we provide specific notices and obtain consent before providing information to independent controllers, publicly disclosing information, or processing sensitive information.
Cards and links you actively share are provided to your chosen recipients. We do not disclose profiles or private conversations publicly except through your active actions, valid consent, or as permitted by law. In a merger, division, reorganization, or asset transfer, we will notify you of the recipient as required by law and require continued protection of the information. If the purpose changes, we will obtain renewed consent where required. We provide only necessary information in response to judicial, regulatory, or law enforcement requests.
6 Storage International Processing and Retention
Our servers, databases, avatar files, and backups are stored on Tencent Cloud in Shanghai, China. When users in the United States use the services, relevant account, profile, conversation, and business information is transferred to and processed in China. DeepSeek's processing is governed by its applicable policies and service agreements. Apple, SMS, and email services may process information in other locations needed for their operations, so not every third-party copy is stored in Shanghai.
Where a cross-border transfer requires additional notice or consent by law, we will explain the overseas recipient, contact information, purpose, methods, categories of information, and ways to exercise rights before the transfer, and meet applicable consent and transfer protection requirements. We will update the disclosures if we add providers or change transfer arrangements. You can use the email address in this policy to ask about transfers and safeguards relevant to you.
Account, profile, conversation, daily guidance, and related feature records are generally retained while your account exists and you use the corresponding features, so that you can manage profiles, view history, and continue using the services. You may delete profiles or conversations through supported options, or request account deletion. Deleting a conversation does not automatically delete separate review, security, or dispute records already created.
Verification codes expire at the end of their validity period. Security and delivery records created to prevent abuse, verify requests, or handle disputes may remain after expiry. An expired code does not mean that all related records have been deleted.
After account deletion is complete, we delete the account and identifiable associated profiles, conversations, messages, daily guidance, feedback, review, and related business records from the current online service systems, remove the currently linked avatar file, and handle Apple authorization. Old avatar files that you previously replaced and that are no longer linked to your account may not be removed as part of account deletion. You can contact us to request further deletion.
After account deletion, necessary transaction records and deletion receipts are retained with a pseudonymous account digest to verify transactions, handle refunds and disputes, and document deletion. The current default retention periods are 2,555 days and 1,095 days respectively. The categories and retention end dates for your records are stated in the deletion receipt provided on completion. The system does not currently automatically remove all expired records on the stated end date. You may contact us to check progress or request deletion. Pseudonymization is not anonymization, and these records remain protected as personal information.
Operational logs, separate review and statistical records, backups, and third-party copies may not be removed at the same time as an individual conversation or account. Retention depends on the period needed for fault diagnosis, security checks, dispute handling, backup recovery, and applicable legal requirements. You can ask us about the scope, period, and progress of retention and deletion relevant to you. For sharing copies independently held by third parties, you also need to contact the recipient.
We retain personal information only for as long as needed for these purposes. When a purpose ends, we will delete or anonymize the information as required by law. Information that must be retained by law is restricted to the corresponding purpose and access is limited. If deletion is temporarily difficult for technical reasons, we will restrict further processing as required by law. The response deadline for a deletion request does not mean that all backups and third-party copies can be removed within the same period.
7 Information Security
We use HTTPS, authentication, access controls, permission separation, log redaction, rate limits, content safety measures, backups, and audits. No system can guarantee absolute security. If an incident occurs, we will promptly investigate, take remedial measures, and report to or notify users and competent authorities as required by law.
8 Your Rights and Account Deletion
You can correct information through profile options, manage conversations through History, and request account deletion through “My — Settings — Account Security.” You may also use in-app feedback or dev@nanhuangtech.com to request access, copies, correction, deletion, withdrawal of consent, restriction of or objection to processing, and, where applicable law allows, a portable copy of your information. Withdrawing consent does not affect processing based on consent before withdrawal. You may also complain to competent authorities.
Account deletion is a deletion operation, not ordinary sign-out. We verify account ownership. Apple-linked accounts may require renewed authorization to revoke credentials. Successful deletion returns a completion result and retention details, and the original account and associated content cannot be restored. If the request fails, retry or contact us. Do not treat an incomplete request as completed deletion.
Account deletion or uninstallation does not automatically cancel an Apple subscription. Cancel renewal separately in Apple's subscription settings and follow the platform's refund rules. Before deleting your account, save needed content and check your balance and entitlements.
To prevent impersonation, we verify identity in a way proportionate to the request's risk and do not ask for unrelated information. We will respond within 15 business days after identity verification, subject to any different deadlines required by applicable law. If we cannot fulfill all or part of your request, we will explain the reason and available appeal options. You can appeal the result through the email address in this policy.
Additional Information for Users in the United States
Where applicable US state privacy law grants you the relevant rights, you may request information about what we collect, use, and provide; access, obtain copies of, correct, delete, or port information; opt out of the sale of personal information, sharing for targeted advertising, and certain profiling; and limit certain uses of sensitive information. These rights are subject to the scope, thresholds, and exceptions in applicable law.
We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to build advertising profiles for third parties. We will not discriminate against you for lawfully exercising privacy rights.
The information categories we process include account and contact identifiers, profiles and user content, purchase and transaction records, network and usage activity, locations you manually provide, and information generated through personalized calculations. Sources, purposes, recipients, and retention rules are described in Sections 2, 4, 5, and 6.
You can submit verifiable requests or appeals through the email address above, or lawfully appoint an authorized agent. To protect your account, we may verify the agent's authority and your identity, without requesting more information than is necessary for verification.
9 Minors
Alitha is intended for users aged 18 or over and does not provide accounts or paid services to minors. If you are under 18, do not register, submit personal information, or purchase services. If a guardian discovers that a minor has provided information, contact us using the email address in this policy. After verification, we will restrict the account, delete information, or take other protective measures as required by law.
10 Policy Updates
We update this policy and its dates when features, data, purposes, providers, or processing locations change. We provide prominent notice of important changes. Where renewed consent is required, we obtain it before continuing processing. We do not treat “continued use” as a substitute for express authorization required by law.
Personal information controller: 上海南凰科技有限公司 (Shanghai Nanhuang Technology Co., Ltd.).
Contact email: dev@nanhuangtech.com.
Registered address: Rooms 2003–2008, No. 99 Huichuan Road, Changning District, Shanghai, China.
You can also contact us through in-app feedback. Describe the account, issue, and action you want us to take. Do not send identity documents, passwords, or complete verification codes unless the information is necessary to verify and handle the request.