Privacy Policy

1. Who handles your information

This service is operated by 陈永涛 (Chen Yongtao). Send privacy requests to support@quietroom.life.

2. Information we handle

• Email address, for verification, sign-in, and restoring access. The service stores an irreversible digest rather than the address in its main account record.
• The relationship situation you submit, the cards you confirm, and the analysis result, to generate and display the service. This may include sensitive information about health, family, or identity.
• Order identifiers, payment status, amount, and access status, to reconcile payments and deliver access. We do not store your payment password or bank-card details.
• Pseudonymous usage events, such as a random session identifier, product step, time, and limited outcome status, to understand aggregate conversion. These events exclude your submitted narrative, email, and generated analysis text.
• Necessary security logs, IP address, and request time, for rate limiting, abuse prevention, and troubleshooting.

3. Why we use it

We use this information only to provide cards and analysis, restore accounts, verify payments, show history, measure product performance, and protect the service. You can use free input and cards without verifying an email or paying.

4. AI, service providers, and overseas disclosure

Before an international AI request leaves the Jakarta application server, common direct identifiers such as email addresses, phone numbers, identity numbers, payment-card numbers, IP addresses, URLs, and explicitly labelled names or addresses are replaced with stable placeholders. The remaining situation and confirmed cards are sent to DeepSeek, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., for safety checks, card creation, analysis, and output review. Relationship narratives can remain sensitive or identifiable even after this step. DeepSeek states that personal information it collects is processed and stored in the People’s Republic of China. Email data is sent to Resend for verification delivery. Payments remain disabled. Before inviting testers, overseas handling must be reviewed against Australian Privacy Principle 8.

5. Storage, security, and retention

The Quietroom application, identity mapping, and primary database for this beta run in Jakarta. Saved narratives and results are encrypted with AES‑256‑GCM; access tokens and email identifiers are stored as irreversible digests. Verification codes expire after 10 minutes and pseudonymous usage events are scheduled for deletion after 90 days. Because de-identified relationship content is still processed by DeepSeek in China and its public policy does not state a fixed API-input retention period for this account, the service does not claim that all sensitive information remains in Jakarta or that provider processing has zero retention.

6. Your choices and rights

You can view and delete analyses in “My reflections,” and contact us to request access, correction, deletion, withdrawal of consent, or account closure, subject to applicable law. Deleted analysis records cannot be recovered.

7. Children

This service is currently intended for adults able to consent for themselves. Minors should not submit sensitive information about themselves or others without appropriate guardian involvement.

8. Changes to this policy

We will update this policy when purposes, methods, information categories, or recipients materially change, and request renewed consent where required.

Support and report emails

Support emails are forwarded through ImprovMX to the operator’s Gmail. Please send only information necessary to review your issue. The contact page explains manual report-material retention and the response target.