Dora AI 隐私政策 Privacy Policy

Welcome to Dora AI (the "App"). The App is developed and operated by Chengdu Dora Technology Co., Ltd. ("we," "us," or "our"). We are committed to protecting your personal information and privacy. Please read this Privacy Policy carefully before using the App.

1. Information We Collect

1.1 Information You Provide

• Account Information — Phone number, Apple ID (for registration and authentication)
• Birth Information — Date, time, and place of birth (for personalized analysis and entertainment features)
• Profile Information — Nickname, avatar, gender (for personalization)
• Chat Content — Your conversations with the AI assistant (to provide decision support and improve response quality)

1.2 Automatically Collected Information

• Device Information — Device model, OS version, unique device identifiers
• Log Information — Access time, feature usage records, crash logs
• Location Information — Only with your authorization, for auto-filling birth location

1.3 Device Permissions

With your authorization, the App may access:

• Camera — To take photos for your profile picture. For example, you can take a selfie to use as your avatar.
• Photo Library — To select photos for your profile picture. For example, you can choose an existing photo from your library as your avatar.
• Location — To auto-fill the birth place when you choose "use current location" while creating or editing an astrological profile. We do not collect your location in the background.

You can revoke these permissions at any time in your device's Settings.

1.4 Third-Party Services

• Apple StoreKit (Apple Inc.) — In-app purchases (iOS); transaction data handled by Apple. Privacy Policy
• PostHog (PostHog, Inc.) — Product analytics; collects device info (model, OS version), in-app usage events, crash logs. Privacy Policy
• MemFire Cloud (MemfireDB) (MinBo Technology (Wuhan) Co., Ltd.) — Account authentication (phone OTP sign-in); processes your phone number. Privacy Policy
• JPush (Shenzhen Hexun Huagu Information Technology Co., Ltd.) — Push notifications; collects device identifiers (IDFA/IDFV on iOS), device info (model, OS version), network info (IP address, WiFi/carrier), push records. Privacy Policy
• WeChat Open Platform OpenSDK (Shenzhen Tencent Computer Systems Co., Ltd.) — WeChat sign-in and content sharing; collects device identifiers and network status. Privacy Policy
• Alipay Client SDK (Alipay (China) Network Technology Co., Ltd.) — Subscription payment (Mainland China Android version only); collects device and network info for payment risk control. Privacy Policy

2. How We Use Your Information

• Core Services — AI chat, personalized decision support, life analysis, and entertainment reference content
• Account Management — Account creation, identity verification, security
• Personalization — Customized content and recommendations
• Service Improvement — Usage analysis, feature optimization
• Customer Support — Responding to inquiries and feedback
• Security — Fraud prevention and abuse detection

3. Information Sharing

We do not sell your personal information. We may share information only:

• With your explicit consent
• With service providers who help us operate (cloud, payment, analytics), under strict data protection agreements
• When required by law
• In a merger, acquisition, or bankruptcy involving personal-information transfer — we will inform you of the recipient's name and contact details and require the new holder to remain bound by this Policy, or otherwise obtain your renewed consent

3.1 Sharing with Third-Party AI Services

The App's AI conversation and personalized analysis features are powered by third-party large language model (AI) services. To generate responses, we send your conversation content with the AI, along with the astrological profile information required for analysis (birth date, time, and place, and any relationship profiles you add), to the following third-party AI services:

These providers process the received data in accordance with their own terms of service and privacy policies, and may retain it for a limited period for service operation, security, and abuse detection. We do not sell your personal information. We send this data to a third-party AI service only after you have explicitly consented within the App; if you do not consent, the AI conversation features will be unavailable.

4. Data Security

We protect your data using SSL/TLS encryption, strict access controls, encrypted storage, regular security audits, and employee training. However, no internet transmission is 100% secure.

Security incident notification: if a personal-information security incident occurs, we will promptly inform you — as required by law — of the incident's basic facts and possible impact, the measures we have taken or will take, suggestions for reducing your risk, and the remedies available to you, via push notification, email, or public announcement, and will report the incident handling to regulators as required.

5. Your Rights

• Access & Copy — View your personal information in the App
• Correction — Update your profile information directly
• Deletion — Request deletion of your personal data
• Account Deletion — Delete your account at any time: Settings → Account & Security → Delete Account, or email info@doratech.cn. All data will be permanently deleted. Note: deleting your account does not cancel your subscription.
• Withdraw Consent — Revoke previously granted permissions at any time

6. Children's Privacy

The App is intended for users aged 16 and older. If you are under 18, you may only use the App with parental or guardian consent. If we discover that we have collected personal information from a child without verified parental consent, we will promptly delete that information.

7. Data Storage

Your personal information is stored in the People's Republic of China. If cross-border transfer is needed, we will comply with applicable laws.

7B. Wish Pool Data Processing

Data Collected

• Wish text — Content you enter on the Wish Pool page
• Contact email (optional) — Collected only when you choose to provide it; used to notify you when a wish is fulfilled
• Salted IP hash — Your IP address is salted and hashed before storage; it cannot be reversed, and is used only for abuse detection

How It Is Used

• Aggregate analysis — Wishes are semantically clustered to identify demand trends and inform the product roadmap
• Fulfillment notification — If you provided an email and a related feature ships, we will notify you

Retention

Wish pool data is retained indefinitely to support long-term trend analysis. You may request deletion at any time by emailing info@doratech.cn.

Third-Party Processing

Wish text is stored only in our own infrastructure database and processed by the following internal service. It is not processed by any third-party AI service and is not shared with any external third party. The App's AI conversation feature (see Section 3.1) forwards data to a third-party AI service via llm-proxy, which is independent of wish pool data processing:

• fw-bge-m3 — Local semantic embedding service used for wish clustering

8. Policy Updates

We may update this Privacy Policy from time to time. Significant changes will be communicated through in-app notifications.

9. Contact Us

We will respond to your request within 15 business days.

10. Governing Law

This Privacy Policy is governed by the laws of the People's Republic of China (excluding Hong Kong, Macau and Taiwan).