Privacy Policy
This is a translation. If the language versions differ, the Traditional Chinese version prevails.
This Policy explains how MEGASOUND AI TECHNOLOGY LIMITED (“we”, “us”) collects, processes, uses and protects your personal data when you use the iiiGua app, the website iiigua.com and related services (the “Service”). It also serves as our Personal Information Collection Statement under the Hong Kong Personal Data (Privacy) Ordinance and as the notice required by Article 8 of Taiwan’s Personal Data Protection Act.
1. Who we are
Data user (controller): MEGASOUND AI TECHNOLOGY LIMITED
Address: Unit 1003, 10/F, Tower 2, Silvercord, 30 Canton Road, Tsim Sha Tsui, Hong Kong
Contact: privacy@iiigua.com
2. Data we collect
- Account data: the phone number or email you sign in with, or your Apple, Google or LINE account identifier, and the email address that provider shares (Apple may give a relay address). If you set a password, we keep only a one-way hash of it.
- Nickname and avatar: when you create an account with Google or LINE, the name and profile picture they share become your default nickname and avatar (Apple shares only your name); you can change or remove them at any time. Whether share images show your avatar and nickname is your choice and is off by default.
- Your readings: your question and topic (optional), the lot numbers, the time and time zone of the cast, the resulting chart, and any notes you write.
- “Tailor your readings” (all optional): date of birth, time of birth (or “I don’t know”), birth time zone (we store only the time zone of the city you pick, not the place), gender, occupation category and title, and your preferred style of explanation. Birth details are saved only after you tick a separate consent, and you can clear them at any time.
- Payment data: your subscription and purchase status, handled by Apple and RevenueCat. We never receive your card number.
- Technical data: IP address (to rate-limit verification codes and sign-in and to prevent abuse), device language, app version, the time and outcome of each cast, and error logs. Verification codes, passwords and sign-in credentials are never written to any log.
3. Why we use it
- To provide the Service: creating your account, signing you in, casting readings and keeping your journal and profile.
- “Tailor your readings” details are for explaining readings in a way that suits you in the future. Until interpretations are available, these details are only stored and not used for anything else; before we send them to any AI service, we will update this Policy and ask for your separate consent.
- Account security, abuse prevention, handling payments and subscriptions, and confirming what your plan includes.
- Customer support and replying to your enquiries.
- Improving the Service with de-identified usage statistics.
You need one way to sign in (phone, email, Apple, Google or LINE) to create an account. Everything else is optional; leaving it out only means the related feature is unavailable.
4. Service providers and transfers abroad
We share data with the following providers only as needed to run the Service, and require them to keep it confidential:
- Supabase: database and avatar storage (Japan)
- Vultr: server hosting (Japan)
- EngageLab: SMS verification codes (with WhatsApp as a fallback if the SMS cannot be delivered)
- Resend: email verification codes
- Apple, Google, LINE: sign-in
- Apple, RevenueCat: subscriptions and purchases
- Google Fonts: website fonts (when you visit the website, your browser fetches font files from Google)
These providers may be located outside Hong Kong, including in Japan, the United States and Singapore. We do not sell your personal data. Where the law requires, we may disclose data to the authorities.
5. How long we keep it
We keep your data while your account exists. When you delete your account in the app, we immediately delete your account, journal, profile, consent records, avatar and verification records from the cloud; system backups are overwritten within 30 days. Aggregated de-identified statistics are not personal data and may be kept.
6. Your rights
You can ask to access, obtain a copy of, supplement or correct your personal data, ask us to stop collecting, processing or using it, ask us to delete it, and withdraw any consent. Most of this can be done directly in the app (“Me › Profile”, “Clear all details”, “Delete account”), or you can email privacy@iiigua.com. We reply within the legal time limits (Hong Kong data access requests within 40 days; in Taiwan, enquiries or access within 15 days and correction or deletion within 30 days).
7. Children
The Service is for people aged 16 or older. Users under 16 need the consent of a parent or guardian.
8. Security
All traffic is encrypted; the database refuses all direct access, so only our servers can read or write it; service keys are kept only on our servers; avatars are served through short-lived links. No system can be perfectly secure. If a data breach occurs, we will notify you and the authorities as the law requires.
9. Tracking and cookies
We do not track you across apps or use advertising identifiers, and neither the app nor the website has ads or third-party analytics. The website does not use cookies.
10. Changes to this Policy
If we make material changes, we will update the version number and ask you to confirm again in the app.
11. Contact
For any question about this Policy or your personal data, email privacy@iiigua.com.