問序 WENXU · 更新日期:2026 年 10 月 5 日
隱私權政策
本政策涵蓋基本功能、選用雲端服務及 1.4 版的 iOS 廣告成效量測。舊版本未提供的功能不會因此自動啟用。
官網廣告成效追蹤
官網在你同意後使用 Meta Pixel 與 Cookie,向 Meta 傳送瀏覽及 App Store 按鈕點擊事件,用於衡量廣告成效;Meta 可能收到頁面網址、來源、IP 位址、瀏覽器資訊及 Cookie 識別。按鈕點擊不代表完成下載。我們不在這些事件中加入姓名、電子郵件、出生資料或報告內容。可透過官網頁尾「追蹤設定」拒絕或撤回同意,不影響瀏覽及下載;撤回不會刪除先前已傳送的資料。此追蹤僅適用官網,不會在 App 內啟用 Pixel。詳見 Meta 隱私政策。
基本功能與本機資料
基本命盤、免費占問、取名試選與每週回顧在裝置處理及保存。1.3 版進入 App 需先使用信箱驗證碼登入;基本功能仍免費。稱呼、出生日期、時間、手動選擇的地點與命盤不會因登入而自動上傳;使用下列選用服務時,依相應說明與同意處理資料。
帳號、訂閱與取名購買
Supabase 處理登入電子郵件及帳號驗證。問序伺服器保存帳號識別、交易識別、訂閱權益與每月生成額度,以驗證及取回購買。Apple 處理付款,我們不收取信用卡號。使用 Plus 客製取名並送出專案時,專案稱呼、姓氏、氣質、祝福、自訂寓意、指定字與避用字,以及使用者提供的出生日期、時間、時區、出生地點與計算選項會傳送至問序,用於產生、排序及保存候選名字。送出前會顯示資料處理說明。取名使用規則與關鍵字比對,不會因為輸入自訂寓意而呼叫 AI;已交付名字與調整紀錄保存在伺服器,供登入後取回。雲端服務使用 Render 提供的主機。
深入整理與 AI
每次生成前,App 會顯示 AI 服務商並要求同意。深入整理傳送該次問題、已確認事實、不確定項目及卦象,不自動附上出生資料。目前深入整理使用 OpenAI GPT-4.1。中英文結果、帳號額度與重試識別保存在問序伺服器,以供重看及避免重複扣次。請勿在自由輸入欄位提供不必要的個人或他人資料。
Plus 個人報告
選用本命、每週、每月或半年報告,須另行同意將出生日期、時間、時區、地點座標及計算選項傳送至問序伺服器核算。AI 接收核算後的證據、你提供的近況與問題及候選解說識別,用於選擇已有依據的內容;不自動傳送姓名。目前個人報告透過 OpenRouter 使用 DeepSeek V4.1 Flash,實際服務商以生成前的 App 說明為準。問序保存計算依據、近況、雙語報告、命盤版本識別及共用額度。重看已保存報告不需要再次呼叫 AI。
第三方服務與傳輸
選用服務的資料會由前述供應商依其服務條款及隱私政策處理,可能涉及跨境傳輸。連線使用 HTTPS;第三方的保留及處理規則依其政策。你可以不同意生成或分享,繼續使用本機基本功能。
Supabase 隱私政策 · OpenAI 隱私政策 · OpenRouter 隱私政策 · Render 隱私政策
完整報告與好友分享
建立分享連結前須另行同意上傳所選報告快照,內容可能包含稱呼及私人解讀。持有連結的人都能閱讀或保存該份報告,無須你的帳號或訂閱;請勿公開分享不希望他人看見的內容。連結七天後失效,也可由分享者撤銷。撤銷或到期不會刪除接收者已保存的副本。分享連結不授予帳號存取權,也不自動替好友建立自己的命盤。分享快照與帳號分開保存;刪除帳號前請另外撤銷仍有效的分享。
保留、備份與刪除
雲端購買及報告供你登入後取回,會員到期後已保存報告仍可閱讀。在「我的 → 會員」可刪除帳號與相應雲端紀錄;Apple 訂閱需另行取消。本機命盤及自行匯出的檔案需另行刪除。營運備份採加密及輪替方式保留,備份中的舊資料隨輪替移除。清除 App 可能遺失未備份資料。
命盤庫匯出及完整報告檔案未加密,由你選擇保存或交給其他 App,後續處理由接收服務的政策決定。替他人保存或分享資料前請取得對方同意。
iOS App 廣告成效量測與追蹤
1.4 版 iOS App 使用 Meta SDK 衡量問序廣告帶來的安裝與啟動。僅在你透過 Apple App Tracking Transparency(ATT)允許追蹤後,才初始化 Meta SDK 並傳送安裝/啟動與工作階段事件。Meta 可能處理裝置識別碼(包括廣告識別碼)、IP 位址、裝置與作業系統資訊、App 版本、工作階段及 SDK 診斷/當機資訊。這些資料用於廣告歸因、成效分析及 SDK 功能;裝置識別與互動事件可與 Meta 持有的其他資料結合,用於廣告量測與追蹤。相關處理依 Meta 隱私政策,可能涉及跨境傳輸。
問序不向 Meta 傳送姓名、帳號電子郵件、生辰、命盤、占問或報告內容。本版沒有主動回報購買事件,將客戶端自動事件與無程式碼事件設定為關閉,亦未主動設定進階配對資料;這與帳號、Apple 付款或另行同意的 AI 服務分開。
你可以拒絕 ATT,不影響免費功能或訂閱權益。之後可在 iOS「設定 → 隱私權與安全性 → 追蹤」變更選擇。App 會重新確認授權,未獲授權時不再主動傳送新的啟動事件或收集廣告識別碼。撤回不會刪除已傳送資料,也不保證已開始的網路請求立即終止;Meta 依其政策處理與保留既有資料,相關權利及聯絡方式請見 Meta 隱私政策。
裝置權限
App 內不展示廣告,也不讀取裝置即時定位、相機、麥克風或通訊錄。出生地點由你輸入或選擇。名字試聽使用裝置系統語音,不需麥克風權限。
Privacy policy
Updated October 5, 2026. Version 1.3 requires email-code sign-in at entry; basic features remain free. Basic charts, free readings, naming previews and weekly journals are stored locally. Signing in does not automatically upload birth data.
Website ad measurement
With your consent, this website uses Meta Pixel and cookies to measure page views and App Store button clicks. Meta may receive page URLs, referrers, IP addresses, browser information and cookie identifiers. A click is not a completed download. We do not add names, email addresses, birth data or report content to these events. Decline or withdraw consent through Tracking settings in the website footer without affecting browsing or downloads; withdrawal does not delete previously sent data. The Pixel and website consent setting apply only to the website. iOS app measurement uses a separate ATT choice, described below. See the Meta Privacy Policy.
Account, subscriptions and naming
Supabase handles email authentication. WENXU, hosted on Render, stores account and transaction identifiers, entitlements and monthly allowances. Apple handles payment; WENXU does not receive card numbers. Submitting a Plus custom-naming project sends its label, surname, temperament, wishes, custom meaning, specified and excluded characters, and supplied birth date, time, time zone, birthplace and calculation options to WENXU to generate, rank and save suggestions. The app explains this processing before submission. Naming uses rules and supported keyword matching, not an AI call for custom text; delivered names and refinements are stored for recovery.
AI and personal reports
Separate consent is requested before generation. Deep reflection sends your question, confirmed facts, uncertainties and hexagram to OpenAI GPT-4.1, without automatically including birth data. Personal natal, weekly, monthly and half-year reports send birth date, time, time zone, coordinates and calculation options to WENXU for calculation. Calculated evidence, your circumstances and question, and approved content identifiers are sent through OpenRouter to DeepSeek V4.1 Flash for content selection; your name is not automatically included. The provider is identified in the app before generation. Evidence, context, bilingual reports and allowance records are stored for recovery and duplicate prevention. Avoid unnecessary personal information in free-text fields.
Sharing, retention and deletion
With separate consent, a chosen report snapshot is uploaded for sharing. Anyone holding its link can read or save it. Links expire after seven days and can be revoked; this cannot remove recipients' saved copies. Shares are separate from accounts: revoke active links before deleting an account. Account deletion removes associated cloud records; cancel Apple subscriptions separately. Local and exported files require separate deletion. Encrypted operational backups rotate over time. Exported files are not encrypted. Obtain permission before storing or sharing another person's data.
Providers and permissions
Optional services use HTTPS and may involve international processing under the providers' policies linked above. You can decline AI or sharing and continue using local features. The WENXU app does not display ads or access device location, camera, microphone or contacts. Name pronunciation uses system speech.
iOS app ad measurement and tracking
Starting with iOS version 1.4, WENXU uses the Meta SDK to measure installations and launches associated with WENXU advertising. The SDK is initialized and install/launch and session events are sent only after you allow tracking through Apple App Tracking Transparency (ATT). Meta may process device identifiers, including the advertising identifier, IP address, device and operating-system information, app version, sessions, and SDK diagnostic or crash information. These support ad attribution, analytics and SDK functionality. Device identifiers and interaction events may be combined with other data held by Meta for advertising measurement and tracking. Processing, including possible international transfers, follows the Meta Privacy Policy.
WENXU does not send Meta your name, account email, birth details, charts, questions or reports. This version does not manually report purchases and sets client automatic event logging and codeless events to off, and does not supply advanced-matching data. These practices are separate from account services, Apple purchases and separately consented AI processing.
You can decline ATT without losing free features or subscription benefits. Change your choice in iOS Settings → Privacy & Security → Tracking. The app rechecks authorization and does not actively send new launch events or collect the advertising identifier without it. Withdrawal does not delete data already sent or guarantee immediate cancellation of in-flight requests. Meta retains and processes existing data under its policy; see that policy for rights and contact options.