App: Yarrow · Website: libot.store · Version 2.0 · Effective: 2026-10-17 · This English version is the master text. A Chinese reference translation is published at privacy.zh.html.
Yarrow (the app and this website) is operated by HAINAN YIFEI TRADING COMPANY LIMITED, a company established in China ("we", "us"). For the purposes of the EU/UK GDPR and similar laws, we are the data controller of the personal data described below.
Contact for all privacy matters: yifei4trade@gmail.com. We answer privacy requests within 30 days.
Yarrow is intended for adults aged 18 or over. When you first open the app we show an age screen and ask you to confirm that you are 18 or older; if you decline, the app does not continue. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used Yarrow, contact us and we will delete the account.
| Data | Why |
|---|---|
| Birth details: date of birth; time of birth (optional — you can say you do not know); birthplace (city you choose); gender (Woman / Man / Prefer not to say) | To compute your chart and everything derived from it. Gender is a calculation input, not a marketing field; if you choose "Prefer not to say" we simply do not produce the life-cycle calendar. |
| First name or nickname (optional) | To address you in the app and on share cards. We do not ask for your surname. |
| Content you create: your Journal entries; questions you submit to the Decision Mirror; optional context you choose to give (occupation field, relationship status, the question you most want answered) | To produce the reflection you asked for and to keep your own history for you. |
| Purchase and subscription records — order state, product identifier, purchase token and expiry, processed through Google Play | To grant, restore and manage your entitlements and to meet accounting duties. We never see or store your card number. |
| App settings: language, theme, time zone, your 18+ confirmation, notification preferences; and a push-notification token if you turn notifications on | To run the app the way you set it, and to deliver notifications you asked for. |
| Basic usage events (for example: which screens are opened, paywall shown, purchase started) | To keep the app working and improve it. These events are designed not to include your name, email, birth details, journal text or question text. |
| Technical data processed by our hosting provider when you use the app (for example IP address and timestamps, in server logs) | Security, anti-abuse and operating the service. |
We do not collect: your full name or surname, email address (unless you choose to upgrade your anonymous account to an email account), phone number, contacts, reading access to your photos, precise GPS location, or advertising identifiers. We do not request or collect health records. One exception you should know about: if you tell the app about thoughts of self-harm or suicide, the app records a confidential safety event so that the crisis response keeps working (what it contains, and how long we keep it, is described in §7). We do not use it for any health purpose. We do not sell your personal data, we do not share it for targeted advertising, and we do not run third-party advertising in the app.
Your chart is calculated deterministically by our own engine — the pillars, elements and cycles are never invented by an AI. The wording of your readings and report is generated with the help of an artificial-intelligence service operated by our provider DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China).
What we send to the AI provider when you ask for a reading, a report or an interpretation:
What we do not send to the AI provider: your name or nickname, your email address, your raw date of birth, birth time or birthplace as such, your purchase records, or your device identifiers. Note that the chart facts above are derived from your birth details and therefore relate to you.
AI-generated text can be wrong, generic or unexpected. Every AI-generated part of the app is marked as AI-generated, and the app includes a report function so you can flag AI content you believe is wrong or harmful. Reports and readings are for entertainment and self-reflection only; they are not medical, psychological, financial or legal advice, and they are not predictions of your future.
AI inference providers (sub-processors): DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China) — processes the data above for users in most regions; Mistral AI (France) — for users in the EU/EEA, the UK and Switzerland, the same data is processed within the European Union via its EU regional endpoint (api.eu.mistral.ai), under a data processing agreement. We do not sell your data, and we have not authorized our AI providers to use your inputs or outputs to train their models.
Note for users in mainland China: if you use Yarrow in mainland China, your account and chart data are stored on servers in the European Union (cross-border transfer), and the text of your generated readings is processed by our AI provider located in China. By using these features you acknowledge and consent to this cross-border processing; you can stop using AI generation at any time, or contact us to export or delete your data.
Your account data is stored in the European Union (see §6). However, generating your readings requires sending the data described in §4 to our AI provider in China, and our operator is established in China. Because China has no EU adequacy decision, that transfer requires specific safeguards.
Current mechanism. Today, the transfer of the §4 data to China happens only when you actively ask us to generate a reading, report or interpretation, and it is covered by:
These are "derogations" intended for transfers that are not systematic, so we are working to put in place a stronger, long-term mechanism: a data-processing agreement and Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) with our AI provider. We will update this policy when that is in place.
You are in control. You can use the app without AI generation (chart, cards and calculations are produced by our engine) — simply do not start a reading, a report or an interpretation. You can withdraw your consent at any time by contacting us; withdrawing means we can no longer generate AI readings for you. Before we send anything to the AI provider, the app and your action indicate that an AI-generated reading is being requested.
Your account data (profile, birth details, chart, your Journal, delivered reports, entitlement records) is stored in a managed database hosted in the European Union (Frankfurt, Germany). App files and share images are produced on your device. Payments are processed by Google Play; we never receive your card details.
About that safety record: information about a person's mental state can be a "special category" of personal data under the GDPR. We process this record only (a) to protect your vital interests where you may be at risk (Article 9(2)(c) GDPR) and (b) to verify that our crisis response works. We keep the record in a restricted form (the fact that a safety response was triggered, when, in which feature and in which language — not the text you wrote), and you can ask us to delete it with your account.
You can exercise the following rights using the in-app tools (Settings → Export my data / Delete my account) or by email:
We apply the GDPR standard to everyone, wherever you live. We do not discriminate against you for exercising your rights.
If you live in California, you have the rights to know what we collect, to delete, to correct, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising your rights.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including APP 8 (cross-border disclosure): by using Yarrow's AI features you acknowledge that data described in §5 is disclosed to our AI provider in China, and we take reasonable steps to secure it. You may access and correct your information, and you may complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au). We notify eligible data breaches as required by the Notifiable Data Breaches scheme.
Automated decisions. We use a computer program (an AI model) to draft the wording of your readings and reports, based on your chart and the content you provide. It does not make decisions that produce legal effects or similarly significant effects for you; you can turn it off by not requesting AI-generated content. (From 10 December 2026 we are required to include this disclosure in our privacy policy: see OAIC guidance.)
If you tell the app about thoughts of self-harm or suicide, the app does not send that text to any AI service: it stops and shows a fixed safety card with a phone button, and it records the event so we can check that the response worked. The card lists crisis lines for your region, for example:
The full, current list is maintained by our operations team and updated without an app release. Yarrow is not a crisis service and cannot help you in an emergency.
Yarrow is an entertainment and self-reflection product. Nothing in the app is medical, psychological, financial, investment or legal advice, and nothing in it is a prediction or guarantee of future events. Do not rely on it for decisions where a professional is required.
Access to your account data is restricted by database-level rules so that one account cannot read another's records. We use encrypted transport (HTTPS) and store data in a managed EU-hosted database. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the competent authority as required.
We are established in China and we do not have an office in the EU or the UK. We have not yet appointed a representative under Article 27 GDPR; we are reviewing whether one is required for our current scale of EU processing. You can always reach us directly at yifei4trade@gmail.com, and all the rights in §8 apply in full. If we appoint a representative, this section will name them and their address.
We will update this page when our practices change. The version and date are shown at the top. Material changes will be highlighted in the app before they take effect.
Email: yifei4trade@gmail.com
Support and account deletion requests: see delete-account.html and support.html.
For entertainment and self-reflection purposes only. Not a substitute for professional medical, financial, or legal advice.
Policy version v2.1 (effective 2026-10-31: added AI inference provider list, EU lane disclosure, and a note for mainland-China users)