Privacy Policy
Effective date: June 22, 2026
Nothing leaves your phone. Cinnabar computes your birth chart (BaZi), face reading, compatibility, and daily reading entirely on your device. The app has no network access, no account, and no analytics. We do not, and cannot, upload your data.
English
What we collect
We collect nothing on any server, because there is no server and the app has no way to reach one. Cinnabar does not transmit any data off your device. Everything below is stored only in local app storage on your own phone, under your control:
- Birth details — your birth date, time, and sex, used to compute your chart. Stored locally (iOS: UserDefaults; Android: SharedPreferences).
- Birthplace / city — the city and longitude you choose, used for true-solar-time calculation. Stored locally.
- A compatibility partner's birth details, if you enter them for a compatibility reading. Stored locally.
- Daily-card streak — how many consecutive days you have opened today's reading, and your last-visit date. Stored locally.
- Preferences — your language choice and whether the daily reminder is on. Stored locally.
- Your selfie photo for face reading — see “Photos and the camera” below.
None of this is collected by us, sent anywhere, or associated with any identity. It lives on your device and only on your device.
Photos and the camera
When you use face reading, you choose a photo from your gallery or take one with the camera. That single photo is processed on your device by an on-device face-landmark model to read facial proportions for that reading. The app reads facial landmarks and proportions only; it does not identify who you are or build any face-identity profile.
- The photo is never uploaded — the app has no network access, so it physically cannot send it anywhere.
- The app does not store your selfie in its own permanent storage beyond what is needed to produce that single reading; live-capture photos use temporary app cache that is cleaned automatically.
- A share image is created only if you tap “share,” and is saved only to your own device's gallery.
Permissions and why
Cinnabar requests the minimum permissions needed, and every one is used locally only:
- Camera — so you can take a selfie for on-device face reading. Only used while you are taking that photo.
- Photos / Gallery — so you can pick an existing selfie for face reading, and so a share card you create can be saved to your gallery.
- Notifications — optional. If you turn on the daily reminder, a gentle local notification is scheduled on your phone. It is scheduled locally with no server involved, and you can turn it off anytime.
You can decline or revoke any of these in your system settings; the rest of the app keeps working.
No network, no accounts, no ads, no analytics
- No network. On Android, the app declares no INTERNET permission (INTERNET and ACCESS_NETWORK_STATE are removed from the manifest; cleartext traffic is disabled). On iOS, the app contains no networking code at all. There is no way for the app to send or receive data over the internet.
- No account, no sign-up. You never create an account or give us an email, phone number, or any login.
- No ads. Cinnabar shows no advertising and contains no advertising SDKs.
- No analytics, no trackers. There is no analytics, telemetry, crash reporting, fingerprinting, or third-party tracking SDK collecting your data.
Third-party components
Cinnabar bundles MediaPipe Tasks Vision (by Google) purely for on-device face-landmark detection. It runs locally on your phone. Because the app has no network access, this component sends nothing off your device — no data, no telemetry, no usage information. No other third party receives any data from the app.
Children
Cinnabar is not directed at children under 13, and we do not knowingly collect information from children. Because the app collects nothing on a server, no personal data of any user — including a child — is ever transmitted or stored by us.
Data retention and deletion
Because all data is stored locally on your device, you are always in control:
- Clear all data on this phone — in Settings, this wipes your birth details, city, any partner's details, daily-card streak, and all readings from your device, returning the app to its first-launch state. Photos and share cards already saved to your gallery are not affected.
- Uninstall the app — removes all of the app's local data from your device.
There is nothing for us to delete on a server, because we never received anything.
Changes to this policy
If we update this policy, we will revise the effective date above and publish the new version at https://getcinnabar.com and in the app. Material changes will be reflected in the in-app Privacy Policy screen.
Contact
Questions about privacy?
Email: [email protected]
Website: https://getcinnabar.com
中文
In one line
任何内容都不会离开你的手机。 朱砂(Cinnabar)的命盘(八字)、面相、合盘与每日解读,全部在你这部手机本机计算。应用没有任何联网能力,没有账号,也没有任何统计分析。我们不会、也无法上传你的数据。
我们收集什么
我们不在任何服务器上收集任何数据,因为根本没有服务器,应用也没有任何途径连接服务器。 朱砂不会把任何数据传出你的设备。以下所有内容都只保存在你自己手机的本地应用存储里,完全由你掌控:
- 出生信息——你的出生日期、时间和性别,用于推算命盘。仅本地保存(iOS:UserDefaults;Android:SharedPreferences)。
- 出生地 / 城市——你选择的城市与经度,用于真太阳时计算。仅本地保存。
- 合盘对象的出生信息(如果你为合盘解读输入了对方信息)。仅本地保存。
- 每日打卡天数——你连续打开今日解读的天数,以及上次访问日期。仅本地保存。
- 偏好设置——你的语言选择,以及每日提醒是否开启。仅本地保存。
- 用于面相的自拍照片——见下方「照片与相机」。
以上任何内容我们都不会收集、不会发送到任何地方,也不会与任何身份关联。它只存在于你的设备上,且仅存在于你的设备上。
照片与相机
当你使用面相功能时,你可以从相册选择一张照片,或用相机现场拍一张。这一张照片会在你的设备本机,由本机面部关键点模型处理,读取本次解读所需的面部比例。应用只读取面部关键点和比例,不会判断你是谁,也不会建立任何人脸身份档案。
- 照片永不上传——应用没有任何联网能力,物理上无法把它发送到任何地方。
- 应用不会在自己的永久存储中保留你的自拍,只会保留生成这一次解读所必需的内容;现场拍摄的照片使用临时应用缓存,旧缓存会被自动清理。
- 只有当你点击「分享」时才会生成分享图,且只会保存到你自己设备的相册里。
权限及用途
朱砂只申请所需的最少权限,且每一项都仅在本机使用:
- 相机——让你为本机面相拍一张自拍。仅在你拍这张照片时使用。
- 照片 / 相册——让你从相册选取已有的自拍用于面相,以及把你生成的分享图保存到相册。
- 通知——可选。如果你开启每日提醒,系统会在你手机本地排程一条温和的本地通知。排程完全在本地完成,不涉及任何服务器,你随时可以关闭。
你可以在系统设置中拒绝或撤销以上任何权限;应用的其余功能照常可用。
不联网、不需账号、不投广告、不做统计
- 不联网。 在 Android 上,应用不声明 INTERNET 权限(已从清单中移除 INTERNET 与 ACCESS_NETWORK_STATE,并禁用明文流量)。在 iOS 上,应用完全不包含任何联网代码。应用没有任何途径通过互联网收发数据。
- 不需账号、无需注册。 你无需创建账号,也无需向我们提供邮箱、手机号或任何登录信息。
- 不投广告。 朱砂不展示任何广告,也不包含任何广告 SDK。
- 不做统计、无追踪。 没有任何统计分析、遥测、崩溃上报、指纹识别或第三方追踪 SDK 收集你的数据。
第三方组件
朱砂内置了MediaPipe Tasks Vision(由 Google 提供),仅用于本机面部关键点检测。它在你手机本地运行。由于应用没有任何联网能力,该组件不会把任何东西传出你的设备——没有数据、没有遥测、没有使用信息。没有任何其他第三方会从应用获得任何数据。
儿童
朱砂并非面向 13 岁以下儿童,我们也不会有意收集儿童的信息。由于应用不在任何服务器上收集任何内容,任何用户(包括儿童)的个人数据都不会被我们传输或存储。
数据保留与删除
由于所有数据都保存在你的设备本地,你始终掌握主动权:
- 清除本机所有数据——在设置中,这会从你的设备删除你的出生信息、城市、任何合盘对象信息、每日打卡天数与所有解读,并让应用回到首次启动状态。已经保存到相册的照片和分享图不受影响。
- 卸载应用——会从你的设备移除应用的所有本地数据。
我们这边没有任何东西可删除,因为我们从未收到过任何东西。
本政策的变更
如果我们更新本政策,会修改上方的生效日期,并在 https://getcinnabar.com 与应用内发布新版本。重大变更会同步反映在应用内的隐私政策页面。
联系我们
有隐私方面的问题?
邮箱:[email protected]
网站:https://getcinnabar.com
Effective date: June 22, 2026