Privacy Policy

Last updated: 22 April 2025

Introduction

Serene Jade Consulting Group Limited ("Serene Jade", "we", "us", or "our") is the developer of the iOS mobile application A Little Fish (the "App"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect from users of the App, how we use and safeguard it, and your rights in relation to that data. We aim to comply with all applicable privacy laws, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (as amended by the CPRA) (CCPA/CPRA), and Apple's App Store policies. By using the App, you acknowledge that you have read and understood this Privacy Policy.

Data Controller and Contact Information

The data controller for your personal data is Serene Jade Consulting Group Limited, a company registered in Hong Kong. If you have any questions or requests regarding this Privacy Policy or your personal data, you can contact us at:

Email: [email protected]

We will respond to privacy-related inquiries within a reasonable timeframe and in accordance with applicable laws.

Personal Data We Collect

We collect and process several categories of personal information in order to provide and improve our services:

Account Information

When you create an account, we collect identifiers such as your name or username, email address, and a password. This information is used to register and identify you as a user, and for authentication when you log in. We may also assign a unique user ID to your account.

Divination and Dream Inputs

The core functionality of the App involves you providing personal input – for example, questions you ask for I Ching divination or descriptions of your dreams for interpretation. These submissions may include personal thoughts, experiences, or other information you choose to share. We store this content on our servers so that the App's AI can analyze it and provide you with divination readings and dream interpretations. Important: Please be mindful that any sensitive personal data you include in these inputs is provided at your discretion. We treat all such content as confidential and use it only for the purposes described in this Policy.

Usage and Device Data

When you use the App, we automatically collect certain technical information about your device and how you interact with our services. This includes data such as:

This Usage and Device Data helps us ensure the App functions properly, maintain security, fix bugs, and understand usage trends to improve the user experience. Where possible, we use this data in an aggregated or pseudonymized form.

Subscription and Purchase Information

The App operates on a freemium model with optional in-app purchases and subscriptions for premium features. If you subscribe or make a purchase through the App, we receive information about the transaction from Apple. This includes confirmation of your subscription tier, the duration of subscription, purchase receipts or transaction IDs, and whether a payment has been successfully processed. We do not receive or store your payment card details, as all payments are handled securely by Apple's App Store. We use purchase information to activate premium features, manage your subscription (e.g., track expiry/renewal), and provide customer support related to billing.

Communications

If you contact us (for example, via email or through any support feature in the App), we will collect the information you provide in your inquiry. This may include your contact details (such as email address) and the content of your message. We use this information to respond to you and resolve any issues or requests you may have.

No Third-Party Data Collection

We do not obtain personal data about you from third-party sources. We also do not access your device's other information such as your address book, calendar, or photos, unless you explicitly give permission (the App does not currently request such permissions). Additionally, no data is sent to external analytics providers or advertisers – all data processing is done by Serene Jade on our own servers. We do not track your activities across other companies' apps or websites. We also do not engage in any tracking of users across third-party apps or websites, so no Apple AppTrackingTransparency (ATT) prompt is displayed since we do not perform data tracking for advertising purposes.

How We Use Your Personal Data

We use the collected information for the following purposes, in ways that are consistent with the original reasons for which it was provided and with your expectations:

Providing and Personalizing the Service

We use your inputs (questions, dream details) to generate I Ching divination results and dream interpretations via our AI technologies. This is the core function of the App – analyzing your personal input and delivering a tailored result. We also use your data to display personalized content (for example, saving your past consultations so you can review them) and ensure the content you see is relevant to your queries.

Legal basis (GDPR): To perform the contract of providing you with the requested services.

Account Setup and Authentication

We process your Account Information to create and maintain your user account, allow you to log in securely, and verify your identity as you use the App. We remember your settings and preferences to enhance your experience.

Legal basis: Contractual necessity; and our legitimate interest in securing accounts.

Subscriptions and Transactions

We use Subscription and Purchase Information to manage paid subscriptions and purchases. This includes verifying payment through the App Store, enabling premium features you have paid for, sending you subscription status updates or renewal reminders, and handling billing-related inquiries or support.

Legal basis: Contractual necessity (to provide the paid features you have ordered) and compliance with legal obligations (financial record-keeping).

Communicating with You

We may use your contact information (such as email) to send important notices about the App. These communications include confirmations of account actions, subscription updates, changes to our terms or policies, or alerts about technical issues or security. We may also respond to you when you reach out with a question or feedback. These messages are not marketing; they are service and account related.

Legal basis: Our legitimate interests in providing effective customer service and/or contractual necessity to keep you informed of important service information.

Push Notifications and Alerts

If you have enabled push notifications on your device, we will use the notification token to send you occasional notifications. These may include daily divination prompts, reminders, or updates about new features or content in the App. You can control these notifications in your device or App settings. We will only send marketing-oriented push notifications (if any) with your consent, which you can withdraw at any time by adjusting your settings.

Improving and Developing Our Services

We analyze Usage and Device Data (in aggregated or pseudonymized form) to understand how our App is performing and how users interact with it. This helps us diagnose technical issues, maintain security, and develop new features or improvements. For example, we might review which features are most frequently used or analyze crash logs to fix bugs. We may also use portions of user inputs (after removing or anonymizing personal identifiers) to train and refine our AI models, so that our divination and interpretation algorithms become more accurate and useful over time.

Legal basis: Our legitimate interests in improving our product and user experience, ensuring network and information security, and innovating new offerings. We ensure that these interests do not override your rights and freedoms – for instance, data used for improvement is often aggregated or anonymized, and you have rights to object as described below.

Compliance and Legal Obligations

We may process and retain some of your information to comply with applicable laws and regulations. For instance, we might keep transaction records to meet financial and tax requirements, or use your data to fulfill duties under Hong Kong law (PDPO) or other jurisdictional laws that apply. Additionally, if we receive a lawful request from authorities or a court order, we may process your data as necessary to respond.

Legal basis: Compliance with a legal obligation.

Enforcing Terms and Preventing Misuse

We use data as needed to enforce our Terms of Service and Usage Guidelines, to prevent fraud, abuse and other harmful activities, and to protect the rights, property, and safety of Serene Jade, our users, or the public. For example, we might use logs and account information to investigate suspicious behavior or to prevent access by malicious accounts.

Legal basis: Legitimate interests in protecting our business and users, and legal obligations where applicable.

We will not use your personal data for new purposes that are not compatible with the above without informing you and, if necessary, obtaining your consent. In particular, we do not use your data for advertising targeting by third parties.

Lawful Bases for Processing (GDPR)

For individuals in the European Economic Area (EEA) or United Kingdom, we rely on certain legal bases under the GDPR to process your personal data, as outlined above (in parentheses). These legal grounds include:

Contractual Necessity

Much of our processing is to provide the services you request under our contract (Terms of Service) with you. For example, we need to process your account data and inputs to deliver the App's core functionality.

Consent

In limited situations, we may seek your consent. For instance, if we ever wish to process your data for a purpose that requires consent (such as using your email for marketing communications or processing sensitive data you provide beyond what is necessary for the service), we will ask for your consent. You have the right to withdraw your consent at any time. For users under the age of consent in your region, we will obtain parental consent as required by law before processing personal data.

Legitimate Interests

We process certain data for our legitimate business interests, after evaluating that your privacy rights are not overridden. For example, improving and securing our services, and communicating important updates to you are in our interests and we believe also benefit our users. When we rely on this basis, you have the right to object to the processing as described in the "Your Rights" section below.

Legal Obligation

If we are subject to a legal obligation that requires processing of personal data (for example, complying with applicable accounting rules or responding to compulsory legal requests), we will process data on this basis.

We do not normally collect or process any "special categories" of sensitive personal data about you (e.g., health information, racial or ethnic origin, political opinions, etc.) unless you voluntarily include such information in a dream or question input. We do not intend to process such sensitive information for any purpose other than providing you the service you requested (interpretation or insight for your personal input). If any special category data is incidentally processed, our lawful basis may be your explicit consent (through the act of providing the information for analysis) or other applicable grounds under Article 9 of GDPR.

International Data Transfers

Global Service, Hong Kong Servers

A Little Fish is offered to users worldwide. Your personal data will be stored and processed on our servers located in Hong Kong. If you are accessing the App from outside Hong Kong (for example, from the European Union, the United Kingdom, or the United States), this means your personal data is transferred to and held in Hong Kong.

Data Protection in Hong Kong

Hong Kong has its own data protection law (PDPO) which mandates strong protections for personal data. However, it's important to note that if you are in the EEA/UK, Hong Kong is not currently recognized by the European Commission as having "adequate" data protection laws equivalent to the EU GDPR. Similarly, other jurisdictions may consider this a cross-border data transfer.

Our Safeguards for International Transfers

We take steps to ensure that your data is protected according to the standards of your home jurisdiction even when stored overseas. These steps include:

By using the App or providing us with information, you consent to the transfer of your personal data to Hong Kong and potentially to other jurisdictions where our support staff or affiliates may be located, under these safeguards. We will always handle your personal data securely and in accordance with this Privacy Policy wherever it is processed. If you have questions about our international data transfer practices or want more information about the safeguards in place, please contact us.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In general:

Account Data

We keep your account information and content (such as your profile and saved divination/dream history) for as long as you maintain an account with us. If you delete your account or it has been inactive for an extended period, we will delete or anonymize this data in accordance with our data retention schedule (subject to the grace period and legal requirements described below).

Divination and Dream Inputs

The questions and dream descriptions you provide are stored so that you (and only you, when logged in) can access your past readings, and so that the service can refer to prior context if needed. This data is retained until you delete it or delete your account. You also have the option to delete individual entries within the App, in which case those entries will be erased from our active systems.

Subscription and Transaction Records

We retain purchase and subscription records as long as needed for accounting and compliance purposes. For example, we may retain records of transactions for a certain number of years as required by tax law or financial regulations.

Usage Data and Diagnostics

Usage analytics and crash logs are generally kept for a shorter duration (e.g., 12 months) to identify trends and issues, after which they may be aggregated or anonymized. We might retain security-related logs for longer if needed to investigate fraud or abuse.

Communications

If you contact support, we may retain correspondence (including your email and our responses) for a period necessary to address your issue and to establish a history of support communications, which can be helpful if you contact us again. These records are typically kept for at least one year, and longer if needed to comply with legal obligations or our legitimate interests (for example, if dealing with a recurring problem).

When your personal data is no longer required for the purposes stated above, we will either delete it securely or anonymize it so that it can no longer be associated with you. If complete deletion is not immediately feasible (for instance, if stored in secure backups), we will isolate and protect the data until deletion is possible.

Account Deletion

You have the ability to delete your account at any time via the App (see "Your Rights and Choices > Account Deletion" below for more details). Once you request account deletion, we will remove or anonymize your personal data from our production systems within a reasonable period. Some minimal information may be retained as required for legal compliance or legitimate business purposes (e.g., record of consent or a transaction ID for an already completed purchase), but we will only retain what is necessary and for the duration required by law.

Disclosure of Your Personal Data

We do not rent or sell your personal information to third parties. However, we may need to share your information in the following circumstances, each of which is aimed at facilitating the service or complying with legal requirements:

Within Our Organization

Your data may be accessed by employees or authorized contractors of Serene Jade who require such access to perform their duties (such as our development and support team). All such personnel are bound by confidentiality and data protection obligations.

Service Providers (Processors)

As of now, all core processing of data is handled on our own servers and systems. We do not send your personal data to external third-party processors. In the future, if we engage trusted third-party service providers to assist us (for example, a cloud hosting provider or an email delivery service), we will ensure they are contractually bound to protect your data and use it only for the purposes we specify. In all cases, such service providers would be subject to strict data protection obligations and would not have rights to use your data for their own purposes.

Legal Compliance

We may disclose your personal data when required to do so by law or valid legal process. For example, if we receive a court order, subpoena, or a demand from a government authority with jurisdiction, we may be obligated to release certain data. We will only disclose what is necessary and will verify that the request is legally valid.

Protection of Rights and Safety

We may share personal information if we believe it is necessary to enforce our Terms of Service or other agreements, to investigate or prevent suspected illegal activities, fraud, or security issues, or to protect the rights, property, and safety of Serene Jade, our users, or others. This may include exchanging information with other companies or organizations for the purposes of fraud protection and credit risk reduction (in compliance with applicable privacy laws).

Business Transfers

If Serene Jade Consulting Group Limited is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity or combined with the successor's data. We will ensure the confidentiality of any personal data involved in such transactions and provide notice to you before your personal data is transferred and becomes subject to a different privacy policy.

No Sale of Personal Information

We do not sell your personal data, and we have not sold or shared personal information of users in the past 12 months as those terms are defined under the CCPA. This includes that we do not share your information for targeted advertising purposes. In other words, we do not disclose your personal data to third parties for monetary or other valuable consideration or for their marketing or cross-context behavioral advertising.

No Third-Party Advertising

The App does not use third-party advertising networks nor share your data with advertisers. You will not see third-party ads based on your personal data, and we do not use your data to create advertising profiles.

Third-Party Links

The App may occasionally reference or link to external websites or services (for example, a link to an online resource about I Ching). If you follow a link to any third-party site or service, please note they will have their own privacy policies and we do not accept responsibility or liability for those policies. We encourage you to review the privacy policies of any third-party services you access.

Data Security

We take data security seriously and adopt various measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption

We use encryption protocols (such as HTTPS/TLS) to secure data transmitted between your device and our servers. Sensitive information (like passwords) is stored in encrypted or hashed form.

Access Controls

We restrict access to personal data to authorized personnel who have a business need to know. Our staff are trained on data privacy and security practices. Administrative access to systems holding personal data is protected with strong authentication and is logged.

Secure Infrastructure

Our servers are protected by firewalls, network security monitoring, and other industry-standard physical and electronic safeguards. We continuously update and patch our systems and software to address security vulnerabilities.

Testing and Assessments

We periodically review our information collection, storage, and processing practices, and test our security measures. This may include internal audits and, where appropriate, engaging external specialists to conduct security assessments.

Data Minimization

We only collect personal data that we actually need. By minimizing the data we store, we reduce the impact of any potential compromise.

Breach Response

In the unlikely event of a data breach or security incident, we have procedures in place to respond promptly. We will notify you and relevant authorities of any breach affecting your personal data, as required by law (for example, GDPR may require notification to supervisory authorities within 72 hours in certain cases).

Please understand that no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You also play a role in keeping your data secure; we encourage you to use a strong, unique password for your account and to keep it confidential. If you suspect any unauthorized access to your account or personal data, please contact us immediately.

Children's Privacy (Continued)

interpretation. However:

Parental Consent for Young Children

If you are under the age of 13, you should only use the App with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without parental consent. In compliance with laws like the U.S. Children's Online Privacy Protection Act (COPPA), if we learn that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will delete such data as soon as possible.

Minors Aged 13-17

If you are between 13 and 17 (or under the age of majority in your jurisdiction), you may use the App, but we recommend doing so with a parent or guardian's guidance. Some jurisdictions (such as certain EU countries) require parental consent for processing personal data of individuals under a specified age (e.g., under 16). We endeavor to take steps to obtain appropriate consent if required by applicable law. By creating an account or using the App, we presume that you are old enough to do so in your jurisdiction, or that you have obtained any necessary consent.

Content Appropriateness

The content in the App (I Ching readings and dream analysis) is not explicitly directed at young children and is generally philosophical or interpretive in nature. We do not anticipate it to contain harmful or inappropriate material, but parents/guardians should supervise their children's use of the App to ensure it is suitable for them.

Parents' Rights

If you are a parent or guardian and have concerns about your child's personal data, you have the right to request access, correction, or deletion of your child's information. Please contact us at [email protected] if you believe we have collected personal data from a minor without proper consent or if you wish to exercise control over such data.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data. We are committed to honoring these rights. Below is a summary of rights under major privacy regulations and how you can exercise them:

Rights Under Hong Kong PDPO

If you are in Hong Kong, or for all users as a general policy, you have the following rights under the Personal Data (Privacy) Ordinance (PDPO):

Data Access Request

You have the right to ascertain whether we hold any personal data about you, and to request a copy of such data. Upon request and verification of your identity, we will inform you whether we hold your personal data and provide you with a copy of that data. We will respond within the time frame required by PDPO (currently within 40 days of receiving a valid request).

Data Correction Request

If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct it. Upon verifying the accuracy of the new information, we will make the necessary corrections as soon as reasonably practicable.

These requests can be made by contacting us at our email address provided in the Contact section above. We may need to verify your identity and request further details to process your request. Under PDPO, we are permitted to charge a reasonable fee for processing a Data Access Request. If we intend to charge a fee, we will provide an estimate and explain the fee before proceeding, allowing you to confirm whether you want to continue with the request.

Rights Under the GDPR (EEA/UK)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights with respect to your personal data (subject to certain legal limitations):

Right to Access

You can request confirmation of whether we are processing any personal data about you, and if so, request access to that data (commonly known as a "Subject Access Request"). We will provide a copy of your personal data along with relevant details (such as the purposes of processing and the categories of data) in a commonly used format.

Right to Rectification

You have the right to ask us to correct or update any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request that we delete your personal data in certain circumstances. Also known as the "right to be forgotten", this applies, for example, if the data is no longer necessary for the purposes it was collected, or if you have withdrawn consent and we have no other legal basis to continue processing. We will honor valid requests and also forward your deletion request to any third parties who have received your data (if applicable), to the extent required by law.

Right to Restriction of Processing

You can ask us to limit the processing of your personal data in certain situations, such as while we are verifying the accuracy of your data or where you have objected to processing (and we are considering that objection).

Right to Object

You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis. We will stop such processing unless we have compelling legitimate grounds that override your interests, or if we need to continue for legal reasons. If we were to use your data for direct marketing (which we do not currently do), you could object at any time and we would cease.

Right to Data Portability

You can request that certain personal data you have provided to us be delivered to you or a third party in a structured, commonly used, machine-readable format. This right applies to data processed by automated means, based on your consent or in performance of a contract.

Right Not to be Subject to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significant effects for you, unless it is necessary for entering into or performing a contract between us, is authorized by law, or you have given your explicit consent. (Note: The AI interpretations we provide do not have such legal effect on you; they are informational. We do not make decisions affecting your legal rights without human review.)

Right to Withdraw Consent

If we rely on your consent for any part of processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal. For example, you may opt out of receiving any optional communications or withdraw permission for a particular feature.

Right to Lodge a Complaint

If you believe we have infringed your data protection rights, you have the right to complain to a data protection supervisory authority. For instance, UK users can contact the Information Commissioner's Office (ICO), and EU users can contact their local Data Protection Authority. We would appreciate the opportunity to address your concerns directly before you approach a regulator, so please feel free to contact us first.

We will respond to GDPR rights requests within one month, or within up to three months for complex requests (in which case we will inform you of the need for an extension). We may request additional information to verify your identity before fulfilling a request, especially for access, portability, and deletion requests. Some rights may be limited by applicable law; for example, we might retain certain data if necessary for legal compliance even if you request its deletion, but we will inform you if we are unable to fulfill a request for such reasons.

Rights Under CCPA/CPRA (California Residents)

If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you (or an authorized agent acting on your behalf) with the following rights:

Right to Know (Access)

You have the right to request that we disclose the personal information we have collected about you and how we have used and disclosed it. This includes the categories of personal information collected, the categories of sources from which it was collected, the business or commercial purpose for collecting it, the categories of third parties with whom we share personal information, and the specific pieces of personal information we hold about you. This largely corresponds to information provided in this Privacy Policy. Upon receiving and verifying a valid access request, we will provide the requested information covering the 12 months preceding the request (and beyond that period if required by law).

Right to Deletion

You have the right to request that we delete personal information we have collected from you (and direct our service providers to do the same), subject to certain exceptions. For example, we may retain information necessary to complete a transaction you requested, detect security incidents, comply with legal obligations, or other exceptions provided by CCPA. If you choose to delete your account via the App, this will initiate the deletion of your personal information associated with that account.

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you. We will take into account the nature of the information and the purposes of processing and implement the correction if reasonably possible.

Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. However, we do not sell or share your personal information as defined in the CCPA/CPRA. We do not provide your data to third parties for monetary consideration or for targeted advertising purposes. As such, there is no need to opt out; we simply do not engage in these practices. If this ever changes, we will update this Policy and provide a clear mechanism for you to exercise this right.

Right to Limit Use of Sensitive Personal Information

California law gives you the right to limit the use or disclosure of sensitive personal information (such as precise geolocation, racial or ethnic origin, health information, etc.) if a business uses it for purposes beyond what is necessary to provide the services requested. In our case, we do not use or disclose sensitive personal information except as necessary to provide the App's services (for example, if you voluntarily input something sensitive about yourself, we use it only to give you the requested interpretation, not for any separate analysis or profiling). We do not use sensitive data to infer characteristics about you. Therefore, this right is generally not applicable to our practices, since we don't use sensitive data for any secondary purpose. Nonetheless, if you have any concerns, you can contact us to discuss any limitations you may need.

Right of No Retaliation (Non-Discrimination)

We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you goods or services, charge you different prices, or provide a different level of quality of service just because you exercised your privacy rights. (Do note that if the exercise of your rights leads to a situation where we cannot provide certain services – for instance, if you ask us to delete all of your data, we cannot provide the App service to you – we will inform you of such consequences. But this is not retaliation; it is simply a result of the service no longer having the data it needs to function.)

Exercising Your California Rights

If you wish to exercise any of the rights above, please contact us at [email protected] with the nature of your request. We will need to verify your identity (or the authority of your authorized agent) before processing the request. This may involve checking information we have on file, like your email address or other account details. We aim to respond to verifiable consumer requests within 45 days as required by law. If needed, we may take an additional 45 days (for a total of 90 days) but will inform you of the extension and the reason for it.

Notice of Collection (California)

In the past 12 months, we have collected the following categories of personal information from California consumers, directly from you (the user) or your device:

We collect and use these categories of information for the business and commercial purposes described in the How We Use Your Personal Data section of this Policy. We only share this information in ways described in the Disclosure of Your Personal Data section (for example, within Serene Jade and, if applicable, with service providers under contract). As stated, we do not sell or share your personal information as those terms are defined under CCPA/CPRA.

Account Deletion

We provide all users with the ability to delete their account and associated personal data at any time, in line with Apple's requirements and our commitment to user control:

In-App Deletion Feature

You can initiate deletion of your account by using the in-app account deletion option (typically found in your account settings or profile section). We will ask you to confirm this action, as it is irreversible.

Data Removal Process

Once you confirm an account deletion request, we will deactivate your account immediately and commence the process of removing your personal data from our systems. Deletion generally occurs promptly and is often completed within a few days. In any event, we will ensure that all of your personal data is deleted (or irreversibly anonymized) from our active databases within a maximum of 30 days, barring any unforeseen technical delays.

Post-Deletion Data Retention

After your account is deleted, we retain only such information as may be required for legal compliance or necessary for our legitimate business purposes. For example, we might keep a record that a deletion occurred (to have an audit trail of user requests), retain transaction records for accounting, or keep data necessary to resolve disputes or prevent fraud. Any retained information will not be used for any other purpose and will be deleted as soon as those legal obligations or legitimate interests lapse.

Reversing Deletion

Once completed, account deletion is permanent. If you change your mind after deletion, you would need to sign up again as a new user; your old data cannot be recovered.

Alternative Deletion Request

If you are unable to access the in-app deletion feature for any reason, you may also request deletion by contacting us at [email protected]. We will verify your identity for security and then delete your account manually on your behalf.

This process is designed to give you full control over your data and to comply with regulations worldwide that mandate easy account deletion, including Apple's App Store guidelines.

App Privacy Information (Apple App Store Disclosure)

Apple's App Store requires us to summarize our privacy practices in a "privacy nutrition label." For transparency, we provide the same information here. The following are the categories of data that A Little Fish may collect, with their purpose and usage details:

Contact Info and Identifiers

Data Collected: name, email address, username, user ID, and device identifiers.
Purpose: Used for account creation, user authentication, and associating your data (like your readings) with your account; also used for communication (e.g., sending important account-related notifications).
Linked to You: Yes (this data is tied to your identity in the app).
Tracking: No (we do not use this data to track you across apps or websites).

User Content

Data Collected: the questions you ask, the details of your dreams, and any other text or content you input into the App.
Purpose: Used to provide the service (generating divinations and interpretations for you) and to allow you to revisit your content.
Linked to You: Yes (it is stored with your account so you can access your history).
Tracking: No (this content is not used for advertising or tracking purposes).

Usage Data

Data Collected: information about how you use the App (features used, session duration, interaction events) and diagnostic data (crash logs, error reports).
Purpose: Used to ensure the App's functionality, improve performance, fix bugs, and enhance user experience.
Linked to You: This data may be linked to your account or device for short-term use (e.g., crash reports linked to a device identifier), but we typically analyze it in aggregate form for trends.
Tracking: No (we do not use usage data for tracking or advertising).

Purchases

Data Collected: purchase confirmations, subscription status, and related transaction identifiers.
Purpose: Used to manage your subscription (e.g., unlock premium features, remind you of renewal) and provide customer support for purchases.
Linked to You: Yes (tied to your account so we know your entitlement to premium features).
Tracking: No (purchase data is not used for ads or shared beyond what is necessary to validate the transaction with Apple).

Diagnostics

Data Collected: crash logs and performance metrics.
Purpose: Used to maintain app stability and fix technical issues.
Linked to You: Not directly – diagnostics are generally not linked to your personal identity, and any identifiers in them are used only internally for troubleshooting.
Tracking: No.

Location

Data Collected: approximate location may be inferred from your IP address (country or region).
Purpose: Used for service functionality (e.g., language or content localization) and security (e.g., detecting unusual login locations).
Linked to You: Yes, to the extent it is part of your device's connection (we see the IP when you use the service), but we do not store any precise location data or use it to profile you.
Tracking: No (we do not use location for advertising or track you outside the app).

We do not collect data in categories such as Financial Info (no credit card numbers or financial account information are collected by us, as payments are handled by Apple), Health & Fitness data, Sensitive Info (except what you might volunteer in your content, as discussed, which we treat as described and not for external use), Contacts (we do not access your address book), or Browsing History outside of our App. We also do not share any data with third-party advertising or analytics companies. Our use of data is solely for providing and improving the A Little Fish app experience, as detailed throughout this Privacy Policy.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will:

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the App after any modifications to this Policy will signify your acknowledgment of the updated terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

Serene Jade Consulting Group Limited (Privacy Team)
Email: [email protected]

Postal Mail: (If you prefer to write to us via postal mail, please contact us via email to request our current mailing address for privacy inquiries, as our office address in Hong Kong may change.)

We are committed to working with you to promptly resolve any issue or concern about your privacy. Thank you for trusting A Little Fish. We value your privacy and strive to protect your personal data as you seek guidance and insight through our App.