Privacy Policy

Version 1.0 Effective 2026-09-18 Issued by ZHCLOUD LLC

1. Controller

The controller of your personal data is ZHCLOUD LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, Employer Identification Number 98-1969496. Privacy requests go to privacy@e5elements.com.

2. What we collect and why

Every category of personal data we process, with its purpose and lawful basis
Category	Purpose	Lawful basis	Retention
Account data — email, display name, password hash, session tokens, plan status	Create and secure your account, deliver what you paid for, send service notices	Performance of our contract with you	While your account exists
Birth date, time and city; time zone	Generate the optional personalised seasonal timeline you requested	Your explicit consent, given separately	Until you remove it or delete your account
Journal entries, check-in scores, symptom notes, questionnaire answers	Store your own records and produce the descriptive summaries you asked for	Your explicit consent, given separately	Until you delete them or delete your account
Approximate current location, if you enter it	Regional reference for seasonal display only	Your consent; coarsened to roughly 11 km before storage	Until you clear it
Payment records — billing country, card token, amount, order and refund history	Take payment, issue receipts and refunds, meet tax and accounting obligations	Contract, and our legal obligation for tax records	7 years for financial records, as tax law requires
Technical data — IP address, device and browser, error and security logs	Security, abuse and rate limiting, diagnosing faults	Our legitimate interest in running a secure service	30 to 90 days
Product analytics — anonymous identifier, coarse country, page and feature events	Understand which features are used so we can improve them	Your consent for optional analytics cookies	13 months
Push notification token, if you enable reminders	Send the solar-term transition reminders you switched on	Your consent, withdrawable per channel	Until you disable reminders
Support correspondence	Answer your message and keep a record of what we told you	Contract and our legitimate interest in support quality	24 months

3. What we never do

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising.
We do not send birth details, journal text, symptom notes or personal results to advertising platforms, pixels or session-recording tools — not in a request body, not in a URL parameter, not in a custom audience.
We do not use your journal content to train machine-learning models.
We do not use sensitive wellness data for profiling, and we do not make automated decisions with legal or similarly significant effects about you.
We do not require consent to optional analytics in order to let you use the product.

4. Sensitive data and separate consent

Birth time inputs, questionnaire answers, check-ins and symptom notes can reveal information about health. We therefore treat them as special-category or sensitive personal data. We ask for separate, explicit consent before storing anything in this category, we explain what each field is for before you fill it in, and refusing does not lock you out — everything except the personal timeline continues to work without it.

You can withdraw that consent at any time in Settings. Withdrawal is as easy as giving it, and when you withdraw we stop the processing and delete the affected records.

5. Automated processing

Seasonal results come from a versioned, deterministic rule engine: the same inputs always produce the same output. Optional extended commentary only explains a result that already exists and is off by default. None of this is a medical judgement, and it must not be used for decisions about insurance, employment, credit or anything similar.

6. Who else processes your data

We use a deliberately short list of processors. Each is bound by a data processing agreement limiting them to our instructions.

Subprocessors as at 2026-09-18
Processor	Purpose	Data involved	Location
Stripe, Inc.	Card payments, subscription billing and refunds	Name, email, billing country, card token, transaction records	United States
Alibaba Cloud (Singapore) Private Limited	Application hosting, DNS, database and encrypted backups	Account records, journal entries, server and security logs, request metadata	Singapore

We will update this table before adding a processor that handles personal data. If you want to be told when it changes, email privacy@e5elements.com.

7. International transfers

ZHCLOUD LLC is established in the United States and our application infrastructure is in Singapore, so your data will be processed outside your own country. Where personal data moves out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses together with a transfer risk assessment. Mainland-China and international deployments use region-isolated storage, and we do not move sensitive wellness data between regions without telling you and obtaining consent.

8. Your rights

Wherever you live, we offer all of the following. You do not need to cite a statute to use them.

Access — see what we hold about you.
Export — download everything you have entered, in a machine-readable file, directly from Settings.
Correction — fix anything inaccurate.
Deletion — permanently delete your account and its contents from Settings.
Withdraw consent — for sensitive data, analytics, reminders or marketing, each independently.
Restriction and objection — ask us to pause or stop a particular processing activity.
Portability — receive your data in a structured, commonly used format.
Non-discrimination — exercising any of these rights will never degrade the service you receive or the price you pay.
Complain — to us first, please, and to your local supervisory authority if we fail you.

Most of these are self-service and immediate. For anything you would rather we did for you, write to privacy@e5elements.com; we respond within 30 days, and sooner where the law requires it. Step-by-step instructions are on the your data page.

9. California residents

We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is no opt-out for us to offer — but we honour the Global Privacy Control signal regardless. We limit our use of sensitive personal information to providing the service you requested. You may exercise the access, correction, deletion and portability rights above without discrimination, and you may use an authorised agent.

10. Children

WuJi is for adults aged 18 and over. We do not knowingly collect personal data from children. If we learn that we have, we delete it promptly. If you believe a child has given us data, contact privacy@e5elements.com.

11. Security

We encrypt data in transit, restrict production access to the minimum number of people, require multi-factor authentication for administrative access, isolate sensitive wellness records from marketing identifiers, rate-limit our endpoints and keep audited backups. We keep symptom and birth details out of URLs, application logs, crash reports and support ticket subject lines. No system is perfectly secure; our practices and how to report a vulnerability are described on the security page.

12. Breach notification

If personal data is exposed in a way that creates a risk to you, we will notify you and the relevant authorities within the deadlines that apply to us, and we treat an unauthorised disclosure of wellness information to any third-party tool as a reportable incident rather than a bug.

13. Cookies

Strictly necessary cookies keep you signed in and protect the site. Optional analytics cookies are off until you accept them, refusing is exactly as easy as accepting, and you can change your mind at any time. Details are in the cookie policy.

14. Changes

The version and effective date at the top of this page show the current release. For material changes we notify you in advance by email and, where the change relies on consent, we ask for it again rather than assuming the old consent carries over.

Contact for this document

ZHCLOUD LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Privacy requests and questions: privacy@e5elements.com.