LaWhis Privacy Policy

Last updated: October 23, 2026　Effective: October 23, 2026

This policy explains how Shaanxi Aiyou Technology Co., Ltd. ("we") collects, uses, shares, stores and protects your personal information when you use LaWhis (full name Last Whisper), and what rights you have and how to exercise them.

It applies to the LaWhis apps for iPhone, iPad, Mac, Apple Watch, Android and HarmonyOS (including widgets and share extensions), and to the website lawhis.com and its documentation center. Services provided to you directly by other companies within the app are governed by their own privacy policies.

Sensitive personal information is shown in bold. Sensitive personal information is information that, once leaked or misused, can easily harm a person's dignity or endanger their personal or property safety.

This English version is provided for reference. If it differs from the Simplified Chinese version, the Simplified Chinese version prevails.

Who we are

What personal information is

Personal information is any information, recorded electronically or otherwise, relating to an identified or identifiable natural person. It does not include information that has been anonymized.

In this policy, phone numbers, precise location, private chat content, calls, date and time of birth, and voice recordings are sensitive personal information. We process them only when necessary for the corresponding feature and tell you separately before doing so.

Your rights

You have the following rights over your personal information. Most can be exercised directly in the app; for the rest, email privacy@lawhis.com. We will reply within 15 working days after verifying your identity.

Withdrawing consent does not affect processing carried out on the basis of your consent before the withdrawal. We may decline requests that are repeated many times or clearly exceed reasonable limits, except where the law requires otherwise.

Personal information we collect

We follow the principles of lawfulness, legitimacy, necessity and good faith, and collect only what each feature needs. Each feature is described below. If you do not use a feature, we do not collect the information for it.

Account and sign-in

To register and sign in, you need to provide your phone number and confirm it with a text message verification code. This is required by Chinese law on real-name management of online services and also protects your account. Without a phone number you cannot register or sign in. Verification codes are sent through Tencent Cloud SMS.

To keep your account secure and manage signing in on multiple devices, we record for each sign-in the device type and model, system version, app version, an in-app device identifier (IDFV on Apple devices), IP address, the approximate region derived from the IP address, and sign-in and sign-out times. You can view and remove signed-in devices under Settings > Account & Security > Device Management.

One account can be signed in on one phone, one tablet and one computer at the same time. Signing in on a new device of the same type signs out the previous one.

Profile

You may choose to provide an avatar, background image, nickname, LaWhis ID, bio, gender, birthday, region and personal website. None of these are required, and leaving them blank does not affect other features. Your nickname, avatar and bio are shown to other users on your profile and with your content.

Under Settings > Privacy you can control who can see your likes and your following and follower lists, who can comment on your posts, and whether others can find you by phone number.

Community

When you publish posts, videos or comments, we collect the text, photos, videos, Live Photos, voice and publishing time. Posts can be set to "Public" or "Friends Only". Public content can be seen by all users and may be reposted, so please do not reveal your own or others' sensitive personal information in public content.

When you add a location to a post, we access your precise location to show nearby places for you to choose from; only the place name you choose is shown in the post. Place search and address lookup are performed by Apple's map services.

As required by Chinese regulations, we determine your approximate location from your IP address (province within mainland China, country or region elsewhere) and display it as "IP location" with your comments and similar content.

We also record likes, favorites, follows and reposts for display and statistics. We show you content you may be interested in based on how you use the app; you can turn off "Personalized Recommendations" under Settings > Privacy.

Friends, private chat and calls

When you add friends, we record the friendship, how and when it was added, the remark names and custom avatars you set, and your block and mute settings.

Private chat messages you send (text, photos, videos, voice, files, and locations you choose to share) are stored on our servers so they can be delivered and synchronized across your devices. Private chat content is stored encrypted on our servers. We do not view private chat content except where you or the other party report the chat and select the relevant messages, or where the law requires it.

During voice or video calls, we connect the two devices directly when possible for better call quality, in which case the other party may see your network (IP) address; when a direct connection is not possible, the call is relayed through our servers. We do not record calls.

LaWhis Bot and AI features

LaWhis Bot is the in-app AI assistant and is available to every signed-in user. When you use LaWhis Bot, readings in LaWhis Fortune (Bazi), coaching in Yuduoduo, nickname generation and other AI features, we send the content needed to generate a reply to the Doubao large language model service provided by Beijing Volcano Engine Technology Co., Ltd. — for example, the messages you send, the birth information and chart needed for a Bazi reading, or your Yuduoduo practice content.

Reading your own data. When "LaWhis Bot settings > Data & Privacy > Allow Access to My Data" is on (it is on by default), LaWhis Bot can read your notes, saved items, to-dos and "memories" when it answers questions or runs scheduled tasks you set up. When it is off, LaWhis Bot answers only from the conversation. "Memories" are useful facts LaWhis Bot notes from your conversations; you can view and delete them in "LaWhis Bot settings > Data & Privacy > Manage memories".

Features that involve private chats. When you register, a LaWhis Bot is created for you automatically. The features below read your private chats with other people — including the exact words they sent you — and send them to the language model. Except for "Reply to friends for you", "Reply to strangers for you" and "@ your own LaWhis Bot in a chat", where LaWhis Bot sends a reply, the results are shown only to you, as cards or messages in your conversation with LaWhis Bot. Before LaWhis Bot sends a message to someone on your behalf, it asks you to confirm.

The private messages you send a friend may also be processed by your friend's LaWhis Bot as described above, and only your friend sees the results; replies sent by a LaWhis Bot are shown as coming from your friend's LaWhis Bot. Promise records (the item and up to 500 characters of the original wording), cards and memories are kept in the owner's account, and the owner can view, complete or remove them in LaWhis Bot.

Usage records. We record the usage of each AI request (number of tokens, the feature and the time) to calculate the LaWhis Bot usage included in your subscription. You can see this month's usage and details in "LaWhis Bot settings".

Official account LaWhis. The app has an official Bot account named "LaWhis", marked with a "Bot" label and a blue verified badge after its name. Each day it posts inspirational content to the community, including AI-written original affirmations and topics, classical Chinese quotes chosen from a curated list of public-domain works, and official announcements. When you @LaWhis in a comment or comment on its posts, it may reply using AI, and your comment is sent to the Doubao large language model service described above for processing; if a comment shows signs of self-harm, it replies with a fixed message that includes psychological assistance hotlines.

AI-generated content labels. In accordance with the Measures for Labeling AI-Generated and Synthetic Content, Bot accounts show a "Bot" label after their name, which marks their posts as coming from an AI account; AI-written comments (including official AI replies) show an "AI-generated content" label; and the content data also carries a hidden AI-generated mark.

DID records. The platform issues every account, including yours and your LaWhis Bot's, a lifelong DID (identity number) that serves as the account's unique internal number for identification and tracing. We keep records of each DID's issuance, of a Bot's owner, and of deactivation; these records are only ever added to, never changed. Only you can see your DID (Settings › Account Security › My DID), and only its owner can see a LaWhis Bot's DID; other people see your LaWhis ID, which you can change. When an account is deleted its DID is retired and never assigned to another account; when an owner deletes their account, their LaWhis Bot is shown as "Deleted".

AI-generated content is produced automatically by the model, may be inaccurate, is for reference only and is not medical, legal, financial or other professional advice. We do not use your content to improve our products and services without your separate consent.

Yuduoduo

When you read aloud in Yuduoduo, we collect your read-aloud recordings and send them to Tencent Cloud speech recognition for pronunciation scoring. If the scoring service is temporarily unavailable, Apple's on-device speech recognition is used instead. We also store your learning progress, review records, check-ins and points.

LaWhis Fortune and Calendar

LaWhis Fortune requires your date and time of birth. You may also provide your gender, place of birth (used to correct for true solar time) and a profile name. You may create profiles for other people; in that case, please make sure you have their consent. The same applies to profiles used for choosing auspicious dates in the calendar. The compass reads your device's heading sensor on the device only and does not upload it.

Location

Apart from adding a location to a post and sharing a location in private chat as described above, we use location only on your device when you use the compass, to correct its direction. Location access is requested only while you are using the app. You can turn it off in system settings at any time without affecting other features.

Notes, favorites and Pomodoro

When you use notes, favorites, the Pomodoro timer and similar tools, we store what you create and your settings so they sync across your devices, widgets and Apple Watch. Deleted notes are moved to Recently Deleted for 30 days, during which you can restore them; after that they are permanently deleted.

Aiyouhome property services

Aiyouhome is a property service we provide. When you link Aiyouhome in the app, LaWhis confirms to the Aiyouhome system that the phone number belongs to you, so you do not need to receive another verification code. Your property information (such as homes and orders) is transmitted and stored between the app and the Aiyouhome system under Aiyouhome's rules. If you do not link Aiyouhome, none of this processing takes place.

Reports, complaints and feedback

When you report content or a user, we collect the reported content, the reason and description you provide, any images you upload, and snapshots of the chat messages you select, in order to verify and handle the report. We do not tell the reported user who made the report. When you submit feedback, we collect its content and your contact details.

Subscriptions

When you start a LaWhis subscription (Plus, Pro or Max, renewing automatically each month or year) through Apple's in-app purchase, payment is handled by Apple and we do not receive your card or other payment details. We receive and verify Apple-signed transaction information — the product, transaction ID, original transaction ID, expiration date and whether it was refunded — to activate and manage your subscription benefits. A subscription started on one platform also works on your other devices and platforms when you sign in with the same account.

Device information, logs and usage statistics

To keep the service stable and secure, troubleshoot problems and improve the product, we collect device model, system version, app version, language and time zone, IP address, network request logs, and records of how you use the app, such as pages viewed and buttons tapped. Usage statistics are processed on our own servers; we do not use third-party analytics or advertising tools.

We do not use the advertising identifier (IDFA), do not track you across apps, and do not collect the list of apps on your device.

Push notifications

To notify you of new messages, interactions and system notices, we associate your device's push token with your account and send notifications through Apple Push Notification service (Apple devices) or Huawei Push (HarmonyOS devices and Huawei Android phones). You can turn notifications off in system settings or under Settings > Privacy.

How we use personal information

We use personal information only for the following purposes:

• To provide the features you choose to use, including your account, community, private chat and calls, AI features, tools and subscriptions
• To keep accounts and the service secure, and to identify and handle illegal content, fraud, spam and unusual sign-ins
• To handle your reports, complaints, appeals, feedback and personal information requests
• To send you service notifications
• To analyze how the service is used, troubleshoot problems and improve the product
• To meet our legal obligations and respond to lawful requests from competent authorities

If we need to use personal information for a purpose not described in this policy, we will tell you and obtain your consent first.

To maintain a healthy community, the text and videos of posts you publish publicly, the feedback you submit and the LaWhis ID you set are checked automatically by Tencent Cloud content moderation and may be reviewed by our staff.

Under the Personal Information Protection Law of the People's Republic of China and other laws, your consent is not required in the following cases:

• Where necessary to conclude or perform a contract to which you are a party
• Where necessary to perform statutory duties or obligations
• Where necessary to respond to public health emergencies, or to protect a person's life, health or property in an emergency
• Where personal information is processed within a reasonable scope for news reporting or public opinion supervision in the public interest
• Where personal information that you have made public, or that has otherwise been lawfully made public, is processed within a reasonable scope
• Other cases provided for by laws and administrative regulations

How we share, entrust, transfer and disclose personal information

We do not sell your personal information.

Entrusted processing and service providers

To provide our features, we entrust or use the following service providers to process the necessary personal information, and require them by agreement to process and protect it in line with our instructions and the law. The full list is in Appendix 1.

• Tencent Cloud: servers, databases, file storage, SMS, speech recognition, content moderation and IP location lookup
• Beijing Volcano Engine Technology Co., Ltd.: the large language model service used by AI features
• Apple: push notifications, maps and place search, system speech recognition and In-App Purchase
• Huawei: push notifications on HarmonyOS devices and Huawei Android phones

Sharing required by law

Where laws or regulations require, or judicial or administrative authorities lawfully request, we may provide the relevant personal information. We review the lawfulness of such requests and provide only what is necessary.

Information you make public

Posts, comments and profile information you make public can be seen by all users. Content you share to other apps is governed by those apps' rules.

Transfers

If personal information needs to be transferred because of a merger, division, dissolution, bankruptcy or similar event, we will tell you the name and contact details of the recipient. The recipient will continue to be bound by this policy; if it changes the original purpose or method of processing, it will obtain your consent again.

Public disclosure

Except for content you make public yourself and cases required by law, we do not publicly disclose your personal information.

Third-party links

Pages in the app such as reading and shopping may link to other companies' websites or apps (such as e-commerce and reading platforms). Once you leave LaWhis, their privacy policies apply.

How we protect personal information

We have taken the following security measures:

• All communication between the app and our servers is encrypted with HTTPS, and the app verifies the server certificate to prevent impersonation or eavesdropping
• Private chat messages are stored encrypted on our servers
• Sign-in credentials stored on your device are kept in the system keychain
• The admin system grants permissions by role, so that only staff who need to can process the data they need, and all administrative actions are logged for audit
• Data is backed up regularly, and backups are encrypted and stored in a separate location

No environment on the internet is completely secure. If a personal information security incident occurs, we will take remedial measures immediately and, as required by law, tell you what happened, the possible impact, the measures we have taken or will take, and what you can do to protect yourself. If we cannot notify everyone individually, we will publish a notice. We will also report the incident to the competent authorities as required by law.

Please keep your phone and verification codes safe, and never share a verification code with anyone, including people claiming to be LaWhis staff.

Retention, deletion and account deletion

We keep your personal information only for the shortest period necessary for the purposes of processing, unless laws or regulations require otherwise.

• When you delete a post or comment, it is deleted from our servers together with its photos, videos and other files
• Deleted notes are kept for 30 days so you can restore them, then deleted
• Deleting chat history on your device affects only your device and account; the other party's copy is not affected
• Network logs are kept for at least six months, as required by the Cybersecurity Law of the People's Republic of China
• Evidence needed to handle reports, complaints and disputes is kept until they are resolved, or longer where the law requires

Deleting your account

You can request account deletion under Settings > Account & Security > Delete Account. You need to verify your phone number before submitting. Your account then enters a 30-day cooling-off period: the account cannot be used, and you can sign in at any time to cancel the deletion and restore your account.

When the cooling-off period ends, we delete your account and personal information, including your profile and avatar, posts and comments and their files, likes, favorites and follows, friendships, notes, learning records, your LaWhis Bot and its related data, and device and push information. Private messages you sent to other users are deleted from your account; in the other party's chat history they will no longer show your identity and will appear as from a "Deleted User".

After deletion, the same phone number can be used to register again, but the original account's data cannot be recovered. To prevent people from deleting and re-registering to evade penalties, we keep a one-way encrypted value that cannot be turned back into your phone number. Information that laws or regulations require us to keep is kept for the required period and then deleted.

Minors

LaWhis is intended for adults aged 18 and over. Minors should not register or use it.

If we discover that we have collected personal information of a child under 14 without prior consent from a guardian, we will delete it as soon as possible. Guardians who become aware of such a case can contact us at privacy@lawhis.com.

On-device storage and similar technologies

The app stores sign-in credentials, settings, drafts, and image and data caches on your device to keep you signed in, remember your settings and load content faster. Signing out removes the sign-in credentials from your device; deleting the app removes the data it has stored on your device.

The website and documentation center use only the storage needed for them to work (such as language and display settings) and do not use advertising or tracking cookies.

Where personal information is stored

Personal information collected and generated within the People's Republic of China is stored within the People's Republic of China and is not provided outside it. If it ever becomes necessary to provide it outside the country, we will tell you as required by law, obtain your separate consent, and complete the security assessment and other procedures the law requires.

Changes to this policy

We may update this policy as features change and as laws, regulations and regulatory requirements change. When we do, we will publish the new version on this page with its date. For material changes, we will notify you prominently in the app, for example with a pop-up; where your consent is required, we will process information under the new policy only after you agree.

Material changes include changes to the purposes, methods or types of personal information processed; changes to the parties to which personal information is provided; changes to how you exercise your rights; and changes to our contact details and complaint channels.

Contact us

If you have any questions, comments or complaints about this policy or your personal information, contact our personal information protection officer at privacy@lawhis.com. We will reply within 15 working days after verifying your identity.

You may also write to: Personal Information Protection Officer, Shaanxi Aiyou Technology Co., Ltd., Room 606, 6th Floor, Building E2, Phase I, Western Cloud Valley, Fengxi New City, Xixian New Area, Shaanxi, China.

If you are not satisfied with our reply, or believe our processing infringes your lawful rights and interests, you may complain to the cyberspace, public security, market regulation or other competent authorities, or bring a lawsuit before the competent people's court at the domicile of Shaanxi Aiyou Technology Co., Ltd.

Appendix 1: Third-party sharing list

Appendix 2: Device permissions

The app requests a permission only when you use the related feature. Declining or turning off a permission affects only that feature.