Privacy Policy

Last updated: October 4, 2026

Business Town (“the app”, “we”) is a digital business-card app, operated by Aurelian Ocean Investment LLC, that lets you exchange contact cards and share an approximate, privacy-protected location (“your town”) with contacts you choose. Aurelian Ocean Investment LLC is the data controller for the personal data described here. This policy explains what we collect, why, and your choices. We do not sell your data, show ads, or track you across other apps or websites.

What we collect

Account info — your email address and the identifier from your sign-in method (Sign in with Apple, Google, email code, or email/password), used to create and secure your account.
Your business card — the name, job title, company, phone, email, website, address, and profile photo you choose to enter. This is shown to people you exchange cards with.
Approximate location (“your town”) — when you enable location sharing, the app determines your location on your device, masks and randomizes it to a wide (~8 km) area before it leaves your phone, and end-to-end encrypts it so that only the contacts you’ve approved can decrypt it and see the masked location. Our servers store only encrypted data and never have access to your real or precise location. Your exact GPS position is never transmitted. On Android, when city sharing is enabled and you allow location access “all the time”, the app may update your masked town in the background a few times an hour while it is not on screen; you can stop this at any time by pausing city sharing or changing the app’s location permission.
Messages, photos and voice messages you send in chat — these are end-to-end encrypted on your device before they’re sent. Our servers store only the encrypted data and cannot read or listen to them. Encrypted photos and voice recordings are kept on the server for a short time (about 7 days) so they can be delivered, then deleted. The app uses the microphone only while you hold the record button to make a voice message.
Chat history backup (optional) — to keep your chat history readable on a new or reinstalled device, your device’s encryption key can be backed up. On iPhone it is kept in iCloud Keychain, and on Android in Google Block Store, both end-to-end encrypted by Apple or Google with your device passcode or screen lock. If you create a recovery code, an encrypted copy of the key is also stored with your account; it is encrypted on your device with the recovery code, which never leaves your device, so we cannot open it. You can replace the code at any time, and deleting your account deletes the backup.
Reports you submit — if you report a message, user, or Pickary-generated reading, you share your own copy of the reported content with us so we can review it. A Pickary report includes the generated reading and session identifier, but not the original question you entered. We use reports only for safety and moderation (see “How we use data”).
Nicknames you assign to contacts are stored privately with your account so they can sync across your devices. They are visible only to you and are never shown to the contact.

We do not collect your device’s contacts/address book. The app requests Contacts access only to save a card you choose into your own address book, and to let you pick a contact to update — it does not read or upload your contact list.

How we use data

To provide the core features: card exchange, your contact wallet, and masked-location sharing with people you connect with.
To authenticate access to Pickary, generate a chart and interpretation from your question, resume an interrupted reading, and enforce service limits.
To send account emails (sign-up confirmation, password reset).
To keep the service safe: reviewing content or users you report, and acting on violations (for example, removing content or accounts). Because messages are end-to-end encrypted, we can review reported content only from the copy a reporter chooses to share with us.
We do not use your data for advertising or cross-app tracking.

Who can see your data

Your card is visible to people you exchange cards with.
Your masked location is visible only to contacts you have approved, and only while sharing is enabled and not paused. Because it is end-to-end encrypted, no one else — including us and our hosting provider — can read it.
Your exact GPS position is never transmitted out of your phone.
You can pause sharing at any time, and removing a contact revokes their ability to see your masked location immediately.

Where data is stored and processed

Account and card data, and encrypted masked-location and chat data, are stored using our backend provider, Supabase (hosted in Singapore). Pickary sessions are processed by our service hosted on Tencent Cloud and, when an AI interpretation is generated, by DeepSeek. DeepSeek states that it processes and stores personal data in the People’s Republic of China; see DeepSeek’s Privacy Policy. Maps and place search use Google Maps on Android and Apple Maps on iOS. In mainland China, the Android app uses AMap (高德地图) for the map, place search and location; AMap’s SDK processes your device’s location and device information to provide these services — see AMap’s privacy policy. Data is transmitted over encrypted connections (HTTPS).

Your choices and rights

Edit or delete your card details anytime in the app.
Pause or stop location sharing anytime in Settings.
Remove contacts to cut off their access.
Delete your account and server data — in the app, go to Settings → Delete Account to permanently delete your Business Town account and associated server data yourself. You can also contact us at support@businesstown.app and we will delete it for you.
Delete saved Pickary readings individually in the app. Deleting your account does not automatically erase reading files already stored on your device; delete those readings before deleting the account, or delete the app to remove its local data.
Depending on your region (e.g. GDPR/CCPA), you may have rights to access, correct, or delete your personal data; contact us to exercise them.

Pickary (I Ching readings)

Pickary is an optional feature within Business Town for I Ching (Liuyao) readings. It requires a signed-in Business Town account. We verify your account identity to authorize each request and apply service limits, but the Pickary session database does not store your Business Town user identifier. Pickary does not receive your business card, contacts, chats, or location.

What we process — the question you ask; both choices for a two-option reading; your selected reading language; your device time zone; and the chart and interpretation generated in response.
AI interpretation — your question and relevant chart context are sent to DeepSeek, a third-party AI provider, to generate the written interpretation. Do not include personal or sensitive information in your question that you do not want processed for this purpose.
Server storage and retention — a reading session is retained for about one hour so an interrupted request can resume, then removed during automatic cleanup. Persisted session content, including the question and generated interpretation, is encrypted at rest using AES-256-GCM.
Encryption limits — Pickary data is encrypted in transit and at rest, but it is not end-to-end encrypted. Our service must decrypt and process the content in memory, and DeepSeek must receive the content needed to generate an interpretation.
Saved readings — up to 30 recent readings are stored on your device in an archive separated by Business Town account. They may be included in your normal device backup and remain there until you delete the reading or delete the app.
Reports — if you report an AI-generated reading, its generated text and session identifier are stored with your Business Town user identifier in our Supabase moderation queue. The original question is not included. Reports are retained as needed to investigate abuse and maintain service safety.
We do not use Pickary for advertising or cross-app tracking, and nothing here is sold.

Children

Business Town is not directed to children under 13 (or the applicable age in your region) and we do not knowingly collect their data.

Security

We use HTTPS in transit. Masked-location data and chat messages, photos and voice messages use end-to-end encryption (Curve25519/X25519 key agreement with ChaCha20-Poly1305), so that content is unreadable to our servers. Pickary sessions use server-side encryption at rest as described above because the service must process their contents.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

Questions or data requests: support@businesstown.app

← Business Town

隐私政策

最后更新：2026 年 10 月 4 日

Business Town（“本应用”或“我们”）是由 Aurelian Ocean Investment LLC 运营的电子名片应用，让你能够交换联系名片，并与自己选择的联系人分享经过隐私保护的大致位置（“你的城市”）。Aurelian Ocean Investment LLC 是本政策所述个人数据的数据控制者。本政策说明我们收集哪些数据、使用原因以及你可以作出的选择。我们不会出售你的数据、展示广告，也不会跨其他应用或网站跟踪你。

我们收集的数据

账户信息 — 你的电子邮箱地址，以及登录方式（通过 Apple 登录、Google 登录、邮箱验证码或邮箱密码）提供的标识符，用于创建和保护你的账户。
你的电子名片 — 你选择填写的姓名、职位、公司、电话号码、电子邮箱、网站、地址和头像。这些信息会显示给与你交换名片的人。
大致位置（“你的城市”） — 启用位置分享后，本应用会在你的设备上确定位置，在位置离开手机前将其模糊并随机化到约 8 公里的较大范围，然后进行端到端加密，只有你批准的联系人才能解密并查看该模糊位置。我们的服务器只存储加密数据，无法访问你的真实或精确位置。你的精确 GPS 位置绝不会被传输。在 Android 上，启用城市分享并允许“始终”使用位置后，即使应用未显示在屏幕上，应用也可能每小时在后台更新几次你的模糊城市位置；你可以随时暂停城市分享或更改应用的位置权限来停止更新。
你在聊天中发送的消息和照片 — 这些内容会先在你的设备上进行端到端加密，然后再发送。我们的服务器只存储加密数据，无法读取你的消息或照片。加密照片会在服务器上短期保存（约 7 天）以便送达，之后会被删除。
聊天记录备份（可选） — 为了在新设备或重新安装后仍能读取聊天记录，你设备的加密密钥可以被备份。在 iPhone 上它保存在 iCloud 钥匙串中，在 Android 上保存在 Google Block Store 中，均由 Apple 或 Google 使用你的设备密码或屏幕锁进行端到端加密。如果你创建了恢复码，密钥的一份加密副本还会随你的账户保存；它在你的设备上用恢复码加密，而恢复码从不离开你的设备，因此我们无法打开它。你可以随时更换恢复码，删除账户会同时删除该备份。
你提交的举报 — 如果你举报消息、用户或 Pickary 生成的解读，你会向我们提供你自己持有的被举报内容副本，以便我们审核。Pickary 举报包含生成的解读和会话标识符，但不包含你输入的原始问题。我们只将举报用于安全与内容管理。
你为联系人设置的昵称会随你的账户私密存储，以便在你的设备之间同步。昵称仅对你可见，绝不会显示给该联系人。

我们不会收集你设备中的通讯录。本应用请求通讯录权限，只是为了将你选择的名片保存到你自己的通讯录，以及让你选择要更新的联系人；本应用不会读取或上传你的联系人列表。

我们如何使用数据

提供核心功能：交换名片、联系人名片夹，以及与已连接的人分享模糊位置。
验证 Pickary 的访问权限、根据你的问题生成卦象和解读、恢复中断的解读，以及执行服务使用限制。
发送账户相关邮件（注册确认、密码重置）。
维护服务安全：审核你举报的内容或用户，并对违规行为采取措施（例如移除内容或账户）。由于消息采用端到端加密，我们只能查看举报人主动提供的内容副本。
我们不会将你的数据用于广告或跨应用跟踪。

谁可以看到你的数据

你的名片会显示给与你交换名片的人。
你的模糊位置仅对你批准的联系人可见，并且只在位置分享已启用且未暂停时可见。由于采用端到端加密，包括我们和托管服务商在内的其他任何人都无法读取该位置。
你的精确 GPS 位置绝不会离开你的手机。
你可以随时暂停分享；移除联系人会立即撤销对方查看你模糊位置的权限。

数据的存储和处理地点

账户和名片数据，以及经过加密的模糊位置和聊天数据，使用我们的后端服务商 Supabase 存储（托管于新加坡）。Pickary 会通过我们托管在腾讯云上的服务处理解读会话；生成 AI 解读时，数据还会由 DeepSeek（深度求索）处理。DeepSeek 表示其会在中华人民共和国处理和存储个人数据；请参阅 DeepSeek 隐私政策。地图和地点搜索在 Android 上使用 Google 地图，在 iOS 上使用 Apple 地图。在中国大陆，Android 应用使用高德地图提供地图、地点搜索和定位服务；高德 SDK 会处理你设备的位置信息和设备信息以提供这些服务，详见高德地图隐私政策。数据通过加密连接（HTTPS）传输。

你的选择和权利

随时在应用中编辑或删除你的名片信息。
随时在“设置”中暂停或停止位置分享。
移除联系人以终止其访问权限。
删除你的账户和服务器数据 — 在应用中前往设置 → 删除账户，即可永久删除你的 Business Town 账户及相关服务器数据。你也可以通过 support@businesstown.app 联系我们，由我们为你删除。
删除已保存的 Pickary 解读 — 你可以在应用中逐条删除。删除账户不会自动清除已经存储在设备上的解读文件；请在删除账户前先删除这些解读，或删除本应用以清除其本地数据。
根据你所在的地区（例如 GDPR/CCPA 适用地区），你可能有权访问、更正或删除个人数据；请联系我们以行使这些权利。

Pickary（易经六爻解读）

Pickary 是 Business Town 中可选择启用的易经（六爻）解读功能。使用该功能需要登录 Business Town 账户。我们会验证你的账户身份以授权每次请求并执行服务使用限制，但 Pickary 的会话数据库不会存储你的 Business Town 用户标识符。Pickary 不会接收你的电子名片、联系人、聊天内容或位置。

我们处理的内容 — 你提出的问题；双选解读中的两个选项；你选择的解读语言；设备时区；以及据此生成的卦象和解读。
AI 解读 — 你的问题及相关卦象信息会发送给第三方 AI 服务商 DeepSeek，用于生成文字解读。请勿在问题中填写你不希望为此目的而被处理的个人信息或敏感信息。
服务器存储和保留期限 — 解读会话会保留约一小时，以便恢复中断的请求，随后在自动清理时删除。持久化保存的会话内容（包括问题和生成的解读）使用 AES-256-GCM 进行静态加密。
加密的限制 — Pickary 数据在传输和静态存储时均经过加密，但不属于端到端加密。我们的服务必须在内存中解密并处理内容，DeepSeek 也必须接收生成解读所需的内容。
已保存的解读 — 最近最多 30 条解读会存储在你的设备上，并按 Business Town 账户分别保存。这些内容可能包含在设备的正常备份中，并会保留到你删除相应解读或删除本应用为止。
举报 — 如果你举报 AI 生成的解读，其生成文字和会话标识符会与 Business Town 用户标识符一起存入我们的 Supabase 内容审核队列。举报中不包含原始问题。举报会根据调查滥用行为和维护服务安全的需要予以保留。
我们不会将 Pickary 用于广告或跨应用跟踪，也不会出售其中的数据。

儿童

Business Town 不面向 13 岁以下儿童（或你所在地区规定的最低年龄），我们不会故意收集其数据。

安全措施

我们使用 HTTPS 保护传输中的数据。模糊位置数据以及聊天消息和照片采用端到端加密（Curve25519/X25519 密钥协商和 ChaCha20-Poly1305），因此我们的服务器无法读取这些内容。由于 Pickary 服务必须处理会话内容，其会话采用上述服务器端静态加密方式。

政策变更

我们可能会更新本政策；重大变更将通过上方的“最后更新”日期体现。

联系我们

如有问题或数据请求，请发送邮件至：support@businesstown.app