Privacy Policy

This policy explains how your personal information is handled when you visit this website, email me, or order a Personal 7-Day Plan. It is written to be readable — please contact me at hi@ai5ai.cc if anything is unclear.

Who is responsible for your data

The data controller for this website is:

Lianping County Shangping Town Baiyang Health Consulting Studio
No. 8 Kanxia, Dongnan Village, Shangping Town,
Lianping County, Heyuan, Guangdong, China
Email: hi@ai5ai.cc

If you have any question about how your information is handled, or you would like it deleted, write to the address above.

1. Who is responsible for your information

Zhongyang is an independent educational wellness brand based in Guangdong, China, publishing English-language guidance on traditional Chinese medicine (TCM) self-care. In this policy, "I", "me" and "we" mean Zhongyang; "you" means the person visiting this website or ordering a plan. For any privacy question or request, write to hi@ai5ai.cc.

2. What I collect

Information you give me directly

• Your email address — so I can send your plan and reply to you.
• Your tongue photo — one or more photos you choose to upload or email to me.
• Your questionnaire answers — the 10 self-observation questions about sleep, energy, digestion, temperature preference and similar topics.
• Anything else you write to me — for example your first name, your country or time zone, and the content of your emails.

Order and payment information

When you pay, the payment is processed by PayPal. I receive confirmation that a payment was made, together with the amount, the date, and the email address attached to that payment. I never see or store your card number, bank details or PayPal password — those stay with PayPal at all times.

Technical information collected automatically

Like almost every website, this one is served through a hosting provider (Cloudflare) that records basic request data such as IP address, browser and device type, the pages requested and timestamps. This is used for security, abuse prevention and site performance. I do not use it to build advertising profiles.

Newsletter

If you subscribe to the newsletter, I store your email address and the date you subscribed, solely to send you the emails you asked for. Every newsletter contains a one-click unsubscribe link.

3. Your tongue photo: what it is used for

I collect the tongue photo you send for one purpose only: to prepare your Personal 7-Day Plan. There is no other use for it.

In practice, this means your photo is:

• stored in a private, access-controlled location that is not publicly reachable;
• used to draft your plan with the help of software tools, and then read and reviewed by Zhongyang before the plan is sent to you;
• never sold, rented, published, posted on social media, or used in advertising;
• never added to a public gallery, case library or testimonial page without your separate, written, specific permission — and you may withdraw that permission at any time.

4. How I use your information

• To prepare, review and deliver your Personal 7-Day Plan.
• To answer your emails and follow-up questions.
• To confirm payment and to issue a refund if you request one (see the Refund Policy).
• To keep basic accounting and tax records, as the law requires.
• To keep the website safe and working, and to prevent abuse.
• To send newsletters and occasional updates — only if you opted in, and always with an unsubscribe link.

I do not sell your personal information, and I do not share it with anyone for their own marketing purposes.

5. Why I am allowed to hold your information

Depending on where you live, data protection law may require a stated reason ("legal basis") for holding your information. Mine are:

• Your consent — for your tongue photo, your questionnaire answers and the newsletter. You can withdraw consent at any time.
• Performing our agreement — delivering the Personal 7-Day Plan you ordered and paid for, and handling refunds.
• Legitimate interests — keeping the site protected, preventing fraud and abuse, and keeping basic business records.
• Legal obligation — retaining payment and tax records for the period the law requires.

Health information receives extra protection. Your tongue photo and your answers are information about your health. Under data protection law — including the EU and UK GDPR — this is called special category data, and it is treated more strictly than ordinary personal information. The legal basis I rely on for it is your explicit consent, given by ticking the consent box before you send anything. That is why that box is separate from the rest of the form, and why you can withdraw your consent at any time. I ask for no more than I need: you may crop your photo to the tongue and mouth area, and your face is not required.

6. Where your information is stored, and for how long

This website is hosted on Cloudflare Pages, and email is delivered through Resend. Both are established service providers that may store data on servers outside your own country, including in the United States and the European Union. PayPal processes payments on its own infrastructure. Where required, these transfers rely on the providers' standard contractual safeguards.

Transfers outside the EU or UK. I am based in China, so information you send me is stored and worked on there. If you are in the European Economic Area, the UK, or Switzerland and your information is transferred to a country without an adequacy decision, the transfer relies on the Standard Contractual Clauses approved by the European Commission (and, for the UK, the UK International Data Transfer Addendum), together with the safeguards described above. If you would prefer that your information not be transferred in this way, please do not send it — and if you have already sent it, you can ask me to delete it at any time.

Retention periods:

• Tongue photo and questionnaire answers: kept for up to 12 months after your plan is delivered, so I can answer follow-up questions, then deleted. Ask sooner and I will delete them sooner.
• Your plan and email correspondence: kept for up to 24 months, so I have a record of what was sent to you.
• Payment and tax records: kept as long as accounting and tax law requires.
• Newsletter subscription: kept until you unsubscribe, after which your address is removed from the sending list.

7. Who else is involved

These are the only third parties that touch your information, and each one is limited to its own job:

8. Cookies and similar technologies

A cookie is a small text file that a website asks your browser to store, so that the site can remember something between page loads. This site is deliberately simple about them:

• No advertising or profiling cookies of my own. This website does not currently run advertising pixels or third-party analytics scripts.
• Strictly necessary cookies. Cloudflare may set security and load-balancing cookies so the site loads correctly and stays protected against attacks. These are not used to track you across other websites.
• Payment cookies. When you click a PayPal button, you are taken to PayPal, and PayPal may set its own cookies on its own pages, under its own policy. That happens on PayPal's site, not mine.
• Fonts. Google Fonts does not set cookies here, but it does receive your IP address when your browser fetches the font files.

You can block or delete cookies at any time in your browser settings. Blocking strictly necessary cookies may stop parts of the site — particularly checkout — from working. If I ever add analytics or advertising tools, I will update this policy first and, where the law requires it, ask for your consent before they load.

9. Your rights

Subject to the law where you live, you have the right to:

• Access the personal information I hold about you, and receive a copy.
• Correct anything inaccurate.
• Delete your information — including your tongue photo and questionnaire answers.
• Restrict or object to certain uses, and withdraw consent you previously gave.
• Portability — receive your information in a common, machine-readable format.
• Unsubscribe from the newsletter at any time, using the link in any email or by writing to me.
• Complain to your local data protection authority. If you are in the EU or the UK, you also have the rights set out in the GDPR and UK GDPR. If you are a California resident, you have the rights set out in the CCPA/CPRA — and note that I do not sell or share your personal information as those terms are defined there.

To exercise any of these, email hi@ai5ai.cc with the subject line "Privacy Request". I will reply within 30 days, and usually within 1–2 business days. Exercising your rights will never affect the service you receive.

10. Children

This website and the Personal 7-Day Plan are for adults aged 18 and over, and are not directed at children. I do not knowingly collect information from anyone under 18. If you believe a child has sent me information, email hi@ai5ai.cc and I will delete it promptly.

11. Security

This site is served over HTTPS, access to submitted information is restricted, and I keep as little of it as possible for as short a time as possible. No online transmission or storage can be guaranteed completely safe, so please do not send information that is not needed: no ID or passport numbers, no bank statements, and no full medical records. A tongue photo and your 10 quiz answers are all that is required.

12. Changes to this policy

If this policy changes, I will update the "Last updated" date at the top of this page. If a change is significant — for example a new category of information or a new third-party service — I will say so clearly on this page. Continued use of the website after an update means you accept the revised policy.

13. Contact

Questions about privacy, or a request to delete your data? One email is enough: hi@ai5ai.cc. A real person reads it, and you can normally expect a reply within 1–2 business days.

hi@ai5ai.cc