What we collect and why
WUWE Holographic Research Lab ("we", "our", "us") operates the Quantum Flow Bio-Sync OS Chrome extension and the website wuweholographic.com. This policy explains what personal data we collect, how we use it, and your rights over it.
We collect the minimum data necessary to operate the service. We do not sell your data. We do not display advertisements.
Information collected
| Data | Purpose | Stored | Retention |
|---|---|---|---|
| Email address | License validation and digital delivery | Google Sheets (encrypted) | Duration of account |
| Hardware ID (HWID) | Device binding to prevent license sharing | Google Sheets | Duration of license |
| License key | Tier authentication | Google Sheets | Duration of license |
| Referral code | Referral reward tracking | Google Sheets | Duration of account |
| AI Scan request text | Processing personalised wellness requests | Google Sheets | 30 days after delivery |
| Birth data (Master only) | BaZi PDF Blueprint generation via Dify | Temporary Dify pipeline only | Deleted immediately after PDF generation |
Birth data handling: Birth date, time, and location submitted by Master tier users are passed through an encrypted Dify workflow solely to generate your personalised PDF Blueprint. This data is not written to any permanent database. Only your email address and submission timestamp are retained for delivery confirmation.
Extension data handling
Local storage (on your device only)
The Quantum Flow extension stores the following data locally in chrome.storage.local, on your device only. This data is never transmitted to our servers:
- Your licence key (for authentication)
- Session count and streak data
- Element usage statistics
- User-selected timer preferences
- Blueprint submission status
Host permissions
The extension requests access to all pages (<all_urls>) solely to inject the fullscreen breathing overlay (霸屏) on the active tab when a protocol is triggered. The extension does not read, collect, or transmit any content from the pages you visit.
Third-party services used
- Stripe — Payment processing. Stripe's privacy policy applies to payment data. We do not store card information.
- Make.com — Automation workflow. Processes webhook events to route registration and license data.
- Dify — AI workflow engine used exclusively for Master Blueprint generation.
- Resend — Transactional email delivery (license keys, PDF delivery).
- Cloudinary — PDF hosting for Master Blueprint delivery links.
GDPR & CCPA rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing where our legal basis is legitimate interest.
- Restriction: Request that we restrict processing of your data.
To exercise any of these rights, email us at support@wuweholographic.com. We will respond within 30 days.
California residents (CCPA): We do not sell personal information. You have the right to know what data we collect and to request deletion.
Cookies
The wuweholographic.com website does not use tracking cookies or third-party analytics. The Chrome extension does not use cookies. We do not use cross-site tracking technologies.
How we protect your data
All data in transit is encrypted via HTTPS/TLS. Our Google Sheets database is access-controlled and not publicly accessible. Stripe handles all payment data under PCI-DSS Level 1 compliance. We conduct periodic reviews of our data access controls.
Policy updates
We may update this policy periodically. The effective date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy. Material changes will be communicated via email.