This policy explains, in accordance with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, how the divination service (the "Service") collects, uses, stores, and destroys members' personal information.
1. Items and Methods of Collection
a. Items Collected
[Required] Email address, nickname, profile photo URL (information provided by social login)
[Optional] Date, time of birth, and gender for Saju (Four Pillars) analysis (collected only when using the Saju feature)
[Automatically generated] Account creation date/time, service usage records (conversation history, Saju analysis history, credit usage history), app access logs, device identification information (OS type/version)
b. Collection Methods
- Information provided by the platform is collected upon social login (Google, Apple).
- Date, time of birth, and gender directly entered by the member are collected when using the Saju feature.
- Information automatically generated during service use is collected.
c. Personal Information of Children Under 14
The Service does not collect personal information from children under 14. If a user is confirmed to be under 14, the relevant information is immediately deleted and the account is terminated.
d. App Access Permissions
The Service may request the following permission.
- [Optional] Notifications (Push Notification): service announcements and update notices
2. Purposes of Collection and Use
a. Providing and Operating the Service
- Member identification and authentication, providing the AI divination consultation service
- Providing I Ching (周易)-based AI conversation and Saju (四柱) analysis services
- Managing conversation credits
- Storing conversation history and providing bookmarking
b. Service Improvement
- Statistical analysis (de-identified) to improve service quality and develop new features
c. Automated Decision-Making
The Service uses artificial intelligence (AI) to automatically generate fortune-telling and analysis responses based on information entered by the member. Members consent to this, and may raise objections to automated results by contacting service.help@outlook.kr.
3. Retention and Use Period
a. Information Deleted Immediately Upon Withdrawal
- Profile information, conversation history, Saju analysis history, conversation room information, credit usage history, bookmarks
b. Information Retained for a Period Before Destruction
- Withdrawn account information (email, login method): retained for 30 days to prevent re-registration abuse, then destroyed
- Records of disputes related to service use: retained until the dispute is resolved
c. Retention Required by Law
Records of contracts or withdrawal of offers, and records of consumer complaints or dispute resolution related to service use, are retained for the period required under the Act on Consumer Protection in Electronic Commerce, where applicable.
4. Provision to Third Parties
The Service does not, in principle, provide members' personal information to third parties. Exceptions are as follows:
- Where the member has given prior explicit consent
- Where a relevant authority requests it for investigative purposes under applicable law
5. Outsourcing of Personal Information Processing
To provide the Service smoothly, the following processing is outsourced:
- Supabase Inc.: database hosting, member authentication management
- Google LLC: social login authentication
- Apple Inc.: social login authentication
6. Overseas Transfer of Personal Information
To operate the Service, personal information is transferred overseas as follows. By agreeing to this policy, members are deemed to consent to the overseas transfer.
- Supabase Inc. (United States): email, nickname, conversation history, Saju records — for DB hosting/authentication purposes — deleted upon withdrawal
- Google LLC (United States): email, profile information — for social login authentication purposes — subject to Google's policies
- Apple Inc. (United States): email, profile information — for social login authentication purposes — subject to Apple's policies
7. Member Rights and How to Exercise Them
Members may exercise the following rights at any time.
- Request to view personal information: email request to service.help@outlook.kr
- Request to correct personal information: in-app profile settings or email request
- Request to delete personal information: in-app Settings > Delete Account
- Request to suspend processing of personal information: email request to service.help@outlook.kr
- Objection to results of automated decision-making: email request to service.help@outlook.kr
Requests will be processed and the outcome communicated within 10 days of receipt.
A legal representative may exercise the above rights on behalf of a child under 14. (Note: the Service does not permit registration by users under 14.)
8. Measures to Ensure the Security of Personal Information
The Service takes the following measures to ensure the security of personal information.
- Application of database access control (Row-Level Security)
- Secure storage of authentication tokens (iOS Keychain / Android Keystore)
- SSL/TLS encrypted communication
- Application of the principle of least privilege for service access
- Minimizing staff who handle personal information and managing access history
9. Data Protection Officer
For inquiries related to personal information, complaint handling, and remedies for damages, please contact the address below, or request assistance from the relevant authorities.
- Email: service.help@outlook.kr
- Personal Information Protection Commission: privacy.go.kr / 182 (no area code)
- Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
- Korea Internet & Security Agency Privacy Infringement Report Center: privacy.kisa.or.kr / 118 (no area code)
10. Duty to Notify
This privacy policy may change due to changes in law, policy, or the Service, and any changes will be announced through in-app notices. Material changes will be announced 30 days before they take effect.
Effective date: January 1, 2026