Privacy Policy

1. What we collect

Depending on the feature you use, the Service processes the following information:

• Reading inputs: date and time of birth (solar or lunar) and gender — for two people in compatibility, and including a surname for naming
• Questions: what you type into AI counseling or a tarot reading
• When you sign up: email address, login identifier (Firebase UID), sign-up method
• Stored in your account: your Saju profile (birth date, time and gender), purchase history, counseling history, and credit, course and achievement records
• When you pay: payment identifier, amount and status, plus a short summary of the reading so it can be reopened
• If you turn on notifications: your browser push subscription (endpoint and encryption keys) and your Day Master for the daily fortune
• Collected automatically: cookies, usage records including the addresses of pages you visit (Firebase Analytics), and access logs

Signing up is optional; you can use the Service without an account. Birth details entered without an account are not linked to an account or contact details, except in payment records. To show the same reading again quickly, we keep AI-generated readings indexed by birth date, time and gender; these contain no name, email or account information.

2. Purpose of use

Reading inputs and questions are used only to provide Saju, compatibility, tarot, MBTI and naming readings and AI counseling — never for advertising or other purposes. Account information is used to identify your account and keep you signed in, issue and deduct credits and complimentary counseling sessions, link purchases to your account (so you can reopen them on any device), provide your counseling history, and send notifications if you turned them on. Usage records are used for statistics that help us improve the Service. Except where required by law, we do not provide personal information to third parties (the processing entrusted to the companies in section 6 is not a provision to third parties).

3. Retention and deletion

Without an account: the birth details you enter are used to create the reading and are not saved to an account. If you turn on "Set as My Saju", they are saved only in this browser (localStorage), and you can remove them anytime from the "My Saju" card on the home screen. Paid readings open in this browser through a cookie (30 days for the detailed Saju reading, 1 year for compatibility, tarot and MBTI reports).

With an account: your Saju profile, purchase history (including reading summaries and, for the detailed Saju reading, the reading as it was when you paid), counseling history, credit, course and achievement records, and notification subscriptions are deleted immediately when you delete your account. You can delete your account on the web (My page > Delete account), in the mobile app settings, or by emailing eternaxcode@gmail.com. When information is destroyed, it is deleted from our storage; we keep no personal information on paper.

Retention required by law: payment and refund records are kept for 5 years under the Korean Act on Consumer Protection in Electronic Commerce. Payment records held by our processor Stripe (including reading summaries) are kept for the same reason.

Saved readings: AI-generated readings that are not linked to an account (indexed by birth date, time and gender) are reused when the same reading is requested again. To have one removed, email us the birth date, time and gender.

4. Cookies

We use only the minimum cookies needed to run the Service and analyze usage.

• Strictly necessary cookies:Unlock cookies that open paid readings in this browser (30 days for the detailed Saju reading, 1 year for compatibility, tarot and MBTI reports), a sign-in cookie (up to 180 days), and a language preference cookie (1 year).
• Analytics cookies:Firebase Analytics (Google Analytics) analyzes the pages you visit and how you move through the Service so we can improve it. From page addresses we send only the path and campaign tags (such as utm); the birth date, time, gender and names contained in a result page address are not sent, and neither is your email. To see which reading types are common, we do send a chart summary such as your day pillar and chart pattern.

We do not use advertising cookies and do not share data with third-party ad networks. You can refuse cookies in your browser settings, but if you refuse strictly necessary cookies, paid readings may not open in this browser.

5. Payments

Payments for paid features — such as the detailed Saju reading, compatibility, tarot and MBTI reports, and credit packs — are processed by our payment processor, Stripe. Card numbers and other payment details are handled directly by Stripe and are never stored on our servers. So that a paid reading can be reopened, its payment record also stores a summary of the reading inputs and, if you were signed in, your account identifier. Payment and refund records are kept for 5 years as required by law.

Stripe's data handling is described in their Privacy Policy.

6. Processors and international transfers

To provide the Service, we entrust the processing of personal information to the companies below. Their servers may be located outside the Republic of Korea (mainly in the United States), and information is sent over encrypted connections (HTTPS) when you use the Service.

• Google (Firebase, Gemini):[Google LLC · United States] Account authentication, account data storage, usage analytics and AI reading generation — account information, reading inputs (birth date and time, gender, age, chart) and questions
• OpenAI:[OpenAI · United States] AI reading and counseling answer generation — reading inputs (birth date and time, gender, age, chart) and questions
• Stripe:[Stripe, Inc. · United States] Payment processing — payment details and the reading summary in the payment record
• Vercel:[Vercel Inc. · United States] Website hosting and server operation — access logs
• Browser push services:[Browser makers (Google, Apple, Mozilla, etc.)] Delivering notifications if you turned them on — subscription information and notification content

Each company keeps and handles information according to its own privacy policy. If you do not want your information transferred abroad, you can avoid the related features (AI readings, payments, notifications) or remove your account information by deleting your account.

7. Security measures

We take the following measures to protect personal information:

• All traffic is encrypted with HTTPS.
• Sign-in is handled by Firebase Authentication, so no passwords are kept on our servers.
• Account data can be read and written only by you and our servers, enforced by database security rules and server authentication.
• Administrative functions are blocked on public servers and used by the operator only in a separate environment.
• Card numbers and other payment details are not kept by us (Stripe handles them).

8. Your rights

You may exercise the following rights:

• Access, correction and deletion:Signed-in users can view, edit and delete their Saju profile and view their purchase history on My page, and can delete counseling history from the counseling list on the result page. Deleting your account removes the information stored in it all at once; for any other access, correction or deletion request, contact us at the address below.
• Cookie refusal and deletion:You can refuse or delete cookies through your browser settings.
• Inquiries and complaints:For any questions, complaints, or objections regarding personal data processing, contact us at the address below.

9. Applicable law

The Service complies with the Republic of Korea's Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. Users connecting from the EU enjoy additional rights under the General Data Protection Regulation (GDPR).

Under the GDPR, EU users have the right of access, rectification, erasure (right to be forgotten), restriction of processing, and data portability. To exercise these rights, please contact us at the address below.

10. Children

The Service does not knowingly collect personal information from children under the age of 14. If we become aware that a child under 14 has used the Service, we will delete the relevant information immediately.

11. Changes to this policy

This policy may be updated to reflect changes in law or in service operations. We will announce changes within the Service, and the updated policy takes effect upon posting.

12. Contact

For privacy-related inquiries, please reach us at:

Privacy contact: SajuLens Support — we receive and handle privacy questions, complaints and requests for remedy at the email below.

• Email: eternaxcode@gmail.com
• Website: www.sajulens.com

You can also report or seek advice on privacy violations from Korean authorities: the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301, www.spo.go.kr) and the Korean National Police Agency (182, ecrm.police.go.kr).