Niunnaeun Privacy Policy
Effective date: November 4, 2026 · Last updated (posted): October 18, 2026
Notice of change · Posted October 5, 2026 · Takes effect November 4, 2026 This supplements the notice of change posted on September 29, 2026 (advertising IDs) as below, and moves the effective date to November 4, 2026.
Where What changes Table in §1 · §1-1 · §2, §3, §3-1 Collection of advertising IDs (Android Advertising ID · iOS IDFA) and personalized ads (from the September 29 notice) Table in §1 · §1-2 (new) · §4 Niwoon Naewoon Plaza posts, comments, photos, attached charts and nicknames are public to signed-out visitors and search engines, and what happens when you delete them (including when attached photos are deleted · attached videos are posted for 3 months) Table in §1 · §4 Push notification tokens (app push · web push) and when they are deleted §4 How long messages, photos and videos you delete in chat rooms are kept (30 days) and when they are deleted Table in §1 · §4 Chat records (AI consultations · member-to-member chats · group rooms) — messages you delete and chat records at account deletion (including messages written by the other people in the chat) are encrypted and stored separately from your account (deleted after 3 years) · only designated operators may open them, and every access is logged §4 Operator access — designated operators may view chat and reading records to handle customer inquiries, reports and disputes, and every such access is logged Table in §1 · §2-1 (new) · §4 Consent to news & event notifications (advertising information) — optional · separate consent for night-time (9 p.m.–8 a.m.) · withdraw any time Table in §1 · §4 Collection of a reason for leaving (the option you pick is required · the text you write is optional) · the withdrawal record (email, nickname, sign-up method, sign-up / last sign-in / deletion dates, remaining woon and payment summary, reason for leaving) is kept separately from your account for 1 year and then destroyed Table in §1 Optional contact (email · mobile number) and notice consent — stored encrypted · masked on the Operator's screen · opening the original requires a reason and is logged (also applied to the previous version, effective October 6, 2026) Table in §1 Find friends from contacts (optional) — phone numbers in your contacts are only compared as cryptographic values and are not stored · your own number is stored encrypted only if you register it · operators see a masked value · viewing the original requires a recorded reason and is logged · used only to run friend finding (same number on several accounts · impersonation checks) · off by default (also applied to the previous version, effective October 9 and October 18, 2026) Table in §1 · §2 · §4 Random analytics identifier and visit source (utm · previous site's domain) — service usage statistics and measuring promotion effectiveness · not used for personalized ads · auto-deleted with usage logs after 30 days · a member's first visit source (one record) is destroyed on account deletion (also applied to the previous version, effective October 19, 2026 · posted October 12) Until the effective date (through November 3, 2026), the previous version (effective September 23, 2026) applies.
싱크코 (the "Operator") complies with applicable laws including Korea's Personal Information Protection Act and processes users' personal information as follows.
1. Information Collected & Purpose
| Item | Purpose | Note |
|---|---|---|
| Date/time of birth, gender, birthplace | Calculating Saju / Zi Wei charts and generating readings | Encrypted at rest on the server; decryption restricted to the operator |
| Birthday (month-day only, no year) | Letting your friends know around your birthday (from the day before to two days after) — only while Settings › Show my birthday to friends is on (on by default; can be turned off at any time) | Only month-day is stored (no year or birth time) · shown only to members who are your friends · no longer shown once turned off · the original date of birth stays encrypted as above |
| Email / social login identifier | Account creation, authentication, pass ownership | |
| Payment & purchase history (order number, amount, payment date, type of payment method, store transaction ID, refund history) | Processing payments made in the app (App Store / Google Play) and on the web (Toss Payments); crediting, refunding and reclaiming woon; identifying and resolving payment errors | Card details and other payment method information are not held by the Operator (handled directly by the payment gateway or the store) |
| Advertising ID (Android Advertising ID (ADID) · iOS IDFA) | Serving ads (including personalized ads) · ad measurement | Google AdMob · you can opt out in device settings (1-1) |
| Niwoon Naewoon Plaza posts (title, body, photos), comments, nickname · charts attached to posts | Posting and publishing in the Niwoon Naewoon Plaza | Public to signed-out visitors and search engines (1-2) |
| Push notification tokens (app push token · web push subscription) | Sending service notifications · sending news & event notifications if you opted in | Can be turned off in device/browser settings or in Settings > Notifications (2-1) |
| News & event notification consent (yes/no and date/time of consent or withdrawal) · night-time consent (yes/no and date/time) | Managing consent to receive advertising information (Korea's Network Act, Article 50) | Optional · the service is fully usable without consent (2-1) |
| Chat records (messages and photos in AI consultations · member-to-member chats · group rooms) | Providing the service · handling disputes and reports | Destroyed upon account deletion · however, messages you delete and chat records at account deletion (including messages written by the other people in the chat) are encrypted, stored separately from your account, and destroyed after 3 years (§4) |
| Reason for leaving (the option you pick = required · up to 200 characters you write = optional) | Service improvement | You pick one of the listed reasons (including "Other") when deleting your account · the text you write is entered only if you choose to · kept for 1 year as part of the withdrawal record, then destroyed (§4) |
| Contact (optional — email · mobile number) · whether and when you agreed to receive notices (added October 6, 2026) | Top-up and payment notices, account recovery · top-up and benefit notices only if you agree | Entered only if you choose to when registering or editing your own chart · not used for readings · encrypted when stored on the server · deleting it removes it from the server right away · shown to the Operator only in masked form; the original is opened only by a designated operator who records a reason (access is logged) |
| Phone numbers in your phone's contacts · your own mobile number (optional) · the "Let people find me from their contacts" setting (added October 9, 2026 · your own number stored encrypted from October 18, 2026) | Find friends from contacts — find Niunnaeun members among your contacts so you can send them friend requests · the number you register is used only to run friend finding, such as checking whether several accounts registered the same number or whether someone is impersonating you (never for advertising or notifications) | Optional · only after you agree in the app and allow contacts access · only phone numbers are sent (no names or other contact details); the server immediately converts them into irreversible cryptographic values to compare them and does not store them · your own number is stored encrypted only if you register it (operators see only a masked value; a designated operator can view the original only after recording a reason, and each view is logged), and your nickname and profile photo appear in the results of members who saved your number in their contacts only if you turn on "Let people find me from their contacts" (off by default) · no one becomes a friend automatically (the other person must accept a request) · deleted immediately when you remove your number or delete your account |
| Device info & usage logs | Error diagnosis & service improvement | Auto-deleted 30 days after collection |
| Random analytics identifier (a random value stored in the app or browser — not derived from device information and separate from your account and advertising IDs) · Visit source (campaign tags (utm) of the link you arrived from · the domain of the previous site only) (added October 19, 2026) | Service usage statistics (visits, sign-ups, sharing) · Measuring promotion effectiveness | Generated automatically while using the service · Deleted from the device when you delete the app or clear browser storage; a new value is created on reinstall · Not used for personalized ads · Auto-deleted with usage logs after 30 days · A member's first visit source (one record) is kept until account deletion |
Collection method: Personal information is either entered directly by the user in the app (date of birth, chart information, etc.) or generated/collected automatically during use of the Service (device info, usage logs, advertising ID, etc.).
Note: The Operator collects only information the user enters or consents to. When registering a third party's chart (family, acquaintance), the user is responsible for obtaining that person's consent.
1-1. Advertising ID and personalized ads
- The app shows ads through Google AdMob. When it does, your device's advertising ID (Android Advertising ID (ADID) · iOS Identifier for Advertisers (IDFA)) and the device information needed for the ad request are sent to Google and used to show personalized ads based on your interests and to measure ad performance.
- On iOS, the IDFA is shared only if you tap "Allow" on the app's tracking permission request.
- How to opt out: you can opt out at any time in your device settings.
- Android: Settings > Google (or Privacy) > Ads > "Reset advertising ID" or "Delete advertising ID"
- iOS: Settings > Privacy & Security > Tracking > turn off "Allow Apps to Request to Track", or turn off Niunnaeun in the list
- If you opt out, you may see non-personalized ads instead, and all other app features remain available.
- While you have purchased ad removal, no ads are shown.
- How Google uses data from ads: https://policies.google.com/technologies/ads
1-2. Who can see Niwoon Naewoon Plaza posts
- Posts you publish in the Niwoon Naewoon Plaza (title, body, photos), comments, your nickname and any chart you attach (the eight characters of your natal chart and, if you choose, your luck cycles, year luck and Zi Wei decades) are visible to people who are not signed in, and may be collected by search engines (such as Google) and appear in search results.
- Posts made with "Post without my name" show "Anonymous" instead of your nickname. The content, photos and attached chart are still public.
- Your birth date can be worked back from the eight characters of your chart, so please check before attaching one. Do not post photos that identify you, such as faces, ID cards or addresses.
- When you delete a post or comment, it disappears from the Niwoon Naewoon Plaza at once and drops out of the sitemap we give search engines within one hour. It leaves search results when the search engine revisits the page, which can take time. This usually takes a few days. If you need it removed sooner, contact us (Section 8) and we will ask the search engine to remove it.
2. Purpose of Use
- Generating and providing fortune content (AI readings)
- Account management, authentication, and paid pass management
- Payment processing and ad serving (including personalized ads)
- Service improvement, error handling, and fraud prevention
- Service usage statistics (visits, sign-ups, sharing) and measuring promotion effectiveness (added October 19, 2026)
2-1. Consent to news & event notifications (advertising information)
- We send news & event notifications (app push · web push) about events, polls, new features and offers only to members who have opted in. Consent is optional, and you can use every feature of the service without it.
- We do not send news & event notifications at night (9 p.m. to 8 a.m. Korea time). Members who want to receive them at night can give separate consent for night-time notifications.
- You can turn consent on or off (withdraw it) at any time in Settings > Notifications in the app, or block notifications in your device or browser settings.
- Each news & event notification shows the sender (Niunnaeun) and how to opt out, and starts with "(Ad)".
- When we process your consent, refusal or withdrawal, we notify you of the date and result within 14 days by in-app notification or email.
- We ask you to confirm your consent every 2 years from the date you gave it.
- Notices that are necessary to use the service — such as payments, expiry of woon, security and changes to these policies — are not advertising, so we may send them regardless of consent. You can still turn them off in your device or browser settings.
| Consent item | Type | Information collected | Retention |
|---|---|---|---|
| News & event notifications | Optional | Yes/no · date/time of consent or withdrawal | Until you withdraw consent or delete your account |
| Night-time (9 p.m.–8 a.m.) notifications | Optional (only if you agreed above) | Yes/no · date/time of consent or withdrawal | Until you withdraw consent or delete your account |
3. Provision to Third Parties, Outsourcing & Overseas Transfer
The Operator does not provide personal information to third parties except with the user's consent or as specifically required by law. To provide the Service, however, the Operator outsources processing to the following; some data may be stored/processed on overseas servers:
| Processor | Task | Items |
|---|---|---|
| Supabase Inc. | Database & authentication | Charts (encrypted), email, logs |
| OpenAI, L.L.C. (OpenAI API) | Generating AI chat replies and readings | Conversation content (what you write and summaries of earlier turns) · chart summary (calculated results such as stems, branches and five elements) |
| Anthropic, PBC (Claude API) | Generating AI chat replies and readings (backup when OpenAI is unavailable) | Conversation content (what you write and summaries of earlier turns) · chart summary (calculated results such as stems, branches and five elements) |
| Toss Payments Co., Ltd. | Web payment processing (payment gateway) & payment cancellation / refunds | Order number, amount, payment method information (card details are collected directly by Toss Payments) |
| Apple Inc. | App Store in-app purchase processing | Purchase history (store transaction ID) |
| Google LLC | Google Play in-app purchase processing | Purchase history (order number) |
| RevenueCat, Inc. | In-app purchase receipt validation & relaying purchase / refund events | App user identifier, purchase & refund history |
| Google LLC (AdMob) | Advertising (including personalized ads) · ad measurement | Advertising ID · device information included in ad requests (OS, device model, IP address, etc.) |
- Information sent for AI chat and readings does not include account details such as your email or contact information. Saved charts are calculated on our server first and only the results (stems, branches, five elements, etc.) are sent. However, anything you type into the chat yourself (for example, another person's date of birth) is passed on as written so a reply can be generated.
3-1. Transfer of personal information overseas
To provide the service (data storage, AI chat and readings, ads), we transfer personal information overseas as follows. These transfers are made under processing entrustment, and the recipients do not use the information for any purpose other than the entrusted work.
| Item | Supabase | OpenAI | Anthropic | Google (AdMob) |
|---|---|---|---|---|
| Recipient (contact) | Supabase Inc. (supabase.com/privacy) | OpenAI, L.L.C. (openai.com/policies/privacy-policy) | Anthropic, PBC ([email protected] · 548 Market St, PMB 90375, San Francisco, CA 94104, USA) | Google LLC (policies.google.com/privacy · 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) |
| Destination country | Japan (Tokyo) | United States | United States | United States |
| Items transferred | Account details (email) · charts (encrypted) · chat history · usage logs | Conversation content · chart summary | Conversation content · chart summary | Advertising ID · device information included in ad requests |
| When and how | Stored as you sign up and use the service, over encrypted connections (HTTPS) | Each time you send a message to an AI counselor or request a reading, over encrypted connections (HTTPS) | Only for requests where the OpenAI call failed, over encrypted connections (HTTPS) | Each time the app loads an ad, over encrypted connections (HTTPS) |
| Purpose | Data storage and account authentication | Generating AI replies and readings | Generating AI replies and readings (backup) | Serving ads (including personalized ads) · ad measurement |
| Retention period | Until you delete your account (see Section 4) | Kept for up to 30 days for abuse monitoring, then deleted · not used for AI training | Deleted within 30 days · not used for AI training | Per Google's retention policy (policies.google.com/technologies/retention) |
| How to refuse and what happens | This transfer is required to use the service, so refusing makes sign-up and use difficult. You can stop at any time by deleting your account in the app. | No transfer happens if you do not use AI chat or readings. If you refuse, you cannot use AI chat or readings, but other features such as the manse calendar and compatibility calculations remain available. | Same as OpenAI | You can refuse sharing of your advertising ID through the device settings in 1-1. Non-personalized ads may still appear, and all app features remain available. |
Note: Google processes advertising IDs according to Google's advertising policy (policies.google.com/technologies/ads).
4. Retention & Disposal
- Account & chart data: destroyed without delay upon account deletion. Chat records, however, follow the "Chat records" item below, and the withdrawal record follows the "Withdrawal record" item right below.
- Withdrawal record: when you delete your account, your account data is destroyed without delay, but the withdrawal record (email, nickname, sign-up method, sign-up / last sign-in / deletion dates, remaining woon and payment summary, reason for leaving) is kept separately from your account for 1 year to handle refunds and disputes and to improve the service, and is then destroyed.
- Payment records: retained for the periods below pursuant to Article 6 of Korea's Act on the Consumer Protection in Electronic Commerce, Etc. and Article 6 of its Enforcement Decree. Even after account deletion, such records are kept for those periods detached from the account and stored separately under an irreversible identifier; they are not used for any purpose other than dispute handling and settlement, and are destroyed once the period has elapsed.
- Records on contracts or withdrawal of subscription: 5 years
- Records on payment and the supply of goods (including woon credited and reclaimed): 5 years
- Records on consumer complaints or dispute handling: 3 years
- Payment error handling records (payment outcomes and administrator actions): the same periods as the payment records above
- Paid readings (content): retained for one (1) year from the date of purchase, then deleted.
- Usage logs: auto-destroyed 30 days after collection.
- Visit source (a member's first visit source, one record): destroyed without delay upon account deletion. (added October 19, 2026)
- Niwoon Naewoon Plaza posts & comments: no longer public as soon as you delete them (for search results, see 1-2). When you delete your account, your posts, comments, likes and bookmarks, and the comments on your posts, are destroyed without delay. Attached photo files are deleted automatically — immediately when you delete your account, and within 48 hours when you delete a post or replace its photo. Attached videos are deleted automatically 3 months after the posting date (the post and comments remain). Photos in posts hidden by the Operator or reported by users are kept as a record of that handling.
- Messages you delete in chat rooms: messages, photos and videos you delete disappear from the chat room right away. To handle reports and disputes, we keep the original text, photos and videos separately for 30 days from deletion and then delete them automatically. The same applies when you erase a conversation with "New chat" in Wooni's room. Separately, they are encrypted and stored apart as described in "Chat records" below.
- Chat records (AI consultations · member-to-member chats · group rooms): to handle disputes, reports and requests from investigative authorities, we encrypt messages you delete and chat records at account deletion (including messages written by the other people in the chat), store them separately from your account, and destroy them after 3 years. Only designated operators may open them, only when necessary (such as a dispute or a request from an investigative authority), and every access is logged.
- Operator access: to handle customer inquiries, reports and disputes, designated operators may view chat and reading records, and every such access is logged.
- Push notification tokens: deleted without delay when you sign out or delete your account, or when the token expires (for example, after the app is removed). While notifications are turned off we do not send any, and the token is deleted in the cases above.
- Notification consent records: deleted when you withdraw consent or delete your account; records needed to send the withdrawal result notice (2-1) are kept until that notice is sent.
5. User Rights
- Users may delete their personal information directly via Settings > Delete Account.
- Requests to access, correct, or stop processing may be made via the contact below, and the Operator will act without delay as required by law.
6. Security Measures
- Sensitive data such as birth information is encrypted on the server.
- Row-level access control (RLS) and transport-layer encryption (HTTPS) are applied.
- Access to personal information is limited to minimal personnel.
7. Children Under 14
The Service does not primarily target children under 14. Sign-up by those under 14 requires a legal guardian's consent.
8. Privacy Officer & Contact
- Privacy Officer: Hwang Chanho
- Contact: [email protected]
9. Notice of Changes
Any addition, deletion, or modification of this policy will be announced with the effective date in the app or on this page.