Niunnaeun Privacy Policy (previous version)
This is the previous version, which applies through November 3, 2026. From November 4, 2026, the current version applies.
Effective date: September 23, 2026 · Last updated: October 18, 2026 (effective immediately · the October 12 revision takes effect October 19, 2026)
Revision history · Revised October 18, 2026, effective immediately — the number you register yourself in find friends from contacts (optional) is now stored encrypted · operators see a masked value · viewing the original requires a recorded reason and is logged · added checking for the same number on several accounts and impersonation to the purpose (table in §1)
Revision history · Revision posted October 12, 2026, effective October 19, 2026 — added the random analytics identifier and visit source items (table in §1) · added service usage statistics and measuring promotion effectiveness to the purposes (§2) · retention of a member's first visit source (§4)
Revision history · Revised October 9, 2026, effective immediately — added the optional find-friends-from-contacts item (table in §1)
Revision history · Revised October 7, 2026, effective immediately — the reason for leaving you pick is now required (the text you write stays optional; table in §1)
Revision history · Revised October 6, 2026, effective immediately — added the optional contact (email · mobile number) and notice-consent item (table in §1)
Revision history · Revised October 5, 2026, effective immediately — added the optional reason for leaving (table in §1) · the withdrawal record (email, nickname, sign-up method, sign-up / last sign-in / deletion dates, remaining woon and payment summary, reason for leaving) is kept for 1 year and then destroyed (§4)
싱크코 (the "Operator") complies with applicable laws including Korea's Personal Information Protection Act and processes users' personal information as follows.
1. Information Collected & Purpose
| Item | Purpose | Note |
|---|---|---|
| Date/time of birth, gender, birthplace | Calculating Saju / Zi Wei charts and generating readings | Encrypted at rest on the server; decryption restricted to the operator |
| Birthday (month-day only, no year) (added October 4, 2026) | Letting your friends know around your birthday (from the day before to two days after) — only while Settings › Show my birthday to friends is on (on by default; can be turned off at any time) | Only month-day is stored (no year or birth time) · shown only to members who are your friends · no longer shown once turned off · the original date of birth stays encrypted as above |
| Email / social login identifier | Account creation, authentication, pass ownership | |
| Payment & purchase history (order number, amount, payment date, type of payment method, store transaction ID, refund history) | Processing payments made in the app (App Store / Google Play) and on the web (Toss Payments); crediting, refunding and reclaiming woon; identifying and resolving payment errors | Card details and other payment method information are not held by the Operator (handled directly by the payment gateway or the store) |
| Advertising ID (IDFA, etc.) | Serving ads | Google AdMob; non-personalized where possible |
| Reason for leaving (the option you pick = required · up to 200 characters you write = optional) | Service improvement | You pick one of the listed reasons (including "Other") when deleting your account · the text you write is entered only if you choose to · kept for 1 year as part of the withdrawal record, then destroyed (§4) |
| Contact (optional — email · mobile number) · whether and when you agreed to receive notices (added October 6, 2026) | Top-up and payment notices, account recovery · top-up and benefit notices only if you agree | Entered only if you choose to when registering or editing your own chart · not used for readings · encrypted when stored on the server · deleting it removes it from the server right away · shown to the Operator only in masked form; the original is opened only by a designated operator who records a reason (access is logged) |
| Phone numbers in your phone's contacts · your own mobile number (optional) · the "Let people find me from their contacts" setting (added October 9, 2026 · your own number stored encrypted from October 18, 2026) | Find friends from contacts — find Niunnaeun members among your contacts so you can send them friend requests · the number you register is used only to run friend finding, such as checking whether several accounts registered the same number or whether someone is impersonating you (never for advertising or notifications) | Optional · only after you agree in the app and allow contacts access · only phone numbers are sent (no names or other contact details); the server immediately converts them into irreversible cryptographic values to compare them and does not store them · your own number is stored encrypted only if you register it (operators see only a masked value; a designated operator can view the original only after recording a reason, and each view is logged), and your nickname and profile photo appear in the results of members who saved your number in their contacts only if you turn on "Let people find me from their contacts" (off by default) · no one becomes a friend automatically (the other person must accept a request) · deleted immediately when you remove your number or delete your account |
| Device info & usage logs | Error diagnosis & service improvement | Auto-deleted 30 days after collection |
| Random analytics identifier (a random value stored in the app or browser — not derived from device information and separate from your account and advertising IDs) · Visit source (campaign tags (utm) of the link you arrived from · the domain of the previous site only) (added October 19, 2026) | Service usage statistics (visits, sign-ups, sharing) · Measuring promotion effectiveness | Generated automatically while using the service · Deleted from the device when you delete the app or clear browser storage; a new value is created on reinstall · Not used for personalized ads · Auto-deleted with usage logs after 30 days · A member's first visit source (one record) is kept until account deletion |
Collection method: Personal information is either entered directly by the user in the app (date of birth, chart information, etc.) or generated/collected automatically during use of the Service (device info, usage logs, advertising ID, etc.).
Note: The Operator collects only information the user enters or consents to. When registering a third party's chart (family, acquaintance), the user is responsible for obtaining that person's consent.
2. Purpose of Use
- Generating and providing fortune content (AI readings)
- Account management, authentication, and paid pass management
- Payment processing and ad serving
- Service improvement, error handling, and fraud prevention
- Service usage statistics (visits, sign-ups, sharing) and measuring promotion effectiveness (added October 19, 2026)
3. Provision to Third Parties, Outsourcing & Overseas Transfer
The Operator does not provide personal information to third parties except with the user's consent or as specifically required by law. To provide the Service, however, the Operator outsources processing to the following; some data may be stored/processed on overseas servers:
| Processor | Task | Items |
|---|---|---|
| Supabase Inc. | Database & authentication | Charts (encrypted), email, logs |
| OpenAI, L.L.C. (OpenAI API) | Generating AI chat replies and readings | Conversation content (what you write and summaries of earlier turns) · chart summary (calculated results such as stems, branches and five elements) |
| Anthropic, PBC (Claude API) | Generating AI chat replies and readings (backup when OpenAI is unavailable) | Conversation content (what you write and summaries of earlier turns) · chart summary (calculated results such as stems, branches and five elements) |
| Toss Payments Co., Ltd. | Web payment processing (payment gateway) & payment cancellation / refunds | Order number, amount, payment method information (card details are collected directly by Toss Payments) |
| Apple Inc. | App Store in-app purchase processing | Purchase history (store transaction ID) |
| Google LLC | Google Play in-app purchase processing | Purchase history (order number) |
| RevenueCat, Inc. | In-app purchase receipt validation & relaying purchase / refund events | App user identifier, purchase & refund history |
| Google LLC (AdMob) | Advertising | Advertising ID |
- Information sent for AI chat and readings does not include account details such as your email or contact information. Saved charts are calculated on our server first and only the results (stems, branches, five elements, etc.) are sent. However, anything you type into the chat yourself (for example, another person's date of birth) is passed on as written so a reply can be generated.
3-1. Transfer of personal information overseas
To provide the service (data storage, AI chat and readings), we transfer personal information overseas as follows. These transfers are made under processing entrustment, and the recipients do not use the information for any purpose other than the entrusted work.
| Item | Supabase | OpenAI | Anthropic |
|---|---|---|---|
| Recipient (contact) | Supabase Inc. (supabase.com/privacy) | OpenAI, L.L.C. (openai.com/policies/privacy-policy) | Anthropic, PBC ([email protected] · 548 Market St, PMB 90375, San Francisco, CA 94104, USA) |
| Destination country | Japan (Tokyo) | United States | United States |
| Items transferred | Account details (email) · charts (encrypted) · chat history · usage logs | Conversation content · chart summary | Conversation content · chart summary |
| When and how | Stored as you sign up and use the service, over encrypted connections (HTTPS) | Each time you send a message to an AI counselor or request a reading, over encrypted connections (HTTPS) | Only for requests where the OpenAI call failed, over encrypted connections (HTTPS) |
| Purpose | Data storage and account authentication | Generating AI replies and readings | Generating AI replies and readings (backup) |
| Retention period | Until you delete your account (see Section 4) | Kept for up to 30 days for abuse monitoring, then deleted · not used for AI training | Deleted within 30 days · not used for AI training |
| How to refuse and what happens | This transfer is required to use the service, so refusing makes sign-up and use difficult. You can stop at any time by deleting your account in the app. | No transfer happens if you do not use AI chat or readings. If you refuse, you cannot use AI chat or readings, but other features such as the manse calendar and compatibility calculations remain available. | Same as OpenAI |
4. Retention & Disposal
- Account & chart data: destroyed without delay upon account deletion. The withdrawal record, however, follows the "Withdrawal record" item right below.
- Withdrawal record: when you delete your account, your account data is destroyed without delay, but the withdrawal record (email, nickname, sign-up method, sign-up / last sign-in / deletion dates, remaining woon and payment summary, reason for leaving) is kept separately from your account for 1 year to handle refunds and disputes and to improve the service, and is then destroyed.
- Payment records: retained for the periods below pursuant to Article 6 of Korea's Act on the Consumer Protection in Electronic Commerce, Etc. and Article 6 of its Enforcement Decree. Even after account deletion, such records are kept for those periods detached from the account and stored separately under an irreversible identifier; they are not used for any purpose other than dispute handling and settlement, and are destroyed once the period has elapsed.
- Records on contracts or withdrawal of subscription: 5 years
- Records on payment and the supply of goods (including woon credited and reclaimed): 5 years
- Records on consumer complaints or dispute handling: 3 years
- Payment error handling records (payment outcomes and administrator actions): the same periods as the payment records above
- Paid readings (content): retained for one (1) year from the date of purchase, then deleted.
- Usage logs: auto-destroyed 30 days after collection.
- Visit source (a member's first visit source, one record): destroyed without delay upon account deletion. (added October 19, 2026)
5. User Rights
- Users may delete their personal information directly via Settings > Delete Account.
- Requests to access, correct, or stop processing may be made via the contact below, and the Operator will act without delay as required by law.
6. Security Measures
- Sensitive data such as birth information is encrypted on the server.
- Row-level access control (RLS) and transport-layer encryption (HTTPS) are applied.
- Access to personal information is limited to minimal personnel.
7. Children Under 14
The Service does not primarily target children under 14. Sign-up by those under 14 requires a legal guardian's consent.
8. Privacy Officer & Contact
- Privacy Officer: Hwang Chanho
- Contact: [email protected]
9. Notice of Changes
Any addition, deletion, or modification of this policy will be announced with the effective date in the app or on this page.