Privacy Policy

1. Personal Information Collected

• Account: email, name and profile image from your Google or Kakao account.
• Fortune-calculation data: date of birth, time of birth, place of birth and gender (the profile you enter). Because date and time of birth may be considered special-category data, we process it only on the basis of your explicit consent.
• Usage: chat history, credit usage and payment records.
• Marketing consent status (optional).

2. Purpose of Collection and Use

We process your data to identify you and sign you in, to compute and deliver fortune readings, to handle credits and payments, to respond to support requests, and — where you consent — to send marketing and event information. Lawful bases (GDPR Art. 6): performance of our service contract with you for account, readings and payments; your consent (Art. 6(1)(a) and Art. 9(2)(a)) for birth data and marketing.

3. Retention and Use Period

We delete your personal data without undue delay when you close your account. Where retention is required by applicable law (e.g. consumer-protection and tax rules for transaction records), we keep the relevant data for the period required and use it only for that purpose.

4. Procedures and Methods for Destruction of Personal Information

Once the purpose of processing is fulfilled (account closure or expiry of the retention period), we destroy the data without undue delay. Electronic files are deleted by irreversible means; paper documents are shredded or incinerated. Data retained under law is not used for any other purpose.

5. Third-Party Provision and Processing Outsourcing

This service uses the DeepSeek model to process AI responses. Prompts and conversation content you enter are transmitted to and processed on DeepSeek servers. DeepSeek's privacy policy is available here.

When and how: transmitted over an HTTPS API call at the moment you request an AI consultation. Refusing the transfer: the transfer is essential to generating AI narration, so if you refuse it you cannot use the AI consultation feature. Contact support to refuse. Retention: your input is deleted promptly once the service purpose is fulfilled, but DeepSeek may further process it for model training and improvement, and DeepSeek's retention period (while the account exists, or until the purpose is fulfilled) applies. Statutory retention periods (Korean e-commerce law and others) are observed separately. Your rights: for DeepSeek, contact privacy@deepseek.com; for this service, contact our support.

Other processors we use:

• Cloudflare, Inc. — application hosting and CDN.
• Neon, Inc. — database.
• Google LLC — sign-in (OAuth) authentication.
• Kakao Corp. — sign-in (OAuth) authentication.
• Polar Software Inc. — payment processing (Merchant of Record).
• Channel Corp. (Channel.io) — customer support chat.
• AI response generation (LLM) — possible providers are DeepSeek, OpenAI, and Google Gemini. The service uses the first provider with a configured API key at runtime in the DeepSeek → OpenAI → Google Gemini order. The narration request contains the current question, up to 12 earlier messages from the same conversation, the selected self-profile display name, and the selected response language, tone, and tools. When a compatibility tool is selected, its chart also contains the compatibility partner profile display name. Each chart includes methodLabel when a calculation methodology is available, plus summary and computed facts. Add another person's profile only with their permission and use only the minimum necessary information. State flags indicate the last or low-credit range, first chat after a purchase, whether the profile is missing, whether the casting is new, and whether a surprise insight is enabled. These flags are not the balance amount, purchase amount, or card details. A separate request for follow-up suggestions contains the current question and up to the first 1,500 characters of the latest AI answer.

Approved LLM disclosure: provider deepseek; destination countries CN; legal basis other-approved (개인정보 보호법 제28조의8 제1항 제3호 가목 — 정보주체와의 계약 체결·이행을 위한 처리위탁·보관. 같은 조 제2항 각 호를 개인정보 처리방침에 공개한다. DeepSeek 도 자사 방침에서 동일 조항을 근거로 명시하고 있다.); retention 계정 탈퇴 시 또는 이용 목적 달성 시까지 (모델 훈련·최적화 완료 시) (DeepSeek 개인정보 처리방침(2026-05-06 개정)이 공개한 기준을 그대로 인용한다. 일수로 환산 가능한 값을 공개하지 않으므로 임의 숫자를 기재하지 않는다.); effective 2026-07-16; approved by 고병수 (AGE-1123); policy published.

6. User Rights

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your personal data, to data portability, and to withdraw consent at any time. You can exercise access and erasure directly in the app on your account page ("Export my data" and "Delete account"), or contact us using the details below. You also have the right to lodge a complaint with your local data-protection supervisory authority.

7. Cookies and Sessions

We use an essential session cookie to keep you signed in; it is required to use the service. Non-essential cookies (e.g. our Channel.io support chat) are loaded only after your consent, which we request via a cookie banner for visitors in the EU/UK. You can refuse cookies in your browser, but some features such as sign-in may then be limited.

8. Personal Information Protection Officer

• Name: Byeongsu Ko
• Role: Representative
• Email: contact@ecarbon.kr

Privacy inquiries and requests to access, rectify or delete your data can be submitted to the contact above.