Privacy Policy

1. Information We Collect

Mystic Universe collects the following information to provide our services:

▸ Guest Saju Analysis

• Required: Date/Time of birth, Birth city, Gender
• Optional: Blood type, Personality type

▸ Social Login Members (Kakao / Google)

• Unique ID (UUID): User identification (auto-generated by Supabase Auth)
• Email: Provided by social provider (Kakao may not provide)
• Nickname: Name from social provider (for UI display)
• Profile picture URL: Provided by social provider (for UI display)
• Login provider: kakao / google (for account management)

▸ Payment Information (Members only)

• Order ID / Payment amount / Payment method type (card brand): Payment processing and refund handling
• Payment timestamp / Refund reason: Compliance with statutory record retention
• Sensitive payment details (card number, CVC, expiration): Handled directly by Toss Payments and never stored on Mystic Universe servers.

▸ Chemistry Room Participation Records

• A non-identifiable snapshot of room participation history (was_member) is preserved. This is the minimum information needed for room continuity, may persist after withdrawal, and contains no personally identifying data (see MEMBER_POLICY §14).

Note: For guest analyses, only anonymous, non-identifiable statistical data is stored on our servers:
Birth year, gender, country code; Saju day pillar, zodiac, shinsal (values derived from birth data); blood type & personality type (if entered); AI tier, language setting.
Name, phone number, exact birth date, birth time, and city name are never stored on the server.

Note: No separate registration form — membership is via social login only. When members save a Saju to their vault, the full birth date (year, month, day), birth time, and city are stored. This information is used to calculate Daeun (Major Fortune Cycles) and Seun (Annual Fortune) cycles, and is permanently deleted upon account withdrawal.

2. Purpose of Collection

Collected data is used only for the following purposes:

• Generating AI-fused Saju/Astrology analysis results
• Calculating Daeun (Major Fortune) & Seun (Annual Fortune) cycles (using birth date/time stored by members)
• Processing paid content payments and refunds (payment information)
• Anonymous statistical analysis for service improvement

3. Data Retention and Deletion

4. Third-Party Disclosure & Data Processors

We transmit data to or entrust processing with the following services for service provision, operation, and improvement. Transmitted data is used only for the stated purposes and never for marketing.

▸ AI Processing

▸ Payment Processing

▸ Infrastructure & Hosting

▸ Analytics & Monitoring

▸ Sharing Features

4-1. Overseas Transfer of Personal Information (PIPA Art. 28-8)

To operate the service, we transfer or entrust processing of the data below to overseas providers. Our primary database (Supabase), which stores member accounts and saved Saju, is located in South Korea (Seoul region) and is not subject to overseas transfer.

You may contact the Privacy Officer (§8) for details or to object to overseas transfer. These transfers are processing delegations essential to providing the service (AI analysis, hosting); objecting may limit the availability of the related features.

5. User Rights

Users can delete their data at any time by clearing their browser cache and have the right to stop using the service.

▸ Additional Rights for Members

• Right to Access: View your saved Saju in "My Saju Vault" at any time.
• Right to Deletion: Delete individual saved Saju, or delete all data by closing your account.
• Right to Withdraw: Delete your account at any time; all personal data is immediately erased.

For other privacy inquiries, contact getsaju.mu@gmail.com.

6. Account Deletion

When you delete your account, all personal data including saved Saju and analysis records will be permanently deleted. However, payment records (per Korean E-Commerce Act Article 6) and the non-identifiable Chemistry Room participation snapshot (was_member) are preserved per §3 and MEMBER_POLICY §14.

▸ Deletion Process

1. Open the top menu → Settings → Click 'Delete Account'
2. Click 'Delete' in the confirmation dialog
3. All saved Saju, profile, and personal data are immediately and permanently deleted
4. You are automatically signed out upon completion

※ You may re-register immediately after deletion, but previous data cannot be recovered.

To withdraw now, go to the Account Deletion screen. For deleted/retained items and retention periods, see the Data & Account Deletion page.

7. Dormant Account Policy

We protect personal data of long-inactive accounts in accordance with applicable privacy laws.

Dormant status is automatically lifted upon re-login. Separated data is restored after sign-in.

7-1. Mobile App Access Permissions

The Mystic Universe app uses no mandatory device permissions. The optional permissions below are requested only when the related feature is first used; declining them does not restrict the rest of the service.

8. Personal Information Protection Officer

The officer responsible for overseeing personal data processing and for handling data subjects' inquiries, complaints, and remedies is as follows:

• Name: Byungyong Yu
• Title: CEO (Data Protection Officer)
• Contact: +82-42-542-7050 / getsaju.mu@gmail.com

9. Remedies for Rights Infringement

Data subjects may apply to the following Korean authorities for dispute resolution or consultation regarding personal data infringement, including where they are not satisfied with the Company's handling of a request:

• Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
• Korea Internet & Security Agency (KISA) Privacy Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cybercrime Division: 1301 (www.spo.go.kr)
• National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)