Privacy Policy

1. Scope of this policy

This Privacy Policy explains how SAJU handles information when you use your birth chart, Today, monthly, yearly and ten-year cycle readings, automatic reading history, account features or customer support. Operator details and contact information appear at the end of this document.

SAJU is operated by an individual based in the Republic of Korea. The operator handles privacy enquiries and requests to access, correct or delete information at whatsyoursaju@gmail.com.

2. Information we collect and use

Chart information includes your birth date and, if you provide them, birth time or two-hour range and birth city. When you select a city, we store its name, time zone and city-centre longitude to calculate apparent solar time. If a clock time occurred twice, we may also store which occurrence you selected. We use these details to calculate the Four Pillars and elements. City search runs in your browser with GeoNames data. We do not request GPS access or a street address.

If you choose a traditional Daewoon calculation rule, it is stored with your birth details and used to determine your ten-year cycle sequence. It is optional and does not describe your gender identity.

For an account, Google provides an account identifier, email address and basic profile information, which may include a name and profile image. Supabase handles authentication. We also store your nickname and account creation and update times. We do not request access to Gmail, contacts or Google Drive.

Your language, active chart preview, locally saved card, last-opened reading section, selected card position and visit history may remain on your device. Hosting and authentication providers may process IP addresses, browser details, request times and security logs to operate and protect the service. If you contact us, we receive your email address and whatever information you include in the message.

Your birth date is required to calculate a chart. Birth time and birth city are optional. If you leave the city blank, SAJU uses UTC+9 as a stated reference and does not apply solar-time correction, so some results may differ. If the birth time is unknown, the hour pillar is left blank. The basic chart and preset period readings do not require Google sign-in, a nickname or AI permission. Please do not send identity documents or medical records in an ordinary support message.

3. Why and how we use information

We use chart information to calculate your birth chart and the Today, monthly, yearly and ten-year cycle readings you request. If automatic history is enabled, we also use the saved account chart to prepare the basic daily record described below. We use account information for sign-in, chart storage and nickname management. Technical information helps us operate the service, prevent misuse and fix errors. We use support messages to answer your enquiry.

We process information as needed to provide requested features, such as chart calculation, account access, chart storage and support. Where consent is required by law, we ask separately. Optional AI readings always require a separate choice. We process security information as permitted by law to protect the service and prevent misuse. Reading this policy or accepting the Terms does not count as blanket consent to other uses or international transfers. You can refuse optional processing and still use the basic chart.

4. Where information is stored

Your basic chart and preset Today, monthly, yearly and ten-year cycle readings are calculated in your browser, and the chart inputs and reading position may remain in browser storage. Signing in does not automatically save preview birth details to your account. You choose which chart to save, and saved account charts are stored in Supabase.

When you request full pillar interpretations or an optional AI reading, the birth information you entered is sent to SAJU’s server to calculate the result. For an AI reading, the server sends only the calculated chart context listed below to the AI provider. When you share a card, the exported image goes to the app or recipient you choose, and that destination applies its own privacy practices.

When automatic daily history is enabled, an account with a saved chart receives a basic reading every day, even if the user does not visit. Supabase stores the reading date and time zone, score, summary, category readings and actions, saved-chart revision, and calculation and content versions. Korean, English and Spanish text is stored. These records show that a reading was prepared, not that it was viewed, and they do not include optional AI readings. Saving a chart or opening Today may update the account’s daily time zone from the device. UTC is used when no daily time zone is available.

5. Optional AI readings

When this feature is available, we ask for permission before sending chart information to OpenAI for an expanded reading. You can decline and continue using the basic reading. Signing in with Google does not grant this permission.

We send the calculated pillars and elements, reading date and daily pillar, elemental relationship and theme, calculation version and uncertainty notes, and requested language. The request does not include the birth date or time you entered, birth city, longitude, time-zone identifier, name, email address or nickname. A calculated chart may still be personal information.

SAJU sends `store: false` with Responses API requests so OpenAI does not retain application state for this feature. This does not remove provider abuse-monitoring logs. Under OpenAI’s published API policies, those logs are generally retained for up to 30 days and may be kept longer when required by law. Withdrawing permission stops new requests and deletes the active saved reading tied to that permission, but it cannot recall a request already sent.

SAJU does not use your chart to train its own AI model. OpenAI states that API data is not used for model training by default unless the API customer opts in. Its data-handling documentation is linked below. To report an inappropriate reading, send the date, category and relevant passage to our contact email. You do not need to send your full birth details.

6. Service providers and international transfers

Netlify provides website hosting and server functions. It processes connection data and information sent to each server function, including birth information submitted for a server reading. Its infrastructure operates internationally, including in the United States. Connection and security records follow Netlify’s retention rules. Contact: privacy@netlify.com.

Supabase provides authentication and database storage. It receives Google account information at sign-in, nickname changes and charts you choose to save. If you use optional AI, it also stores permission, session and saved-reading records. The project database is located in Singapore (ap-southeast-1). Support and security operations may involve other countries, including the United States. Active records follow the deletion rules below; provider backups and logs follow separate schedules. Contact: privacy@supabase.com.

Google authenticates your account when you choose Google sign-in. Our support mailbox uses Gmail, so Google also processes your email address and message when you contact us. Google operates servers in multiple countries. Its privacy policy explains retention and regional contact options for account, authentication and email services.

OpenAI receives the calculated chart context described above only when the AI feature is available and you separately authorize and request a reading. Processing may take place in the United States and other countries used by OpenAI. The API retention limits are described above. Contact: privacy@openai.com.

Website and API requests use encrypted HTTPS connections; email follows the mail providers’ delivery process. Declining or withdrawing AI permission stops optional AI transfers. You can avoid account chart storage by not saving a chart, or end it by deleting your account. Visiting the site still involves the hosting provider, and blocking storage needed for authentication prevents sign-in. Contact us to ask about processing locations or exercise transfer-related rights. Where separate consent is required by law, this policy does not replace that consent.

7. Third-party disclosure and card sharing

We do not sell personal information or share it for targeted advertising across services. The app does not use third-party marketing trackers. The providers listed above process information only for the functions described; this is different from selling information to advertisers.

You choose the app or person that receives a shared card. Check what appears in the image before sharing; SAJU cannot delete copies kept by a recipient. We may disclose only the information required by a valid legal duty or lawful request, after checking its authority and scope. This paragraph is not permission for unrestricted disclosure.

8. Cookies and browser storage

Functional storage remembers your language, birth-chart preview and saved items. Authentication cookies keep you signed in. An HTTP-only AI permission cookie identifies an authorized reading session and cannot be read by page scripts. These are not advertising trackers.

You can view, block or delete cookies and local storage in your browser settings. Doing so may sign you out or remove local previews. Clearing browser data does not delete your server account or confirm deletion of an AI permission record. To remove those records, first use the data settings to withdraw permission or delete the account.

9. Retention and deletion

Device data remains until you replace it, clear it in settings or clear browser storage. Language preference is stored separately, and its cookie lasts for up to one year. Authentication cookies and session tokens remain according to the authentication provider’s settings. Blocking storage may prevent sign-in or saved previews from working.

Account and saved-chart records remain until you replace them or delete the account. Account deletion removes active account records and linked readings, but does not delete your Google account. Copies on other browsers and anonymous AI permissions granted there must be cleared separately. Provider backups and security logs may remain under separate retention rules and are not always deleted immediately.

Automatic basic-reading history is available for 30 calendar days, including the reading date, based on the time zone recorded with that reading. Expired entries become unavailable to the account immediately and are deleted during the next successful hourly cleanup. Failed jobs are retried, so an outage may delay physical deletion. Deleting the account removes active history and pending jobs. Replacing the saved chart does not rewrite earlier snapshots; they remain tied to their saved-chart revision until their original 30-day expiry. Provider backups follow separate retention rules.

AI permission expires after 30 days. The server stores a hashed session token, permission version and time, usage counters and the latest generated reading. A session is linked to an account only when permission was given while signed in. Expired permission cannot authorize another reading. Expired records are removed by cleanup that runs when new permission is granted, so expiry does not guarantee deletion on the same day. You can withdraw permission to request immediate deletion of the associated active record.

Account deletion and consent withdrawal remove the relevant active database records. Clearing device data removes SAJU information from that browser. Provider backups and security logs follow separate retention rules and may not be deleted at the same time.

Support emails, attachments and separate copies held by the operator are deleted within 30 days after an enquiry is resolved. If certain information is still needed for an unresolved dispute or legal duty, we keep only what is necessary for that purpose and period. We review the need monthly and delete the information without undue delay when it ends. We do not routinely ask for identity documents. Google’s residual copies and technical records follow its own retention rules.

10. Your rights and choices

In data settings, you can edit birth details, clear this device, withdraw AI permission and delete your account. You can also revoke SAJU’s access from your Google account. Contact us to request access, correction, a copy, deletion, restriction or to object to processing. Available rights and response periods depend on the law that applies to you. We may ask for proportionate identity verification. You may complain to your local data protection authority and, where available, appeal a decision by contacting us.

Withdrawing consent does not affect processing that was lawful before the withdrawal. Readings and scores are reflective content, not automated decisions about jobs, credit, insurance or other legal rights.

Send a privacy request to the contact email below. State the action you want and, for an account request, the email used to sign in. A legal representative or properly authorized agent may act for you. We may verify the authority and ask only for information reasonably needed to locate and confirm the request. We follow the response period required by applicable law and explain any lawful refusal or limitation. In Korea, you can also seek help from the Personal Information Infringement Report Center or the Personal Information Dispute Mediation Committee.

11. Children’s privacy

Children may use the basic chart with a parent or guardian. SAJU does not currently provide a verified parental-consent process for account features or optional AI readings. Where the law requires parental consent, those features should not be used until valid consent can be confirmed. A parent or legal representative may contact us to request access to or deletion of a child’s information.

In Korea, processing based on consent for a child under 14 requires verified consent from a legal representative. Other countries may use different age thresholds. If we learn that information was processed without consent required by law, we will restrict the processing and take appropriate deletion or other corrective action. Accepting the Terms does not replace this requirement.

If you believe a child’s information was entered without legally required consent, contact whatsyoursaju@gmail.com. Do not send a full birth record or an unredacted identity document in the first message. The operator will first identify the affected account or record and, if necessary, verify the requester’s authority using the minimum information needed. We will restrict further processing, delete information that cannot lawfully be kept and explain the action taken. This reporting process is not a parental-consent service.

12. Security and policy changes

The deployed service uses HTTPS, account-based database access controls and restricted server credentials. We limit processing to the functions described in this policy. No system can guarantee absolute security. If a personal-data incident occurs, we will investigate and provide notices or reports required by applicable law.

The effective date appears at the top of this policy. We update the policy when our practices change and give notice of material changes in the manner and period required by law. Changing this page alone does not authorize a new purpose or transfer that requires consent.

Provider privacy information

Location data credits

City names and coordinates are adapted from GeoNames. We select fields and names for local search; coordinates refer to city centres.