Privacy Policy
Last updated: June 10, 2026
This English translation is provided for convenience. In the event of any discrepancy, the Korean version prevails.
Article 1 (Purpose)
Sangduk Han, the developer of Sajulab (the "Developer"), establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of the Republic of Korea in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 2 (Personal Information of Children Under 14)
In accordance with Article 22-2 of the Personal Information Protection Act, the Developer does not collect personal information from children under the age of 14, and children under 14 may not use the Service. If it is found that personal information of a child under 14 has been collected, such information will be destroyed without delay.
Article 3 (Items Collected and Collection Methods)
1. Items collected
| Category | Items | Purpose |
|---|---|---|
| Required | Device identifier (Device ID) | User identification, analysis history management |
| Required | Date of birth, time of birth, gender | Providing saju (Four Pillars) analysis |
| Optional | Face-reading measurement points (facial metrics) | Providing face-reading analysis (original photos are not collected or stored; only metrics extracted on-device are sent to the server) |
| Optional | KakaoTalk conversation text (extracted via on-device OCR) | Providing the Dugeun Saju service (conversation analysis). Original screenshot images are processed only on the device and are never sent to the server |
| Optional | Dugeun Saju counterpart info (nickname, birth year, gender, face-reading metrics) | Providing Dugeun Saju relationship analysis. Face-reading metrics are extracted on-device; original photos are never transmitted |
| Optional | Nyang Dosa chat messages | Providing AI saju counseling and storing conversation history |
| Optional | Google account information (email, account identifier) | Data backup and recovery via account linking, continuity across device changes |
| Optional | Push notification token (FCM) | Sending notifications such as analysis-completion alerts |
| Optional | Purchase receipts and subscription status | Providing paid services, payment verification, and purchase restoration. Payments are processed through Google Play in-app billing, and payment method details such as card numbers are not collected |
2. Collection methods
Information is collected only when users directly enter or upload it within the app. The Developer does not collect personal information from third parties without the user's separate consent. Where a user enters another person's information (e.g., in Dugeun Saju or compatibility analysis), such information is collected solely through the user's input, and users must enter it only when they may lawfully do so.
Article 4 (Purposes of Processing)
The Developer processes personal information for the following purposes:
- Providing AI-based services such as saju analysis, face reading, compatibility analysis, and Dugeun Saju
- Storing analysis history and providing cumulative analysis
- Processing payments for paid services
- Account linking (Google) and restoring analysis history across device changes
- Sending push notifications (e.g., analysis-completion alerts) and, with separate consent, marketing communications
- Service improvement and statistical analysis (de-identified data)
Article 5 (Processing and Retention Period)
| Item | Retention period | Notes |
|---|---|---|
| Device ID, saju information | Duration of service use | Local data on the device is removed when the app is deleted |
| Face-reading measurement points (metrics) | Duration of service use | Only metrics extracted on-device via MediaPipe are sent to the server. Original photos are never transmitted to or stored on the server |
| KakaoTalk conversation text | Only summaries retained after analysis | Original screenshot images are OCR-processed on-device and never transmitted to the server; transmitted conversation text is not stored after analysis, and only a structured summary is retained as analysis history |
| Analysis history (text summaries) | Duration of service use | Deleted immediately upon user request; permanently deleted 30 days after account deletion |
| Google account information | Duration of service use | Deleted upon unlinking or account deletion (30-day grace period after account deletion) |
| Push notification token (FCM) | Duration of service use | Invalidated immediately when notifications are disabled or the account is deleted |
| Payment records (purchase receipts, transaction identifiers) | 5 years under the E-Commerce Act of Korea | Payments are processed through Google Play in-app billing; the Developer retains only purchase receipts and transaction identifiers |
Article 6 (Provision to Third Parties)
The Developer does not provide users' personal information to third parties, except in the following cases:
- When the user has given prior consent
- When required by applicable laws and regulations
Article 7 (Outsourcing of Processing)
| Processor | Entrusted tasks |
|---|---|
| Google Cloud Platform (Google LLC) | Cloud server operation, AI model processing (Gemini) |
| Firebase (Google LLC) | User authentication (anonymous auth, Google account linking), push notification delivery (FCM) |
In-app payments are processed through Google Play (Google LLC). Payment method details such as card numbers are handled by Google Play under its own terms, and the Developer does not collect or store them.
Article 7-2 (Overseas Transfer of Personal Information)
To provide the Service, the Developer entrusts the processing and storage of personal information overseas as described below, pursuant to Article 28-8(1)3 of the Personal Information Protection Act (outsourcing/storage necessary for the performance of a contract).
| Item | Google LLC (GCP & Firebase) |
|---|---|
| Country | United States |
| Data transferred | Device identifier, saju information (birth date/time, gender), face-reading metrics, conversation text, chat messages, authentication data, push notification token, purchase receipts and subscription status |
| Timing and method | Transmitted over the network as the Service is used |
| Purpose | Cloud server operation, AI analysis processing, authentication, notification delivery, payment verification |
| Retention | Duration of service use (payment records: 5 years under the E-Commerce Act of Korea) |
Users may refuse the overseas transfer of their personal information by contacting richramsang@gmail.com. However, because the overseas transfer is essential to providing the Service, refusal may limit use of the Service.
Article 8 (AI-Based Automated Decision-Making)
The Developer uses the Google Gemini AI model to automatically generate saju, face-reading, and conversation analysis results. These results are for entertainment and reference purposes only and do not replace professional counseling or medical, legal, or financial advice.
User data is not used to train AI models. For face-reading analysis, original photos are processed only on the device and are never sent to the server; only the extracted measurement values are used for analysis. KakaoTalk screenshots are likewise OCR-processed only on-device, and the original images are never transmitted to the server.
Article 9 (User Rights and How to Exercise Them)
Users may exercise the following rights:
- Request access to their personal information
- Request correction or deletion of their personal information
- Request suspension of processing
- Request deletion of their entire analysis history
These rights may be exercised via the in-app settings menu or by emailing richramsang@gmail.com, and the Developer will take action without delay.
Article 10 (Security Measures)
The Developer takes the following measures to keep data secure:
- Encryption of data in transit (TLS 1.3)
- Server access control (GCP IAM, Secret Manager)
- No-upload policy for original photos (processed on-device only)
- De-identification of personal information
Article 11 (Privacy Officer)
| Item | Details |
|---|---|
| Name | Sangduk Han |
| Position | Developer |
| richramsang@gmail.com |
Article 12 (Changes to This Privacy Policy)
This Privacy Policy was enacted on May 18, 2026 and amended on June 10, 2026; the amended version applies from the amendment date. Any changes will be announced in the app and on this page.
- May 18, 2026 — Enacted
- June 10, 2026 — Amended (itemized collected data: Google account, push notification token, chat messages, Dugeun Saju counterpart info; clarified on-device OCR processing of KakaoTalk conversations; added the overseas transfer article; added Firebase to the outsourcing list; corrected the payment processing description — Google Play in-app billing; updated statutory references)