TAKDOSA Privacy Policy — Android internal beta

Effective: 12 November 2026 (3rd edition) · Operator (data controller): 주식회사 래드우드

This policy applies to the invitation-only TAKDOSA Android internal test (beta). The operator and the policy for the public service will be decided after the beta and announced before launch. If the Korean and English versions differ, the Korean version prevails.

1. Personal information we process

• Place of birth is the place name you type, checked against a place list on your device. Device location (GPS) is not collected; the app has no location permission.
• Profile photos (optional) are stored encrypted on your device only and never uploaded.

2. Purposes and legal basis

3. Retention and destruction

Retention

• Personal data is kept only as necessary during the beta and its post-beta review period.
• Deadline: beta-related personal data is deleted no later than 30 days after the beta ends. This covers tester accounts, destiny profiles, consent records, consultation questions and answers, recent conversation, Today's Flow records, conversation memory, device check records and service records.
• Integrated AI counselling records: deleted when the evaluation ends, at the latest 30 days after the consultation.
• Conversation memory: kept until you delete it or turn memory off, at the latest 30 days after the beta ends.
• The other person's details in a relationship reading: not kept (discarded after the calculation).
• People Reading — the subject's consent: 7 days while pending; after consent, 30 days or until withdrawal (no processing afterwards).
• The subject's consent record: until your account is deleted (no raw email or birth date).
• Answers about the subject (for re-sends of the same question): up to 25 hours; deleted immediately when the subject's consent ends or is withdrawn.
• Temporary sign-in account for email verification: deleted right after verification, and in any case within 25 hours of creation.
• Sent copies of verification emails (in the operator's Gmail Sent folder): deleted no later than 30 days after the beta ends.
• Requests the subject never confirmed (expired or withdrawn while pending): deleted within 1 hour (they hold no data about the subject).
• The subject's reading, birth details and face codes on your device: 30 days after last use (deleted at the next launch), when the app sees that the subject's consent ended or was withdrawn, and immediately when you withdraw your consent or delete your account.
• Face photo and measurements: on your device only; removed when you delete them in the app's photo and analysis management, or uninstall the app.
• Earlier deletion: data is deleted sooner when its purpose ends or a deletion request requires it.
• Legal exceptions: information that the law requires us to keep is kept separately, and only for that period.

Withdrawal and deletion requests

• If you withdraw the profile-storage consent:
  • The destiny profile and Today's Flow records stored on the server are deleted immediately.
  • Until you agree again, no birth details are stored on the server and server consultations are unavailable.
  • Consultation questions, answers and recent conversation already on the server remain until the account is deleted (on request, or in the cleanup within 30 days after the beta). To remove them now, request account deletion.
  • Conversation memory is separate from this consent; you can turn it off or delete it on the memory screen.
• If you withdraw the integrated AI counselling consent: further transfers stop and the stored integrated consultations are deleted.
• Conversation memory: you can view what is remembered, delete items one by one, pause it, or delete everything and turn it off.
• If you request account deletion:
  • The server-side destiny profile and Today's Flow records are deleted immediately.
  • After confirming the request, the operator deletes without undue delay (target: within 7 days of receipt) the account together with the consent records, consultation questions and answers, recent conversation, conversation memory, device check records, service records and the request itself.

What may remain after deletion

• TAKDOSA's operational database: data is deleted irrecoverably at the times above.
• Supabase backups: the database provider (Supabase) makes one backup per day and keeps it for 7 days. Point-in-time recovery is not used.
  • Data deleted from the operational database therefore still exists in backups made before the deletion. Those backups are removed in turn as they pass the 7-day retention.
  • Backups are used only for disaster recovery.
  • Records that Supabase keeps internally to run its service follow Supabase's policy, and TAKDOSA cannot guarantee when they are deleted.
• Google: information sent to Google is kept by Google for up to 55 days for abuse monitoring, then deleted.
• Cloudflare: TAKDOSA's request logs on Cloudflare (no personal data) are kept up to 7 days. Connection data (e.g. IP addresses) follows Cloudflare's privacy policy.
• Aggregates: figures that cannot identify you (total question counts, total costs) may remain.
• Your device: data is removed when you uninstall the app.

4. Processors and third parties

TAKDOSA does not provide your personal information to third parties. To run the service, the following processing is entrusted to processors.

5. International transfers of personal information

The transfers below are entrustment and storage necessary to conclude and perform the service contract. Under Article 28-8(1)(3) of the Personal Information Protection Act, this policy discloses the items, countries, timing and method, recipients, purpose and retention, and how to refuse. External-AI processing of face observation codes, and the transfer it involves, happens only if you separately agree to integrated AI counselling.

• Google LLC (Gmail) (support.google.com/policies), the United States and other countries where Google or its agents maintain facilities: a People Reading subject's email address and the verification email (the confirmation link), sent over an encrypted connection (SMTP, TLS) when the subject requests it on the consent page, to send the verification email. The sent copy in the operator's Gmail account is deleted no later than 30 days after the beta ends; otherwise Google's privacy policy applies.
• Never sent to Google: your name; raw date, time or place of birth; face photos, landmarks or measurements.
• Possible inference: Saju results (such as cycle periods) may indicate an approximate age.
• People Reading subjects: the subject has no service contract with TAKDOSA, so their data is transferred abroad only under Article 28-8(1)(1) of the Personal Information Protection Act: after the consent page has told them the items, countries, timing and method, recipients and contacts, purposes and retention, and how to refuse and its consequences, and they have consented separately. Without that consent their data is not processed.
• Refusing the transfer: decline to have your profile stored, or request account deletion; server consultations are then unavailable. Face observation codes and conversation memory are not transferred if you do not give, or withdraw, those consents.

6. Your rights

• You may request access, correction, deletion, suspension of processing, and withdrawal of consent.
• Directly in the app:
  • Correct your birth details: Profile → 정보 수정하기.
  • Withdraw consent or request account deletion: Settings → 개인정보 및 상담 데이터 관리.
  • Manage face photos, analysis and conversation memory: the integrated consultation's 사진·분석 관리.
• Contact: takdosa.support@gmail.com.
• People Reading subjects (who may have no app account) can withdraw on the consent link, or request access, deletion or suspension at takdosa.support@gmail.com.
• Without app access: write from your account email. The operator verifies the request through that address before acting.

7. Security

• In transit: HTTPS for every connection.
• On the device: encrypted local database and photos; device backup disabled.
• On the server: name, birth details and conversation-memory phrases encrypted (AES-256-GCM).
• Face data: face photos, landmarks and measurements never leave the phone.
• People Reading subjects: their email and birth date are never stored in the clear on the server, only as one-way values (HMAC) for comparison, and are processed only while their consent is confirmed and valid.
• Per-user access control: the server processes only the signed-in user's own data. The app's data on a device opens only for the account that first signed in on it, and never through a stored sign-in of an account the server no longer accepts (deleted or revoked).
• Logs: TAKDOSA's server request logs contain no questions, answers, birth data, names or user identifiers. The authentication provider and network operators may keep standard access records (e.g. IP addresses).

8. Automatic collection

No advertising or analytics SDKs and no cookies.

9. Privacy officer

• Officer: 최윤석, Representative Director (대표이사) of 주식회사 래드우드
• Contact: takdosa.support@gmail.com

10. Remedies (Korea)

For reports or advice on privacy infringements, you may contact the following.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
• Supreme Prosecutors' Office (www.spo.go.kr / 1301)
• Korean National Police Agency (ecrm.police.go.kr / 182)

11. Age

Not for users under 19: the beta is open only to adults aged 19 or over. Face analysis accepts only photos taken at age 19 or older.

12. About AI counselling

• Inputs and outputs: your questions and the AI-written answers are collected and kept to provide and continue consultations, for the period in §3.
• Training:
  • TAKDOSA does not use your questions or answers to train or improve AI models.
  • Google, which writes the text, does not use it to improve its products under its paid API terms. It keeps it for up to 55 days for abuse monitoring.
  • As there is no training use, no training opt-out is needed.
• Automated decisions: TAKDOSA makes no decisions about you (such as restricting use) by AI. Usage limits follow fixed rules (20 per day, 50 in total). A relationship reading counts as one question; Today's Flow does not count.
• Nature of the answers: they are AI-written reflections based on Saju interpretation and facial features observed on your device. Face reading is a traditional interpretive practice, not a scientific fact or a judgement of character or destiny. The answers do not predict or guarantee outcomes and are not medical, legal or financial advice.
• Experimental face interpretations: sentences marked "시험 중인 관상 해석" (experimental face interpretation) are being evaluated in the internal beta; they are not validated and are not a judgement of the face. Feedback on them (helpful or not) is kept only as anonymous daily counts.

13. Changes

Material changes (such as the items or purposes of processing) are announced in the app and on this page before they take effect, with a comparison of the old and new text. Minor changes within the same scope (such as the list of processors) may be announced together at reasonable intervals. If the profile-storage notice changes, we ask for your consent again for the new notice.

What changed in the 3rd edition (2nd edition: effective 30 October 2026)

1. Added People Reading (a Saju and face reading of one other adult, and follow-up consultation). It is processed only after the subject verifies their email and enters their birth date on the consent page; Saju and face are consented separately.
2. Added retention and destruction for the subject's consent record, the temporary sign-in account and answers about the subject.
3. Renamed §5 to "International transfers of personal information" and added the subject's transfer consent basis and items.
4. Added the labelling of experimental face interpretations and anonymous feedback counts.
5. Added Google LLC (Gmail) as the processor that sends the subject's verification email (12 November 2026).

What changed in the 2nd edition (1st edition: effective 16 October 2026)

1. Added on-device face-photo analysis and, with separate consent, the use of face observation codes in AI counselling (the 1st edition said face analysis did not run).
2. Added optional conversation memory (the 1st edition said it was not offered).
3. Added Today's Flow (once a day) and relationship readings (the other person's details are not stored).
4. Changed the profile-storage notice to V3; beta participants consent again to the new notice.
5. Corrected the processor that writes the text to the actual contracting entity (Google Asia Pacific Pte. Ltd., authorised reseller in Korea Google Cloud Korea LLC).

• Current version: effective 12 November 2026 (3rd edition).