SOOHOMONZ Privacy Policy

Effective date: July 14, 2026

The Company handles personal information under the Korean Personal Information Protection Act and other privacy laws that apply to a user’s location.

1. Purposes of Processing

We process personal information to register and manage Members; generate and provide profile-based fortune content; process payments, refunds, and Egg usage records; answer requests and resolve disputes; send marketing only with separate consent; and analyze and improve the Service. We will provide notice or obtain consent as required before using information for a materially different purpose.

2. Information We Process

1. Registration: email address and the identifier issued by the selected Kakao, NAVER, Google, or LINE login provider; optionally, nickname and profile image.
2. Profiles: name or nickname, gender, date and time of birth, and place of birth. A Member registering another person’s information is responsible for obtaining any necessary permission.
3. Payments: mobile number, card issuer and partial card number, approval number, payment and refund details, Egg purchase and usage records, and currency or exchange information for international payments. The mobile number is used only for payment and refund processing.
4. Automatically collected information: IP address, browser, operating system, access date and time, usage and connection logs, cookies, device information, and advertising identifiers where consented.

3. Retention

• Account data: until account closure
• Profiles and generated analysis: while the account remains active, then deleted on closure
• Egg purchase and usage records: for the mandatory legal retention period
• Marketing consent: until withdrawal

Under Korean law, records concerning contracts, withdrawals, payment, and supply may be retained for 5 years; consumer complaints for 3 years; electronic-financial, card-payment, and tax records generally for 5 years; and website access records for 3 months.

4. Service Providers

We select and supervise providers and require appropriate protection through contracts and operational controls.

5. International Transfers

To operate the Service, account, profile, payment, usage, cookie, IP, and related information may be transferred to Korea, Japan, the United States, Singapore, and other locations where the providers above operate. Transfers occur electronically when the relevant feature is used, and the purposes, categories, and general retention periods are described above.

You may object through 4kimstudio@gmail.com. Refusing a transfer required for core infrastructure such as Vercel, OpenAI, or Google login may make all or part of the Service unavailable. We apply safeguards and provide information required by applicable law.

6. Disclosure to Third Parties

We do not disclose personal data to third parties except with prior consent; where required by a lawful request; where urgently necessary to protect life or safety; or in de-identified form for statistics or research.

7. Cookies, Analytics, and Advertising

We use cookies to provide the Service, understand usage, and measure advertising where consented. Tools may include Google Analytics, Meta Pixel, TikTok Pixel, and Google Ads. Browser and device settings can restrict cookies and ad tracking, but blocking essential cookies may impair the Service.

8. Marketing

We send promotions, events, or new-service notices by email, Kakao notification, or SMS only with separate consent. Consent is optional and can be withdrawn in settings or through support. We generally process withdrawal within 7 business days.

9. Deletion

When retention expires or a purpose is fulfilled, electronic files are securely deleted and paper records are shredded or destroyed. Information for an account inactive for more than one year may be separated after 30 days’ advance notice and deleted after two years, subject to applicable law.

10. Your Rights

Subject to applicable law, a user or authorized representative may request access, correction, deletion, restriction or cessation of processing, data portability where available, cessation of third-party disclosure, or objection to an international transfer. Submit a request in settings or to 4kimstudio@gmail.com. After identity verification, we generally notify you of the result within 10 days.

We do not knowingly collect personal information from children under 14. We may request proof of authority for a representative’s request.

11. Security

We limit and train personnel, manage access rights and logs, encrypt passwords and important data, maintain security protections, operate an internal management plan, and use access controls provided by Vercel and Supabase.

12. Privacy Officer

13. Complaints

Users may contact Korea’s KISA Privacy Infringement Center at 118, the Personal Information Dispute Mediation Committee at +82-1833-6972, or an appropriate privacy or consumer authority in their place of residence.

14. Changes

We generally announce changes in the Service at least 7 days before they take effect, or 30 days in advance for materially adverse changes. Prior versions will be maintained separately.

Addendum

This Privacy Policy takes effect on July 14, 2026.