Privacy Policy (Lovisode)

Last updated: 2026-11-01

This is a translation. If it differs from the Korean original, the Korean original prevails.

1. Introduction

Arclair Inc. (“Arclair”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our websites, mobile apps, and related services (the “Services”).

2. Information We Collect

We collect the following categories of personal data:

Account Information
- Email address, password, display name, social login info (Google, Apple).
Payment Information
- Transaction records, payment method details (via RevenueCat, Paddle, Google Play, Apple App Store).
Usage & Device Data
- IP address, device type, operating system, browser type, app logs, crash reports, analytics data.
Identity Verification Information (when you verify your identity in Lovinn, Lovisode or Mythelo, e.g., to confirm that you are an adult in Korea)
- Name, gender, date of birth, mobile phone number, mobile carrier, domestic/foreign national status, encrypted user identification value (Connecting Information, CI), and duplicate-registration check value (Duplication Information, DI).
Optional Information (with consent)
- Profile information (e.g., gender, birth date), interests, marketing preferences, location data.

Data processed by specific services is listed in the Appendix.

3. How We Use Personal Data

We process personal data for purposes including:

To provide and operate the Services.
To process payments and fulfill transactions.
To personalize and improve Services.
To communicate updates, notices, or marketing (with your consent).
To ensure security, fraud prevention, and compliance with law.

4. Legal Bases for Processing (GDPR/UK GDPR)

Where GDPR applies, we rely on the following legal bases:

Contractual necessity (e.g., account creation, payments).
Consent (e.g., marketing communications, optional profile info).
Legitimate interests (e.g., analytics, fraud detection).
Legal obligations (e.g., accounting, regulatory requirements).

5. Data Retention

We retain personal data as long as necessary for the purposes described, unless a longer retention is required by law.

Transaction records: up to 5 years (for tax/compliance).
Dispute records: up to 3 years.
Marketing data: until you withdraw consent.
Account data: until you request deletion or close your account.

Service-specific retention periods are listed in the Appendix.

6. Sharing & Disclosure

We do not sell personal data. We may share data with:

Service providers/processors: hosting, storage, analytics, payment processing.
- Hosting/Storage: Supabase, Firebase, Google Cloud Platform (GCP), Amazon Web Services (AWS).
- Payments: Google Play, Apple App Store, RevenueCat, Paddle.
- Identity verification: KG Inicis Co., Ltd.
- Analytics/Crash: Firebase Analytics, Google Analytics (web), Crashlytics, Sentry.
Legal authorities: where required by law or legal process.
Business transfers: in case of merger, acquisition, or sale of assets.

AI processors used by each service are listed in the Appendix.

7. International Data Transfers

As a global company, we may transfer personal data outside your country.

For EU/UK users: transfers may be to countries without equivalent protection. In such cases, we use Standard Contractual Clauses (SCCs) or rely on adequacy decisions.
For other jurisdictions, we ensure appropriate safeguards as required by applicable law.

Service-specific transfers (recipient, country, data, purpose and retention) are listed in the Appendix.

8. User Rights

Depending on your location, you may have rights including:

Access: obtain confirmation and a copy of your data.
Correction: rectify inaccurate or incomplete data.
Deletion: request erasure of your data (“right to be forgotten”).
Restriction: limit processing in certain circumstances.
Portability: receive data in a machine-readable format.
Objection: object to processing for marketing or legitimate interests.
Withdraw Consent: withdraw consent at any time where processing is based on consent.

How to exercise rights: email us at privacy@arclair.com.

9. Children’s Privacy

Our Services are not directed to children under 13 years old (or under 14 in Korea).
Where local law requires parental consent (e.g., U.S. COPPA, EU GDPR, Japan APPI), we comply accordingly.

10. Security Measures

We implement appropriate safeguards to protect personal data, including:

Encryption of data in transit and at rest.
Access control and authentication measures.
Regular security audits and monitoring.
Employee training and restricted access policies.

11. Cookies & Tracking

We use cookies, SDKs, and similar technologies to improve Services.

Types: essential cookies, analytics, performance, marketing.
Users may opt out via browser settings or in-app controls.
Some features may be limited if cookies are disabled.

12. Regional Privacy Rights Addenda

🇪🇺 EU / 🇬🇧 UK (GDPR/UK GDPR)

Right to lodge complaints with supervisory authorities (e.g., ICO in UK).
Data transfers rely on SCCs or adequacy decisions.
Withdrawal rights: 14 days for digital services, unless waived by consent.

🇺🇸 United States (CCPA/CPRA)

California residents:
Right to know categories of data collected, sources, and disclosures.
Right to request deletion of personal data.
Right to opt out of “sale” or “sharing” of personal data (we do not sell data).
Right to non-discrimination for exercising CCPA rights.

🇯🇵 Japan (APPI)

Users may request disclosure, correction, suspension of use, or deletion of personal data under the Act on the Protection of Personal Information (APPI).
We disclose company identity, purpose of use, and cross-border transfers as required.

🇨🇦 Canada (PIPEDA)

Right to access and correct personal information.
Right to withdraw consent, subject to legal/contractual limits.
Complaints may be lodged with the Office of the Privacy Commissioner of Canada.

🇸🇬 Singapore (PDPA)

Rights to access and correct personal data.
Withdrawal of consent at any time, subject to legal/operational limitations.

🇦🇺 Australia (Privacy Act 1988)

Rights to access and correct data.
Complaints may be filed with the Office of the Australian Information Commissioner (OAIC).
Non-excludable consumer guarantees apply under Australian law.

🇹🇼 Taiwan (Personal Data Protection Act)

This Policy, together with the Appendix, constitutes the notice required by Article 8 of the Personal Data Protection Act (PDPA): the collector (Arclair Inc.), the purposes of collection (Section 3), the categories of personal data (Section 2), the period, regions, recipients and methods of use (Sections 5–7 and the Appendix), and your rights (below).
Under Article 3 of the PDPA, you may (1) inquire about or request to review your personal data, (2) request copies, (3) request supplementation or correction, (4) request that its collection, processing or use cease, and (5) request its deletion. These rights may not be waived in advance or limited by agreement.
We respond to requests to inquire, review or obtain copies within 15 days, and to other requests within 30 days. Where necessary, we may extend the period once, by no more than the original period, and will notify you in writing of the reason. A fee covering necessary costs may be charged for review or copies as permitted by law.
Providing personal data is voluntary. However, if you do not provide information required for registration (such as your email address, or your date of birth for age verification), you may be unable to create an account or use some features.
If you object to the use of your personal data for marketing, we will stop such use free of charge.
If personal data is stolen, leaked, altered or otherwise infringed as a result of a violation of the PDPA, we will notify affected users in an appropriate manner after investigating the facts.
International transfers are described in Section 7 and the Appendix. We comply with any restrictions on international transfers imposed by the competent authority in Taiwan.
You may contact privacy@arclair.com, or lodge a complaint with the competent authority under Taiwanese law.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Minor changes: notice via in-app or website, in principle, at least 7 days before effective.
Material changes: notice, in principle, at least 30 days in advance.

14. Contact Us

For questions or to exercise privacy rights, contact:

Email: privacy@arclair.com
Mail: 5F, #5086 Namkyung Bldg, 35 Ilwon-ro, Gangnam-gu, Seoul, Republic of Korea

Appendix: Service-Specific Processing

The details below apply in addition to this Policy only when you use the service concerned. Details for every service are always published together.

Lovisode

The app you are viewing

Data processed

App: profile photos showing your face (up to 3)
Web sign-in (lovisode.com): email address, sign-in method (Google or email), the name and profile photo URL provided by Google when you sign in with Google, sign-up route (app or web), and the time an account created on the web first used the app. The web and the app share the same account. Before you sign in, we ask you to confirm that you are 19 or older, but we do not store that confirmation.
Solo personality tests: your answers and results are not stored on our servers. Results are calculated in your browser and only the result type is included in the page address; anyone you give that address to can see the result.
Compatibility invites: the names entered by the sender and the recipient, the relationship (talking stage, couple, married or friends), both result types, when the link was created, first opened, completed and expires, and a hash of the participation token. The recipient's answers to individual questions are not stored. A completed compatibility result (both names and result types) can be seen by anyone who has the link and is shown in the link preview.
Question packs: the names entered and the answers chosen by both people, when the link was created, first opened, completed and expires, and a hash of the participation token. The answers and the recipient's name are shown only to the two participants, after both have answered (the sender's name is shown to anyone who has the link).
“Save to my matches” (「내 궁합에 저장」): a compatibility result or question pack you save while signed in is linked to your account, so you can see it on other devices after signing in.
Verdict Board (판결 게시판) posts: title, situation, your side and the other person's side; the category (dating, wedding planning or married) and how you refer to the other person; self-description tags chosen from lists (age band, gender and relationship length; you may choose not to disclose your gender); and when the post was written, published and reviewed. Published posts do not show the author's account or name, only the chosen tags.
Verdict Board rebuttal invites: the name you choose to show the other person (deleted when a rebuttal is submitted, when the other person declines publication, or when you request publication without a rebuttal), and the rebuttal written by the other person together with the account that wrote it
Verdict Board votes and reports: the option you voted for, and the report reason plus any description you enter when you choose “Other” (up to 200 characters). Only vote totals are shown; who voted for what is never shown.
Date of birth: entered once, before you write a post or rebuttal on the Verdict Board, to check your age. It is the same field as the date of birth in the app, cannot be changed once saved, and is not saved if you are under 19.
Internal flags for moderators: whether crisis phrases (violence or self-harm) were detected, and the reason a post was rejected. Crisis phrases are detected only by text pattern checks on our own servers and are never sent to an external AI.
Information stored in your browser: participation cookies for compatibility invites and question packs (97 days for the person who created the link, 90 days for the person who answered; they contain only a random token), cookies that keep you signed in (deleted when you sign out or delete your account), and Google Analytics cookies. Question-pack answers in progress stay only in your browser until you send them.
Rate limiting: to prevent abuse, our web servers use your IP address only briefly in server memory and do not store it in a database.

Purposes

Web sign-in, linking the web and the app to the same account, and granting the sign-up bonus when an account created on the web first uses the app
Showing compatibility and question-pack results to the two people involved, and gathering saved results under “My matches”
Running the Verdict Board: publishing posts, counting votes and verdicts, inviting the other person to write a rebuttal, and checking age (posting, rebuttals and voting are for users aged 19 or older)
Keeping the Verdict Board safe: operator review before publication, automatically refusing posts that contain personal information, contact details or links, showing emergency numbers (112, 1366, 109) and prioritizing review for posts with crisis phrases, handling reports and temporary measures for rights infringement, and preventing spam (3 posts per 24 hours, request rate limits)
Web usage statistics (Google Analytics)

Retention

Compatibility invites: a link nobody has answered is deleted automatically 7 days after it expires (links expire 7 days after creation); a completed result is deleted automatically 1 year after completion (deletion runs once a day)
Question packs: a link nobody has answered is deleted automatically 7 days after it expires; a completed result is deleted automatically 90 days after completion. Either participant can delete both people's answers immediately with “Delete answers” (「답 지우기」)
Verdict Board: published posts are kept until the author deletes them or deletes their account. Posts awaiting review or hidden after a report are kept until the operator's review is complete. Rejected posts and unpublished drafts are deleted automatically after 30 days (counted from the rejection date for posts rejected by the operator, and otherwise from the date written). Posts with crisis phrases that are awaiting review, drafts or rejected are deleted automatically 30 days after they were written. Deleting a post also deletes its rebuttal, votes and reports
If you delete your account (app or web): your Verdict Board posts (including published ones) with their rebuttals, votes and reports, the rebuttals you wrote, your votes and reports, your date of birth, and the compatibility results and question packs saved to your account are deleted immediately. Links you did not save with “Save to my matches” are not linked to your account and are deleted after the periods above.
Server storage location: Supabase (Singapore region; shared by the app and the web)

AI processors and international transfers

Recipient:: Google LLC (Google Cloud Run)
Country:: Japan (Tokyo region)
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: All data you enter or view on the web services (sign-in details, names, result types, question-pack answers, Verdict Board posts, rebuttals, votes and reports, date of birth) and access records (IP address, browser information, requested address)
Purpose:: Running the web service servers
When and how:: When you use the web services, over an encrypted connection (HTTPS)
Retention by recipient:: Used while the request is processed; access and error logs are deleted automatically after the retention period (30 days)

Recipient:: Google LLC (Google Analytics)
Country:: United States
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: Addresses of the pages you visit (with invite and rebuttal link codes and query strings removed), usage events (such as the test or question pack, the test result type, the board category, the option voted for and the report reason; names, email addresses, post content and account IDs are never sent), cookie identifiers, and device and browser information
Purpose:: Web usage statistics
When and how:: When you open a web page or use a feature, over an encrypted connection (HTTPS)
Retention by recipient:: Deleted automatically 14 months after collection

How to refuse or withdraw, and its effect

Personality tests, compatibility invites and question packs can be used without signing in; if you do not sign in, no account information is processed. If you do not enter your date of birth, you cannot write posts or rebuttals on the Verdict Board. If you block cookies in your browser, you cannot sign in or view compatibility and question-pack results. You can refuse Google Analytics collection with your browser's tracking protection or the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout); refusing does not affect your use of the services. You can delete question packs with “Delete answers”, Verdict Board posts under “My posts” (「내 글」), and your account on the web account page or in the app, at any time.

Effective: 2026-10-29

Fluno

Data processed

Analysis material extracted on your device from the photos and videos you choose: video frames (1 per second, 512 px on the long edge), downscaled photos (1280 px on the long edge), and the audio of your videos
Media details: duration, resolution, capture time, and the order you picked them in
What you type: your topic note, your edit request, and captions you edit yourself
AI results: speech transcripts, scene analysis, the edit plan as first generated by the AI and as edited by you (including captions and commentary), caption translations, and synthesized voice audio
Your original photo and video files are never sent to our servers; they stay on your device.
Frames used for analysis may show people, including faces. Face blurring is applied only to the finished video; face positions are computed and stored on your device and never sent to our servers.

Purposes

AI auto-editing: scene analysis, speech transcription, writing captions, commentary and narration, and voice synthesis
Safety checks to filter out inappropriate content
AI editing quality analysis and statistics: comparing the AI-generated edit plan with your edited version, and analysis results with the frames, to improve AI editing

Retention

Analysis material (frames, downscaled photos, audio): deleted automatically 90 days after the most recent analysis (including when you add media) is completed
Transcripts, analysis results, topic notes, edit requests, edit plans (including the AI-generated originals) and synthesized voice: kept until you delete the video; deleting the video immediately deletes all of its server data
If you delete your account: transcripts (including dialogue captions in edit plans and speech summaries), analysis material and synthesized voice files are deleted immediately. Analysis results, edit plans, topic notes, edit requests and media details are kept, with your account details such as name and email removed, for AI editing quality analysis and statistics.
Server storage location: Supabase (Seoul region, Republic of Korea)

AI processors and international transfers

Recipient:: Google LLC (Gemini API)
Country:: United States
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: Frames, downscaled photos, audio, video duration and resolution, topic notes
Purpose:: Scene analysis (what is happening and which moments are fun)
When and how:: When you create a video or add media, over an encrypted connection (HTTPS)
Retention by recipient:: Not used to train AI models (paid API terms). Kept for up to 55 days for abuse prevention, then deleted

Recipient:: OpenAI, L.L.C.
Country:: United States
Contact:: privacy@openai.com
Data transferred:: Audio, some frames (up to 6 per video) and downscaled photos, transcripts and scene analysis, capture time, topic notes, edit requests, narration and caption text, and the titles, captions and main character name of earlier episodes in the same series
Purpose:: Speech transcription, writing captions, commentary and narration, caption translation, voice synthesis, and safety checks
When and how:: When you create a video or add media, over an encrypted connection (HTTPS)
Retention by recipient:: Not used to train AI models. Kept for up to 30 days for abuse prevention, then deleted

Recipient:: Eleven Labs Inc.
Country:: United States
Contact:: legal@elevenlabs.io
Data transferred:: Narration sentences (text only)
Purpose:: Narration voice synthesis (we currently use OpenAI voice synthesis; depending on service settings, this may be used instead)
When and how:: When you create a video with narration, over an encrypted connection (HTTPS)
Retention by recipient:: As set out in the Eleven Labs privacy policy (it may keep a history of generated audio)

Recipient:: Google LLC (Google Cloud Run)
Country:: Japan (Tokyo region)
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: All of the data sent to the AI providers above
Purpose:: Running our service servers (preparing and sending requests to the AI and receiving the results)
When and how:: When you create a video or add media, over an encrypted connection (HTTPS)
Retention by recipient:: Used only while the request is being processed; not stored

How to refuse or withdraw, and its effect

If you do not agree on the notice shown the first time you create a video, none of the transfers above take place and AI auto-editing is not available. You can withdraw consent at any time in the app under My account > Settings > AI data sharing (or by emailing privacy@arclair.com); after withdrawal, no further AI requests are sent and AI auto-editing is no longer available. You can consent again in the same place. Server data for videos you have already made is deleted when you delete the video in the app.

Effective: 2026-11-01

Lovinn

Data processed

Messages you type in chat and your conversation history
Your voice during voice calls (streamed in real time and never saved as a recording) and the transcript of the call
Photos you send in chat, any text you add to them, and your requests for character photos
Memories the AI summarizes from your chats: things you mention such as your name, age, job, likes and dislikes
The gender in your profile
Text you type in drama free talk

Purposes

Generating character replies and voice responses
Summarizing chat memories (so later chats can build on them), showing emotions and suggesting replies
Understanding the photos you send, and safety checks that filter out inappropriate photos or photos showing minors
Handling requests for character photos

Retention

Conversation history, call transcripts, memories, photos you send and photo requests: kept while you use the service
If you delete your account: account details such as your name, email, gender, date of birth and profile photo are deleted or de-identified immediately. Conversation history, memories and photos you sent may remain on our servers; we delete them without delay if you ask at privacy@arclair.com.
Server logs used to analyze errors may contain AI request content and are deleted automatically after the log retention period (30 days by default).
Server storage location: Supabase (Singapore region)

AI processors and international transfers

Arclair uses the providers below under their API terms and data processing terms, under which each provider protects your data at a level the same as or equal to this Privacy Policy.

Recipient:: OpenAI, L.L.C.
Country:: United States
Contact:: privacy@openai.com
Data transferred:: Chat messages and recent conversation history, AI-summarized memories, gender, call transcripts, photos you send (for safety checks), photo requests, drama free-talk text
Purpose:: Generating character replies, summarizing memories, showing emotions and suggesting replies, photo safety checks, writing photo captions
When and how:: When you send a message or photo or make a voice call, over an encrypted connection (HTTPS)
Retention by recipient:: Not used to train AI models. Kept for up to 30 days for abuse prevention, then deleted

Recipient:: X.AI LLC (xAI)
Country:: United States
Contact:: privacy@x.ai
Data transferred:: Your voice during voice calls and recent conversation history, gender, chat messages, history and memories for some conversation levels, photos you send and text you add to them, photo requests with a few recent messages, and a conversation identifier (including your member ID)
Purpose:: Voice calls, generating character replies, understanding and safety-checking photos you send, writing scene descriptions for photo generation
When and how:: In real time during voice calls, and when you send a message or photo, over an encrypted connection (HTTPS/WSS)
Retention by recipient:: As set out in the xAI API terms and privacy policy

Recipient:: NEXUSAI SERVICES LLC (KIE.AI)
Country:: United States
Contact:: https://kie.ai/privacy-policy
Data transferred:: Scene descriptions for character photo generation (written from your photo request, or your request text as-is if writing fails). Photos you send are never sent
Purpose:: Generating character photos and videos
When and how:: When you request a character photo or video, over an encrypted connection (HTTPS)
Retention by recipient:: As set out in the KIE.AI privacy policy

Recipient:: Google LLC (Google Cloud Run)
Country:: Japan (Tokyo region)
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: All of the data sent to the AI providers above
Purpose:: Running our service servers (preparing and sending requests to the AI and receiving the results)
When and how:: When you send a message or photo or make a voice call, over an encrypted connection
Retention by recipient:: Used while the request is processed; error logs are deleted after the retention period (30 days by default)

How to refuse or withdraw, and its effect

Right after you sign in, a notice tells you which providers above receive which data and asks for your consent; nothing is sent to the AI providers above before you agree (iOS app). If you do not agree, AI features such as character chat, voice calls, dramas and photos are not available and you are signed out. You can withdraw consent or ask us to delete stored conversations by emailing privacy@arclair.com; after withdrawal, AI features are no longer available.

Effective: 2026-10-22

Meloa

Data processed

Faith information (sensitive data): the tradition you choose (Protestant, Catholic or still exploring), Bible translation, prayer topics and prayer note
Your prayer requests, whether they were answered, and answer notes
Your conversations with your companion (an AI character) and the memories the AI summarizes from them
Prayers, daily companion lines and reflection questions written by the AI, and your progress on today’s path and through Lent
Your morning and night reminder times and time zone, and when you agreed to the processing of your faith information

Purposes

Matching your Bible translation, prayers, how God is addressed, and your companion to your tradition
Writing your prayers, daily companion lines and reflection questions, generating your companion’s replies, and summarizing long conversations and memories
Sending morning and night prayer reminders (reminders show only how many prayer requests you have, never what they say)

Retention

Faith information, prayer requests, conversations, memories and progress: kept while you use the service
If you delete your account: the faith information, prayer requests, prayers, progress, and your conversations and memories with your companion are deleted without delay. Account details such as your name and email are deleted or de-identified immediately.
Server logs used to analyze errors may contain AI request content and are deleted automatically after the log retention period (30 days by default).
Server storage location: Supabase (Singapore region)

AI processors and international transfers

Arclair uses the providers below under their API terms and data processing terms, under which each provider protects your data at a level the same as or equal to this Privacy Policy.

Recipient:: OpenAI, L.L.C.
Country:: United States
Contact:: privacy@openai.com
Data transferred:: Your tradition, Bible translation, prayer topics, prayer note, messages you send to your companion with recent conversation history, and memories the AI summarized
Purpose:: Writing prayers, daily companion lines and reflection questions, generating companion replies, and summarizing conversations and memories
When and how:: When you open your first prayer or today’s path, or send a message to your companion, over an encrypted connection (HTTPS)
Retention by recipient:: Not used to train AI models. Kept for up to 30 days for abuse prevention, then deleted

Recipient:: Google LLC (Google Cloud Run)
Country:: Japan (Tokyo region)
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: Everything sent to the AI provider above
Purpose:: Running our service servers (preparing and sending AI requests and receiving the results)
When and how:: Whenever one of the AI requests above happens, over an encrypted connection
Retention by recipient:: Used while the request is processed; error logs are deleted after the log retention period (30 days by default)

How to refuse or withdraw, and its effect

Because faith information is sensitive personal data, we tell you what we collect, why, and for how long on the screen where you first choose your tradition, and ask for your consent separately from any other consent. Your faith information is not sent to our servers before you agree. You may decline, but without it we cannot personalize your prayers, so the app cannot be used. To withdraw your consent and have your stored faith information deleted, delete your account or email privacy@arclair.com.

Effective: 2026-11-01

Mythelo

Data processed

Account information: email address and password (stored in a form that cannot be decrypted); if you sign up with a social login, the account identifier and email address that service provides; and the display nickname and avatar emoji the service creates automatically
Saju reading input: the name (or the name you go by) shown in the result, gender, and date of birth (including solar/lunar calendar and leap month), plus time and city of birth (optional — you can proceed without them if you do not know)
Saju reading input (other person and concerns): for products that need another person’s information, the same items for that person; relationship status and any concerns you want reflected in the reading (optional)
Your answers to the questions asked before a reading starts (yes/no) are kept and deleted together with the result.
Payment records: the payment identifier issued by the payment provider, and the amount, currency, method, status and time of payment. Payment method details such as card or account numbers are handled by the payment provider; we do not store them.
At payment, the buyer’s name, mobile number and email are passed to the payment provider; we do not store them.
App sign-in: if you sign up with Apple or Google, the account identifier and email address that service provides (a hidden address if you use Apple’s Hide My Email); if you sign up with email, your email address and password
App profile and connections: a profile photo (optional), and the name, Saju input and photo (optional) of the people you register as connections (people around you)
App conversations: text conversations with AI characters, text transcribed from voice conversations, and photos you attach to a conversation
App voice: your voice captured by the microphone during a voice conversation — only if you allow microphone access, and only while the voice conversation lasts. We do not store the original audio; only the transcribed text is saved as conversation history.
App memory of past conversations: a topic and summary note created for each day you chat in membership conversations (talk about crisis, health or pregnancy is not recorded), and the setting for sharing between characters
App push notifications: the push notification token (Expo push token) and your notification settings
App device and usage information: device type, operating system, app usage events (screen views, button use, etc.), and app error and crash information
In-app purchase information: the products you bought, subscription status and the store transaction identifier. Payment method details such as card numbers are handled by Apple and Google and are never known to us.
App share card images: only when you share through KakaoTalk or a similar service, the share card image is uploaded temporarily.
Information generated automatically while you use the service: access logs, country of access, device type, operating system, browser, language setting, and cookies (used to keep you signed in and to remember your language setting)

Purposes

Calculating Saju, generating readings and showing results, and handling payments and refunds for readings
Text and voice conversations with AI characters
Managing the people (“connections”) you register
Sending push notifications and confirming in-app purchases

Retention

If you delete your account, the information you entered (date of birth, the other person’s information) and your results are deleted immediately.
If you delete your mobile app account, it is deactivated immediately and your email is replaced with an irreversible value (you can no longer sign in, and social logins are disconnected). At the same time, conversation history, memories, connections, Saju results, voice conversation records, push tokens and notification records, and usage-limit records are deleted, and profile photos, connection photos, conversation attachment photos and share card files are removed from storage.
Kept after you delete your account: payment records (5 years under the Act on the Consumer Protection in Electronic Commerce); subscription and credit purchase and usage records (linked to the deleted account without name or email); and invitation records (the invite code, the identifiers of the inviter and invitee, and the time — kept to prevent duplicate rewards through re-registration). RevenueCat customer attributes (email, name, etc.) are deleted and purchase history is kept.
Results that have not been paid for are deleted automatically one year after they were created.
Paid results are kept until you delete your account. However, the full reading can be viewed only for one year from the payment date.
Payment records are kept for 5 years under the Act on the Consumer Protection in Electronic Commerce; your date of birth and the other person’s information are not included in payment records.

AI processors and international transfers

Payment processing and payment method integration (Korea PortOne) and approval and cancellation of card and easy-pay payments (KG Inicis) are outsourced to companies in Korea and are not international transfers. Only the input needed to generate readings and conversations (Saju input, conversation content, voice and attached photos) is passed to AI providers, and we do not use it for any purpose other than providing the service.

Recipient:: OpenAI
Country:: United States
Contact:: https://openai.com/policies/privacy-policy
Data transferred:: Saju input, conversation content, voice and attached photos
Purpose:: Generating conversation and reading text, processing voice conversations (speech recognition and generating spoken replies), understanding the content of attached photos and checking for inappropriate images
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account

Recipient:: Anthropic (Claude)
Country:: United States
Contact:: https://www.anthropic.com/legal/privacy
Data transferred:: Saju input
Purpose:: May be used, depending on service settings, to generate readings (as a substitute when OpenAI is unavailable)
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account

Recipient:: xAI
Country:: United States
Contact:: https://x.ai/legal/privacy-policy
Data transferred:: Conversation content and voice
Purpose:: May be used, depending on service settings, for conversation generation and voice conversations
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account

Recipient:: KIE.ai
Country:: May include the United States (the specific country is provided on request)
Contact:: https://kie.ai
Data transferred:: Image generation requests
Purpose:: May be used, depending on service settings, for AI image generation
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account

Recipient:: Supabase, Inc.
Country:: United States
Contact:: https://supabase.com/privacy
Data transferred:: The data listed above in general (account information, Saju input, results, conversation records, etc.)
Purpose:: Member authentication and database and file storage
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account (payment records for the period required by law)

Recipient:: Google LLC (Google Cloud, Firebase, Google Analytics, Google sign-in)
Country:: United States (the service hosting servers are in the Tokyo, Japan region)
Contact:: https://support.google.com/policies/troubleshooter/7575787
Data transferred:: Access, device, usage and error information, account identifiers, and in-app purchase transaction information
Purpose:: Service hosting, usage statistics, error and crash collection, Google sign-in, and processing in-app purchases
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account (payment records for the period required by law)

Recipient:: Apple Inc.
Country:: United States
Contact:: https://www.apple.com/legal/privacy/
Data transferred:: Account identifier, email (including a hidden address) and purchase transaction information
Purpose:: Sign in with Apple and processing in-app purchases
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account (payment records for the period required by law)

Recipient:: RevenueCat, Inc.
Country:: United States
Contact:: https://www.revenuecat.com/privacy/
Data transferred:: User identifier, purchased products, subscription status and store transaction identifiers
Purpose:: Confirming and managing in-app purchases and subscription status
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account. When you delete your account, customer attributes (email, name, etc.) are deleted and purchase history is kept (payment records for the period required by law)

Recipient:: Expo (Expo Push)
Country:: United States
Contact:: https://expo.dev/privacy
Data transferred:: Push notification token and notification content
Purpose:: Delivering push notifications
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account

Recipient:: Dodo Payments
Country:: May include the United States (the specific country is provided on request)
Contact:: https://dodopayments.com/legal/privacy-policy
Data transferred:: Payment identifiers, amount, currency, payment method, status and buyer information
Purpose:: Overseas payment processing for users outside Korea (payment agent and reseller, Merchant of Record)
When and how:: Whenever you use the relevant feature, the items needed are transmitted over the network
Retention by recipient:: Limited to the purposes above and the outsourced tasks, until the outsourcing contract ends or you delete your account (payment records for the period required by law)

How to refuse or withdraw, and its effect

If you do not want your information transferred overseas, you can stop using the relevant feature (AI readings, conversations, voice conversations, push notifications, overseas payment, usage statistics and sign-in), delete your information by deleting your account in the settings screen, or email the Privacy Officer at privacy@arclair.com. If you refuse, you cannot use the relevant feature. Member authentication and data storage (Supabase) and service hosting (Google Cloud) are the basis of the service, so you cannot use the service if you refuse them.

Effective: 2026-11-20

Effective Date: September 28, 2026

Company: Arclair Inc.

Address: 5F, #5086 Namkyung Bldg, 35 Ilwon-ro, Gangnam-gu, Seoul, Republic of Korea

Representative: Haejung Ko

Phone: +82-2-6465-0900

Contact: hello@arclair.com

Privacy Contact: privacy@arclair.com