Privacy Policy

1. What We Collect

Account: email address, sign-in method (basic profile passed by a social provider if used), preferred language.

Reading input: birth date, birth time, gender, calendar type, and any concern text written in the consultation.

Usage & transactions: generated readings, coin balance and ledger, payment records (excluding card details), and logs ordinarily generated in the course of using the Service.

Big Five personality test (optional): your answer (1 to 5) to each item and the domain and facet percentiles computed from them. Your sex and birth year are used to compare you with people of the same sex and age. Saved in your Me record; not used for AI training. If you ask for the paid full reading, only the domain and facet percentiles and the four-letter type pass through our server to write it (a paid AI API that does not train on it); your item answers are not sent, nothing is stored on the server, and the reading is kept only on your device.

First-impression sign (optional): your birth city and your birth time to the minute. The city is picked from a list inside the service, never sent to a map service, and saved in your Me record.

Face reading: the photo or camera view is analyzed only on your own device; it is never sent to our servers or stored. Neither the facial proportions nor the landmark points are stored; the result is kept in your Me record only as a grade per feature (for example, wider than average) and a face shape. If you ask for the paid full reading, only those grades and the face shape pass through our server to write it (a paid AI API that does not train on it); nothing is stored on the server, and the reading is kept only on your device. Only a public model file (Google MediaPipe) is downloaded to your device for the analysis. The feature is for your own face only, and for users aged 14 or older who agree.

Inside (optional): the number of the answer you picked for each Inside question, and when. The words of the questions and answers are not stored, only the numbers, in your Me record. Only you can see them; they never appear in the friend mirror or to any other user. Your answers are sent to Google to write a reading only when you ask for a full reading, and only under paid terms under which inputs are not used to train AI. The text of an Inside reading is not kept on our servers; it stays on your device only. You can delete everything at any time with “Delete all my answers”.

Sensitive information: answers in Inside’s grown-up topic concern your sex life, which is sensitive information under Article 23 of Korea’s Personal Information Protection Act. We collect them only after you confirm you are 19 or older and separately agree to their processing solely to write your reading. Deleting the answers withdraws the consent and erases the information. These answers are not used in the “whole picture” reading.

2. Why We Use It

Generating, storing, and re-serving readings; processing coins and payments; account management and support; fraud prevention and security; compliance with legal obligations; and service improvement and analytics based on de-identified information.

Training our own AI models to improve reading quality. This use covers the calculated chart, the generated reading text, and the questions and answers exchanged in a counsel session. E-mail addresses, phone numbers, long digit strings, and links are stripped automatically before anything is kept for training, and the material is handled separately from account records. Training happens only in our own environment, and we do not sell or hand this data to anyone for that purpose.

Inside answers and readings are never used for that training.

We do not provide personal data to third parties for marketing.

3. Processors & International Transfer

We use the following processors: Supabase (database & auth), Stripe (payments, card data is handled only by Stripe and never stored on our servers), Google (AI reading generation, birth details are transmitted within the scope of generation), Vercel (hosting). Processors of an equivalent protection level may be added or replaced as operations require.

Depending on server and processor locations, data may be processed outside your country, including in the United States.

4. Retention

We keep information for as long as needed for the purposes above, in principle, while your account exists. Upon a deletion request we erase your data without undue delay, except records we must keep by law (such as payment records).

5. Cookies

We use essential cookies/storage needed to provide the Service (such as keeping you signed in). We use no advertising cookies and no third-party tracking tools.

For usage statistics we keep anonymous activity records on our own servers only: which menus were opened and where a visit ended, identified by a session key that disappears when the browser tab closes. Birth details, gender, email, reading text, and anything you type into a counsel session are never part of these records, and nothing is sent to an outside analytics provider.

6. Your Rights

You may request access, correction, deletion, or restriction of your data at help@arcawave.com. After identity verification, requests are handled within the period set by applicable law.

7. Children

The Service is not directed at children under 14, and we do not knowingly collect their data.

8. Changes

This policy may be updated from time to time; material changes will be announced by reasonable means, such as an in-service notice.