TAKDOSA Privacy Policy — Android internal beta
Effective: 16 October 2026 · Operator (data controller): 주식회사 래드우드
This policy applies to the invitation-only TAKDOSA Android internal test (beta). The operator and the policy for the public service will be decided after the beta and announced before launch. If the Korean and English versions differ, the Korean version prevails.
1. Personal information we process
| Category | Items | How it is collected |
|---|---|---|
| Account | Email address; sign-in records (handled by the authentication provider) | When the operator creates a tester account |
| Destiny profile | Name or nickname, date of birth, solar/lunar calendar and leap month, time of birth (or "unknown"), place of birth (place name, time zone, coordinates), gender | Entered by you in the app. Stored on our server only if you agree |
| Consent record | Agreement or withdrawal, notice version, server time | When you agree or withdraw in the app |
| Consultations | Your questions and TAKDOSA's answers; part of the recent conversation, so a consultation can continue | When you ask |
| Service records | Question counts and times, your device's time-zone name, a pseudonymous per-install identifier, the time of an account-deletion request | Generated while you use the service |
- Place of birth is the place name you type, checked against a place list on your device. Device location (GPS) is not collected; the app has no location permission.
- Profile photos (optional) are stored encrypted on your device only and never uploaded.
- Face analysis does not run in this beta, and no face information is processed.
- Conversation memory (remembering plans or decisions mentioned in questions) requires a separate notice and consent. It is not offered in this beta, and no such data is stored.
2. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Sign-in and account management, usage limits, troubleshooting | Performance of the service contract |
| Server-side Saju calculation, writing AI counselling answers, continuing a consultation | Destiny profile: your consent / Consultations: performance of the service contract |
| Recording consent, withdrawal and deletion requests | Legal obligations and protection of your rights |
3. Retention and destruction
Retention
- Personal data is kept only as necessary during the beta and its post-beta review period.
- Deadline: beta-related personal data is deleted no later than 30 days after the beta ends. This covers tester accounts, destiny profiles, consent records, consultation questions and answers, recent conversation and service records.
- Earlier deletion: it is deleted sooner when its purpose ends or a deletion request requires it.
- Legal exceptions: information that the law requires us to keep is kept separately, and only for that period.
Withdrawal and deletion requests
- If you withdraw consent:
- The destiny profile stored on the server is deleted immediately.
- Until you agree again, no birth details are stored on the server and server consultations (ASK) are unavailable.
- Consultation questions, answers and recent conversation already on the server remain until the account is deleted (on request, or in the cleanup within 30 days after the beta). To remove them now, request account deletion.
- If you request account deletion:
- The server-side destiny profile is deleted immediately.
- After confirming the request, the operator deletes without undue delay (target: within 7 days of receipt) the account together with the consent records, consultation questions and answers, recent conversation, service records and the request itself.
What may remain after deletion
- TAKDOSA's operational database: data is deleted irrecoverably at the times above.
- Supabase backups: the database provider (Supabase) makes one backup per day and keeps it for 7 days. Point-in-time recovery is not used.
- Data deleted from the operational database therefore still exists in backups made before the deletion. Those backups are removed in turn as they pass the 7-day retention.
- Backups are used only for disaster recovery.
- Records that Supabase keeps internally to run its service follow Supabase's policy, and TAKDOSA cannot guarantee when they are deleted.
- Google: questions and Saju results sent to Google are kept by Google for up to 55 days for abuse monitoring, then deleted.
- Cloudflare: TAKDOSA's request logs on Cloudflare (no personal data) are kept up to 7 days. Connection data (e.g. IP addresses) follows Cloudflare's privacy policy.
- Aggregates: figures that cannot identify you (total question counts, total costs) may remain.
- Your device: data is removed when you uninstall the app.
4. Processors and third parties
TAKDOSA does not provide your personal information to third parties. To run the service, the following processing is entrusted to processors.
| Processor | Task |
|---|---|
| Supabase Pte. Ltd. | Authentication, data storage |
| Cloudflare, Inc. | Request delivery and processing (server execution) |
| Google LLC (Gemini API) | Writing counselling answers |
5. International transfers
The transfers below are entrustment and storage necessary to conclude and perform the service contract. Under Article 28-8(1)(3) of the Personal Information Protection Act, this policy discloses the items, countries, timing and method, recipients, purpose and retention, and how to refuse.
| Recipient | Country | Items | When and how | Purpose | Retention |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Singapore (AWS Singapore region) | Account, destiny profile (encrypted), consent records, consultations, service records | During use, over an encrypted connection (HTTPS) | Authentication, storage | As in §3 |
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | United States and the global network | Request content (in transit), connection data (e.g. IP address) | During use, over HTTPS | Request processing | Request content is not kept after processing. TAKDOSA's request logs (no personal data) are kept up to 7 days. Connection data follows Cloudflare's privacy policy |
| Google LLC (support.google.com/policies) | The United States and other countries where Google or its agents maintain facilities | Question text, Saju calculation results | When you ask, over HTTPS | Writing the answer | Kept for up to 55 days for abuse monitoring, then deleted. Google does not use it to improve its products (paid API terms) |
- Never sent to Google: your name, raw date, time or place of birth.
- Possible inference: Saju results (such as cycle periods) may indicate an approximate age.
- Refusing the transfer: decline to have your profile stored, or request account deletion. Server consultations (ASK) are then unavailable.
6. Your rights
- You may request access, correction, deletion, suspension of processing, and withdrawal of consent.
- Directly in the app:
- Correct your birth details: Profile → 정보 수정하기.
- Withdraw consent or request account deletion: Settings → 개인정보 및 상담 데이터 관리.
- Contact: takdosa.support@gmail.com.
- Without app access: write from your account email. The operator verifies the request through that address before acting.
7. Security
- In transit: HTTPS for every connection.
- On the device: encrypted local database and photos; device backup disabled.
- On the server: name and birth details encrypted (AES-256-GCM).
- Per-user access control: the server processes only the signed-in user's own data.
- Logs: TAKDOSA's server request logs contain no questions, answers, birth data, names or user identifiers. The authentication provider and network operators may keep standard access records (e.g. IP addresses).
8. Automatic collection
No advertising or analytics SDKs and no cookies.
9. Privacy officer
- Officer: 최윤석, Representative Director (대표이사) of 주식회사 래드우드
- Contact: takdosa.support@gmail.com
10. Remedies (Korea)
For reports or advice on privacy infringements, you may contact the following.
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
- Supreme Prosecutors' Office (www.spo.go.kr / 1301)
- Korean National Police Agency (ecrm.police.go.kr / 182)
11. Age
Not for users under 19: the beta is open only to adults aged 19 or over.
12. About AI counselling
- Inputs and outputs: your questions and the AI-written answers are collected and kept to provide and continue consultations, for the period in §3.
- Training:
- TAKDOSA does not use your questions or answers to train or improve AI models.
- Google, which writes the answers, does not use them to improve its products under its paid API terms. It keeps them for up to 55 days for abuse monitoring.
- As there is no training use, no training opt-out is needed.
- Automated decisions: TAKDOSA makes no decisions about you (such as restricting use) by AI. Usage limits follow fixed rules (20 per day, 50 in total).
- Nature of the answers: they are AI-written reflections based on Saju interpretation. They do not predict or guarantee outcomes and are not medical, legal or financial advice.
13. Changes
Material changes (such as the items or purposes of processing) are announced in the app and on this page before they take effect, with a comparison of the old and new text. Minor changes within the same scope (such as the list of processors) may be announced together at reasonable intervals. If the profile-storage notice changes, we ask for your consent again for the new notice.
- Current version: effective 16 October 2026 (first publication).