Terms & Policies

Privacy Policy

Effective date 2026-06-09

Ioreum (“we”, “us”) respects your privacy. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have. It is written with the EU General Data Protection Regulation (GDPR) in mind.

1. What we collect

  • Your calling name — the name you provide for your reading.
  • Date and time of birth — required to compute your saju chart. Your birth date and time constitute personal data and, in some jurisdictions, may be considered sensitive; we treat them with care.
  • Gender — used as an input to the chart interpretation.
  • Email address — collected when you sign in with Google, to identify your account and contact you about your reports.
  • Usage and technical data — basic logs needed to operate the Service, prevent abuse, and resolve issues.

2. Why we use it (lawful basis)

  • To compute your saju chart and generate and deliver your report. The lawful basis is performance of a contract with you and/or your consent.
  • To process payments and keep transaction records.
  • To respond to your requests and to maintain the security and integrity of the Service.

3. Third parties and sub-processors

We do not sell your personal data. To provide the Service we use a limited number of trusted sub-processors:

  • AI interpretation provider (Anthropic and/or Google) — to generate the written interpretation of your chart.
  • Database hosting (Supabase) — to store your account and report data.
  • Payment provider — to process payments securely. We do not store your card details.

4. International data transfers

The Service is operated from the Republic of Korea, and our sub-processors may be located in other countries. As a result, your personal data may be transferred to and processed outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.

5. Data retention

  • Free previews are retained for approximately 30 days.
  • Generated reports are retained for approximately 1 year so you can re-open them.
  • We delete or anonymize personal data when it is no longer needed for the purposes above, subject to any legal obligation to retain certain records.

6. Your rights

Under the GDPR and similar laws, you may have the right to:

  • access the personal data we hold about you;
  • request rectification of inaccurate data;
  • request erasure of your data;
  • request restriction of processing;
  • data portability;
  • object to processing;
  • withdraw your consent at any time, without affecting prior lawful processing.

You may also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use only essential cookies needed for authentication and to keep your session active. We do not use cookies for advertising.

8. Children

The Service is not directed at children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Contact

To exercise your rights or for any privacy question, contact us at support@ioreum.com.