Privacy Policy
Last updated: 25 October 2026. Legal review by counsel: pending. The one item shown [LIKE THIS] is still being confirmed; everything else describes how the service works today.
This policy explains what K-Mystic collects when you get a reading, why we collect it, who sees it, how long we keep it, and how you can delete it. We have tried to write it the way we would want to read it: plainly, and without hiding the awkward parts.
The short version
- You give us a first name, a birth date, an optional birth time, a birthplace and, if you like, an email address. There is no account and no password.
- We use those details to compute your Four Pillars chart and to have an AI model write a short insight and answer your question. The model receives your first name and the computed chart, never your exact birth time, the day of the month, or your birthplace coordinates.
- Your exact birth time and birthplace coordinates are stored only in encrypted form.
- We do not sell your data, and we do not share it for advertising.
- You can delete everything about your reading yourself, with one button at the bottom of your reading page.
1. Who we are
K-Mystic is operated by Jusang Company (주상컴퍼니), a sole proprietorship registered in the Republic of Korea (business registration number 250-45-00644) at Room 301, 3rd floor, 14 Huam-ro 44-gil, Yongsan-gu, Seoul, Republic of Korea. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described here. Our privacy officer under Korea's Personal Information Protection Act is Wonsang Seo (서원상), owner, reachable at the address in section 14.
We have not yet appointed a representative in the EU or the UK under Article 27 GDPR: [EU/UK REPRESENTATIVE — to be confirmed with counsel].
2. What we collect
Everything below is either typed in by you or produced while we make your reading. We do not buy data about you or combine it with data from other companies.
| Data | Where it comes from | Notes |
|---|---|---|
| First name | You type it | Whatever you want to be called. It appears on your reading and is passed to the AI model so the text can address you. |
| Birth date | You type it | Year, month and day. |
| Birth time | You type it, or tick “I don't know” | Optional. Stored only inside the encrypted birth record (see section 12). |
| Birthplace | You pick a city from suggestions | City, country and time zone are stored in plain form so we can run the calculation. The latitude and longitude of the city are stored only inside the encrypted birth record. |
| Gender | You choose, or leave blank | Optional. Some traditional interpretations differ by gender; you can skip it. |
| Email address | You type it | Optional. Only if you ask us to email your reading link or to tell you when full readings launch. |
| Anonymous browser id | A cookie we set (km_anon) | A random identifier with no name attached. It is what makes your reading and your one free question “yours” without an account. |
| Your reading | Produced by us | The computed chart, the short insight written for you, the interest you picked (career, love, money, or just curious), the questions you ask Master Haneul and the answers, including any final sentence that is held back. |
| Feedback | You tap 👍 or 👎 | Whether the insight sounded like you. |
| Free-question record | Produced by us | A ledger entry, keyed to the anonymous browser id, recording that the free question has been granted and used. |
| Usage events | Your browser and our servers | Which steps of the reading you reach (for example “birth details completed”, “reading viewed”), with technical details like browser type. Sent to PostHog. Where the law requires consent (EU, EEA, UK, Switzerland) nothing is sent until you allow it. Session replays, where enabled, mask every input field. |
| IP address and approximate country | Your connection | Our hosting provider processes your IP address to deliver the site and keeps short-lived server logs. We use the approximate country derived from it to decide whether to show the consent banner and which crisis helpline to point you to, and we use the IP address in memory for about an hour to limit abuse. We do not store IP addresses in our database. |
What we do not collect. No account, no password, no card numbers (checkout runs on Dodo Payments' pages; we receive only the order id, amount, status, and the email and country you gave at checkout), no contacts, no precise device location. The city search runs against a GeoNames dataset bundled with our software, so what you type into the birthplace field is not sent to GeoNames or anyone else.
Other people's details. If you enter someone else's birth details, you are responsible for having their permission, and this policy applies to their data in the same way.
3. Why we use it, and the legal basis
Where GDPR or UK GDPR applies, we need a legal basis for each use. Here they are. Where other laws apply (for example in California, Brazil or Korea) we rely on the closest equivalent, and in every case we only use your data for the purposes listed.
| What we do | Data involved | Legal basis |
|---|---|---|
| Compute your Four Pillars chart and show your reading at its link | Name, birth date, time, birthplace, gender, anonymous id | Performance of a contract (Art. 6(1)(b)): it is the service you asked for. |
| Have an AI model write your insight and answer your question | First name, computed chart, interest, question text | Performance of a contract (Art. 6(1)(b)). |
| Email you the link to your reading | Email address, reading link, first name | Performance of a contract (Art. 6(1)(b)): you asked us to send it. |
| Tell you when full readings launch, with a launch discount | Email address | Consent (Art. 6(1)(a)). You can withdraw it at any time; see section 9. |
| Keep your reading and free question tied to your browser | Anonymous id (km_anon) | Legitimate interest (Art. 6(1)(f)) in running a service without accounts. This cookie is strictly necessary, so no consent is required. |
| Screen questions before they reach the model | Question text | Legitimate interest (Art. 6(1)(f)) in keeping the service safe and within its purpose, for example declining medical or self-harm questions and pointing to a helpline instead. |
| Limit abuse and keep the service up | IP address (in memory), anonymous id | Legitimate interest (Art. 6(1)(f)) in security. |
| Learn whether the insight sounded right | Thumb feedback, anonymous id | Legitimate interest (Art. 6(1)(f)) in improving the quality of the reading. |
| Understand where the reading loses people | Usage events | Consent (Art. 6(1)(a)) in the EU, EEA, UK and Switzerland. Legitimate interest (Art. 6(1)(f)) elsewhere, where the law permits analytics without prior consent. |
| Respond to your requests and legal obligations | Whatever the request concerns | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)). |
A birth date, a birthplace and a gender are not “special categories” of data under GDPR. We treat your birth details as sensitive anyway, because together they identify you and because many people consider them private.
We do not make decisions about you that have legal or similarly significant effects. The reading is for entertainment and reflection; nothing in it is used to grant or deny you anything.
4. How the AI is involved
The calculation of your chart is ordinary arithmetic and astronomy, done on our servers. The words of your reading are written by a large language model from Anthropic (the Claude family), speaking as a persona we call Master Haneul. Master Haneul is a character, not a person.
What Anthropic receives from us:
- your first name;
- the computed chart: the four pillars, the element balance and the derived analysis, plus your birth year and month, your country of birth, whether your birth time was known, and your gender if you gave one;
- the interest you picked;
- the question you type. A smaller model first reads the question on its own to classify whether it is a topic we decline (for example medical, legal, self-harm).
What Anthropic does not receive: your exact birth time, the day of the month you were born, the coordinates or city of your birthplace, your email address, your IP address, or the anonymous cookie id.
Anthropic processes this data as our service provider under Anthropic's commercial terms, which do not permit it to use our inputs or outputs to train its models. Anthropic may retain inputs and outputs for a limited period to detect abuse, as its terms describe. The generated text can be wrong, inconsistent or oddly phrased; it is not reviewed by a human before you see it.
5. Who processes data for us
We do not sell personal data, and we do not share it for cross-context behavioural advertising. The following companies process data on our behalf, under contracts that limit what they may do with it.
| Provider | What for | Where | What they see |
|---|---|---|---|
| Vercel, Inc. | Hosting and running the website | United States | All traffic to the site, including your IP address and anything you submit, in transit and in short-lived logs. |
| Supabase, Inc. | Our Postgres database | United States | Everything in section 2 that we store, with exact birth time and coordinates encrypted. |
| Anthropic, PBC | Generating the insight and answers; screening questions | United States | What section 4 lists. |
| Resend, Inc. | Sending the reading-link email | United States | Your email address, first name and reading link, only if you ask for the email. |
| Dodo Payments | Merchant of record for paid questions: checkout, card processing, tax, receipts, refunds | United States, with its payment processors | Everything you type at checkout (name, email, billing country, card or wallet details, which never reach us), our order id and the anonymous id, so the purchase can be matched to your reading. Dodo Payments is an independent controller for the payment itself; see its privacy policy at checkout. |
| PostHog, Inc. | Product analytics and session replay | United States (US cloud) | Usage events keyed to a one-way hash of the anonymous id (PostHog never receives the id itself), with input fields masked. Only after consent where consent is required. |
GeoNames is the source of our city list (CC BY 4.0). It is a dataset we ship with the software, not a service that receives your data.
We may also disclose data if the law requires it, to protect someone's safety, or, if the business is ever sold or merged, to the new owner under this same policy. We will tell you here if that happens.
There are no advertising pixels on the site in this version. If we add any in future, we will update this policy first and ask for consent where it is required.
6. International transfers
We are based in the Republic of Korea and our providers run in the United States, so your data leaves your country. If you are in the EU, the EEA or Switzerland, transfers to our providers rely on the European Commission's Standard Contractual Clauses, and, where the provider is certified, on the EU-U.S. Data Privacy Framework. If you are in the UK, we rely on the UK International Data Transfer Addendum to those clauses (or the UK Extension to the Data Privacy Framework). Korea has an adequacy decision from the EU, so data we handle ourselves in Korea is covered by that decision.
For readers in Korea: under the Personal Information Protection Act, we tell you that the items in section 2 are transferred to the providers named in section 5, in the United States, for the purposes in section 3, and are kept for the periods in section 7. You may refuse this transfer, but we cannot provide the service without it.
For readers in Brazil: transfers are made under standard contractual clauses recognised by the ANPD, or with your consent where required.
7. How long we keep things
| Data | Kept until |
|---|---|
| Your chart, the encrypted birth record, the insight, questions and answers, feedback | You delete them (section 9), or 24 months after the reading was created, whichever comes first. |
| Email address given for a reading link | Deleted with the reading, or when you ask us to remove it. |
| Email address given for early-access news | You unsubscribe or ask us to remove it, or 24 months after sign-up if we have not launched by then. |
| Free-question ledger entry | Kept while the anonymous id is in use; it contains no personal details beyond that id. |
| Usage events in PostHog | 12 months. |
| Orders (order id, product, amount, status, payment id, the email and country from checkout) | 5 years after the order, as the Korean Act on Consumer Protection in Electronic Commerce requires for payment and supply records. Deleting your reading does not delete the order, but the order holds no birth details. |
| Rate-limit counters | Up to one hour, in memory only. |
| Hosting logs at Vercel | Vercel's own short retention period. |
| Database backups | Deleted data may remain in our database provider's encrypted backups for a limited period (typically up to 30 days) before it rolls off. |
Honest note. The 24-month and 12-month limits above describe our policy, but the scheduled job that enforces them automatically is not live yet. Until it is, data is removed when you delete it yourself or ask us to. Self-serve deletion works today.
8. Your rights
Whatever country you live in, you can ask us to show you, correct, export or delete the data we hold about you, and you can withdraw any consent you gave. The details depend on where you are.
EU, EEA, UK and Switzerland. Under GDPR and UK GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing (including processing based on legitimate interest), to receive it in a portable format, and to withdraw consent at any time without affecting what was done before. You also have the right to complain to your data protection authority, for example the Information Commissioner's Office in the UK or the authority in your EU country. We would appreciate the chance to put things right first.
California (CCPA/CPRA) and other US states. You have the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; we honour this for everyone, not only Californians. We will not treat you differently for exercising your rights. We do not currently read the Global Privacy Control signal, because there is no sale or sharing for it to switch off.
Brazil (LGPD). You have the right to confirm that we process your data, to access it, to correct incomplete or outdated data, to request anonymisation, blocking or deletion, to portability, to information about who we share it with, and to revoke consent. You may also complain to the ANPD.
Korea (PIPA). You have the right to access your personal information, to have it corrected or deleted, and to request that processing be suspended. Complaints may be made to the Personal Information Protection Commission or the Privacy Call Centre (118).
Canada, Australia and elsewhere. You have comparable rights of access and correction under your local law, and we offer deletion and export to everyone regardless of where they live.
9. How to exercise them
- Delete your reading yourself. Open your reading from the same browser that created it and use Delete my data at the bottom of the page. This immediately removes the chart, the encrypted birth record, the insight, every question and answer, your feedback and any email address you gave us with that reading. The link stops working. No one else can do this for your reading, because only your browser's cookie unlocks the button.
- Everything else by email. Write to privacy@k-mystic.app to get a copy of your data (we send it as a JSON file), to correct something, to be removed from the early-access list, or to delete a reading when you no longer have the browser that made it. Tell us the reading link or the email address you used so we can find the right record; because there are no accounts, that is how we verify it is yours. We answer within 30 days, and sooner where your local law requires it.
- Analytics. Change your choice below, or clear this site's data in your browser.
10. Cookies and similar storage
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
km_anon | First-party cookie, HttpOnly | Identifies your browser so your reading and your free question stay yours. Strictly necessary. A one-way hash of it also keys your usage events, where analytics are allowed. | 1 year |
km_consent | Browser local storage (not a cookie) | Remembers whether you allowed analytics. Strictly necessary for honouring your choice. | Until you clear site data |
ph_*_posthog | First-party cookie and local storage set by PostHog | Analytics: keeps usage events from one visit linked to the next. Set only after you allow analytics where consent is required. | Up to 1 year |
There are no third-party advertising cookies in this version. Blocking the km_anon cookie will stop your reading link from recognising you as its owner.
11. Age
The service is for adults. You must be 18 or older to use it, and the form refuses birth dates that would make you younger than 18. We do not knowingly keep data about anyone under 18; if you believe we have some, email us and we will delete it.
12. Security
- Your exact birth time, the day of the month, your birthplace coordinates and your name are stored in an encrypted record (AES-256-GCM). The key lives in our server configuration, separate from the database, and the record is only decrypted on our servers when a page or email needs your first name.
- The chart we save and send to your browser contains no exact birth time, no day of the month and no coordinates.
- All connections use TLS. Database access is restricted to the application and the operator.
- Requests are rate-limited, and the AI model receives only the trimmed chart described in section 4.
- We store no card numbers. Dodo Payments handles the payment itself; we keep the order record described in section 7.
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as the law requires.
13. Changes to this policy
When we change this policy we update the date at the top. If a change matters to you, for example a new provider or a new purpose, we will say so on the site before it takes effect, and we will ask for consent again where consent is the basis.
14. Contact
Privacy questions and requests: privacy@k-mystic.app
Postal address: Room 301, 3rd floor, 14 Huam-ro 44-gil, Yongsan-gu, Seoul, Republic of Korea
Privacy officer (Korea PIPA): Wonsang Seo (서원상), owner
See also our Terms of Service and About page.