Privacy Policy

K-Destiny is operated by Aurora Labs, an individual operator based in the Republic of Korea. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service at kdestiny.auroralabs.kr.

Contact: contact@auroralabs.kr

2.1 Account Information (Google Sign-In)

When you sign in with Google, we receive and store the following data from Google OAuth 2.0:

• Google User ID (unique identifier)
• Full name
• Email address
• Profile picture URL

This data is used solely to authenticate you and identify your account. It is never shared with third parties for advertising or sold in any form.

2.2 Birth Chart Data (User-Submitted)

To generate your Saju analysis, you directly provide the following information:

• Date of birth
• Time of birth
• Birth timezone
• Gender (as required for traditional Saju calculation)
• Name (optional, used only for display purposes)

This data is stored securely in our database and used to compute your birth chart and generate AI-powered reports. Your birth date and time (without name or email) may be transmitted to OpenAI’s API for report generation — see Section 4.

2.3 Payment Information

Payments are processed exclusively through PayPal. We do not receive or store your credit card number, bank account details, or any other payment credentials. We retain only your order record (amount, report type, PayPal transaction ID, and timestamp).

2.4 Usage Data

We collect anonymized analytics events (e.g., page views, feature interactions) to understand how the Service is used and to improve it. No personally identifiable information is attached to these events.

• To authenticate you and manage your account
• To compute your Saju birth chart and generate personalized AI reports
• To maintain your purchase history and report access
• To process payments via PayPal
• To respond to support and data-related inquiries
• To improve the Service through aggregated, anonymized usage analysis

We do not sell your personal data to any third party under any circumstances.

We share data with the following third parties only as strictly necessary to operate the Service:

We retain your account and chart data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., completed payment records required for tax compliance).

Anonymized analytics data may be retained indefinitely as it contains no personally identifiable information.

K-Destiny uses browser local storage to remember user preferences (such as dismissing install prompts). We do not use third-party tracking cookies or advertising cookies.

Session authentication uses secure, HTTP-only cookies managed by Supabase.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request permanent deletion of your account and all associated personal data
• Portability — request your data in a machine-readable format
• Objection — object to certain processing of your data

K-Destiny is operated from the Republic of Korea, but our infrastructure partners (Supabase, Vercel, OpenAI) may process data in the United States or other countries. By using the Service, you consent to this transfer. We require our processors to maintain appropriate safeguards for your data consistent with applicable law.

K-Destiny is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@auroralabs.kr and we will delete it promptly.

We use industry-standard security measures including encrypted connections (HTTPS), role-based database access controls, and HTTP-only session cookies. However, no system is completely secure, and we cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. Material changes will be communicated via email to registered users where feasible.

This Privacy Policy is governed by the laws of the Republic of Korea, including the Personal Information Protection Act (PIPA). For users in the European Economic Area, this Policy is intended to be consistent with GDPR principles. For California residents, this Policy is intended to be consistent with CCPA requirements.

For any privacy-related questions, requests, or data deletion: contact@auroralabs.kr

Aurora Labs · kdestiny.auroralabs.kr · Republic of Korea