Halmakase

Ten Yearz Inc. Privacy Policy

This Privacy Policy explains how Ten Yearz Inc. handles user data. Our Saju (Four Pillars of Destiny) service processes sensitive personal information such as date and time of birth, requiring particular attention to data protection. We also clearly disclose when data is transmitted to third parties (such as Google) for AI analysis.

Introduction

Ten Yearz Inc. (hereinafter "the Company") has established and publicly discloses this Privacy Policy to protect the personal information of its users and to promptly and efficiently handle related inquiries, in accordance with applicable data protection laws.

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information collected shall not be used for purposes other than those listed below.

  • Member Registration and Management: Verifying registration intent, identifying and authenticating members, maintaining member accounts, preventing fraudulent use
  • Service Provision and Contract Fulfillment: Generating and providing AI Saju/fortune analysis results, content purchases and payment processing, customized service delivery
  • Grievance Handling: Verifying identity of inquirer, confirming inquiry details, contacting for investigation, reporting resolution results
  • Marketing (Optional): New service development, event information and participation opportunities

2. Personal Information Collected

The Company processes the following personal information items:

  • Fortune Analysis Service: [Required] Date of birth, birth time, gender, solar/lunar calendar, personality type (MBTI)
    Legal basis: This information is essential for providing fortune analysis services and is collected with user consent.
  • Love Fortune Service: [Required] Date of birth, name (nickname), and gender of both the user and their partner
  • Compatibility Analysis: [Required] Partner's name, date of birth, gender, relationship type
  • Face Reading & Palm Reading Services: [Required] A facial photograph (face reading) or photographs of both palms (palm reading)
    Your photo is used exactly once for AI analysis and immediately discarded once the result is generated. It is never stored in our database or file storage. Only a text description of facial features or palm lines derived from the photo is retained to provide the service. By uploading a photo you consent to this processing; please do not upload photos of other people without their permission.
  • Paid Transactions: PayPal account information and other payment-related information
  • Automatically Collected During Service Use: IP address, cookies, service usage records, visit records, device information

3. Retention Period

The Company processes and retains personal information within the legally mandated retention period or the retention period agreed upon at the time of collection.

  • Member Registration: Until account deletion
  • Service Provision: Until service delivery and payment settlement are completed
  • Legally Required Retention:
    • Records related to contracts or cancellations: 5 years
    • Records related to payment and supply of goods: 5 years
    • Records related to consumer complaints or dispute resolution: 3 years

Third-Party Data Sharing

The Company does not share user personal information with external parties as a general rule. However, the following minimum information may be shared with third parties to provide the Service:

  • Google LLC (USA): Date of birth, gender, personality type, and other data — and, for the Face Reading service, your facial photograph — are transmitted via the Gemini API for AI analysis (cross-border transfer)
    Transmitted data does not include personally identifiable contact information or addresses. Facial photographs are used for a single analysis only and are never stored on our servers.
  • Meta Platforms, Inc. (USA) — Ad performance measurement: To match service usage and purchases against ad performance, SHA-256 hashes of your email address (for members), name, date of birth, gender, country, phone number (when entered for KakaoTalk notifications), and a user identifier, together with browser identification cookies (_fbp, _fbc), IP address, and browser information, are sent to the Meta Conversions API and Meta Pixel (cross-border transfer). In addition to what we send directly, Meta Pixel's automatic advanced matching hashes the name, date of birth, gender, and phone number entered on input screens and sends them as well.
    Hashes cannot be reversed to the original values, and fortune analysis results or question content are never sent.
  • Other ad performance measurement tools (TikTok Pte. Ltd. (Singapore), Kakao, Karrot, Naver): To match service usage and purchases made after an ad, browser identification cookies, IP address, browser information, order number, and payment amount are sent to each provider's pixel or conversion API (TikTok: cross-border transfer). No personally identifying data such as name, email, or date of birth is sent.
  • PayPal: Order and payment information for processing paid transactions

The ad performance measurement data above is retained under each provider's privacy policy (Meta Platforms, Inc., USA; transferred online at the time of transmission; retained until the purpose is fulfilled). You can stop this sharing by deleting your account; blocking cookies in your browser stops the browser identification cookies.

Data Processing Delegation

The Company delegates the following data processing tasks:

  • Supabase Inc.: Data storage and member authentication management (US-based servers)
  • Vercel Inc.: Web service hosting and server operation
  • Delegation Period: Until termination of the service agreement or delegation contract

4. Your Rights

  1. You may exercise your right to access, correct, delete, or suspend the processing of your personal information at any time.
  2. You may exercise these rights by contacting the Company via written request or email, and the Company will act without delay.
  3. If you need remediation for personal information infringement, please contact our Data Protection Officer.

5. Destruction of Personal Information

The Company shall promptly destroy personal information when the retention period has expired or the processing purpose has been achieved.

  • Destruction Procedure: Personal information subject to destruction is selected and destroyed with the approval of the Data Protection Officer.
  • Destruction Method: Electronic files are deleted using irreversible technical methods. Paper documents are shredded or incinerated.

6. Data Protection Officer

  • Organization: Ten Yearz Inc.
  • Contact: ten_yearz@naver.com

For all privacy-related inquiries, complaints, and remediation requests arising from the use of our Service, please contact our Data Protection Officer.

7. Business Information

  • Company Name: Ten Yearz Inc.
  • Representative: Semi Jang
  • Address: 961, 25 Dongseong-ro, Jung-gu, Daegu, Republic of Korea
  • Email: ten_yearz@naver.com
  • Phone: +82 10-4681-8893

Addendum

This Privacy Policy takes effect on September 13, 2026. The previous policy did not include third-party sharing for ad performance measurement; this revision adds that item.