Privacy Policy

1. Who we are and scope

Unbyul (운별) is a mobile app that calculates a person's saju (四柱命理, the Korean Four Pillars of Destiny) and Western astrological chart from their gender, birth date, birth time and birth place, and presents interpretations of them. It is operated by OKSUSU CODE LAB (옥수수코드랩), a sole proprietorship registered in the Republic of Korea and represented by LEE YONGSOO (이용수). Business registration number: 462-25-02344. Mail-order business report number: 2026-Goyang Deogyang-gu-2357.

In this policy, "we", "us" and "our" mean OKSUSU CODE LAB, and "you" means a person who uses the app or the website. We are the controller, that is, the business responsible for the personal information described here.

This policy applies to the Unbyul app for iOS and Android, the website at https://unbyul.oksusucode.com, and the support we provide by email. It does not apply to the App Store, Google Play or any other service run by a third party, even where we link to it. Those services have their own privacy policies.

Unbyul is offered in the Republic of Korea, the United States and Japan. Sections 11 to 13 contain additional notices for people in those places. Where local law gives you rights beyond what is written here, the local law applies.

Unbyul is for entertainment and reference only. Nothing in the app is professional, medical, legal or financial advice.

2. Information we collect

Information you give us

• Profile: your nickname (or the name you choose to enter), gender, birth date, birth time (optional) and birth place at city level. These are the inputs used to calculate your charts.
• Account: your login identifier, which is an email address or the identifier provided by Apple or Google when you sign in with one of those accounts.
• Other people's profiles (optional): for compatibility readings you may add another person's nickname, gender, birth date, birth time and birth place. You are responsible for having that person's permission before entering their details. We use these profiles only to produce the reading you requested.
• Support messages: what you write to us when you contact support, and the email address you write from.

Information collected automatically

• Device model, operating system version, app version, and language and region setting.
• Push notification token, if you allow notifications.
• Pseudonymous user and device identifiers generated by us or our service providers. These are random values that do not contain your name or email address.
• IP address, access logs (time, request, result) and crash logs.
• In-app event analytics, such as which screens were viewed and which purchases were made.

Purchase information

When you buy coins or reports, we receive the product purchased, a transaction identifier and a purchase receipt from Apple or Google, and we keep your coin balance and a ledger of coins credited and spent. Payment is handled entirely by Apple or Google. We never receive your card number or any other payment credential.

What we do not collect

We do not collect precise location (GPS), contacts, photos, microphone or camera data, or advertising identifiers. Your birth place is a city you type or select, not a measured location.

3. How we use information

We use personal information for the following purposes and for no others without telling you first.

• Creating and managing your account: signing you in, recognising you, and syncing your data across your devices.
• Calculating your charts: converting your birth data into a saju chart (four pillars, five elements and related factors) and an astrological chart (positions of the Sun, Moon and planets and their signs). This calculation is done by deterministic code on our servers, not by an AI model.
• Generating and showing interpretations: see Section 4.
• Selling and delivering coins and reports: processing purchases, crediting coins, unlocking reports, keeping the coin ledger and handling refunds.
• Customer support: answering your questions and resolving problems and complaints.
• Push notifications you opted into: a daily fortune notice and purchase confirmations. You can turn these off at any time in your device settings or in the app.
• Preventing fraud and abuse: detecting duplicate or fraudulent purchases, misuse of promotions, and attempts to interfere with the service.
• Measuring and improving the service: understanding which features are used and fixing crashes and errors.
• Meeting legal obligations: keeping the transaction records required by commerce and tax law, and responding to lawful requests from authorities.

Where the law requires a legal basis, we rely on your consent (for example, for the optional birth time and for push notifications), the need to perform our contract with you (account, charts, purchases), our legitimate interest in running a secure and reliable service (security, analytics, crash reporting), and our legal obligations (record keeping). We do not use your information for targeted advertising, and we do not make automated decisions about you that have legal or similarly significant effects.

4. AI-generated interpretations

The charts themselves are calculated by our own code. The explanatory text you read is written by a large language model, Claude, provided by Anthropic, PBC through its API.

What we send to the model: the computed chart data (for example, the eight characters of the four pillars, the balance of the five elements, and the positions and signs of the Sun, Moon and planets), together with your nickname, gender and birth year so the text can address you naturally. For compatibility readings, the same elements of the other person's profile are included.

What we do not send: your email address, login identifiers, device identifiers, purchase history, IP address or anything else that identifies your account.

Anthropic processes this data as our service provider under its commercial terms and does not use API inputs or outputs to train its models. Under Anthropic's standard retention policy the data is not kept after processing, except for a limited period, currently up to 30 days, for abuse and safety monitoring.

Generated text is stored on our servers and attached to your account so that it can be shown again without being regenerated. It is deleted together with your account. Interpretations are produced from traditional rules and the model's writing; they are not statements of fact and should be read as entertainment and reference only.

5. Sharing, processors and international transfers

We do not sell personal information, and we do not share it with anyone for advertising. We share information only with the service providers listed below, who process it on our instructions; with Apple and Google as described; and when the law requires it.

All of these companies are headquartered in the United States, which means that from the standpoint of Korean and Japanese law your information is transferred abroad. Supabase stores our database in the AWS Seoul region in Korea, but the company operating it is in the United States. Transfers take place over an encrypted network connection at the moment you use the relevant feature.

We may replace one of these providers with an equivalent service. If we do, we will update this table and, where the change is material, notify you as described in Section 14.

Legal requests. We may disclose information when a court, law enforcement agency or regulator requires it under applicable law, or where necessary to protect the safety or rights of users or others.

Business transfer. If OKSUSU CODE LAB is reorganised or the Unbyul service is transferred to another business, your information may be transferred with it. We will notify you beforehand, and the new operator will remain bound by this policy until it is changed in accordance with Section 14.

6. Retention and deletion

We keep your account and profile data, coin ledger and generated reports for as long as your account exists. When you delete your account, we delete this data within 30 days. Copies held in backups are purged within a further 30 days.

The only exception is records we are legally required to keep. These are stored separately from the live service, used only for the purpose the law requires, and deleted when the period ends. The periods below come from Korean law, which applies to us as a Korean business; we keep the same records for all users.

Logs and analytics. Crash logs are kept for 90 days, analytics events for 12 months and web access logs for up to 30 days, after which they are deleted or made anonymous.

Inactive accounts. If you do not sign in for 2 years, we will send a notice to your registered email address at least 30 days in advance and then either delete your data or move it to separate, restricted storage. You can keep your account active simply by signing in before that date.

How to delete. In the app, open Settings → Account → Delete account. You can also email us at support@oksusucode.com or follow the instructions at https://unbyul.oksusucode.com/account-deletion. Deleting your account forfeits unused coins, except where a refund is owed under our Terms of Service or applicable law.

7. Your rights and how to exercise them

Subject to the law that applies to you, you have the following rights over your personal information:

• Access: to know what information we hold about you and to receive a copy.
• Correction: to have inaccurate information corrected. You can edit your profile, including your birth data, in the app at any time.
• Deletion: to have your information deleted (Section 6).
• Restriction: to ask us to stop processing some or all of your information.
• Withdrawal of consent: to withdraw consent you have given, for example by turning off push notifications or removing your birth time. Withdrawal does not affect processing that has already taken place.
• Portability: where applicable, to receive your data in a machine-readable form.

How to exercise them. Most rights can be exercised directly in the app under Settings → Account. For anything else, email support@oksusucode.com from the address registered to your account, or tell us your nickname and sign-in method so we can locate the account. We may ask you to confirm your identity before acting, and we use that information only for verification. You may act through an authorised representative where the law allows; we will ask for proof of authority.

Response time. We respond within 10 days to requests under Korean law, within 45 days to requests from California residents (extendable once by a further 45 days where permitted, with notice to you), and without undue delay to requests under Japanese law. We do not charge for handling requests unless the law allows it and the request is clearly excessive.

If we cannot grant a request, we will tell you why and how you can appeal, including through the public bodies listed in Sections 11 to 13.

8. Security

We take the following measures to keep your information safe:

• Encryption in transit (TLS) between the app, the website and our servers, and encryption at rest for our database and backups.
• Access to personal information limited to the representative and to the automated systems that need it, protected by multi-factor authentication and logged.
• No card numbers on our servers; payment is handled by Apple and Google.
• Pseudonymous identifiers, rather than names or email addresses, in analytics and crash reporting.
• Regular review of access logs, software updates and the security settings of the services we use.

No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and the competent authorities as required by law.

9. Children

Unbyul is not directed at children. You must be at least 14 years old to create an account, in every country where the app is available. We do not knowingly collect personal information from anyone under 14. If we learn that we have done so, we delete the account and its data promptly. In the United States, the Children's Online Privacy Protection Act (COPPA) protects children under 13; our higher minimum age of 14 applies there as well. If you believe a child under 14 has given us information, please contact support@oksusucode.com.

10. Cookies and similar technologies (website)

Our website at unbyul.oksusucode.com uses only the technical storage needed to make it work: your language preference is saved in your browser so that the site opens in the language you chose. We do not use advertising cookies, tracking pixels or third-party analytics on the website. Cloudflare, which hosts the site, may set a cookie that is strictly necessary for security and performance.

The Unbyul app contains no third-party advertising SDKs. The analytics and crash-reporting tools in the app (PostHog and Sentry) use the pseudonymous identifiers described in Section 2 and are not used for advertising.

11. Notice for Korea (Personal Information Protection Act)

This section applies to users in the Republic of Korea and is provided under the Personal Information Protection Act (PIPA). The Korean-language version of this policy is the authoritative version for users in Korea.

Items, purposes and retention. As described in Sections 2, 3 and 6. Providing a birth time is optional; the app works without it, with lower precision. Persons under 14 cannot register.

Entrustment of processing (처리위탁). We entrust the following work to the following processors and supervise them by contract as required by Article 26 of PIPA.

Overseas transfer (국외 이전). Personal information is transferred to the following recipients outside Korea. You may refuse the transfer by not registering, by deleting your account, or by contacting support@oksusucode.com. Because these services are necessary to operate Unbyul, refusing will prevent or limit your use of the service.

Rights and remedies. You may request access to, correction or deletion of, or suspension of processing of your personal information at any time (Section 7). If you believe your rights have been infringed, you may also contact: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office (www.spo.go.kr, 1301) or the Korean National Police Agency (ecrm.police.go.kr, 182).

12. Notice for California residents

This section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). In the past 12 months we have collected the categories of personal information listed below. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not engage in targeted advertising. The only sensitive personal information we may collect is your account log-in credential, which we use solely to authenticate you.

Sources are you, your device, and Apple or Google when you sign in or purchase. Business purposes are those in Section 3, and retention periods are those in Section 6. Each category is disclosed only to the service providers in Section 5 under contracts that limit their use of it to the services they provide to us.

Your rights. You have the right to know what personal information we collect, use and disclose; to delete it; to correct inaccurate information; to opt out of sale or sharing (we do neither); to limit the use of sensitive personal information (we already use it only to provide the service); and not to be discriminated against for exercising these rights.

How to exercise them. Use Settings → Account in the app, or email support@oksusucode.com. We verify requests by matching them to the email address or sign-in identifier on the account and may ask for additional confirmation. You may designate an authorized agent; we will ask for signed permission and may also verify your identity directly. We respond within 45 days and will tell you if we need up to 45 more.

Global Privacy Control. We treat a GPC signal from your browser as a request to opt out of sale and sharing. Because we do not sell or share personal information, honoring it changes nothing about how we treat you.

We do not knowingly sell or share the personal information of consumers under 16, and no one under 14 may use Unbyul.

13. Notice for Japan (Act on the Protection of Personal Information)

This section applies to users in Japan under the Act on the Protection of Personal Information (APPI). The Japanese-language version of this policy is the authoritative version for users in Japan.

Purpose of use. The purposes in Section 3. We do not use personal information beyond these purposes without your consent.

Provision to third parties. We do not provide personal data to third parties, except for entrustment to the processors in Section 5 and disclosures required by law. We do not engage in joint use.

Third parties and processors in foreign countries. The companies in Section 5 are located in the United States. The United States has no single comprehensive federal privacy law; information on its legal system is published by Japan's Personal Information Protection Commission. Each provider is bound by contract to protect your data to a standard equivalent to the APPI, and we monitor their compliance.

Requests about retained personal data. You may request disclosure, correction, addition, deletion, suspension of use or suspension of third-party provision of your retained personal data by emailing support@oksusucode.com. We verify your identity, respond without undue delay and do not charge a fee.

Security management measures. See Section 8.

Complaints. Please send complaints about our handling of personal information to support@oksusucode.com. We will respond promptly and in good faith.

14. Changes to this policy

We may update this policy when our service, our providers or the law change. The effective date and version number at the top will be updated each time. For material changes, we will give notice in the app or on the website at least 7 days before the change takes effect, and at least 30 days in advance in Korea for changes that affect your rights. Continued use after the effective date means the updated policy applies to you, except where your consent is legally required, in which case we will ask for it. Earlier versions are available on request.

15. Contact and privacy officer

Our privacy officer is responsible for this policy and for handling your questions, requests and complaints.

• Privacy officer: LEE YONGSOO (이용수), representative of OKSUSU CODE LAB
• Email: support@oksusucode.com
• App website: https://unbyul.oksusucode.com
• Company website: https://oksusucode.com

Please do not include sensitive information in your first email; we will tell you what we need to help. Public bodies you may contact if you are not satisfied with our response are listed in Sections 11 to 13.