Privacy Policy

First-party service analytics

Additional notice · 26 October 2026

After optional analytics consent by adults aged 18 or over, ReturnSaju records home visits, banner/card impressions, clicks, scroll depth, active time and arrivals on selected public entry pages in its database to improve acquisition and navigation. A random browser visitor ID lasts up to 90 days. Tab sessions renew after 30 minutes of inactivity or 8 hours. Events and linked records are retained for up to 90 days, then deleted. Only viewport device categories, language and classified acquisition channels are stored. This analytics database does not store raw IP addresses, user-agent strings, full URLs, search terms, query strings, names, contact information, birth inputs or member IDs. Admin, login, account, relationship-map and survey-answer pages are excluded.

You can decline or withdraw through analytics cookie settings without affecting the service. Withdrawal stops future collection and clears these browser identifiers; previously collected records follow the retention period. First-party analytics honors Do Not Track and Global Privacy Control. It is processed in ReturnSaju's database separately from Microsoft Clarity. Privacy requests can be sent to the contact listed in this policy.

1. Controller

Luvd Co., Ltd. (Representative: Nara Kim), Corporate Business Number 651-81-00409, Online Business Number 2021-Seoul-Gwanak-1410. Address: 5F, 1698 Nambusunhwan-ro, Gwanak-gu, Seoul, Republic of Korea. Tel. +82-2-752-0719, Fax +82-2-752-0718, email answer@luvd.co.kr.

2. Information processed

For accounts we process the OAuth provider and user ID and, when supplied, email and verification status, name, profile image, locale, sign-in time, and session-token hash. With separate consent we save Saju nickname, gender, calendar settings, birth date, and birth time. Diagnosis uses name, phone, preferred time, purpose, and answers. Urgent consultation uses name, phone, concern, appointment, an optional note of up to 600 characters, and payment and service status. If analytics is accepted, Microsoft Clarity may collect IP address, browser/device details, visit time, page URL, clicks, scrolling, mouse movement, and session-replay usage data. Do not enter unnecessary sensitive information in free-text fields. The collection paths are the OAuth provider, service input, application, and consent screens, browser storage, and the optional analytics tool. When you consent and submit the market-research survey, we process your survey responses and any optional age range, gender, relationship or marital status, and time since your last relationship. The survey does not collect your name, contact details, IP address, or browser identifier.

3. Purposes and legal bases

Account information is used with sign-up consent and as needed for the contractual relationship for account creation, sign-in, administration, and security. Separately consented Saju data provides and manages the user's own profile. Diagnosis and consultation data is used with the request and consent for review, replies, schedule and payment confirmation, service delivery, and disputes. Clarity data is used only with optional consent for usage, error, and usability analysis. Market-research survey responses are processed with separate consent to analyze user experience and preferences and improve Regression Saju.

3-1. AI preparation chat

The Destiny Rewind V2 ‘preparation chat with Sihyeon’ generates a reply through the OpenAI, L.L.C. API only from conversation text that the user separately consents to send. It is an optional way to briefly organize a concern before applying for consultation; it is not used for Saju calculation or automated Saju results. Conversation text is not saved in our service database, and OpenAI response storage is disabled for the API request. Do not enter names, contact details, dates of birth, addresses, account information, or information that can identify the other person. Declining does not affect core functions such as the diagnosis form or consultation application.

3-1. Saju and relationship inputs

For Saju and relationship-flow features, we use the nickname, gender, solar or lunar calendar and leap-month setting, birth date and time, breakup date, and relationship notes that the user enters for themselves or another person to calculate and display the chart and relationship flow. This information is stored in the user's browser by default. Only the logged-in user's own Saju profile is saved to the account after separate storage consent. Another person's information and relationship notes are not automatically saved to the account profile. For published Saju Builder content and admin previews, however, inputs are sent to the server for temporary processing to calculate readings and check access. These inputs and personal reading results are not stored in the database. Inputs remain in the current browser tab for 30 minutes and can be cleared by the user.

4. Browser storage

Orthodox Saju input, calculated results, and saved targets are stored in localStorage. Relationship-flow drafts, including birth details, breakup dates, and relationship notes, may be stored in sessionStorage. Draft diagnosis answers are stored in localStorage before submission and deleted after a successful submission.

5. Retention

Browser data remains until deleted by the user; sessionStorage generally lasts until the tab session ends. Account, OAuth, session, and Saju profile data is deleted without delay at account deletion. De-identified consent and security audit records are retained for three years. Diagnosis and consultation operations records are deleted one year after collection. Statutory records are separately retained for five years for contracts, withdrawals, payments, and supply; three years for complaints and disputes; and six months for advertising. Clarity retains session recordings for 30 days and clicks, heatmaps, and favorites for up to nine months. Market-research survey responses are retained for one year from submission and then destroyed.

6. Third-party disclosure

id-api.luvd.kr and the urgent-consultation scheduling database are internal systems operated by Luvd. If you opt in to analytics, Microsoft Corporation processes usage data as an independent controller and may use it under its own Privacy Statement, including for service improvement and advertising profiles. Other disclosures occur only with separate consent or a legal basis.

7. Processors

Luvd entrusts server and network hosting to SmileServ Co., Ltd. Luvd manages protective measures and subprocessors through contracts and reviews. Changes to processors or duties will be published in this Policy.

8. Overseas transfer

If you opt in to analytics, IP address, browser and device details, visit time, page URL, clicks, scrolling, mouse movement, and session-replay data are transferred over encrypted connections during the visit to Microsoft Corporation in the United States (privacy contact: clarityMS@microsoft.com). The purpose is usage, error, and usability analysis. Session recordings are retained for 30 days and clicks, heatmaps, and favorites for up to nine months. You may refuse or withdraw in ‘Analytics cookie settings’ without losing core service features. Google OAuth authentication takes place directly on the provider's screen under its privacy policy.

9. Deletion

Information is deleted without delay when its purpose or retention period ends and no legal duty remains. Electronic files are deleted to resist recovery; paper is shredded or incinerated. Statutory records are segregated with use restricted. Account deletion is available in the account page; request deletion of diagnosis or consultation records not directly linked to the account at answer@luvd.co.kr.

10. Your rights

You or a lawful representative may request access, correction, deletion, restriction, withdrawal of consent, or account deletion through the account page, answer@luvd.co.kr, or +82-2-752-0719. We verify identity only as necessary and respond within legal deadlines. Analytics consent may be withdrawn at any time through the footer settings.

11. Security

Session tokens are stored as hashes and session cookies use HttpOnly, Secure, and SameSite protections. We operate encrypted transport, least-privilege access controls, access-log management, vulnerability review, backups, and incident-response procedures as appropriate.

12. Cookies and analytics

The OAuth-state cookie lasts 10 minutes; member sessions default to 30 days and can range from one hour to 180 days; the locale cookie lasts one year. Blocking essential cookies may disable sign-in or language persistence. Microsoft Clarity loads only after separate consent by a user aged 18 or older. Advertising storage is denied, and pages and input fields are masked. Refusal or withdrawal does not affect core service features. The Saju Builder share-unlock cookie lasts 30 minutes. Blocking it may prevent the unlocked state from being maintained.

13. Minors

Registration, relationship diagnosis and consultation requests, and optional analytics are limited to users aged 18 or older. If we learn that personal information from a user under 18 was collected, we stop the relevant feature and delete information not subject to legal retention without delay. A guardian may request deletion at answer@luvd.co.kr. The market-research survey may be submitted only by people aged 18 or older.

14. Privacy Officer and remedies

Privacy Officer: Jangwon Lee. Contact: answer@luvd.co.kr, +82-2-752-0719. If the matter is not resolved, you may contact the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972).

15. Policy changes

The effective date and changes will be posted when this Policy changes. Material changes will be announced using the method and period required by applicable law.