Privacy policy

1. Information and purposes

We process only the information needed for the relevant service.

• Beta applications: email, preferred platform (iOS, Android or both), display language, application time and status, consent records and a self-confirmation of age 18 or older, for application review, participation instructions and beta operations. We do not collect a date of birth for beta applications.
• Consent management: choices for each purpose, document version, receipt time and source, the minimum evidence needed to verify and process requests, processing time and operator records, for confirming consent and handling changes, withdrawals and privacy requests.
• Optional marketing: email and display language, for MYKEMI launch, update and event emails only when both separate marketing-use and advertising-email consents are valid.
• Support: the sender’s email, question, necessary attachments and handling records, for replies and privacy requests. Please do not send passwords, verification codes or unnecessary sensitive information.
• Abuse prevention: a beta request’s IP address is processed transiently. An IP hash scoped to a ten-minute window and request count are used to limit excessive submissions. The beta application database does not retain raw IP addresses.

2. Calculator and sharing

Solar or lunar birth dates and leap-month choices are used only while calculating a day pillar in your browser. We do not send or retain the entered birth date or individual calculation history in a server, database, URL, cookie, browser storage or analytics event.

A result’s share URL contains only a day pillar number from 1 to 60. The content API receives only the display language to retrieve related links, not your birth date. Selecting Share may open a sharing feature provided by your browser or operating system.

3. Retention and deletion

Duplicate applications, profile edits and consent changes do not extend the original deadline. When the purpose ends, including after a withdrawal or deletion request, the relevant information is deleted without undue delay. If a law requires separate retention, we explain the legal basis, information and period, and keep it separately.

Records used by us are deleted so we cannot restore them. Any paper copies are shredded or destroyed. Scheduled deletion handles expired records, and operations staff retry failures. Residual copies in Google systems follow the separate provider-deletion process described below.

• Beta applications, consents and handling history: no more than 90 days from the first application. Optional marketing use ends on withdrawal or the original 90-day deadline, whichever comes first.
• Support inquiries: no more than 90 days after resolution. Evidence for a beta application’s consent or withdrawal never outlives that application’s original expiry.
• Abuse-prevention IP hashes and counters: no more than two hours.

4. Providers and international transfers

AWS provides website hosting and delivery, beta application storage, security and operations. The Korean-account contracting party is Amazon Web Services Korea LLC; Amazon Corporate Services Korea LLC provides Seoul infrastructure. The beta database and operational API use Seoul. CDN delivery uses AWS’s global network according to the visitor’s location, which does not mean that the beta database is replicated overseas.

Google Workspace/Gmail provides support-email delivery and storage. Under the default Workspace agreement for a Korean billing address, the provider is Google Asia Pacific Pte. Ltd.; Google LLC and listed subprocessors may perform processing. No separate data-region restriction is configured, so storage is not guaranteed in one country. This website does not import marketing-recipient lists into Workspace or send automated advertising emails.

The support-email transfer relies on Article 28-8(1)(3) of Korea’s Personal Information Protection Act for processing and storage necessary to provide the support you request, with the details disclosed here. New transfers requiring separate consent will not begin before that process is provided.

• AWS CDN recipient and contact: Amazon Web Services, Inc. and its official infrastructure subprocessors. Korean contract inquiries can be directed to Amazon Web Services Korea LLC, L12, East Tower, 231 Teheran-ro, Gangnam-gu, Seoul, or the linked AWS contact route and our support.
• AWS CDN data, method, purpose and retention: web-request information, including IP address, URL, time and browser/device request headers, is processed over HTTPS when you connect, for delivery, security and diagnosis. Under the provider’s current policy, Amplify-managed access logs are kept until the Amplify app is deleted. This is separate from the 14-day retention of our CloudWatch operational logs.
• Possible AWS CDN countries/territories from its published delivery locations: Canada, Mexico, United States, Argentina, Brazil, Chile, Colombia, Peru, Austria, Belgium, Bulgaria, Croatia, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Netherlands, Norway, Poland, Portugal, Romania, Spain, Sweden, Switzerland, United Kingdom, Bahrain, Israel, Saudi Arabia, Oman, Qatar, Turkey, United Arab Emirates, Egypt, Kenya, Nigeria, South Africa, Australia, Hong Kong, India, Indonesia, Japan, Malaysia, New Zealand, Philippines, Singapore, Taiwan, Thailand, Vietnam, Ecuador, Isle of Man, Monaco, Panama and Puerto Rico. Domestic delivery also occurs in South Korea. This describes possible network locations, not storage of every visit in every country.
• AWS CDN basis and refusal: Article 28-8(1)(3) of Korea’s Personal Information Protection Act applies to processing and storage necessary to provide the requested website, with these details disclosed. If you refuse international network processing, stop using the website and contact us by post; online delivery will then be unavailable. Any separate disclosure of personal information for overseas account support requires checking the applicable notice and process first.
• Recipient and contact: Google Asia Pacific Pte. Ltd., 8 Marina Boulevard, #05-02 Marina Bay Financial Centre, Singapore 018981. Privacy questions can be directed through the official Cloud Data Protection Team route or our contact, mykemi@risworks.io.
• Data, timing, method and purpose: the sender’s email, message, necessary attachments and delivery metadata are transferred through email systems when messages are sent or received, for email delivery, storage, support and service security.
• Possible Google-affiliate processing locations, including storage, access and maintenance: Argentina, Australia, Belgium, Brazil, Canada, Chile, Denmark, Finland, France, Germany, Hong Kong, India, Ireland, Israel, Italy, Japan, Mexico, Netherlands, New Zealand, Poland, Singapore, Spain, Sweden, Switzerland, Taiwan, United Kingdom and United States. Domestic processing may also occur in South Korea.
• Additional possible locations for conditional third-party technical support or security investigation: Bulgaria, Colombia, El Salvador, Malaysia, Philippines, Romania and Sri Lanka. Support providers access customer data under the provider’s conditions, such as a support request and access permission. Security investigations may involve limited access needed to investigate suspicious activity.
• These are possible locations under default settings and the official subprocessor list. They do not mean that every message is stored in every country or sent to every provider. The linked list explains each provider’s activities, locations and updates.
• Retention and deletion: our use ends no later than 90 days after resolution, and we instruct deletion that we cannot recover within that period. Under Google DPA section 6.1, deletion of residual provider-system copies may take up to 180 days after that instruction. This does not extend our support use or authorise marketing. Contractual exceptions apply where law requires preservation.
• Refusal and effect: if you do not want international email processing, send your request to our postal address instead of by email. For a message already sent, request restriction or deletion by email or post. Refusing this processing may limit email replies but does not affect calculator use.

• AWS subprocessors (new tab)
• AWS CDN delivery locations (new tab)
• Amplify access-log retention (new tab)
• Contact AWS (new tab)
• Google Workspace subprocessors and locations (new tab)
• Google Cloud Data Processing Addendum (new tab)
• Contact Google’s data protection team (new tab)

5. Third parties and external links

We do not sell beta application or consent information or provide it for another business’s advertising. We do not disclose it outside our processing purposes except where law permits or separate consent has been obtained.

Related-content links on a result take you to external websites. Their privacy policies and terms apply after you leave. We do not use embeds that automatically load external posts.

6. Cookies, access information and security

The current public website does not use advertising-tracking cookies or analytics tools for personalised advertising. Calculator inputs are not kept in cookies or browser storage. Your browser settings can restrict cookies and storage for individual sites.

Hosting and API services process technical request information, including request time, identifier, path, response status and duration, together with error and execution records, for service delivery, security and diagnosis. Our web-server, beta API and Lambda operational logs are retained in AWS’s Seoul region for no more than 14 days. The beta API’s configured access-log fields are request identifier, route, status and duration; they exclude application bodies, email and raw IP. Not storing a raw IP in the application database is distinct from processing a connection IP during delivery.

We apply encrypted communications, restricted personal-information access, administrator authentication and change records, and expiry-based deletion procedures.

7. Access, correction, deletion and withdrawal

Contact mykemi@risworks.io to request access, correction, deletion, restriction of processing or consent withdrawal. You do not need an account or login. We verify requests using the minimum necessary steps, such as a reply from the registered email. We do not routinely require identity-document copies or a birth date.

You can withdraw marketing-use and advertising-email consents separately. Withdrawal of either immediately removes you from marketing eligibility; it does not cancel your beta application. You can separately withdraw or delete the beta application itself.

We check and handle requests without undue delay and tell you the outcome. If a legal restriction prevents a request, we explain why. For a lawful representative’s request, we may ask for the minimum proof of authority needed.

8. Privacy officer and contact

Operator: 주식회사 알아이에스웍스 (RIS WORKS). Representative and privacy officer: 성현제. Business registration: 296-81-04213.

Email: mykemi@risworks.io. Postal address: Room Ga-08, Unit 101, B1, 749-1 Gaya-daero, Busanjin-gu, Busan, Republic of Korea.

In Korea, privacy incidents can be reported to the KISA Privacy Infringement Report Center (privacy.kisa.or.kr, 118 without an area code). Privacy dispute mediation is available through the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

9. Changes to this policy

Changes and their effective date are posted on this website. We obtain new consent when required for additional purposes or information; existing consent is not expanded automatically. Effective document versions and their previous contents are retained.