Privacy Policy
Effective date: October 25, 2026
- Updated processing for result content generation, orders, payments, refunds, and service email.
- Consolidated information categories and clarified external processing and retention.
- Described Meta pixel processing for advertising measurement, analysis, and visitor retargeting.
- Updated the procedure for announcing changes to this policy.
RollersLAB Inc. (the "Company", "we") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
Article 1 (Purposes of Processing)
The Company processes personal information for the following purposes and does not use it beyond these purposes. If a purpose changes, the Company will take necessary measures, such as obtaining separate consent, as required by applicable law.
- Generating and displaying compatibility readings, individual readings, and stories
- Saving, viewing, and sharing results and purchased content
- Handling orders, payments, and refunds, and sending service emails
- Confirming intent to register, identifying members, and maintaining membership
- Handling inquiries and reviews, preventing abuse, and keeping the Service secure
- Improving the Service and developing new features
- Measuring and analyzing advertising performance, optimizing advertising, and providing personalized ads through visitor retargeting, within the scope and user choices described in Article 9
Article 2 (Items Collected and Collection Methods)
The personal information the Company processes is as follows.
| Category | Items | Collection method |
|---|---|---|
| Result content generation | Birth dates, birth times and cities, genders, display names (nicknames allowed), relationship type, selected questions, and content settings (including the other person's profession and the ending), as needed for the product | Entered or selected by the user |
| Sign-up | Email address and social account identifier supplied by Kakao or Google, and name or nickname if supplied | Received from the social login provider |
| Orders, payments, and refunds | Order reference, purchased product, amount, payment and refund status, and transaction records | Generated during use or received from the payment provider |
| Inquiries and reviews | Inquiry and review content submitted by the user | Written and submitted by the user |
| Automatically generated or collected | Access logs, device and browser information, cookie and similar identifiers, usage records (referrals, visits, feature steps, and purchase conversions), and email delivery, failure, and suppression records | Automatically generated or collected during use |
Article 3 (Retention Periods)
The Company processes and retains personal information within the retention period required by law or consented to at the time of collection.
| Items | Retention period |
|---|---|
| Original reading inputs: birth date, time, and birthplace | Eligible for automatic cleanup 24 hours after creation. A member's own birth profile saved with separate consent follows the separate rule below. |
| Calculated results, readings, display names, and gender | Guest results: 1 year after creation or until a deletion request; member-owned results: until deletion is requested or the account is deleted |
| Story settings and purchased stories | Deleted with the associated reading or account. Abandoned Confession and story inputs become eligible for scheduled cleanup after 24 hours if no order, purchase, or other preservation condition applies. |
| Member account information | Until account deletion |
| Social account identifier used to prevent duplicate benefit claims | 1 year after account deletion |
| Incomplete sign-up information | Deleted when required consent is declined; accounts abandoned without consent become eligible for scheduled cleanup after 1 hour |
| A member's own birth information and gender saved with separate consent | Until consent is withdrawn or the account is deleted |
| Contract and withdrawal records; payment and content-supply records | 5 years for each category under Article 6 of the Korean Enforcement Decree of the Act on Consumer Protection in Electronic Commerce. |
| Consumer complaint and dispute-resolution records | 3 years under the same Article 6. |
| Email records, suppression lists, inquiries, and reviews in our database | Until delivery verification, customer support, or the relevant processing purpose is fulfilled. Suppression records are kept while needed to maintain the delivery block. |
Retention of original birth inputs is separate from retention of calculated results, story settings, and transaction records. Information sent to external providers follows the conditions in Article 5.
Information kept under a statutory obligation is managed separately and used only for that purpose.
Article 4 (Provision to Third Parties)
The Company provides personal information to third parties only with consent or another applicable legal basis. Entrusted processing is described in Article 5 and advertising providers' processing of activity information in Article 9.
Article 5 (Outsourcing and International Transfer)
The Company uses the following external providers to deliver the Service. Their processing activities and transfer and retention conditions are described below.
| Provider | Purpose and information | Transfer and retention |
|---|---|---|
| Supabase | Database, authentication, and file storage: account information, saved inputs, settings, results, and service records | Database, authentication, and file storage: Seoul, South Korea. Support, operations, and content delivery may involve international processing under the provider's data protection terms. |
| Vercel, Inc. | Web hosting, delivery, and server processing: request data and access or operational logs | United States and global infrastructure. Access and operational records are retained as needed for service delivery, security, and the relevant processing purpose. |
| SMILESERV Inc. (iwinv) | Generation, email, and image worker hosting: inputs, outputs, email data being processed, and operational logs | South Korea. Retained for the entrusted work and until the relevant retention purpose is fulfilled. |
| Anthropic, PBC | AI result content generation: calculated charts, names, genders, relationship and question information, and content settings | Stored in the United States; processing may occur in the United States, Europe, Asia, and Australia. Standard API inputs and outputs are generally deleted within 30 days, with legal and policy-enforcement exceptions. |
| Plus Five Five, Inc. (Resend) · privacy@resend.com | Service email: recipient address, display names, order, refund, and completion information, and result links | Stored in the United States. Standard Free, Pro, and Scale email and logs: 30 days; remaining customer data after account termination: up to 90 days. Legal retention exceptions apply. |
| NICE Payments Co., Ltd. | Payment, cancellation, and refund processing: order reference, product, amount, currency, internal member identifier, payment results, and information entered directly in the payment form | South Korea. Retained for payment and refund processing and for periods required by applicable law. |
The Company manages and supervises processors to keep personal information secure as required by applicable law.
Information is transferred over encrypted connections when the relevant feature is used. Requests to refuse international transfers, suspend processing, or erase information can be sent to support@k-emistry.com. Refusing a transfer necessary to provide a feature may limit access to that feature.
Article 6 (Destruction Procedure and Method)
(1) The Company deletes information without delay when its retention period expires or its purpose is fulfilled. Records subject to statutory retention are managed separately for that purpose.
(2) Original birth inputs, incomplete sign-ups, and abandoned checkout inputs are cleaned up on the conditions in Article 3. Eligibility for cleanup and the time a scheduled batch actually runs are distinct.
(3) Deleting a reading or account also removes dependent story settings and purchased stories. Transaction, email, and suppression records follow their own purposes and retention periods.
(4) Electronic records are deleted using methods that prevent recovery.
Article 7 (Rights of Data Subjects and How to Exercise Them)
(1) Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information.
(2) Members can delete their account in My Page. Requests to access, correct, erase, or suspend processing of personal information can be sent to support@k-emistry.com. The Company verifies the requester is the data subject or an authorized representative and acts as required by applicable law. Additional identity verification may be requested where necessary.
(3) Rights may be exercised through a legal or authorized representative. The Company may request evidence of the representative's authority where necessary.
(4) Requests for access or suspension of processing may be limited under applicable provisions of the Personal Information Protection Act.
(5) Account deletion removes the account and its owned readings and stories and disables their share links. Transaction records subject to statutory retention and necessary email or suppression records follow the separate rules in Article 3 and are deleted when their retention purpose ends.
Article 8 (Security Measures)
The Company takes the following measures to secure personal information.
- Encryption in transit (HTTPS)
- Hashed storage of result view tokens
- Separate storage and scheduled automatic cleanup of original birth inputs
- Controlled and minimized access to the database
- Management of access logs for systems that process personal information
Article 9 (Cookies)
(1) The Company uses cookies for sign-in, language preferences, invite-code checks, and access to results. Cookies, pixels, local storage, and similar technologies may also be used for usage statistics and advertising measurement.
(2) The purposes of the Meta pixel are advertising performance measurement and analysis, advertising optimization, and personalized advertising through visitor retargeting. The processing scope is described below.
| Category | Details |
|---|---|
| Advertising provider and tool | Meta Platforms, Inc. · Meta pixel |
| Purposes | Measuring and analyzing ad referrals and purchase conversions, optimizing advertising, and providing personalized ads through visitor retargeting |
| Information | Cookie and browser identifiers, IP address, device and browser information, visited pages and referral sources, events such as visits and purchases and their timestamps, purchase amount, and currency |
| Collection and timing | Automatically collected and sent by the browser on visits to pages using the pixel or use of relevant features. Activated after consent where prior consent is required |
| International processing | Transferred over encrypted connections to Meta servers abroad when relevant features are used, subject to Meta's Privacy Policy and the applicable legal basis. |
| Retention | For the periods specified in Meta's Privacy Policy and the applicable cookie and advertising account settings. |
(3) Users can block or delete cookies and use tracking protection through their browser's privacy settings. Meta Ad Preferences also provides controls for the use of activity information from advertising partners. These choices vary by browser, device, and account. Changing ad personalization settings alone does not stop every pixel transmission.
(4) Blocking cookies may limit features such as staying signed in. For advertising privacy inquiries or rights requests, contact support@k-emistry.com.
(5) Meta's processing and available choices are also described in its Privacy Policy (https://www.facebook.com/privacy/policy/), Cookies Policy (https://www.facebook.com/privacy/policies/cookies/), and Ad Preferences (https://www.facebook.com/adpreferences/).
Article 10 (Children's Personal Information)
The Company does not collect personal information from children under 14. At registration, users confirm that they are at least 14 and meet the minimum age for consent required in their country of residence. If we learn that personal information of a child under 14 has been collected, we will destroy it without delay.
Article 11 (Privacy Officer)
The Company designates the following privacy officer to take overall responsibility for the processing of personal information and to handle related complaints and remedies.
- Privacy Officer: Se-eun Yoon (CEO)
- Contact: support@k-emistry.com
Data subjects may direct any privacy-related inquiries, complaints, or requests for remedy arising from use of the Service to the privacy officer, and the Company will respond and act without delay.
Article 12 (Remedies for Infringement)
Data subjects may apply for dispute resolution or consultation with the following Korean authorities to obtain remedies for infringement of personal information.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- KISA Personal Information Infringement Report Center: +82-118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: +82-1301 (www.spo.go.kr)
- Korean National Police Agency: +82-182 (ecrm.cyber.go.kr)
Article 13 (Changes to This Policy)
(1) This Privacy Policy applies from October 25, 2026.
(2) When this policy changes, the Company announces the changes and effective date within the Service. Changes that materially affect users' rights are announced before taking effect. Separate consent or notification procedures are followed where required by applicable law.
View the previous Privacy Policy (effective September 14, 2026)