Privacy Policy

This is a courtesy translation. The Korean version is the legally binding text; if the two differ, the Korean prevails. Telling (the “Company”) takes your personal data seriously and complies with the Personal Information Protection Act and other applicable law. We process personal data as follows.

1. Personal data we collect

· Adult verification: only when you open Night mode (a 19+ feature), whether you were verified as an adult and when. We never collect resident registration numbers

· Notification details: the mobile number confirmed when you sign in with a mobile number, link one to your account, or complete phone-based identity verification. It serves as a sign-in method and is otherwise used only to send KakaoTalk notifications, you can turn those off in settings at any time, and we delete it when you close your account

· Pre-login usage: if you get a reading without signing in, a random per-browser identifier and the birth details, readings, and conversations saved under it. These move to your account when you sign in

· Account details: the email address, name (nickname), and profile image provided through Apple, Google, Kakao, or LINE login

· Email sign-up details: for accounts created with an email address, the address and password you enter. Passwords are kept only in a form that cannot be turned back into the original, so not even the Company knows your password

· Service usage details: name, birth date and time, city of birth, gender, the concern you write, details of the other person for compatibility readings, your conversations with AI characters, reviews you write, and the display name you enter with a review (a nickname visible to other users)

· Automatically generated data: access logs and usage records created as you use the Service

· Analytics data: referral path, screen navigation, device or browser type, and app version collected through cookies and similar technologies (Google Analytics, Amplitude)

2. How we collect it

· Through Apple, Google, Kakao, or LINE social login

· Confirming the code we send to your email address when you sign up with email or reset your password

· Verifying the code we send by KakaoTalk (or SMS) when you sign in with a mobile number or link one to your account

· Adult verification through a mobile identity verification agency (only when opening Night mode)

· Entered by you within the Service — birth details, your concern, reviews

· Generated and collected automatically as you use the Service

3. Why we use it

· Confirming eligibility for adult-only features (Night mode) and protecting minors

· Sending service notices such as unread conversation alerts (KakaoTalk notification messages). We do not send marketing messages through this channel

· To identify members and provide the Service (login, account management)

· To calculate saju charts and generate readings, in-depth interpretations, and compatibility content

· To generate replies from AI characters

· Before you first use an AI feature, we separately ask for consent to send saju input and conversations to the external AI providers named on screen. If you decline, AI features remain unavailable; you can withdraw consent at any time from My Page

· To provide community features such as posting reviews

· To improve quality, analyse errors, and prevent abuse

· To analyse referral paths and screen navigation statistically (Google Analytics, Amplitude). For signed-in users, an opaque account ID may link product usage across devices. Names, email addresses, birth details, concerns, and chat content are not sent to analytics tools

4. How long we keep it

As a rule, when you ask to withdraw your membership we destroy your personal data without delay.

Where applicable law — such as the Act on Consumer Protection in Electronic Commerce — requires records to be kept for a set period (contract and payment records, records of consumer complaints and dispute handling), we store those separately for the period required and then destroy them.

5. Processing entrusted to others, and transfers abroad

To provide the Service we entrust the processing of personal data as follows, and by the nature of that work personal data may be transferred and processed outside Korea.

· NICE Information Service Co., Ltd. — mobile identity verification (processed in Korea)

· NHN Cloud Corp. — sending KakaoTalk notification messages on our behalf (processed in Korea)

· Kakao Corp. — Kakao login and KakaoTalk channel messages (processed in Korea)

· LY Corporation (Japan) — LINE login (processed in Japan)

· Clerk (Clerk, Inc., United States) — account authentication and login in the native apps (the web is handled by the Company itself)

· Resend (Resend, Inc., United States) — sending sign-up confirmation and password-reset code emails

· Google (Google LLC, United States) — generating AI character replies and saju content (Gemini), and usage analytics (Google Analytics)

· Amplitude (Amplitude, Inc., United States) — product-flow and feature-usage analytics across web and apps

· OpenAI — generating AI character replies and saju content when configured

· DeepSeek — generating AI character replies when configured

Before personal data entered into an AI feature is sent to an AI provider, a versioned consent screen identifies the actual recipients, purpose, retention, and whether the data is used for training.

· Vercel (Vercel Inc., United States) — hosting the web front end

· Amazon Web Services (Amazon Web Services, Inc.) — server operation and database storage (Seoul region)

Each processor handles personal data only within the scope entrusted, and the Company supervises them under applicable law to ensure that data is handled safely.

6. Your rights

You may at any time ask to access, correct, delete, or suspend the processing of your personal data.

Requests can be made through the contact below, and the Company will act without delay as required by law.

To request deletion of Amplitude analytics data, use the contact below. The Company submits the opaque account ID through Amplitude's user-privacy deletion process; provider processing may take up to 30 days after submission.

The Service is for users aged 14 and over, so we do not collect personal data from children under 14.

7. How we destroy it

Where the retention period has passed or the purpose has been achieved and the data is no longer needed, electronic files are deleted without delay by technical means that make recovery impossible.

8. Data protection officer and contact

For questions about how we process personal data, or to request access, correction, or deletion, please use the contact below.

info@twostepsahead.co.kr

9. Notice of changes

Where this Privacy Policy is added to, removed from, or amended, we will give notice within the Service at least seven days before the change takes effect.

Effective date: 2026-08-24

About Telling · FAQ · Terms of Service · Privacy Policy · Refund Policy · Community Guidelines · Telling home