Privacy Policy

Last updated: 2026-08-07

1. Summary (plain language)

Master Han is a Korean fortune-telling entertainment app — Saju (사주), Five Elements (오행), face reading (관상), compatibility (궁합), auspicious-date picking (택일), naming (작명), and daily fortune. Your readings are personalized using automated interpretation. They are offered as one perspective for self-understanding, not as definitive predictions. We try to collect as little as possible.

  • Your face photos are never stored. They are analyzed and deleted immediately.
  • We don't sell your data, run ads, or track you across other apps.
  • You can delete your account and all data from inside the app at any time.
  • To generate a reading, some data is sent to our server and to our AI provider (Google Gemini). We minimize what we send.

2. Data we collect

  • Birth data — birth date, and optionally time, timezone, nickname, gender. Collected when you request any birth-based feature (Saju, compatibility, daily fortune, auspicious dates, naming) and when it is saved to your history. To calculate and generate your reading.
  • Naming inputs — for the Naming feature only: a surname, an existing name you want renamed, or a brand/industry description, plus style preferences. Only when you request a naming reading. To generate name candidates.
  • Face photos — a selfie you choose. For face compatibility, two photos: yours and the other person's. Only with your explicit consent. Face analysis — then deleted immediately (never stored) — see §4.
  • Questions & readings — your "Ask Master Han" questions, the generated readings, and a short machine-readable summary of your chart used to ground follow-up answers. When you use those features. To produce and let you revisit your readings.
  • Account identifiers — an anonymous user id, or your Apple user identifier if you sign in with Apple. On first use / sign-in. Authentication and syncing your own data.
  • Purchases — subscription/entitlement status and Fortune Pass balance (via Apple + RevenueCat). When you buy. To unlock premium features.
  • Abuse prevention — a salted hash of your IP address; raw IP addresses are never stored. On reading requests and on the public web demo. To enforce free-tier and demo limits and to prevent abuse.
  • Product analytics — first-party usage events from a fixed, whitelisted list (e.g. "a reading finished", "a purchase succeeded") and minimal properties; web-demo events are anonymous. While you use the app or the web demo. To understand which features are used and to fix drop-offs.
  • Diagnostics (optional) — crash and performance data, if enabled. Stability only.

We do not collect precise location, contacts, health records, or advertising identifiers, and we do not use third-party tracking or advertising SDKs.

3. What we do NOT do

  • We do not sell or rent your personal data.
  • We do not show ads or use ad networks.
  • We do not track you across other companies' apps or websites.
  • We do not store your face photos.

4. Face photos — special handling

Face reading and face compatibility are optional and require your explicit in-app consent. Face compatibility uses two photos; you must have the other person's permission before uploading their photo. When you use either feature:

  • 1. Each photo is first checked on your device (Apple Vision) for basic quality.
  • 2. It is uploaded to a temporary secure store only for the moment of analysis.
  • 3. It is deleted immediately after analysis (in code, right after the reading is produced — including when the reading fails), with a scheduled server job as an additional backstop.
  • 4. Only a non-identifying text summary (the reading) is kept — never the image, and never facial-recognition/biometric templates for identifying you.

5. How your data is processed (AI & service providers)

To generate readings we use trusted processors. We send them the minimum data needed:

  • Supabase — application backend, database, and authentication (servers in the United States, `us-west-2`). Stores your saved readings, questions, account id, purchase status, and the abuse-prevention hash in §2.
  • Google (Gemini API) — the AI that writes the narrative of your reading. We send the minimized inputs needed to generate text (e.g. derived Saju factors, your question). Note: the Saju/Five-Elements calculation itself is done on our own server, not by the AI — the AI interprets a chart we compute, and never creates or changes it. Your Gemini requests are handled under Google's API terms.
  • RevenueCat — manages subscription entitlements.
  • Apple — Sign in with Apple and App Store purchases.

We do not send face images to the AI text service for storage, and we never sell data to any of these providers.

6. Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we process data to perform the service you request (contract), with your consent (e.g. face photos, optional diagnostics), and for our legitimate interests in keeping the app secure and functional (e.g. the abuse-prevention hash and first-party analytics in §2). You may withdraw consent at any time.

7. Data retention

  • Face photos: deleted immediately after analysis (not retained).
  • Readings, questions, birth data, naming inputs, account: kept until you delete them or delete your account.
  • Abuse-prevention hash: kept only as long as needed to enforce daily limits.
  • Product analytics: kept until you delete your account, then deleted with it. Anonymous events from the public web demo are not tied to any account.
  • Purchases: kept as required for billing/records.

8. Your rights & choices

  • Access / delete: You can view your saved readings in-app and delete your account and associated data at Profile → Delete Account. This removes your readings, Ask history, birth profile, saved chart, Fortune Pass balance, usage counters, analytics events, and account. Records we must keep for accounting are retained.
  • Depending on your region (e.g. EEA/UK/California), you may also have rights to access, correct, port, or object to processing. Contact support@master-han.app.
  • We do not "sell" or "share" personal information as defined by California law.

9. Children

Master Han is rated 17+ and is not directed to children. The optional social matching feature (hidden in the current version) is limited to users 18 and older. We do not knowingly collect data from children under the applicable minimum age.

10. International transfers

Our servers are in the United States. If you use the app from outside the US, your data is transferred to and processed in the US (and by the processors in §5).

11. Security

We use industry-standard measures (encryption in transit, access controls, row-level security). No method is 100% secure, but we design to minimize what we hold.

12. Changes

We may update this policy; we will change the "Last updated" date and, for material changes, provide in-app notice.

13. Contact

Questions or requests: support@master-han.app · Operator: Ryu Sichan (individual developer).