← Back

Privacy Policy

Aura App

Dolmadang Soft (the "Company") values the personal information of users of the Aura app service and complies with the Personal Information Protection Act. This policy applies only to the Aura app service.

1. Personal Information Collected and Purposes

Item	Category	Details	Notes
Face Reading & Palmistry Analysis	Not logged in (free)	Face and hand images (processed on-device; uploaded only when saved)	Analysis is processed on the device only
Face Reading & Palmistry Analysis	Logged in (saving results)	Email, display name (provided by Google/Kakao OAuth), analysis result text, landmark coordinates	Stored in Supabase
Error inquiries	-	Email address	For handling inquiries

On-Device Processing Notice: The original images used for face-reading and palmistry analysis are not transmitted to any server. Analysis is performed only on the user's device through Google Gemma on-device AI.

2. Retention and Use Period of Personal Information

We retain personal information in order to save analysis results, and we destroy it without delay upon membership withdrawal. Where retention is required by law, we retain the information for the periods below.

Records on display and advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)

3. Provision of Personal Information to Third Parties

The Company does not provide personal information to third parties without the user's consent or a legal basis. Exceptions apply only in unavoidable cases, such as a request from an investigative agency pursuant to law.

4. Entrustment of Personal Information Processing

Category	Trustee	Entrusted Task
Authentication	Google LLC	Google OAuth social login
Authentication	Kakao Corp.	Kakao OAuth social login
Database	Supabase, Inc.	Storage of member information and analysis results
Payment	Toss Payments	Payment processing for paid content

5. Rights of the Data Subject

Users may at any time request to (1) access, (2) correct, (3) delete, or (4) suspend the processing of their personal information. To request account deletion and data deletion, please use the Account Deletion Request page or contact us at the email address below.

6. Destruction of Personal Information

After the purpose has been achieved, the information of users who are not logged in is destroyed immediately, and the information of logged-in users is destroyed after membership withdrawal once any retention period required by relevant law has elapsed. Electronic files are deleted in a manner that makes recovery impossible.

7. Measures to Ensure Security

We take measures to protect personal information through the principle of on-device processing without transmitting original images to a server, social OAuth-based account management, and Supabase's encrypted storage policies.

8. Personal Information Protection Officer

Name: Jung Song-yeop | Position: CEO

Email: admin@taoist.co.kr

9. Revision History

Date of notice: April 26, 2026 | Effective date: May 3, 2026