Privacy Policy
Who we are
SajuBunny (sajubunny.com) is operated by Dawon Labs (a sole proprietorship based in the Republic of Korea), which is responsible for how personal information is handled in this service. We will disclose the representative’s name and our address without delay on request (email us at the address below). Contact: support@dawonlabs.com. Effective date: November 9, 2026.
At a glance
(1) Your basic saju chart is calculated on your device. (2) AI readings, answers to your question and chat send calculated saju values and what you type to our AI provider (Anthropic). (3) If you sign in, your records are stored encrypted in your account so you can use them on other devices. Details below.
Without sign-in, stored only on this device
If you do not sign in, your nickname, birth date and time, birth city, saved people, readings, and chats are stored only in your browser (IndexedDB). Saju calculations run on your device. You can erase them at any time by clearing your browser data for sajubunny.com.
If you sign in: stored in your account
If you sign in, we also keep your saved people (nickname, birth date and time, birth city, relation), readings, Korean name suggestions, and your answers to the two life-status questions in your account on our servers, so you can continue on other devices. This data is encrypted with AES-256-GCM using a key unique to your account, derived from a secret held on our servers. This is not end-to-end encryption: because the key is on our servers, we (the operator) are technically able to decrypt it. We only do so when needed to help you at your request or to meet a legal obligation. We keep it until you delete it or delete your account; deleting your account erases it immediately. Signing out removes the copy from that device, and it comes back when you sign in again. Chat history and daily fortune history are never uploaded: they stay only on your device, and signing out erases them from that device.
Inquiries
If you contact us through My page, we store your message and, only if you enter it, your email address, and use them only to answer you. Answered inquiries are deleted automatically after one year, and immediately when you delete your account or ask us to.
Invites and coupons
If you create an invite link, we store a random invite code linked to your Tteok wallet. When someone joins through it, we store only the link between the two wallets (random identifiers, not names or contact details), when the 1-Tteok thank-you was given, and whether it was taken back after a refund, so each reward is given only once and the monthly limit is kept. When you use a coupon, we record that your wallet (and this device’s wallet) used it, so it can be used only once, and keep a daily total of uses for each coupon code. If you delete your account, we delete your invite code and your account’s coupon records and remove your wallet from any invite link.
Creator links
If you arrive through a creator link (?c=CODE), we store the creator’s public code with your random wallet identifier and the time, and, if you buy Tteok within 90 days, which order was connected to that creator (never your name or contact details). We use this only to pay the creator their share and to stop abuse. Visits from creator links are counted only as daily totals per creator. Deleting your account deletes the connection.
What we store on our servers
To run the service we store a one-way hashed login identifier (not your email address or name), your Tteok credit balance and Plus status, hashed order numbers, daily counters for free features, and the daily usage totals described below. Birth data, readings, and chats are not stored on our servers unless you sign in, and then only encrypted in your account as described above. The one exception: while a paid reading is being written, the finished result is kept encrypted on our server until your device picks it up (so leaving the page midway does not lose it), and is deleted once picked up or after 3 days at most. We do not log chat messages.
AI processing
When you request an AI reading, an answer to your question, or a chat reply, we send our AI provider (Anthropic) what it needs to write the answer: the eight saju characters and values calculated from them (such as the five elements, luck periods and the ages they start), gender, your chosen language, the nickname and life-status answers if you entered them, the other person’s saju values for compatibility, and the question or recent chat messages you typed. We do not send your full birth date; only the birth year is included so ages and years line up. Anthropic does not use data received through its API to train its models, and may keep it for a limited period under its commercial terms (for example, to prevent misuse). Please do not include personal details such as names, contact information or health information in your question.
Palm photos (Palm × Saju)
If you use Palm × Saju, the palm photo you choose is resized on your device (which also removes location and camera data) and sent once to our AI provider (Anthropic) together with your calculated saju values, only to read the hand shape and lines. We do not store the photo or log it, and it is not used to identify you. What is kept is only the description of your hand (for example line length and depth), on your device, so you can open the full reading without uploading again.
Usage totals
To improve the service, we record how many times each step was used per day (for example, how many saju cards were made or how many times the payment page was opened), as daily totals only. These totals do not include information that identifies you, your birth data, or what you type. To avoid counting the same step twice, we briefly use a random number kept only in your browser tab (it disappears when you close the tab). If your browser sends Do Not Track or GPC, we don’t send these counts.
Payments
Payments are processed by Whop, our payment processor: you enter your card details on Whop’s checkout page, and they go to Whop, not to us. Gumroad may be used as a backup payment processor. Once domestic payments in Korea open, payments made in Korea will be processed by Toss Payments. These companies receive your email and payment details under their own privacy policies. We receive only the order number, product, and amount. With each order we also keep where the visit came from, to learn which ads and pages lead to purchases: the type of visit (such as ad, search or direct), the channel, ad and campaign codes in the link you arrived from (utm_source, utm_content, utm_campaign or exp), the path of the first page you opened (without the query or any codes in it), and the date (day only) this browser first visited. These go to Whop with the checkout and come back with the payment notice. They do not include your name, contact details, birth data or anything you type, and if your browser sends Do Not Track or Global Privacy Control we keep only the type of visit. We keep them as part of the order record for as long as we keep that record (for accounting and refunds).
Sign-in
You can sign in with Google, Kakao, Naver, or an email link. With Google, Kakao, or Naver we receive only the member identifier from that provider and store a one-way hash of it, not your email address or name. With email sign-in, your email address is passed to our email delivery provider (Resend) only to send you the sign-in link; we store just a one-way hash of the address, never the address itself. A strictly necessary session cookie keeps you signed in.
Analytics and cookies
We use Cloudflare Web Analytics, which does not use cookies or track individuals. We do not use advertising cookies, except the Meta Pixel described below, which loads only on visits that come from our paid ads.
Ad measurement (Meta Pixel)
Only when you arrive from one of our paid ads (links tagged source=ad, such as our Japanese ad page /ja/oshi/), we load the Meta Pixel from Meta Platforms, Inc. (Meta Platforms Ireland Ltd. in the EEA), and only for that browser tab session. It is never loaded on other visits, or if your browser sends Do Not Track or Global Privacy Control (GPC). What Meta receives: the events we send (page view, viewing the ad landing page, seeing a free result, pressing the paid button to start checkout, and a completed purchase with its amount and currency), plus what the Meta script itself collects: your IP address, browser and device information, the page URL, Meta cookies such as _fbp, and, if you are logged in to Facebook or Instagram in that browser, Meta’s own identifiers. If you complete a purchase after such an ad visit, our server also tells Meta directly that the purchase was completed, with its amount and currency, so it is counted even if you close the page before returning (not if Do Not Track or GPC is on). With it we send only the IP address, browser information (user agent) and Meta cookie values (_fbp, _fbc) from the browser where you started checkout; for this purpose they are passed with the order through our payment processor, Whop. We never send your birth date, name, nickname, oshi name, readings, questions, email address, or wallet or account identifiers. Purpose: to measure which ads lead to visits and purchases, and to optimise ad delivery. Meta handles this data under its own Privacy Policy (https://www.facebook.com/privacy/policy/). You can manage your ad preferences in your Meta account (https://www.facebook.com/adpreferences), and you can opt out by turning on Do Not Track or GPC, or by blocking third-party scripts or cookies. We may also use this data to show our ads again to people who saw a free result after arriving from our ads (a Meta custom audience kept for up to 30 days). The ad settings and opt-outs above also apply to this.
Hosting, security and international transfers
The service runs on Cloudflare. Connections are encrypted (HTTPS). To keep automated abuse away from the chat, we use Cloudflare Turnstile, which runs silently and is governed by the Cloudflare Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/). [Security measures] (1) Responsibility: Dawon Labs, the operator, is responsible for handling personal data, and only the operator has access to it. (2) Collecting less: sign-in identifiers and email addresses are stored only as one-way hashes, and birth data and readings are not kept on our servers unless you sign in (except the temporary copy kept while a paid reading is being written). (3) Technical safeguards: data stored in your account is encrypted with AES-256-GCM, and connections are encrypted with HTTPS. Encryption keys and API keys are kept as server secrets, never in our source code. Turnstile and usage limits help prevent abuse. (4) Limited retention: we delete information we no longer need, for example the temporary copy of a paid reading after 3 days at most and answered inquiries after one year. (5) Where data is handled: we are based in the Republic of Korea, and personal data is also processed on the systems of the US companies listed below. We take the measures above with the data protection rules of both countries in mind. [International transfers and service providers] To provide the service, we share personal data with, or entrust its processing to, the following companies, all located in the United States: • Anthropic, PBC: writing AI readings, answers to your questions and chat replies (the information described under “AI processing” and “Palm photos”). • Whop, Inc.: processing payments (order information; if you buy after visiting from one of our paid ads, the information described under “Ad measurement” also passes through Whop). Gumroad, Inc. is our backup payment processor. • Meta Platforms, Inc.: ad measurement, only for visits from our paid ads (the information described under “Ad measurement”). • Cloudflare, Inc.: servers, database, network and Turnstile (the information we store on our servers, and the IP address that comes with each connection). • Resend, Inc.: sending sign-in emails (your email address). In addition, Google LLC (United States) receives your IP address and similar information directly from your browser when you sign in with Google or when our pages load fonts or the sign-in script. [Data protection in these countries] The United States has no single comprehensive federal privacy law; personal data is protected by sector-specific federal laws and by state laws (such as California’s). The Republic of Korea has a comprehensive Personal Information Protection Act and received an EU adequacy decision in December 2021. [Safeguards by these providers] Each company handles personal data under its own published privacy policy. Anthropic does not use data received through its API to train its models. We share only what each purpose needs: we do not send Anthropic your full birth date, and we never send Meta your name, email address or birth date. For more detail on the safeguards these providers use, contact us at the address below.
Fonts and sign-in scripts
To display text, our pages load web fonts from Google Fonts (Google) and jsDelivr. When you open the sign-in options, we also load Google’s sign-in script (Google Identity Services) from Google. As with any web request, these services receive your IP address and basic browser information (such as browser type and language) when your browser fetches these files, and handle it under their own privacy policies. We do not send them your birth data, readings, or what you type. If you sign in with Google, Google also processes that sign-in as described under “Sign-in”.
Daily notifications
If you turn on daily notifications, we store the push address your browser gives us, your language, time zone and chosen hour, and the saju values needed to write the note (day pillar, helpful elements, strength). We do not store your name or birth date for this. Turning notifications off, or deleting your account, deletes it.
Your rights
Without sign-in, your birth data never reaches our servers. If you sign in, it is stored only in encrypted form in your account. You can delete your account and all of its data (saved people, readings, credit balance, and hashed identifiers) at any time from My page, or by emailing support@dawonlabs.com. [Requests about your data] You can ask us to tell you how we use your personal data, to give you access to it (including records of what we have shared with third parties), to correct, add to or delete it, to stop using or erase it, or to stop sharing it with third parties. Email support@dawonlabs.com. To confirm it is you, we may ask you to verify in a way that fits the request, for example by signing in to your account. If someone makes a request on your behalf, we will ask for proof that they are authorized. There is no fee, and we respond without undue delay as the law requires. Birth data, readings and chats from use without sign-in stay only on your device, and we do not hold them (clearing your browser data deletes them). You can also complain to the data protection authority where you live. [Questions and complaints] Dawon Labs, support@dawonlabs.com
Children
The service is not intended for children under 14.
Changes
We will post any changes on this page with a new effective date.
Effective date: November 9, 2026