Privacy Policy

1. Purpose of Collection and Use of Personal Information

SCHROE (hereinafter referred to as the "Service") collects personal information for the following purposes: - Service Delivery: Providing tarot readings, MBTI in-depth analysis, zodiac readings, trait analysis (Ocean trait report), and fortune cookie services - AI Analysis: Generating AI analysis results based on the member's input data (selected cards, test responses, date of birth, etc.) - Service Improvement: Analyzing user experience and enhancing service quality - Payment statistics analysis and service improvement - Customer Support: Handling inquiries and delivering notices

2. Categories of Personal Information Collected

The following information may be automatically collected during use of the Service: - Device Information: Browser type, operating system, screen resolution - Usage Records: Access timestamps, page visit history, service usage records - Cookie Information: Cookies for session maintenance and user preference storage When using social login (Kakao, Google, Naver, LINE): - Account identifier (unique ID) - Profile information (nickname, email, profile image - upon optional consent) When using email login: - Email address, password (stored encrypted) When using paid services: - Payment date and time, payment amount, product name, payment method information (card issuer name, installment period, etc.) - When using in-app purchase in the mobile app (Apple App Store, Google Play): store transaction identifier (transaction ID) and receipt information for payment verification - Risk review information for PayPal payments and payment fraud prevention: account identifier, email, name, account creation date, digital-goods indicator, and phone number/country code if explicitly provided by the user When using zodiac note services: - Birth information (date of birth, time of birth, place of birth - limited to information directly entered by the member) For service usage statistical analysis purposes, MBTI type and zodiac note information may be transmitted to Google Analytics. When using the ad-supported content unlock (offerwall) on the web service, ads are served through Google AdSense, and in this process advertising identifiers and cookie information may be collected by Google. Ad personalization signals are disabled, so only non-personalized ads are served.

3. Retention and Use Period of Personal Information

Collected personal information is retained and used for the following periods: - Service usage records: Retained for up to 1 year and then automatically deleted - Social login information: Immediately deleted upon membership withdrawal - Email login information: Immediately deleted upon membership withdrawal - Cookie information: Deleted upon browser closure or after the configured expiration period Retention required by applicable laws: When retention is required under applicable laws, including the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the company shall retain member information for the period prescribed by the relevant laws. - Records related to payment and supply of goods: 5 years - Records related to contracts or withdrawal of subscriptions: 5 years - Records related to consumer complaints or dispute resolution: 3 years The separate periods below apply to GA4 statistics and ChatGPT plugin infrastructure logs.

4. Provision of Personal Information to Third Parties

SCHROE does not, in principle, provide users' personal information to external parties. However, exceptions are made in the following cases: - When the user has given prior consent - When required by law, or when requested by an investigative authority in accordance with the procedures and methods prescribed by law for investigative purposes

5. Entrustment of Personal Information Processing

The company entrusts the processing of personal information as follows to improve and facilitate the Service: - Entrusted Company: PortOne, Inc. and PayPal Entrusted Tasks: Purchase and fee payment processing, identity verification, payment fraud prevention, and PayPal risk review (STC/Risk Data Acquisition) Retention Period: Until membership withdrawal or termination of the entrustment contract - Entrusted Company: Google LLC (Google Gemini) Entrusted Tasks: Generating AI analysis results based on user input data Retention Period: Immediately deleted upon completion of analysis request processing (no data stored) - Entrusted Company: Google LLC Entrusted Tasks: Service usage statistical analysis (Google Analytics 4) Retention Period: Event and user data retention is set to 14 months. New activity resets the user-data retention period. Actual deletion follows Google’s monthly deletion cycle. Standard aggregated reports are not subject to this setting. This is separate from the 30-day browser storage period. - Entrusted Company: Mapbox Inc. Entrusted Tasks: Birth place search and coordinate/timezone lookup for zodiac note services Retention Period: Immediately deleted upon completion of request processing (no data stored) - Entrusted Company: Apple Inc., Google LLC Entrusted Tasks: Processing in-app purchases (IAP) and verifying payment receipts in the mobile app Retention Period: Until membership withdrawal or termination of the entrustment contract - Entrusted Company: Google LLC (Google AdSense) Entrusted Tasks: Serving rewarded ads on the web service (unlocking daily tarot and daily zodiac content) Retention Period: Deleted after ad cookie expiration

6. Cross-Border Transfer of Personal Information

The company transfers personal information abroad as follows for service usage statistical analysis: - Recipient: Google LLC - Country of Transfer: United States - Items Transferred: Service usage records, device information, cookie identifiers - Transfer Method: Real-time network transmission (Google Analytics 4) - Purpose of Transfer: Service usage statistical analysis - Retention Period: Event and user data retention is set to 14 months. New activity resets the user-data retention period. Actual deletion follows Google’s monthly deletion cycle. Standard aggregated reports are not subject to this setting. This is separate from the 30-day browser storage period.

7. Measures to Ensure the Security of Personal Information

SCHROE takes the following measures to ensure the security of personal information: - Data Encryption: Data transmission encrypted via HTTPS - Password Encryption: Email login passwords are stored using one-way encryption (hashing) - Access Restrictions: Minimization of access rights to personal information - Security Updates: Regular security audits and system updates

8. Use of Cookies

The Service uses cookies to enhance the user experience. - What are cookies: Small text files stored in your browser by a website. - Purpose of use: Storing service preferences, analyzing usage statistics, providing personalized services - Refusing cookies: You can refuse the use of cookies through your browser settings. (However, some services may be limited.) - Email storage cookie (schroe_saved_email): When the user selects 'Save email,' the email address is stored for 30 days. - Analytics cookies (_ga, _ga_*): Used for Google Analytics 4 service usage statistical analysis and are maintained for 30 days. You can block these by adjusting your browser's cookie settings. - Advertising cookies (Google AdSense): Cookies set by Google to serve rewarded ads on the web service. Ad personalization signals are disabled, so only non-personalized ads are served; you can block these cookies through your browser settings or opt out of personalized ads via Google's ad settings.

9. Users' Rights and How to Exercise Them

Users may exercise the following rights at any time: - Request to access personal information - Request to correct personal information - Request to delete personal information - Request to suspend processing of personal information - Request to withdraw membership These rights may be exercised through the My Page within the Service or by emailing [email protected].

10. Privacy Officer

For inquiries regarding privacy protection, please contact us at the following: - Name: Kinam Kim - Title: CEO - Email: [email protected] - Phone: 070-8983-4239 - Service Name: SCHROE (schroe.kr)

11. Tarot readings through the ChatGPT plugin

SCHROE Tarot for ChatGPT does not require a SCHROE account. To provide card meanings, it processes the language, topic, deck type, card-position wording, selected card identifiers, and upright or reversed orientations. Its tools do not request the original question, full conversation, or ChatGPT account identifier. These inputs do not create a SCHROE account or a separate saved-reading record. Usage statistics are off by default and are sent to Google Analytics 4 only after you allow them in the widget. They include start, shuffle, selection, reading request, chat handoff and website-link events; language, deck type, card count, random analytics and reading identifiers, session information, and visible engagement time. Analytics excludes the original question, conversation text, card-position wording, names, email addresses, and ChatGPT account identifiers. Advertising personalization and advertising user-data consent are denied. Your analytics preference and random analytics identifier are remembered in browser storage for up to 30 days. Turning statistics off stops future transmissions without preventing card selection or readings. Deleting previously transmitted data requires a separate request. Supabase operates the plugin server. Infrastructure logs may process access times, IP addresses, request paths and response statuses for service delivery, security and troubleshooting. The current Pro plan retains logs for 7 days. The plugin code does not store questions or readings in a separate database. Do not include sensitive personal information in card-position wording. Google LLC processes analytics under the GA4 retention period described below. OpenAI’s policies and your settings govern storage and deletion of ChatGPT conversations and widget state. SCHROE cannot delete your ChatGPT conversations on your behalf. Request access, deletion or restriction at [email protected]. For statistics not linked to a SCHROE account, we first establish the information needed to identify relevant records. Do not attach identity documents, passwords or conversation transcripts to your request. Event and user data retention is set to 14 months. New activity resets the user-data retention period. Actual deletion follows Google’s monthly deletion cycle. Standard aggregated reports are not subject to this setting. This is separate from the 30-day browser storage period.

12. Changes to the Privacy Policy

This Privacy Policy may be revised to reflect changes in laws or the Service. Any changes will be announced through notices within the Service. - Effective Date: September 30, 2026 - Last Modified: September 30, 2026 - Previous Effective Date: June 15, 2026

Frequently Asked Questions

What is SCHROE?

SCHROE offers tarot readings, MBTI observation tests, zodiac notes, daily reflection prompts, and an OCEAN temperament profile.

Can I use SCHROE for free?

Basic readings and some reflection content are free. Premium notes are available as a paid service.