Privacy Policy

Information you provide directly:

• Reading profile: the name or nickname you enter, gender, relationship status, calendar type (solar or lunar, including leap month), date of birth, and (optionally) time of birth.
• Face photos (physiognomy reading only): if you choose the face-reading (physiognomy) product, two photos of your face — one front view and one side view — captured with your device camera after you confirm each shot. Providing them is entirely optional and required only for that product.
• Chat messages you exchange with the AI character.
• Account information when you sign in: your email address, display name, and profile image received from the sign-in provider you choose (Google, Kakao, LINE, or Facebook, depending on your region). We never receive your password.

How face photos are handled: your face photos are used solely to generate your physiognomy reading. They are transmitted once to our AI provider (Google Gemini API) to produce a written, non-identifying description of facial features, and that description — not the photos — is what the reading is generated from. The photos are stored in access-controlled storage (Cloudflare R2), are never displayed back to you or to any other user, are never shown publicly or in shared results, and are never used for advertising, identification, or any purpose other than producing your reading. Only our operators can access them, for quality and abuse review. We do not use them to build any biometric identification system. You can request deletion of your face photos at any time by emailing hi@slipstride.com, and we will delete them without undue delay.

Information collected automatically:

• A one-way hash of your IP address, used to track free usage allowances and to reconnect anonymous test sessions to your account when you sign in. We do not store your raw IP address with your content.
• A randomly generated device identifier stored in a cookie, used to reconnect your anonymous reading sessions and guest purchases to your account when you sign in on the same device.
• Service metadata such as timestamps, session status, and AI usage metrics (token counts and processing cost) attached to conversations.
• Device and usage data via cookies and similar technologies (see Section 5), such as browser type, pages viewed, and interactions.
• Advertising attribution data, when present: UTM source/medium/campaign/content/term, campaign/ad-set/ad/creative identifiers, Meta click/browser identifiers, and the referring site origin. We do not store the referrer path, query string, or fragment.

Payment information: payments are processed by Stripe. We receive and store only order details — product, amount, payment status, and a receipt reference — never your full card number or bank credentials. If you pay without signing in, we also store the email address you enter at checkout and use it to reconnect that purchase to your account if you later sign in with the same email.

Reading link email: when you purchase a full reading (saju, compatibility, or physiognomy), we send one transactional email to the address on that order containing a link to your reading. It contains no part of the reading itself. This is a service message about your transaction, not marketing, so it is sent regardless of the marketing preference below. If no usable address is on the order, no email is sent.

Subscription delivery email: if you purchase the monthly subscription, we collect the email address you enter at subscription and use it to deliver your weekly report. You can change it anytime in “My Notebook” (내 수첩). Weekly-report delivery ends when your subscription ends.

Marketing preference: at checkout you may opt in to receive occasional promotional emails from us (such as new reading releases and offers). We record your choice with each order. If you opt in, we may send such emails to the address used at checkout; you can withdraw consent at any time via the unsubscribe link in any email or by contacting hi@slipstride.com. Declining has no effect on your purchase.

Derived content: from your inputs the Service generates interpretive data (for example, your saju / Four Pillars chart data, the written facial-feature description used for physiognomy readings, and the reading generated for you), which is stored with your reading session. Other than the face photos described above, we do not collect drawings, images, or other files from you.

• To calculate your saju chart, generate your readings, and power conversations with the AI character.
• To save your readings and chats so you can return to them, and to let you share a reading by link if you choose to.
• To manage free usage allowances, purchased credits, and payments.
• To email you a link to a reading you purchased, and — for subscribers — to deliver the weekly report.
• To operate, secure, and improve the Service, prevent abuse, and respond to inquiries.
• To measure and improve our marketing (see Section 5).

Your profile inputs, saju chart data, answers, chat messages, and — for the physiognomy product only — your face photos are transmitted to our AI provider — currently Google (Gemini API) — to generate readings and replies. This content is sent for the purpose of generating a response for you. Hosting and data storage are provided by Cloudflare, Inc., with processing primarily in the United States.

We do not sell your personal information for money. We share information only with service providers that help us run the Service, each acting under its own contractual and legal obligations:

• Google LLC — sign-in (OAuth), AI processing (Gemini API), and analytics (Google Analytics).
• Kakao Corp. — sign-in (OAuth).
• LY Corporation (LINE) — sign-in (OAuth).
• Stripe, Inc. — payment processing.
• Cloudflare, Inc. — hosting, database, and file storage.
• Meta Platforms, Inc. — sign-in with Facebook (OAuth), and advertising measurement (Meta Pixel) as described in Section 5; X Corp. (X/Twitter Ads) — advertising measurement, as described in Section 5.
• Authorities or other parties when required by law, or to protect the rights, safety, and integrity of the Service.

If you create a share link, the shared result (and the conversation, if you include it) is visible to anyone who has the link.

We use cookies and similar technologies for session management and to understand and grow the Service. Meta measurement is currently active; the other integrations below are used only when configured:

• Google Analytics — optional usage measurement (pages, sessions, events).
• Meta Pixel — currently used to measure the effectiveness of ads on Meta platforms (Facebook/Instagram).
• X (Twitter) Ads pixel — optional measurement of ads on X.

When an advertising/UTM parameter or an external referring site is present, we store an allow-listed attribution snapshot in a first-party cookie for up to 90 days so an internal page transition does not lose the source that brought you to the Service. Direct and internal visits do not extend that expiration. When you start a reading, the snapshot is saved with the reading session so we can measure the campaign funnel through checkout and purchase. Values are length-limited, and only the referring site origin — not its path or query — is retained. If your browser sends Global Privacy Control, we suppress these measurement scripts and server-side advertising events and do not attach attribution values to the reading.

These tools may set their own cookies and receive event data (such as page visits, checkout starts, or purchases) linked to identifiers they manage. To keep purchase measurement accurate when browser tools are unavailable, we may also send the same conversion events from our servers, together with a hashed (SHA-256) version of your account email address, your IP address, browser information, and ad-click identifiers. This may constitute “sharing” for cross-context behavioral advertising under some U.S. state privacy laws; you can opt out at any time by emailing hi@slipstride.com, and you can also limit tracking through your browser settings, the Global Privacy Control signal, or the opt-out tools offered by Google, Meta, and X. Your answers, chat messages, face photos, and the profile details you enter for a reading (such as name, gender, relationship status, and birth date and time) are never shared with advertising platforms.

• Reading sessions, results, and chats are kept so you can return to them, until you ask us to delete them or we delete them as part of routine data management.
• Face photos (physiognomy readings) are kept only as long as needed for quality and abuse review, and are deleted promptly upon your request.
• Purchase records are kept as long as needed for accounting, tax, and dispute-resolution obligations.
• The first-party advertising-attribution cookie expires after 90 days. Attribution saved with a reading session follows the retention period for that session.
• Free-allowance records (hashed identifiers) are kept only as long as needed to enforce usage limits.
• When you request deletion, we delete or de-identify your personal information without undue delay, except where retention is required by law.

You may request access to, correction of, or deletion of your personal information, or a copy of the data you provided, by emailing hi@slipstride.com. We honor applicable rights under U.S. state privacy laws (including the California Consumer Privacy Act) and other laws that apply to you, and we will not discriminate against you for exercising them. If you are in a jurisdiction with additional rights (such as Korea’s PIPA or the EU GDPR), we will accommodate verified requests consistent with those laws.

The Service is operated from the United States and information is processed and stored primarily in the United States (with content delivery through Cloudflare’s global network). By using the Service, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact hi@slipstride.com and we will delete it.

We use reasonable technical and organizational safeguards — such as encrypted transport (HTTPS), signed session cookies, hashed network identifiers, and access controls — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service and update the date above.

Slipstride, LLC · 131 Continental Dr, Suite 305, Newark, DE 19713, United States · Privacy inquiries: hi@slipstride.com