Privacy Policy

1. Purposes of Processing Personal Information

X-ON Inc. (the “Company”) processes only the minimum information necessary for the following purposes.

2. Personal Information Processed and Retention Periods

※ We do not store your original IP address; it is kept only temporarily as an irreversible hash.

※ Where retention is required by law, information is kept for the required period — records on contracts or cancellations: 5 years; records on payments and supply of goods: 5 years; records on consumer complaints or dispute handling: 3 years (Korea’s Act on the Consumer Protection in Electronic Commerce); records on labeling and advertising: 6 months.

3. Provision of Personal Information to Third Parties

The Company does not provide users’ personal information to third parties, except in the following cases.

• When the user has given prior consent
• When required by special provisions of law, or when requested by investigative agencies following lawful procedures

※ Connections with sister services — Jeombom, Oneul Monggeul, and Saju Trip are all operated by the Company (X-ON Inc.), and information is exchanged only within the scope below.

• Oneul Monggeul: For users logged in with Kakao, we show your “sky color code (1 of 5)” and “today’s and tomorrow’s fortune scores (2 numbers)” on the Oneul Monggeul screen of the same account. Your date of birth, birth time, compatibility partners, and reading content are not shown. For users who are not logged in, tapping the button on the results screen passes only the sky color code in the URL.
• Oneul Monggeul → Jeombom: Only if you agree to “See my Monggeul on Jeombom too,” we show your Monggeul’s name, level, days together, birth sky, and whether you met today from Oneul Monggeul on the Jeombom screen. Jeombom does not store this information, and you can turn it off at any time in Jeombom’s “My Info” or Oneul Monggeul’s “Settings.”
• Saju Trip: When you tap a button to go to Saju Trip, so you don’t have to re-enter the same information, we pass your date of birth, birth time, and gender乙 a one-time key valid for only 10 minutes. The key is deleted as soon as Saju Trip reads it once (or after 10 minutes), and Saju Trip uses this information only for on-screen calculations and does not store it.

4. Outsourcing of Personal Information Processing

When entering into outsourcing contracts, the Company specifies personal information protection requirements and supervises whether contractors comply with them.

5. Overseas Transfer of Personal Information

You may refuse overseas transfers; in that case, use of the reading feature, “Our Future Baby’s Face,” and payments within the Android app may be restricted (payments on the jeombom.kr website are processed by a domestic payment processor). All other features remain available.

Overseas transfers take place over information and communications networks (HTTPS encrypted transmission) when you use the relevant feature. Recipient contacts: Google LLC — support.google.com/googleplay, Anthropic PBC — privacy@anthropic.com, OpenAI, L.L.C. — privacy@openai.com, Vercel Inc. — privacy@vercel.com.

6. Procedures and Methods for Destroying Personal Information

• Information stored on your device is destroyed immediately when you select [My Info] → [Delete all saved information] or clear your browser storage.
• Information temporarily kept on the Company’s servers is automatically deleted as soon as its retention period expires.
• Information in electronic file form is permanently deleted using methods that make recovery impossible, and printed materials are shredded or incinerated.

7. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

You may exercise the following rights at any time.

• Request access to personal information
• Request correction of errors
• Request deletion
• Request suspension of processing

You can view, edit, and delete information stored on your device directly on the [My Info] screen in the Service. Requests to access, correct, or delete information stored in your login account, to withdraw your account, or any other requests can be sent to contact@x-on.kr, and the Company will act without delay after verifying your identity. We do not process the personal information of children under 14.

8. Measures to Ensure the Security of Personal Information

• Minimal collection — The Service can be used without an account, and if you don’t log in, your date of birth and similar data are not sent to the server. Information stored when you log in is limited to what’s needed to continue across devices, and withdrawal account numbers and holder names are stored encrypted.
• Encryption in transit — All communications are encrypted with HTTPS.
• Access restriction — The reading server can only be called from designated domains, and access rights are granted to the minimum number of people.
• De-identification — IP addresses are processed only as one-way hashes, without storing the original.
• Request limits — Abnormally excessive requests are blocked automatically.

9. Installation, Operation, and Refusal of Cookies and Other Automatic Collection Tools

The Service uses your browser’s local storage (localStorage) to remember your settings (date of birth, tone selection, check-in records, etc.). You can delete or block this in your browser settings, but blocking it may limit some convenience features.

The Company uses the external tools below to measure service usage statistics and advertising performance, and these tools may collect, through cookies and similar means, usage behavior information such as screens visited, whether you arrived via an ad, whether you entered a date of birth or completed a payment, and the payment amount . Your date of birth, name, contact information, email, and reading content are not sent to these tools.

This information may be stored on servers overseas (including the United States) under each operator’s policies. You can stop the collection at any time using the opt-out methods above, and opting out does not limit your use of the Service.

In addition, to improve the Service, the Company records on its own servers how often each screen is opened and other such usage records. The identifier stored with these records is a random number generated on your device, which is not linked to information that could identify you, such as your name, date of birth, or contact information, and your questions and reading answers are not recorded. These records are automatically deleted after 90 days. Clearing your browser storage also removes the identifier.

10. Automated Decision-Making

The Service’s fortune results are entertainment content generated automatically by saju calculation rules based on your date of birth, and do not constitute automated decisions affecting your rights or obligations.

11. Chief Privacy Officer

12. Remedies for Infringement of Rights

• Personal Information Infringement Report Center — 118 (no area code) / privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee — 1833-6972 / www.kopico.go.kr
• Supreme Prosecutors’ Office Cyber Investigation Division — 1301 (no area code) / www.spo.go.kr
• Korean National Police Agency Cyber Investigation Bureau — 182 (no area code) / ecrm.police.go.kr

13. Changes to the Privacy Policy

If any content of this Policy is added, deleted, or modified, we will announce it through the Service’s notices starting 7 days before the effective date. However, if there is a material change to users’ rights, we will announce it 30 days before the effective date.

Supplementary Provisions

This Privacy Policy applies from Sep 1, 2026.

Amended Sep 26, 2026 — Article 3 now specifies what is passed when moving to Oneul Monggeul (1 sky color code; no date or time of birth). The amendment applies from Oct 3, 2026.

Amended Oct 4, 2026 — Article 9 now specifies the usage statistics and ad performance tools (Google Analytics, Meta Pixel), the items they collect, and how to opt out.

Amended Oct 11, 2026 — Updated Articles 1, 2, 4, 7, and 8 and the opening summary to accurately describe the items stored with Kakao Login, the device identifier for the free first reading, reading credit records, Crew (referral) program items, and how to delete account information and withdraw. As this amendment describes processing already in operation, it applies from Oct 11, 2026.

Amended Oct 17, 2026 — With the launch of the Jeombom Android app, added the processed items, outsourcing, and overseas transfer for in-app payments (Google Play billing) (Articles 2, 4, and 5). The amendment applies from Oct 24, 2026.

Amended Oct 17, 2026 (2) — Added Daangn Pixel (Danggeun Market Inc.) to the ad performance tools in Article 9. Names and contact information are not sent. Applies from Oct 17, 2026.

Amended Oct 18, 2026 — For the new “Our Future Baby’s Face” feature, added temporary processing of face photos, retention of result images (7 days), and outsourcing and overseas transfer to OpenAI (Articles 2, 4, and 5). Separate consent is obtained when you use this feature. Applies from Oct 18, 2026. Processing for existing features has not changed.

Amended Oct 20, 2026 — Article 3 now specifies the items exchanged when connecting with sister services (Oneul Monggeul, Saju Trip): today’s and tomorrow’s fortune scores, the Monggeul summary shown with your consent, and the Saju Trip one-time key. As this amendment describes processing already in operation, it applies from Oct 20, 2026.

Amended Oct 22, 2026 — For the new “Purchase Reviews” feature, added the purposes, items, and retention periods for star ratings and one-line reviews (Articles 1 and 2). Reviews are stored only when you choose to leave one, and you decide on the writing screen whether to make it public. Applies from Oct 22, 2026. Processing for existing features has not changed.

Amended Oct 25, 2026 — For the new “Daily Fortune via KakaoTalk” feature, added the purpose of sending notification messages, the processed items (mobile number, name (optional), daily fortune results calculated on your device, delivery records), the retention period (30 days after your subscription ends or you turn it off), and delivery outsourcing (Solapi Co., Ltd., Kakao Corp.) (Articles 1, 2, and 4). Separate consent is obtained when you sign up for this feature. Applies from Oct 25, 2026. Processing for existing features has not changed.