Privacy Policy

1. Information and purposes

Sign-in: provider identifiers, email and profile information supplied by your social login provider, your Tiki nickname and language/region preferences are used to create and authenticate your account and deliver the service. Available fields depend on the provider and your permissions.

Content: test responses, introductory age, gender and MBTI answers, questions and relationship details you enter, results, images and sharing choices support tests, storage, AI generation and sharing. Chats use messages, input drafts stored on our server before payment, replies, images and your latest record for that character. For palm reading content, the palm and hand-edge photos you take or choose and the line positions you match on them are used to read your palm and write your reading, and the photos are kept so we can show them again before and after payment and in your reading. Hand photos are never used to verify or identify you. Avoid unnecessary real names, contact details and sensitive health or sexual information.

Transactions and operation: order IDs, products, amounts, currencies, payment/refund status, payment identifiers, ticket ledgers, acceptance records, access/error records and essential cookies support payments, fraud prevention and troubleshooting. Payment providers directly handle card information. Support messages are used to verify accounts/orders, answer questions and resolve disputes.

2. Grounds and retention

We process information needed to enter into and perform the service contract, meet legal duties and honor your choices and consent. Account and content information is kept for service delivery and deleted without undue delay upon deletion, withdrawal or completion of its purpose. Guest tests normally remain accessible in the same browser for seven days from starting; expired records are removed through cleanup jobs. Hand photos attached to a reading are deleted when you delete that reading or your account. A hand photo not followed by payment is replaced when you take a new one, and is deleted when a member deletes their account or, for guests, by a cleanup job after seven days.

Records subject to Korean legal retention requirements include contracts, withdrawal, payment and supply records for five years, consumer complaints/disputes for three years and advertising records for six months. Such records are used only for the required purposes. Electronic files are deleted in a manner designed to prevent recovery; paper is shredded. Email contact@tiki.boo for confirmation of the scope and removal timing of residual external copies or provider backups after deletion.

3. Providers and overseas processing

We use Supabase for authentication, databases and files, Vercel for web hosting and OpenAI for AI text and image generation. Your chosen sign-in provider handles authentication. Toss Payments processes Korean payments; Dodo Payments handles international payments where offered. Our email service receives support inquiries sent to contact@tiki.boo. Each provider receives information needed for its function.

AI requests may send your questions, original test responses, hand photos, relevant results and conversation context to OpenAI. Generation and service operations may involve processing by overseas providers, including in the United States. Contact our channel about overseas processing or to request discontinuation. You may choose not to use AI content generation or chats; without this processing we cannot provide the requested AI feature.

4. Public results and derived records

Each content report (tarot, saju, palm reading and similar) has one link. Anyone with the link can see the whole report, including what was entered for it such as a name, birth date and time, palm photo or concern. The link can spread when it is shared with the share button. A report bought without signing in stays unassigned to any account; once you sign in and assign it to your archive, deleting it also ends access through the link.

Issuing a share link is optional. It exposes your result and Tiki nickname to link holders. Account details, email, orders and lists of other records are not public.

Deleting the result ends access through its share link. Copies outside Tiki are not all withdrawn automatically. Email contact@tiki.boo about rights concerns or deletion requests.

5. Your rights and deletion

Settings lets you change your nickname and delete your account; saved records also have deletion controls. Requests for access, correction, deletion, restriction, consent withdrawal or action through a representative go to contact@tiki.boo with minimal necessary identity verification. We explain restrictions such as legal retention duties.

6. Cookies and safeguards

Essential cookies maintain sign-in, prove ownership of guest tests and remember language/region. Analytics and ad measurement cookies are described in section 7. Browser settings let you block or delete cookies, which may prevent sign-in or access to guest results. Responses, results, chats and images are not stored in browser localStorage, IndexedDB or offline caches.

We apply access restrictions, encrypted communication and private-file access controls. We do not sell personal information for advertising.

7. Analytics and ad measurement

We use Google Analytics, Google Tag Manager and the Meta Pixel for usage statistics and ad performance measurement. These tools automatically collect the addresses of pages you visit, usage events such as page views and content start button clicks, IP address, browser and device information, cookie identifiers and ad click identifiers, and send them to Google and Meta, where they may be processed on servers in the United States and other countries. Test responses, results, chat content and payment method details are not sent.

Google may use this information to provide usage statistics, and Meta may use it to measure ad performance and optimize ad delivery. Collected information is kept according to each provider's policies and the retention periods we configure, then deleted.

You can refuse collection by blocking or deleting cookies in your browser or using tracking protection, and refusing does not limit your use of the service. You can also opt out or adjust collection with the Google Analytics opt-out browser add-on, the ad preferences in your Meta account, or your phone's advertising ID reset and tracking limits. Questions and opt-out requests go to the channel below.

8. Contact and updates

Mindful Labs Inc. handles privacy matters and rights requests by email at contact@tiki.boo. We announce changes and effective dates in the service, and obtain consent for changes that require it, including relevant changes to processing or disclosure purposes.