Policy
Privacy Policy
This Privacy Policy applies to Lunaroha-operated services including Saju Flow, Today Quant Pick, and related support or operations pages. Because each service processes different information, the tables and service-specific sections below distinguish what is used and why.
Saju Flow is an account-free service. We distinguish between the person who actually uses the app ("App User"), the person whose birth date, sex, and birthplace are entered ("Profile Subject"), and the analysis record stored inside the app ("Saved Profile"). A Profile Subject's birth date, birth time, sex, and birthplace are required inputs for Saju calculations, and are sent to our API when the App User requests analysis, fortune, compatibility, or custom questions.
Today Quant Pick is an account-free quantitative-data explanation service. The app uses an anonymous device identifier to connect point balances, content unlocks, purchases, rewarded ads, and optional email recovery. Today Quant Pick does not require birth date, birth time, birthplace, or current location, and does not provide personalized financial advice, buy/sell instructions, target prices, or guaranteed returns.
Covered services
| Service | Main features | Main identifier | Notes |
|---|---|---|---|
| Saju Flow | Saju, fortune, compatibility, custom questions, Flow Credit, ads and offerwall rewards | Anonymous app ID, Saved Profiles, optional recovery email | Processes birth information and birthplace search data as needed to provide the service |
| Today Quant Pick | K-quant snapshots, today cards, stock explanations, points, rewarded ads | Anonymous app ID, point ledger records, optional recovery email | Does not use birth or location data; provides quantitative-data explanations for reference only |
| Lunaroha support and operations pages | Inquiry intake, error reports, partnership and privacy requests | Contact details and inquiry content provided by the user | Processed only as needed to respond to support and legal requests |
Information processed and applicable standards
The table below summarizes our principal collection and processing items. The cited statutes and platform policies indicate the standards we have reviewed; they are not a blanket claim of full compliance across every country and situation.
| Item | Purpose | Required / Optional | Retention | Third-party / cross-border transfer | Deletion / withdrawal | Applicable standards |
|---|---|---|---|---|---|---|
| App User age band and country | Block child app users, enforce teen-restricted mode, control ads / payments / AI / location features | Required before any personal-data processing | Linked to the anonymous device identifier, retaining the policy version and confirmation timestamp | Server-side processing. Only the restriction state is reflected to ads / billing SDKs | Reinstall the app, submit a data deletion request, or change age settings | PIPA Article 22-2 (Korea), COPPA, GDPR / UK GDPR Article 8, Google Play Families / User Data |
| Profile Subject birth information | Saju calculation, fortune, compatibility, Saved Profiles | Required when an analysis is requested | Only Saved Profiles created by tapping "Save" are stored on the server | For external custom questions, only the minimum context is used, and only for adult App Users within the allowed scope | Delete the profile inside the app or submit a data deletion request | PIPA, COPPA, GDPR / UK GDPR, Google Play User Data |
| Consent verification for minor Profile Subjects | Confirm the right to enter information for other minors such as family members or grandchildren | Required when saving or analyzing a minor Profile Subject | Only the consent version, confirmation timestamp, anonymous ID, and hashed IP / User-Agent are retained | Not used for external advertising, offerwall, personalization packages, or public share-card birth details | Delete the Saved Profile or submit a data deletion request | PIPA Article 22-2, COPPA, GDPR / UK GDPR Article 8, Google Play Families |
| Current location | Search for nearby birthplace candidates around the current location | Optional | Used once when the "Find by current location" button is tapped; the Saved Profile stores only the selected birthplace and time zone | Uses the device location permission and Android Location API. Only the region name / country needed to verify search candidates is sent to the server | Deny the permission, revoke it in Android settings, or delete the Saved Profile | Location Information Act (Korea), PIPA, Google Play User Data / Permissions |
| Anonymous ID, request / error logs | Service reliability, abuse prevention, request tracing | Required | Retained for the limited period required for operations and security, then deleted or anonymized | Server, hosting, and security log processing | Upon a data deletion request, removed except for what is required for legal or security retention | PIPA, CCPA / CPRA, Google Play User Data |
| Today Quant Pick anonymous ID and app activity | Connect point balances, card unlock state, stock explanation access, duplicate request prevention, and error support | Required | Retained for service delivery, security, and dispute handling, then deleted or anonymized | Processed by the Today Quant API server. Not sold externally and not shared with Saju Flow Credit | Upon a data deletion request, removed except for what is required for legal or security retention | PIPA, CCPA / CPRA, Google Play User Data |
| Today Quant Pick points, purchase records, and purchase token hashes | Google Play purchase confirmation, point grants and spends, refund/dispute handling, duplicate grant prevention | Required for purchases or point use | Retained for the period required for transactions, settlement, and security | Google Play Billing and Today Quant API server processing. Purchase tokens may be stored as hashes on the server | Deleted upon request except for legal, settlement, or dispute retention | Google Play Payments, PIPA, CCPA / CPRA |
| Today Quant Pick rewarded-ad sessions | Verify user-initiated rewarded ads, grant points or content access, prevent duplicate rewards | Optional | Retained for reward verification, abuse prevention, and dispute handling | Google Mobile Ads, AdMob SSV, and Today Quant API server processing | Stop using rewarded ads, adjust ad privacy settings, or submit a data deletion request | Google Play Ads / User Data, PIPA, GDPR / UK GDPR, CCPA / CPRA |
| Today Quant Pick recovery email | Restore points and purchase entitlements after device change or reinstall, customer support, security notices | Optional | Retained while recovery remains enabled; deletion removes the recovery method | An email-delivery infrastructure may be used | Request deletion in the app or by email support | PIPA, GDPR / UK GDPR, CCPA / CPRA |
| Ad events | Ad delivery, rewarded-ad verification, advertising consent management | Optional, or regional consent required | Retained for the period needed by the ads SDK and the server-side reward verification log | Google Mobile Ads, Google UMP, AdMob SSV | Adjust ad privacy settings, revoke app permission / consent, submit a data deletion request | Google Play Ads / User Data / Families, COPPA, GDPR / UK GDPR, CCPA / CPRA |
| Purchase tokens, Flow Credit | Google Play purchase verification, credit balance / entitlement management, refund and dispute response | Required at purchase | Retained for the period required for transactions, security, and settlement | Google Play Billing and server-side verification | Upon an account deletion request, removed except for what is required for legal, settlement, or dispute retention | Google Play Payments, PIPA, CCPA / CPRA |
| Offerwall callbacks | Mission completion verification; handling duplicates, cancellations, and chargebacks | Optional | Retained for the period required for rewards, dispute handling, and abuse prevention | Offerwall provider callbacks | Stop using the offerwall or submit a data deletion request | Google Play Ads / Families / User Data, PIPA, CCPA / CPRA |
| Recovery email | Restore Flow Credit after device change or reinstall, security notifications | Optional | Stored encrypted with an HMAC value used for lookup; deletion removes the recovery method | An email-delivery infrastructure may be used | Remove the recovery email in the app or submit a data deletion request | PIPA, GDPR / UK GDPR, CCPA / CPRA |
| Inquiry content | Error reports, partnership and privacy enquiries | Optional | Retained for the period needed to handle and audit the inquiry | Operator review | Request deletion of the inquiry | PIPA, CCPA / CPRA |
| custom question | Generate answers to custom questions, deliver deferred responses, manage quality and safety | Optional, adult App Users only | Question, response, and request status retained for the period needed to provide the service | The minimum required context may be sent to the configured AI provider | Submit a data deletion request | PIPA, GDPR / UK GDPR, CCPA / CPRA, EU AI Act, Google Play User Data |
Minors and profiles of other people
Saju Flow is not directed at children. App Users below 14 in Korea, below 13 in the United States, and below 16 in regions such as the EU and UK where age verification is required are blocked from the service before any personal data is collected. App Users under 18 cannot use payments, Flow Credit purchases, rewarded ads, the offerwall, external custom questions, current-location lookup, or adult relationship / marriage / investment / career judgement features.
Adult App Users may create Saved Profiles for other people such as family members, grandchildren, or acquaintances. However, if the Profile Subject is calculated as a minor, you must confirm that you have the authority to enter that information or have obtained consent from a legal guardian before saving or analyzing.
Whether information is stored
Analysis, fortune, compatibility, and custom-question requests are processed to compute results. Some interpretations may be generated through automated analysis systems. A Saved Profile is created only when the user taps "Save" inside the app; inputs that are not saved do not become a Saved Profile automatically.
Data deletion requests
Saju Flow and Today Quant Pick users can use in-app deletion or recovery-management features, or request data deletion from the Lunaroha operator.
- For Saju Flow, tap the Saved Profile in the app's Profile tab to delete it.
- For Today Quant Pick, use the points / recovery screen or the support channel to request deletion of the anonymous ID, recovery email, or inquiry records.
- To request deletion from outside the app, send an email titled "Lunaroha data deletion request" to [email protected]. If automated review tools hide the address, you may use the form support [at] lunaroha.com.
- In the email, please include only the minimum information needed to identify the target for deletion: service name, the device used in the app, Saved Profile name or anonymous ID, and enough detail to identify your inquiry. We will not ask for sensitive credentials such as account passwords or resident-registration numbers.
You can delete a Saved Profile from the Profile tab in the app. Deletion removes the saved chart and profile name associated with that anonymous device identifier from the profile list. Inquiry content submitted through the contact form, including any optional contact channel you provided, is also eligible for deletion requests.
Server operations logs, advertising and reward event logs, and abuse-prevention records may be retained additionally to the extent required for security, legal obligations, and quality management. Once that purpose is fulfilled, they are deleted or anonymized in accordance with our operational policy.
Birthplace and location permission
Birthplace search resolves a time zone from the city or region name entered by the user together with the selected country. The device location permission is requested only once, and only when the user taps "Find by current location" in the Android app, in order to find nearby birthplace candidates. Current-location lookup is offered only after the App User is confirmed to be 18 or older, and the Saved Profile retains only the selected birthplace and time zone.
Advertising and consent
- Advertising uses the Google Mobile Ads and Google User Messaging Platform consent flows.
- Rewarded ads are selected each time by the user. If you do not complete the ad, the selected premium result will not unlock.
- If your region or device requires ad-privacy choices, you can open the ad-privacy settings from the Profile tab in the app.
Google Play Data safety
In the Google Play Data safety section we declare data according to each service's actual SDK, permission, and server processing. Saju Flow declares other personal information such as date of birth and sex, birthplace and time zone entered by the user, optional device location permission, inquiry content, anonymous device identifier, app interactions, ad events, diagnostic logs, and Google Play purchase verification information. Today Quant Pick declares anonymous device identifiers, optional recovery email, point / purchase / unlock records, rewarded-ad sessions, Advertising ID and ad events, diagnostic logs, and Google Play purchase verification information. The apps do not currently collect photos or calendar information.
Security and retention
App traffic in the production environment uses an HTTPS API. Our reference configuration keeps public router forwarding closed and routes external access through Cloudflare Tunnel. Personal-data requests are accepted via the developer contact registered with Google Play or the inquiry channel shown in the service. Inquiries and error reports go to [email protected]; partnership proposals go to [email protected]; operational contact goes to [email protected].
Flow Credit, rewarded ads, offerwall missions, and recovery
Flow Credit is an in-app credit used only to unlock detailed readings and custom deep readings inside Saju Flow. Some interpretations may be generated through automated analysis systems. It cannot be refunded for cash, transferred to another user, exchanged for external goods, or used as an investment, coin, or random draw asset.
- Flow Credit balances, ledger entries, content unlocks, rewarded-ad sessions, offerwall sessions, provider callbacks, and admin adjustments are stored on the server under an anonymous app ID.
- Unknown app-user age blocks personal-data flows and sensitive features. Under-13 app users are blocked. App users aged 13-17 can create saved profiles and view the basic daily preview only; Flow Credit detailed unlocks, paid products, rewarded ads, offerwall, external AI, current location, and adult relationship interpretations are blocked.
- Adult app users must reconfirm once before using paid / ads / offerwall, external AI, or adult relationship feature groups. The audit record stores only anonymous ID, feature group, policy version, confirmation time, and IP / User-Agent hashes.
- Rewarded ads are optional. The app creates a server reward session and sends that session ID to AdMob SSV custom data so the server can verify the completed ad before granting credit.
- Offerwall missions are optional. Saju Flow sends only the provider session / sub ID and callback URL needed to verify the mission. Provider callbacks may mark a reward as pending, completed, rejected, duplicate, reversed, or charged back.
- Users can create an account recovery code and enter it after reinstalling the app or changing phones to reconnect the same server anonymous ID, credits, unlocks, and purchase entitlement records.
- Recovery codes are stored as hashes on the server. Keep the visible code private, because anyone with the code can restore the associated anonymous ID.
- Users may optionally register a verified recovery email for Flow Credit protection. The email is encrypted for storage, searched by a server-side HMAC value, and used only for credit recovery, security notices, customer support, duplicate recovery prevention, and abuse prevention.
- Deleting a recovery email removes only that recovery method. Account and data deletion can be requested inside the app or at /account-deletion. Purchase ledgers and security audit records may be retained where needed for refunds, fraud prevention, disputes, or legal obligations.
Today Quant Pick points, ads, stock explanations, and recovery
Today Quant Pick points are in-app points used only to unlock today cards and stock explanations inside Today Quant Pick. They cannot be refunded for cash, transferred to another user, exchanged for external goods, or used as an investment, coin, or random draw asset.
- Today Quant Pick point balances, point ledger records, content unlocks, purchase records, rewarded-ad sessions, and operator adjustments are stored on the server under a Today Quant-specific anonymous app ID.
- Today Quant points and unlock records are not shared with Saju Flow Credit, Saju profiles, or birth information.
- Rewarded ads are selected each time by the user. The app creates a server reward session and sends that session ID to AdMob SSV custom data so the server can verify the completed ad before granting points or content access.
- Google Play purchase tokens may be stored as hashes on the server to prevent duplicate grants and handle disputes. Order IDs and product IDs are retained where needed for refunds, settlement, customer support, and abuse prevention.
- Users may optionally register a verified recovery email for point protection. The email is used only for credit recovery, security notices, customer support, duplicate recovery prevention, and abuse prevention.
- Today Quant Pick stock explanations are quantitative-data explanations for reference only. They do not provide personalized financial advice, buy/sell instructions, target prices, or guaranteed returns.