ChessMate Privacy Policy

0. Operator Information

1. Information We Collect

We collect the following information to provide our services:

• Email address (for sign up/login)
• Nickname (for profile)
• Profile photo (optional)
• Country (optional)
• Game records and ELO rating
• Point balance and transaction history
• AI analysis inputs — dream text, palm photo, saju name/gender/birth date and time/occupation, and two-person compatibility information (user-provided)
• AI-generated analysis results

2. How We Use Your Information

• User identification and service delivery
• Online match matchmaking
• Leaderboard management
• In-app purchase and point service
• Mystic readings (dream / palm / saju / gunghap)
• Service improvement

3. Data Retention and Deletion

• All data is deleted immediately upon account deletion.
• Collected information is stored encrypted on Supabase cloud.
• Transaction records required by law (e.g., Korean Electronic Commerce Act — 5 years) are retained separately for the legally required period.

4. Generative AI Data Transmission and User Consent

Data sent by AI feature:

• Dream reading: the dream description entered by the user
• Palm reading: the palm photo selected by the user
• Saju: name, gender, birth date/time, occupation, and calculated saju information
• Compatibility: both people’s names, genders, birth dates/times, and calculated saju and compatibility information

• Recipient and transmission path: User device → Node Labs Inc.’s Supabase Edge Function → Google LLC’s Gemini API (TLS encrypted)
• Purpose: Generate the AI analysis requested by the user
• Storage: Dream, saju, and compatibility inputs and generated results are stored in Supabase for result retrieval and duplicate-charge prevention.
• Palm photos: Relayed only while the Edge Function processes the request and not stored in Supabase Database or Storage. Only a photo hash and the generated result are stored.
• No identification: Palm photos are not used for identification. Please avoid including faces, names, or addresses in the photo.
• AI processing: Node Labs Inc. does not use user data to train its own AI models. Google processes transmitted data under the applicable Gemini API terms and data processing conditions.

5. Third-Party Sharing

We do not sell personal information. We use the following processors only as needed to provide the service and manage them under applicable service and data processing terms so that they provide privacy protections equal to or greater than those described in this policy:

• Supabase Inc. — Member data, game records, point ledger storage and authentication
• Google LLC (Gemini API) — AI input/image analysis expressly authorized by the user
• Apple Inc. / Google LLC — In-app payment processing and receipt verification
• RevenueCat Inc. — Subscription and payment state management

6. In-App Purchases

This app sells point packages through Apple App Store / Google Play billing.

Payment information (credit card numbers, etc.) is processed directly by Apple/Google. This app does not collect or store payment information.

Refunds follow Apple/Google refund policies.

7. Your Rights

• You can request to view, modify, or delete your information at any time.
• Account deletion is available in [My Profile → Delete Account] and is processed immediately.
• You can withdraw optional consents (e.g., marketing) at any time.

8. Children Under 14

This service restricts registration of children under 14. If a registration is detected, information collected without legal guardian consent will be immediately deleted.

9. Data Protection Officer

Node Labs Inc. / CEO Taesung Kim / nodelabskr@gmail.com

Effective: July 15, 2026