Privacy, in plain words.

What we use and why

• Your puzzle: an alias and birthday; birth time and birth city if you choose to provide them. We use these to calculate your piece, readings and friend comparisons. City records include coordinates and a time zone; we do not request your device’s location.
• Optional timing choice: if you choose Female or Male at signup, we save that choice privately with your profile, until you delete your puzzle, solely to select the traditional longer-cycle calculation convention. It does not change your personality reading or compatibility score and is not shared with friends, AI providers or analytics. You can leave it blank or choose “Prefer not to say”. A choice made later inside the cycle calculator is used for that request only and is not saved.
• Calculated results: chart data and calculation metadata where available, element/type, saved pair scores, directional readings and score versions.
• Connections: invitation identifiers, joined friends, seen-arrival markers and personal-reading unlocks. These keep both people’s puzzle boards in sync.
• Google sign-in: a Google account identifier and session credentials. The current integration requests OpenID only; Gwiin does not request or save your Google email, profile photo, contacts or password. Google handles its own sign-in processing.
• Service security: request-limit counters keyed by a hashed IP address when trusted-proxy mode is enabled, otherwise a shared local key. Hashing is not a guarantee of anonymity. Hosting providers may receive IP addresses and request metadata.

The creation checkbox permits saving the details for the puzzle. You can decline and no saved puzzle will be created. Optional birth time and city can be left blank. Legal grounds for each operation and any separate international-transfer consent must be finalized before public launch.

What other people see

Anyone with your invitation link can see your alias and piece type. A connected friend can see your alias, piece, shared score and that friend’s reading about the pair. Friends do not receive your birthday, birth time, birth city, raw chart or full friends list through the board API.

An invitation is a shareable link, not an identity check. Only share it where you are comfortable sharing your alias. Images you export or other people copy can remain outside Gwiin.

Providers, AI and payments

The deployment uses Vercel for hosting and Neon for database storage; Google handles optional sign-in. The main app also loads Google Fonts, which causes your browser to contact Google and send network request information. City search uses a server-hosted GeoNames dataset, not a live location-provider request.

Free personal readings, friend scores and the free detailed preview are rule-based: these paths do not call an AI provider. New payments are currently disabled. The code includes a separately gated paid-reading path using Lemon Squeezy (with legacy Stripe payment support) and Google’s Gemini API. That path sends calculated charts for both people, relationship facts and the saved score to Gemini—not raw birthdays, aliases or payment information. Derived charts can still relate to a person; they are not guaranteed anonymous.

Any future activation of payment or AI generation requires a revised notice, appropriate permissions for both people, and provider/retention review. Previously purchased content, if any, is handled separately from a new purchase. Provider processing is not erased simply by deleting a Gwiin account.

Before launch: confirm each recipient’s legal identity/contact, hosting and access countries, transferred fields, purpose, transfer timing/method, retention and applicable transfer basis. This draft does not claim that every provider stores data only in the United States.

Cookies, browser storage and tracking

Gwiin uses the essential gwiin_access cookie to restore access, normally valid for 30 days, and a gwiin_google_flow cookie for a Google sign-in attempt, valid for 10 minutes. Reading-language preference is stored in your browser. Clearing cookies may remove access to an unsaved guest puzzle; signing in with Google supports recovery.

Optional analytics are off until you select “Allow analytics”. We use Mixpanel (Gwiin project, US data residency) to count selected pages and actions with a random browser ID. We do not send birth details, names, Google identities, readings, invitation links, page URLs or referrers. Events pass through our server without forwarding your IP or browser headers; IP-based geolocation is disabled. We do not use autocapture, session replay or advertising tracking. Your choice and browser ID are stored locally for 180 days. Do Not Track and Global Privacy Control block collection. Change your choice in Account settings → Analytics privacy settings. Declining, signing out or deleting your puzzle clears the analytics ID and stops collection in this browser. Previously sent Mixpanel events are not automatically erased by these actions. Vendor retention and the process for historical analytics deletion remain launch-review items; contact us for privacy requests.

How long information remains

The current active database keeps your profile, connections, saved scores and readings until deletion; there is no automatic inactive-account purge. Whether this retention is appropriate must be reviewed. Google sessions expire after 30 days and expired rows are cleaned during later sign-ins. Login attempts expire after 10 minutes; used attempts are consumed and expired attempts are cleaned during later sign-in starts.

Rate-limit counters expire after their configured window (normally one minute; puzzle creation uses one hour), and expired rows are removed on a later limiter request. Expiry is not the same as immediate physical deletion. Provider logs, database backups, support records and any legally required transaction retention remain unconfirmed release blockers—not a promise of zero retention.

Your choices and deletion

Open the account settings from the sign-in/account button, choose “Delete my puzzle and birth details”, then type DELETE. The request uses your signed-in or guest session and does not let you nominate another user’s account.

This removes your profile and birth details, Google account link and sessions, pending logins bound to those credentials, friend connections, saved pair scores, arrival markers, your personal unlock and associated saved readings/orders/generation records from the active Gwiin database. Both people lose that pair’s saved readings and score. Your friends’ own profiles and previously earned personal-reading unlocks stay.

It does not delete your Google account, downloaded images, screenshots or copies held by others. Shared rate-limit records, provider logs, backups and external payment records are not erased by this button. It cannot recall a request already sent to an external provider. Backup expiry and deletion-safe restore procedures need verification before launch.

You can sign out without deleting the puzzle. For access, correction or deletion requests, contact we.are@walkabout.co.kr. Do not include passwords, identity documents or full birth details in your first message. We may need to confirm account ownership before acting. Editing an existing birthday is not currently self-service; adding a city does not silently recalculate an existing score.

Beta terms — draft

Gwiin is a Korean saju-inspired cultural reflection and friendship puzzle. Readings and scores are not scientific assessments, predictions, professional advice, measures of someone’s worth or guarantees of a helpful relationship. A 90+ “click” is a product interaction, not proof of destiny.

Use your own birth information and an alias you are comfortable sharing. Invite friends to enter their own information. Do not impersonate others, harass people, scrape private data, misuse invitations or attempt to bypass access controls.

You must be at least 18 to create a puzzle or join a friend. Use your own accurate birth date. The server checks eligibility before creating a profile or connection, including through an invitation. Eligibility uses the current UTC date; a February 29 birthday reaches the age threshold on March 1 in a non-leap year. This is a product access rule, not verified identity or a legal determination of adulthood.

Rejected underage signup details are not saved as a profile or sent to an analytics or AI service by the application. Basic hosting/security request records may still exist. Existing underage accounts cannot make new friend connections, and their invitation links are unavailable. They can still access account deletion and contact support. Existing records are not automatically erased by this change; report an underage account to the contact below so its handling can be reviewed. There is no parental-consent registration option.

The current beta has no new paid checkout. School verification, stranger discovery and messaging are not live features. Any future paid offering requires separate pricing, processing, refund and recovery terms before it is enabled.

Features can be unavailable during testing. Existing pair scores are saved by version; new connections can use a newer formula. No particular number of matches is promised. Nothing in this draft is intended to remove mandatory consumer rights. Final operator details, governing-law and dispute provisions require review before these terms become effective.

Contact

Service

Gwiin

Operator

워크어바웃 — South Korean sole proprietorship

Support & privacy requests

we.are@walkabout.co.kr

Designated privacy contact

Pending confirmation before public launch

The proprietor handles privacy inquiries directly and has confirmed that this inbox receives messages and can send replies. Self-service deletion is available in account settings. The designated contact’s public details and the full privacy-request handling process still require launch review.

Changes to this notice

This is an internal draft, not an effective policy. Before launch we must set the effective date and a user-visible notification process for material changes; this page alone does not implement such notifications.