Privacy Policy
This policy explains what personal information Ajarlight (at ajarlight.com) collects, why, who we share it with, and the choices you have. Ajarlight is run by CHUN JIYOUN, an individual based in the Republic of Korea ("we", "us"). CHUN JIYOUN is also our privacy officer. Contact: support@ajarlight.com.
The short version
- You can get a free reading without an account. We do not ask for your name.
- The question you type is sent to an AI provider to write your reading. For free readings, we do not store your question or your reading: they are processed in memory and then discarded.
- We ask for your email only if you buy a reading, so you can sign in later.
- Our payment partner, Dodo Payments, handles your card. We never see your card number.
- We do not sell your personal information, and we do not use it for targeted advertising.
- Your question can reveal health information. See our separate Consumer Health Data Privacy Policy at ajarlight.com/health-data for how we handle it (this applies to everyone, and gives extra rights to Washington State residents).
1. What we collect and why
| Information | When | Why we use it |
|---|---|---|
| Your question, the topic you pick, and the cards drawn | Every reading | To write your reading. For free readings, not stored (see section 4) |
| The reading text | Every reading | To show it to you. For free readings, not stored; for paid readings, saved so you can see it again later |
| IP address and a device identifier (stored only in scrambled, "hashed" form, made with a secret key that we change every day) | Free readings | To apply the free-reading limits and prevent abuse |
| Country of your connection (shown to us by Cloudflare, based on your IP address; we do not store it) | Every visit | To apply where the Service is available (see our Terms) |
| Email address | Only if you buy | To send your sign-in link, connect your purchases, and reply to you |
| Order details from Dodo Payments: order number, product, price, country, email | Only if you buy | To give you the readings you paid for and handle refunds |
| Daily usage counts: page visits, readings started, readings completed, pricing page views, and (once purchases and sharing are available) purchases and share-button clicks | When you use the site | To count how the site is used. These are overall daily totals counted by our own server. They are not linked to you, and they contain no question, email or IP address |
| Messages you send us | If you email us | To reply to you |
About your questions. People often ask about relationships, work, health or feelings, so a question may reveal sensitive details about you. We use your question only to write your reading and, if it mentions self-harm or similar topics, to show crisis support contacts instead of a reading. This check is automatic. We do not contact anyone on your behalf. Please do not include other people's names, contact details or health information in your questions.
Share images show the cards and a short line from the reading. They never include your question.
We do not collect your full card number, and we do not knowingly collect information from anyone under 18.
2. Who we share it with
We share information only with service providers that help us run Ajarlight, and only as needed for the purposes above.
| Recipient | What they receive | Why | Where |
|---|---|---|---|
| Dodo Payments (Merchant of Record) | Your payment and order details, which you give to Dodo at checkout | To take payment, handle tax, issue receipts and process refunds. Dodo also handles this information under its own privacy policy | United States and other countries where Dodo operates |
| AI provider (currently Anthropic, PBC) | Your question, topic and drawn cards | To write your reading | United States |
| Cloudflare, Inc. (website hosting) | All site traffic, including IP address | To deliver the website securely | United States and Cloudflare's global network |
| Cloudflare, Inc. (database, Cloudflare D1) | Hashed identifiers, purchased readings, email, order details | To store your account and readings | United States |
| Our email delivery provider | Your email address and the sign-in link | To send sign-in links and replies | United States |
Under its commercial terms, our AI provider does not use the questions we send to train its AI models, and it deletes them within 30 days unless longer storage is needed for safety review or legal reasons.
We may also disclose information if the law requires it, or to protect the safety of a person. We do not sell your personal information or "share" it for cross-context targeted advertising, and we do not place advertising trackers on the site. If this ever changes, we will update this policy first and give you a way to opt out.
3. Transfers outside your country
We are based in Korea, and our service providers process information mainly in the United States. So your information is transferred across borders: it is sent over encrypted internet connections at the moment you use the Service, for the purposes and retention periods listed in this policy. These transfers are necessary to provide the Service you ask for. If you do not want your information transferred, please do not use the Service. Without these transfers, we cannot create readings or process purchases. We choose providers that protect personal information with security measures at least as strong as ours.
4. How long we keep it
| Information | How long |
|---|---|
| Free reading: the question you typed and the reading text | Not stored: processed in memory to create your reading, then discarded. (Our AI provider's own handling is described in section 2.) |
| Hashed IP address and device identifier | Deleted within 2 days; automatic database recovery copies expire within 7 days after that |
| Paid readings (your questions and the reading text), email | Until you delete them, ask us to delete them, or 2 years after your last sign-in, unless you still have unused readings. Each paid reading has a delete button in your account, so you can remove any reading yourself at any time |
| Order details | Until you ask us to delete them, or 2 years after your last sign-in (unless you still have unused readings), except for the tax records below |
| Records we must keep for tax or legal reasons (for example, order and refund records) | As long as the law requires |
| Daily usage counts | Up to 26 months, as overall numbers |
| Emails to support | Up to 2 years |
5. Cookies and similar tools
We use only what the site needs to work: a sign-in cookie for paying customers, and local storage to apply the free-reading limit. Local storage holds a random device identifier and the date of your last free reading (to tell you before you type). We count site usage with our own server (the daily usage counts listed above), not with an outside analytics service, and we use no advertising cookies. We do not place advertising trackers on the pages where you type a question or read your result.
6. Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it;
- delete it (we may keep records the law requires, such as order records);
- stop using it for a purpose you previously agreed to.
Email support@ajarlight.com from the address linked to your purchase, or tell us the date of your free reading. We may ask for details to confirm it is you. We aim to reply within 3 business days to confirm we received your request, and we will complete it within 30 days. We will not treat you differently for using these rights. Washington State residents have additional rights over health data, described in our Consumer Health Data Privacy Policy.
You can also complain to a privacy regulator. In Canada, contact the Office of the Privacy Commissioner of Canada (or your provincial regulator). In Australia, contact the Office of the Australian Information Commissioner. In the United States, contact your state attorney general or privacy agency. Please contact us first so we can try to fix the problem.
7. Security
We use encrypted connections (HTTPS), store IP addresses and device identifiers only in hashed form, limit who can access data, and do not store payment card numbers. No system is perfectly secure. If a breach puts you at real risk, we will notify you and the regulators as the law requires.
8. Age limit
The Service is for adults 18 and over. Free readings are not available in the EEA, the UK and its Crown Dependencies, Gibraltar, or Switzerland, and paid readings are available only in the United States, Canada and Australia (see our Terms). If we learn that we have collected information from someone under 18, we will delete it. If you believe this has happened, email support@ajarlight.com.
9. Changes to this policy
We will post any changes on this page with a new effective date. If a change is significant, we will show a notice on the site or email paying customers before it takes effect.
10. Contact
Privacy officer: CHUN JIYOUN
Email: support@ajarlight.com
Website: ajarlight.com
Consumer Health Data Privacy Policy: ajarlight.com/health-data