Draft privacy notice. Update controller identity, retention periods, and subprocessors before launch. Not legal advice.

Privacy Policy

Effective date: August 3, 2026 · energyway.me

1. Who we are

EnergyWay (“we”) operates energyway.me. Contact: [email protected]

2. Data we collect

  • Pro lookup credentials: a user-chosen lookup ID (4–20 letters or numbers) and a 6-digit PIN, used only to find and reopen your reports. We store one-way hashes of the ID and PIN—not the plaintext values.
  • Access token: a random link token (stored as a hash) lets you reopen the report. Keep the link; looking up reports requires the correct ID + PIN (or the saved link).
  • Report content: AI text using the honorific “회원님” (your real name is applied only in your browser if you still have it saved locally).
  • Technical: IP address, browser type, request logs, task IDs needed to operate the service.
  • On your device only: birth inputs, display name, and free chart preview. Raw birth date/time and civil name are not kept in our database.

3. Why we process data

  • Provide AI reports you request
  • Let you re-open the same Pro report and delete it from Home when you choose
  • Prevent abuse and operate the service securely
  • Comply with legal obligations

Legal bases (where GDPR applies) may include contract performance, legitimate interests (security/ops), and consent where required.

4. AI processing

For Pro reports, derived chart data (명식/pillars, five-element counts, luck cycles, etc.) may be sent to our AI provider(s). Civil name and raw birth date/time are stripped before the AI call. The model is instructed to address you only as “회원님”.

5. Sharing

We share data with infrastructure and AI vendors only as needed to run the service (e.g., hosting, LLM API). We do not sell personal data.

6. Retention

Pro reports, login-ID hash, PIN hash, and access-token hash are kept until you delete the report from the Home lookup list (or until we remove them for security, legal, or operational reasons). We do not store plaintext lookup ID/PIN or raw birth date/time. If you lose both the access link and your ID/PIN, we cannot recover the report. You may also request deletion at [email protected] (provide the task link if you have it).

7. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection. Contact [email protected]. EU/UK users may also lodge a complaint with a supervisory authority.

8. Children

The service is not directed to children under 16. If we learn we collected such data inappropriately, we will delete it.

9. International transfers

Data may be processed in countries other than yours (including where our hosts/AI providers operate). We use reasonable contractual and technical safeguards.

10. Changes

We may update this Policy and will revise the effective date above.