Privacy, in plain words.

What we use and why

If you manually add an adult friend, confirm that you have their permission to save their name and birth details. These records are private to your account and are used to calculate your comparison. You can edit or delete them from Manage connection. Adding a friend this way does not create an account for them or send them a notification. These records are stored with our hosting and database providers until you delete them or your account; they are not sent to analytics or AI providers.

• Your profile: an alias and birthday; birth time and birth city if you choose to provide them. We use these to calculate your piece, readings and friend comparisons. City records include coordinates and a time zone; we do not request your device’s location.
• Gender for timing calculations: new profiles require a Female or Male choice. We store it privately until you delete your profile and use it to select the traditional longer-cycle calculation convention. It does not change personality readings or compatibility scores and is not shared with friends, AI providers or analytics. Older profiles without a saved choice can choose a convention inside the cycle calculator; that request-only choice is not saved.
• Calculated results: chart data and calculation metadata where available, element/type, saved pair scores, directional readings and score versions.
• Connections: invitation identifiers, joined friends, seen-arrival markers and personal-reading unlocks. These keep both people’s connection lists in sync.
• Google sign-in: a Google account identifier and session credentials. The current integration requests OpenID only; i-Elements does not request or save your Google email, profile photo, contacts or password. Google handles its own sign-in processing.
• Service security: request-limit counters keyed by a hashed IP address when trusted-proxy mode is enabled, otherwise a shared local key. Hashing is not a guarantee of anonymity. Hosting providers may receive IP addresses and request metadata.
• Support and privacy requests: if you email us, we receive your email address, message and any attachments you send. We use them to answer you, verify a request when needed and keep a record of its handling. Please do not send passwords, identity documents or someone else’s birth details.

Before a saved profile is created, the form separately asks you to confirm that you are 18 or older, accept the beta terms, and agree to save your alias and birth details for the profile, plus your gender choice for timing calculations. The service records each acceptance with the notice version, language and server time, until the associated account is deleted. You can decline and no saved profile will be created. You can leave birth time and city blank. If you enter a birth time, also choose the birth city so we can adjust it. Legal grounds for each operation and any separate international-transfer consent must be finalized before public launch.

What other people see

Anyone with your invitation link can see your alias and piece type. A connected friend can see your alias, piece, shared score and that friend’s reading about the pair. Friends do not receive your birthday, birth time, birth city, raw chart or full friends list through the board API.

An invitation is a shareable link, not an identity check. Only share it where you are comfortable sharing your alias. Images you export or other people copy can remain outside i-Elements.

Who receives information

We receive information from you, from Google when you choose Google sign-in, from your browser’s requests and optional analytics, and from your activity with invited friends. We generate chart, profile and relationship results from those inputs. We use the following categories of recipients:

Hosting and database services — Vercel and Neon

Process stored profile and account information, connections, results and acceptance records to operate i-Elements. Hosting services also receive network and request metadata.

Authentication and font delivery — Google

Processes sign-in when you choose it. Font requests from the main app send network information such as your IP address to Google even if optional analytics are off.

Optional product analytics — Mixpanel

Receives a random browser identifier, event identifiers, timestamps, selected screen/action categories and allowlisted campus-flyer campaign labels unless you turn analytics off or your browser sends a privacy signal. Your alias, birth details, gender, Google identifier and reading content are excluded.

People you invite or connect with

Receive the alias, piece and shared results described above. They do not receive your birth details or gender choice.

Support email service

Processes messages you choose to send to our contact address so we can receive and answer your request.

Provider notices: Vercel, Neon / Databricks, Google, and Mixpanel. These explain the providers’ practices and do not replace i-Elements’s responsibility for its use of your information.

The deployment uses Vercel for hosting and Neon for database storage; Google handles optional sign-in. The main app also loads Google Fonts, which causes your browser to contact Google and send network request information. City search uses a server-hosted GeoNames dataset, not a live location-provider request.

Free personal readings, friend scores and the free detailed preview are rule-based: these paths do not call an AI provider. New payments are currently disabled. The code includes a separately gated paid-reading path using Lemon Squeezy (with legacy Stripe payment support) and Google’s Gemini API. That path sends calculated charts for both people, relationship facts and the saved score to Gemini—not raw birthdays, aliases or payment information. Derived charts can still relate to a person; they are not guaranteed anonymous.

Any future activation of payment or AI generation requires a revised notice, appropriate permissions for both people, and provider/retention review. Previously purchased content, if any, is handled separately from a new purchase. Provider processing is not erased simply by deleting a i-Elements account.

Before launch: confirm each recipient’s legal identity/contact, hosting and access countries, transferred fields, purpose, transfer timing/method, retention and applicable transfer basis. This draft does not claim that every provider stores data only in the United States.

i-Elements is operated from South Korea. Your information may be handled there and in countries where our providers operate, including the United States. Privacy protections can differ by country.

Cookies, browser storage and tracking

i-Elements uses the essential gwiin_access cookie to restore access, normally valid for 30 days, and a gwiin_google_flow cookie for a Google sign-in attempt, valid for 10 minutes. Reading-language preference is stored in your browser. Clearing cookies may remove access to an unsaved guest story; signing in with Google supports recovery.

If you submit the creation form before Google sign-in, the alias, birthday, optional birth time/city, gender choice and your form choices are held in this browser's session storage for the sign-in return trip, then read and removed. If browser storage is unavailable, you can enter the details again after sign-in.

Optional analytics — Mixpanel

We use Mixpanel (Gwiin project, US data residency) to understand which features people use, where they stop during profile creation, and which campus flyer campaigns lead to visits and completed stories. This helps us improve the service and evaluate our flyers.

Information sent: a random browser ID, event ID and time; selected screen views and actions such as starting or completing profile creation, viewing readings or friend results, copying or sharing an invitation, and starting sign-in or an available checkout; screen name, direct or invitation entry, payment mode where relevant, and approved campus campaign labels. Events also include technical schema and environment labels to distinguish production from development activity.

Product analytics are on by default. To stop collection, select “Turn off analytics” in Account settings → Analytics privacy settings. Existing opt-outs continue to apply. We do not send birth details, names, Google identities, readings, invitation links, page URLs or referrers. Events pass through our server without forwarding your IP or browser headers; IP-based geolocation is disabled. We do not use autocapture, session replay or advertising tracking. For campus flyers, we also send only the approved campaign labels: Berkeley or Stanford, flyer, and campus_launch. These identify the link used, not your location or school membership. When analytics are active, these labels are kept in this tab’s session storage across reloads and sign-in returns, expiring after 30 minutes without a tracked action. Separately, the first approved campaign observed while analytics are active is saved with the browser analytics ID for the remainder of its 180-day lifetime. It is included in later events and stored once on the corresponding anonymous Mixpanel profile; later campaigns do not overwrite it. This means the first known tagged visit, not necessarily the first-ever visit. Opting out or a browser privacy signal clears the locally saved campaign labels. The browser ID rotates after 180 days. An opt-out stays in effect while its browser storage record remains, until you turn analytics back on. Do Not Track and Global Privacy Control block collection. Change your choice in Account settings → Analytics privacy settings. Declining, signing out or deleting your profile clears the analytics ID and stops collection in this browser. Previously sent Mixpanel events and analytics profiles are not automatically erased by these actions. Vendor retention and the process for historical analytics deletion remain launch-review items; contact us for privacy requests.

Your tracking choice: choose “Turn off analytics” to decline or stop optional analytics. This does not disable your profile. A Global Privacy Control (GPC) or Do Not Track (DNT) signal blocks optional analytics for that browser, including if you previously allowed it. This browser choice is not automatically synchronized to other devices. Essential service requests, Google sign-in and Google Fonts still operate; the signal is not a request to delete past data.

The current app has no advertising pixels or cross-site advertising audience integrations. It does not intentionally enable third parties to track you across other websites for advertising. Google and other infrastructure providers still receive the requests described above under their own practices. You may send a sale/sharing or targeted-advertising opt-out request to we.are@walkabout.kr.

How long information remains

The current active database keeps your profile, connections, saved scores and readings until deletion; there is no automatic inactive-account purge. Whether this retention is appropriate must be reviewed. Google sessions expire after 30 days and expired rows are cleaned during later sign-ins. Login attempts expire after 10 minutes; used attempts are consumed and expired attempts are cleaned during later sign-in starts.

Rate-limit counters expire after their configured window (normally one minute; profile creation uses one hour), and expired rows are removed on a later limiter request. Expiry is not the same as immediate physical deletion. Provider logs, database backups, support records and any legally required transaction retention remain unconfirmed release blockers—not a promise of zero retention.

The account-deletion period includes your alias, birth details, saved gender, Google account link, generated profile, connections, saved results and acceptance records. The 180-day browser analytics ID lifetime is not the retention period for events already held by Mixpanel. An email privacy request creates a separate support record; deleting a profile does not delete that email conversation.

US privacy rights and requests

Depending on your state and whether its law applies to i-Elements, you may have rights to confirm processing; access or obtain a copy of your information; correct or delete it; learn about recipients; opt out of sale, sharing for cross-context behavioral advertising, targeted advertising or certain consequential profiling; and limit certain uses of sensitive information. Some states also provide a right to appeal a denied request. Exceptions and verification requirements vary.

i-Elements’s profile and scores are for cultural entertainment. We do not use them to decide eligibility for employment, housing, credit, insurance, education or healthcare. Providing a gender choice for timing calculations does not authorize unrelated uses.

1. Submit a request: email we.are@walkabout.kr with the request you want to make. You do not need to create a new account. We may ask which state you live in to identify applicable rights.
2. Confirm access when needed: an email address alone does not identify a i-Elements profile because Google sign-in does not supply your email to us. We may ask you to demonstrate access to the existing account or guest session using only information reasonably necessary. Do not email passwords, sign-in codes, access cookies or identity documents. Opting out of optional analytics does not require identity verification.
3. Authorized agents: an agent may contact the same address. Where permitted by applicable law, we may request evidence of authorization and confirmation from the person concerned.
4. Appeal or ask us to reconsider: reply to our decision or email the same address with “Privacy appeal” and your request reference. We will review the decision and explain the outcome. You may also complain to your state attorney general or privacy regulator.

We will handle requests and any extensions within the deadlines of applicable law, explain any refusal or exception, and provide appeal information where required. For example, if the CCPA applies, access, correction and deletion requests must be acknowledged within 10 business days and answered within 45 calendar days of receipt, subject to an allowed extension of up to 45 more days with notice. These are conditional California requirements, not one deadline for every US request.

We will not discriminate against you for exercising rights protected by applicable law. Declining optional analytics does not affect access. Deleting information necessary to maintain a profile also removes that profile and its shared results.

Your choices and deletion

Open the account settings from the sign-in/account button, choose “Delete my data” (or “Delete my birth details” for an invited guest), then type DELETE. The request uses your signed-in or guest session and does not let you nominate another user’s account.

This removes your profile and birth details, Google account link and sessions, pending logins bound to those credentials, friend connections, saved pair scores, arrival markers, your personal unlock and associated saved readings/orders/generation records from the active i-Elements database. Both people lose that pair’s saved readings and score. Your friends’ own profiles and previously earned personal-reading unlocks stay.

It does not delete your Google account, downloaded images, screenshots or copies held by others. Shared rate-limit records, provider logs, backups and external payment records are not erased by this button. It cannot recall a request already sent to an external provider. Backup expiry and deletion-safe restore procedures need verification before launch.

You can sign out without deleting the profile. For access, correction or deletion requests, contact we.are@walkabout.kr. Do not include passwords, identity documents or full birth details in your first message. We may need to confirm account ownership before acting. Editing an existing birthday is not currently self-service; adding a city does not silently recalculate an existing score.

Beta terms — draft

i-Elements is a Korean saju-inspired cultural reflection and friendship experience. Readings and scores are not scientific assessments, predictions, professional advice, measures of someone’s worth or guarantees of a helpful relationship. The fitting-piece moment is a product interaction, not proof of destiny.

Use your own birth information and an alias you are comfortable sharing. Invite friends to enter their own information. Do not impersonate others, harass people, scrape private data, misuse invitations or attempt to bypass access controls.

You must be at least 18 to start a story or join a friend. Use your own accurate birth date. The server checks eligibility before creating a profile or connection, including through an invitation. Eligibility uses the current UTC date; a February 29 birthday reaches the age threshold on March 1 in a non-leap year. This is a product access rule, not verified identity or a legal determination of adulthood.

Rejected underage signup details are not saved as a profile or sent to an analytics or AI service by the application. Basic hosting/security request records may still exist. Existing underage accounts cannot make new friend connections, and their invitation links are unavailable. They can still access account deletion and contact support. Existing records are not automatically erased by this change; report an underage account to the contact below so its handling can be reviewed. There is no parental-consent registration option.

The current beta has no new paid checkout. School verification, stranger discovery and messaging are not live features. Any future paid offering requires separate pricing, processing, refund and recovery terms before it is enabled.

Features can be unavailable during testing. Existing pair scores are saved by version; new connections can use a newer formula. No particular number of matches is promised. Nothing in this draft is intended to remove mandatory consumer rights. Final operator details, governing-law and dispute provisions require review before these terms become effective.

Contact

Service

i-Elements

Operator

Walkabout — South Korean sole proprietorship

Support & privacy requests

we.are@walkabout.kr

Designated privacy contact

Soyeon Kim

The proprietor handles privacy inquiries directly and has confirmed that this inbox receives messages and can send replies. Self-service deletion is available in account settings. The full privacy-request handling process still requires launch review.

Changes to this notice

This version shortens the signup confirmations and places the detailed collection summary in an expandable section. Product analytics now start by default with an opt-out in Analytics privacy settings; existing opt-outs and browser privacy signals remain honored. The signup notice version is gwiin-launch-2026-09-23-v5. Existing acceptance records keep their original version; updating this page does not record new consent for you.

This remains a draft with no effective date. The Privacy updates link in the site footer leads to this section. For future material changes, we will post a prominent notice on the main site before the change takes effect and request additional consent where applicable law requires it. The updated notice will identify its effective date.