Privacy Policy

1. Who we are

Saju Trip ("we", "us") provides a Korea itinerary planner based on your Korean Destiny Type. Saju Trip is operated by X-ON Inc. (주식회사 엑스온), 4F, 49 Hakdong-ro 20-gil, Gangnam-gu, Seoul, Republic of Korea. CEO: Kim Ho. Business registration number: 367-81-03966. Mail-order business registration: 2026-서울강남-03166. Phone: +82-70-4578-8645. Email: contact@x-on.kr. We are the controller of the personal data described in this policy.

2. What stays on your device

Your date of birth, time of birth and birth city are processed entirely in your browser. The calculation runs on your device and the result is stored in your browser's session storage until you close the tab. We designed the service so that this data cannot reach our servers: our server APIs reject requests containing dates of birth.

If you add Saju Trip to your home screen or open an itinerary, your browser may keep a copy of pages you opened (such as your itinerary) in its cache so they open without a connection. This copy stays on your device; clearing your browser data removes it.

3. What we collect and why

We collect the minimum needed to build and show your itinerary:

• Result codes — your Day Master (one of ten) and Boost Element (one of five), plus your language. Purpose: generating your itinerary and share card.
• Trip inputs — arrival and departure dates (or a sample range if unknown), travel styles and pace. Purpose: choosing places and the number of stops per day.
• Share and trip codes — random 10-character codes for links you create. Purpose: opening a shared card or itinerary again. A travel buddy match is built from two of these result codes only — each person enters their own birthday on their own device.
• Email address — only if you sign in to save trips, with an email link or with Google. Purpose: sending your sign-in link, listing your saved trips and, unless you turn them off, trip emails (one 7 days before your trip and one each morning during it).
• Coupon redemptions — the trip code, coupon, time and, if the store enters it, the amount. Purpose: honouring one redemption per trip and settling with partner stores.
• Usage events — page views and taps such as "itinerary generated", with your language, country (from the request, not stored as an IP address), and a visitor hash that changes every day and cannot be reversed. If you arrive through a campaign link or another website, we note that channel name (for example "tiktok" or "share") in your browser tab until you close it and attach it to these events. Purpose: understanding how the service is used and which channels work. No cookies are used for this.

4. Cookies

We use only strictly necessary cookies. When you sign in with an email link or with Google, a session cookie keeps you signed in. We do not use analytics cookies, advertising cookies or third-party trackers. You may see a short notice about this if you visit from the EU, EEA, UK or Switzerland.

5. Who else sees your data

We use a small number of service providers to run the service:

• Hosting and database (Vercel; Supabase, Seoul region) — store result codes, trips, events and account emails on our behalf.
• Email delivery (Resend) — sends your sign-in link and trip emails.
• Google — only if you choose "Continue with Google": Google confirms who you are and shares your email address with us. We do not receive your contacts, files or other Google data.
• Booking partners (for example Viator, Klook, KKday or Creatrip) — when you tap "Book", you leave Saju Trip and the partner receives your visit with a reference that identifies the trip code, not you. Some links are affiliate links; we may earn a commission at no extra cost to you.
• Partner stores — when a store staff member confirms your coupon, they see the coupon and the trip code only.

6. How long we keep it

• Share cards: one year. Itineraries: until 30 days after the trip end date (at least 30 days after creation). Expired items are deleted by a daily clean-up job.
• Saved trips: up to one year after you save them, or until you remove them or delete your account. Deleting your account removes your saved trips.
• Usage events: kept in aggregate form; the daily visitor hash cannot be linked back to you after the day ends.
• Coupon redemptions: kept for settlement with partner stores and for legal record-keeping periods.

7. Your rights

You can open, download and delete what we hold. From "My trips" you can download your data as a file, remove saved trips, turn trip emails off or delete your whole account. Every trip email also has a one-click unsubscribe link. If you are in the EU, EEA, UK or Switzerland you also have the rights to access, rectify, restrict, port and object under the GDPR / UK GDPR, and to complain to your supervisory authority. For any privacy request or question, email contact@x-on.kr. Our privacy officer is Kim Ho (CEO), reachable at the same address. We reply within 10 days. In Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr).

8. Children

Saju Trip is not directed at children under 16. We do not knowingly collect personal data from them.

9. International transfers

Our servers are in Seoul, Republic of Korea, and our hosting provider may process requests in other regions. Where required, we rely on the safeguards available under applicable law for such transfers.

10. Changes

We will post any changes on this page with a new date. Significant changes will be announced in the service.