Ondo (Relationship Thermometer) Privacy Policy
Effective date: October 5, 2026 · Last updated: October 5, 2026 (previous version: July 30, 2026)
Ondo (Relationship Thermometer) (the "Operator") values the personal information of its users in providing its web service (https://ondo.chat) and its Android app "Ondo (Relationship Thermometer)" (package name chat.ondo.app; collectively, the "Service"), and complies with applicable laws and regulations, including the Personal Information Protection Act of Korea and the Act on Promotion of Information and Communications Network Utilization and Information Protection of Korea (which apply to users in Korea), and the EU General Data Protection Regulation (GDPR). This Policy explains what information the Operator processes, for what purposes, and for how long it is retained.
1. Key Principles
- Original conversations are not stored on our servers. Conversations you paste or import are first processed on your device (browser/app); only the minimum compressed excerpts needed for analysis are transmitted temporarily and are discarded immediately afterwards.
- The same applies to screenshots (images). Images exist in server memory only while the conversation text is being extracted; they are discarded immediately upon completion of processing and are never written to disk.
- Only key excerpts compressed to a fraction of the original (typically 5–10%) are sent to the analysis server. The compression threshold is also enforced and verified on the server, and any request exceeding it is automatically rejected.
- There is no account registration or login. We collect an email address only if you yourself request a re-measurement reminder.
2. Information Processed and Purposes
| Item | Purpose | Retention Period |
|---|---|---|
| Original conversations and screenshot images | Generating analysis results (transient processing) | Destroyed immediately upon completion of processing — not stored |
| Analysis result figures: temperature score, relationship type (mode), language used, messenger type, number of messages (not content), compression ratio | Anonymous statistics, calculation of comparative indicators such as "top X%", quality improvement | For as long as the Service is operated (anonymous information that cannot identify individuals) |
| Analysis accuracy feedback (👍/👎) | Improving analysis quality | For as long as the Service is operated (anonymous) |
| If you choose "Share result": share code, temperature score, headline, one-line summary, AI comment, relationship type, language | Providing the share link (ondo.chat/r/code) | For as long as the Service is operated. If you wish to have it deleted, please send us the share link at the contact below. |
| When using a compatibility test invitation link: invitation code, relationship type, temperature scores and headlines of both users | Providing the feature that compares the two results | Invitations not joined by the other party are automatically deleted after 90 days; completed comparisons are retained for as long as the Service is operated |
| When requesting a re-measurement reminder: email address, language, relationship type, scheduled reminder date, unsubscribe token | Sending a single re-measurement reminder email on the requested date | Deleted within 30 days after sending; deleted immediately upon unsubscribing (unsent requests are retained for up to 1 year) |
| Visit statistics: pages visited, referrer domain only (not the full URL), UTM parameters, browser language | Usage statistics, analysis of acquisition channels | Automatically deleted after 180 days |
| Usage-step statistics (how far a user progressed), A/B test group | Improving usability | Automatically deleted after 180 days (no personal identifiers) |
| Error logs (error messages, paths where errors occurred) | Responding to service failures | Automatically deleted after 90 days (no conversation content included) |
| IP address | Preventing abuse, such as blocking excessive requests (rate limiting) | Expires from memory within at most 1 hour; not stored in any database |
2-1. Information We Do Not Process
- Original conversation text, real names or contact details of your conversation partners, and personal information of third parties appearing in conversations
- Account information (such as passwords), location information, and full access to contacts or photo libraries — the app reads only the files and images you yourself select.
2-2. Information Stored Only on Your Device
Summaries of recent analysis results (score and headline), display theme, A/B group and similar data are stored only in the browser storage (localStorage) of your device and are not transmitted to our servers. They are erased when you delete your browser/app data.
3. Outsourcing of Processing and International Transfers
To provide the Service, we outsource processing to the companies listed below, some of which process information outside Korea (e.g., in the United States). Each company processes information only within the scope of the outsourced purpose.
| Processor | Outsourced Task | Items Transferred |
|---|---|---|
| Anthropic, PBC (United States) | AI analysis (Claude API) | Compressed key excerpts of conversations, screenshot images — API data is not used for model training and is deleted after short-term retention in accordance with the provider's policy |
| Railway Corp. (United States) | Backend server and database hosting | The stored items described in Section 2 above |
| Cloudflare, Inc. (United States) | Website hosting and security (CDN) | Access request information (IP address, etc.) |
| AgentMail (United States) | Sending re-measurement reminder emails | Email address, reminder content |
| Google LLC (United States) | Serving advertisements (AdSense) — only when advertising is enabled | Cookies, advertising identifiers and other information in accordance with Google's policies |
Time of transfer: transmitted over the network at the time you use the Service · Method of transfer: encrypted (HTTPS) transmission. If you do not wish your information to be transferred abroad, you may stop using the Service; in that case, certain features such as re-measurement reminders will be unavailable.
Apart from the outsourcing described above, the Operator does not sell or provide your information to third parties (except for requests made in accordance with law).
4. Cookies and Advertising
The Operator itself does not track users through cookies or browser fingerprinting. However, when advertising is enabled, advertising providers such as Google may use cookies to deliver personalized ads. You can turn off personalized ads in Google Ad Settings, and users in the EU, the UK and similar regions may make their choice through a consent screen. External sponsorship (donation) links are not displayed within the Android app.
5. Notice Regarding Third-Party (Conversation Partner) Information — Please Read Carefully
- One-on-one conversation analysis: Uploaded conversations include the other party's messages. The uploading user is responsible for obtaining consent to use the other party's messages for analysis.
- Group chat analysis: Please be aware that the other participants have not consented to this analysis. To reduce risk, role analysis does not operate for conversations with fewer than 3 participants, role descriptions that could be read negatively are not used, and only statistical figures and role labels — rather than original messages — are transmitted.
- "Child" mode: Conversations with minors require stricter protection. The results are not a diagnosis, and if concerning patterns are observed, we recommend consulting a professional.
- Share and invitation links: Anyone who knows the link can view the results. Share only with people you trust. Shared results may be indexed by search engines; you can choose to exclude them from indexing when sharing.
6. Children's Personal Information
The Service is not directed at children under 14 years old, and we do not knowingly collect personal information (such as email addresses) from children under 14 years old. If we become aware of such collection, we will delete the information immediately.
7. Your Rights and How to Exercise Them
You (or your legal representative, if you are under 14 years old) may at any time request access to, correction of, deletion of, or suspension of processing of your personal information by contacting us at the address below, and the Operator will act without delay (within 10 days at the latest). Users in the EU/EEA and the UK have the right to data portability, the right to object, and the right to lodge a complaint with a supervisory authority under the GDPR, and users in California, USA, have rights under the CCPA/CPRA. The Operator does not sell personal information.
- Cancelling re-measurement reminders: clicking the "Unsubscribe" link at the bottom of the email deletes your information immediately.
- Deleting shared results: send us the share link address by email and we will delete it.
- Because anonymous statistics cannot identify individuals, it may be technically impossible to locate and delete a specific user's data.
8. Security Measures
- HTTPS encryption for all communications, database access control, authentication and access-attempt limits for administrator functions
- Minimal collection of personal information; automatic deletion of data whose retention period has expired (run daily)
- A design that does not store original conversations or images; conversation content is prohibited from being recorded in error logs
9. Privacy Officer and Contact
| Category | Details |
|---|---|
| Privacy Officer | Privacy Manager, Ondo Operations Team |
| [email protected] |
For users in Korea, reports of and consultations on personal information infringement may also be directed to the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without area code) and the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
10. Changes to This Policy
This Policy may be amended in accordance with changes in laws, policies or the Service. Material changes will be announced within the Service 7 days before they take effect (30 days before, for changes unfavorable to users).