Gachi Match ("Service") is committed to protecting user privacy in accordance with the Personal Information Protection Act (PIPA) of Korea. This Privacy Policy explains how we collect, use, and safeguard your personal information.
1. Personal Information Collected and Collection Methods
The Service collects personal information in stages according to the level of service provided.
Stage 1: Values Type Report (upon taking the survey)
- Collected: Responses to 30 values-based survey questions (1–5 scale)
- Purpose: To analyze values type and generate/provide a report
- Consent timing: Before starting the survey
Stage 2: Matching Service (upon opting into matching)
- Collected: Nickname, gender, preferred match gender, age range, country of residence, city of residence, Instagram ID
- Purpose: Values-based matching, delivering match results, and, with prior consent, sharing nickname, Instagram ID, values type information, and match result information with matched partner
- Consent timing: Upon choosing to participate in matching (18+ only)
Collection Method
- Directly entered by users on the website (gachimatch.gnpg.ai)
2. Purpose of Collection and Use
| Stage | Purpose |
|---|
| Stage 1 (Report) | Generate and provide values type report; statistical analysis for service improvement (de-identified) |
| Stage 2 (Matching) | Provide values-based matching service; deliver match results; with prior consent, share nickname, Instagram ID, values type information, and match result information with matched partner |
3. Retention Period
- Personal data is retained for 6 months from collection, then automatically destroyed.
- Upon user request, data is destroyed within 7 days.
- If a user no longer wishes to remain in the matching queue after being matched, data is destroyed immediately upon request.
4. Disclosure to Third Parties
- When a match is made, the following information is shared with the matched partner only with the user's prior consent: nickname, Instagram ID, values type information (type name and type code), and match result information (match score, compatibility summary, and conversation starter suggestion).
- No other personal information is disclosed to third parties.
- Exception: Disclosure may be required by applicable law.
5. Data Processing Delegation
The Service delegates data processing to the following third parties:
| Service Provider | Delegated Task | Applicable Stage |
|---|
| Supabase Inc. | Database hosting and storage | Stages 1 & 2 |
| Vercel Inc. | Website hosting | Stages 1 & 2 |
| Anthropic PBC | Values type report generation (AI analysis) | Stage 1 |
6. Rights of Data Subjects
Users may exercise the following rights:
- Request access to personal information
- Request correction or deletion of personal information
- Request cessation of data processing
To exercise these rights, please email us at the address below. Requests are processed within 7 days.
7. Security Measures
- Database access restrictions (Supabase Row Level Security)
- Encryption in transit (HTTPS/TLS)
- Two-factor authentication for administrator accounts
8. Automatic Data Collection Devices
- The Service may use Google Analytics and Vercel Analytics for website usage statistics.
- These are anonymous, non-identifying analytics and do not use cookies.
9. International Data Transfer
- Data is stored and processed using cloud services (Supabase, Vercel) located in the United States.
- User data may be stored on US servers and is protected according to each provider's security standards.
10. Data Protection Officer
Email: gachimatch.team@gmail.com
11. Changes to This Policy
This policy is effective from the date stated above. Any changes will be announced on the website.