Privacy Policy — Android

This policy covers the Android version of Gwansang distributed on Google Play. The iOS version is a separate build with a separate policy — see the Gwansang Privacy Policy for iOS.

Your face photo never leaves your phone. The whole reading — finding the face, measuring its proportions, and writing the result — runs on the device. Gwansang has no account and no server of ours that a picture is sent to. The only information that leaves the device is the pseudonymous usage analytics described below, which never contains an image or a measurement.

You either take a picture with the camera or pick one through Android's system photo picker, which runs in a separate process and hands the app only the one picture you chose — so Gwansang declares no photo, media, or storage permission.

The picture is then analysed by Google ML Kit's on-device face detection, which is bundled into the app and runs locally. This is face detection, not face recognition: it locates a face and its landmarks in order to measure proportions. It does not build a faceprint, does not identify who you are, and cannot match you against any other photo or database.

• The photo is not uploaded anywhere — the app makes no network request that carries it.
• The photo is not saved to a gallery or database of ours, and is not kept after the reading is drawn unless you save the result yourself.
• The measurements taken from the face are used to compose the reading on the device and are not transmitted.

To understand how the app is used and to improve it, Gwansang sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. This is the complete list of what it receives:

• The app identifier, the platform, and the app version and build number.
• An install identifier — a random value the app generates on first launch. It is not derived from your device, your Google account, or any advertising identifier, and reinstalling the app produces a new one.
• A session identifier, so one run of the app can be told apart from the next.
• Screen names, and how long each screen was open.
• Feature and purchase-funnel events: that a reading was run, that a paywall was shown and what opened it, and whether a purchase succeeded, was cancelled, or failed — with the product identifier, such as a ticket pack.
• The UTC time of each event, plus your time-zone offset so local time can be reconstructed.
• Device information: operating system and version, screen size, and locale. The device model is not collected.
• A country, worked out by the receiving server from the connection itself — the app never sends it, and it is country-level only.

The service does not store your IP address. It is read at the edge only to derive the country and is then discarded. It collects no advertising identifier, no precise location, and no personal identifier such as a name, email address, or phone number. Your photo, the landmarks found in it, and the reading it produced are never part of an analytics event.

Gwansang does not collect the Android Advertising ID. Both advertising-ID permissions (com.google.android.gms.permission.AD_ID and android.permission.ACCESS_ADSERVICES_AD_ID) are explicitly removed from the app's manifest, so they are absent from the published build.

Readings are paid for with tickets, sold in packs as one-time purchases processed by Google Play Billing. Pentarab does not receive or store your payment card details, your Google account details, or your billing address.

Your ticket balance is held on your device. There is no receipt-verification server of ours: the app records which purchases it has already credited so that the same one is never counted twice, and that record stays on the phone.

Gwansang requests the camera permission, and only when you choose to take a new picture rather than import one. It requests internet access, used for nothing but the analytics events above. It does not access your microphone, files, contacts, calendar, or location.

Gwansang is a traditional-physiognomy entertainment app. Its readings are not advice of any kind — medical, psychological, financial, or otherwise — and no health or biometric assessment is made or stored.

Gwansang is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

If this policy changes, the revised version will be posted on this page with a new date at the top.

Questions about this policy? Email us: