Privacy Policy
Effective September 28, 2026
The short version
- Your birthday, the people you pick and every line you write stay on your device. We have no server that receives them.
- No ads, no data sales, no tracking cookies, no analytics today.
- If you buy VIP, PayPal (on the web) or Apple/Google (in the apps) handles the payment. We receive only what we need to switch VIP on.
- Questions or requests: [email protected].
1. Who we are
At My Age is operated by Ailen (애일런), a business based in Seoul, Republic of Korea. This policy covers the website at atmyage.app and the At My Age apps. When we say “we”, we mean Ailen. When we say “the app”, we mean the website and the apps together.
2. What stays on your device
At My Age has no accounts and no sync. Everything you enter is kept in your browser’s storage (or the app’s storage on your phone) and is not sent to us:
- Your birthday, used only to line your age up with theirs.
- The people you have picked and the one currently open.
- Your lines: a date, one line, and an optional second line. Deleted lines sit in “Recently deleted” for 30 days, then disappear.
- Your VIP status and how many extra people you have unlocked.
- A random invite code we generate on your device for your invite link, and the code of the person who invited you, if you arrived through a link.
- Your notification hour, if you turn daily reminders on.
- A display preference (timeline density).
Because this data lives only on your device, we cannot read it, back it up or restore it. If you clear the site’s data, uninstall the app or switch devices, it is gone. If we ever add an optional sync or backup feature, we will ask you first and update this policy.
3. What our servers see
The website is served by Cloudflare. Like any web host, it records standard request logs: your IP address, browser type, the pages and files requested, and the time. We use these logs only to keep the site running and secure. They are kept for a short period and are not combined with anything you enter in the app.
We do not use analytics or advertising tools today. We plan to add cookie-less, aggregate analytics (page and event counts with no personal profiles). When we do, we will name the provider in this section before it goes live.
4. Third parties your browser contacts
| Who | Why | What they receive |
|---|---|---|
| Google Fonts | Loads the two typefaces the app uses | Your IP address and browser details, under Google’s privacy policy |
| Wikimedia Commons | Loads the public-domain or Creative Commons portraits shown for some people | Your IP address. We send no referrer, so Wikimedia does not learn which page you were on |
| Source links | Every entry links to its source (for example Wikipedia) | Only if you tap the link; the site you open has its own policy |
That is the complete list for the free product. Payments add the providers described next.
5. Payments
On the web
VIP is sold through PayPal. You pay on PayPal’s pages, and we never see your card or bank details. From PayPal we receive the transaction or subscription ID, your name and email as registered with PayPal, the amount, and the payment status. We use this to turn VIP on and keep it on, to handle cancellations and refunds, to prevent fraud, and to keep the accounting records the law requires. We keep it for as long as your VIP is active and afterwards for as long as tax and e-commerce laws require (in Korea, generally five years).
In the apps
In the App Store and Google Play versions, once available, purchases are made through Apple or Google under their terms. We receive a purchase receipt and an anonymous app identifier, which we check through RevenueCat to confirm the purchase is valid. We do not receive your card details, and neither Apple nor Google gives us your name for this purpose.
6. Cards and invite links
Cards are images made on your device. Sharing or saving one is your choice. A card shows the person’s name and ages, your line, the At My Age name and, on free cards, your invite code. Your invite link contains that random code and the ID of the person you were viewing. It does not contain your name or birthday. When you share a card through your phone’s share sheet, the app you choose (Messages, Instagram and so on) handles it under its own policy.
7. Notifications
Daily reminders are optional and use your browser’s notification permission. They fire only while the app is open, from your device, at the hour you chose. There is no push server, so nothing about your reminders reaches us. You can turn them off in the app or in your browser settings at any time.
8. Children
At My Age is for people aged 13 and over. It is not directed at children under 13 and we do not knowingly collect personal information from them. Because the app stores its data only on the device, a parent or guardian can remove everything by clearing the site’s data or uninstalling the app. If you believe a child under 13 has made a purchase, contact us and we will cancel and refund it.
9. Your rights and choices
Everything in the app
You can see, change and delete all of it yourself: change your birthday, edit or delete any line, restore or let expire anything in “Recently deleted”, or clear the site’s data to erase everything at once. No request to us is needed, and we could not do it for you in any case.
Payment records
Email us to access, correct or delete the payment information described in section 5. We will answer within 30 days. We may need to keep some records for the legal retention period even after a deletion request, and we will tell you if that applies.
California residents
Under the CCPA/CPRA you have the right to know what personal information we collect, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. We do not sell or share personal information and we do not use it for targeted advertising, so there is nothing to opt out of; we treat Global Privacy Control signals as an opt-out request all the same. To make a request, email us. We will verify it using the email address on the payment record.
Residents of the EEA, the United Kingdom and Switzerland
Our legal bases are: performing our contract with you (payments and VIP), our legitimate interest in keeping the site secure (server logs), and your consent (notifications). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. Because Ailen is in Korea, payment records are processed outside the EEA under the safeguards our payment providers maintain.
Residents of Korea
You have the rights provided by the Personal Information Protection Act, including access, correction, deletion and suspension of processing. Use the contact below.
10. Security
The site is served over HTTPS. Your personal data stays on your device, and payments happen on the payment providers’ own secure pages. The small amount of payment data we hold is kept on access-controlled infrastructure.
11. Changes to this policy
When we change this policy we will post the new version here with a new effective date. If a change matters to you, for example adding analytics or a sync feature, we will also say so inside the app before it takes effect.
12. Contact
Ailen (애일런)
12 Teheran-ro 70-gil, #402-M355, Gangnam-gu, Seoul 06193, Republic of Korea
[email protected]