Privacy Policy

The Someday Post (“we,” “us,” or “our”) operates the website somedaypost.com and provides an AI-powered future storytelling service. We are based in the Republic of Korea.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use The Someday Post. By using our service, you agree to the practices described in this policy.

We collect the following categories of personal information:

• Account Information — Your email address, display name or nickname, and gender, collected when you create an account or sign in with Google OAuth.
• Google OAuth Information — When you sign in with Google, we receive your Google account email address and profile name. We do not receive your Google password.
• Interview Content — The text you enter during AI interviews, including your answers, goals, and the stories you share about your future self. This content is used to generate your personalized article.
• Uploaded Photos — Photos you upload during the interview process (up to 2 per article). These are stored on Cloudflare R2 and are permanently deleted when you delete the associated article or your account.
• Generated Articles — The AI-generated motivational stories created from your interview, stored in your account.
• Guest Name — If you use The Someday Post without signing in, we collect the name you enter during the interview. This name is used only for the interview session and article generation.
• Contact Messages — If you contact us through our Contact page, we collect your name, email address, and message content to respond to your inquiry.
• Payment Information — If you purchase story credits, payment is processed by our third-party payment provider (Lemon Squeezy, acting as Merchant of Record). We do not store your credit card details directly.
• Usage Data — Basic usage information such as pages visited, article view counts, and service interactions, used to improve the service.

When you access The Someday Post, we may automatically collect certain technical information:

• Device Information — Browser type, operating system, and device type
• Network Information — IP address and approximate geographic location (country/region level only, via Cloudflare)
• Usage Information — Pages visited, features used, and article view counts

This information is collected through standard web server logs, Cloudflare analytics, and Google Analytics (GA4). Google Analytics is used to understand aggregate usage patterns — such as which pages are visited and where users drop off in the interview flow — and is not used to build advertising profiles or track you across other websites.

We use the information we collect for the following purposes:

• To provide, operate, and improve The Someday Post service
• To generate personalized AI-powered motivational stories based on your interview
• To manage your account and authenticate your identity
• To process payments and manage your subscription
• To send service-related communications, including your Future Bridge encouragement emails (if enabled)
• To detect and prevent abuse, spam, and policy violations
• To comply with legal obligations

We do not use your interview content or personal stories for AI model training without your explicit consent.

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Consent — When you create an account, submit interview content, or upload photos, you consent to the processing of that data for the purpose of generating your article.
• Contract Performance — Processing necessary to provide The Someday Post service, including account management, article generation, and subscription handling.
• Legitimate Interests — Processing for fraud prevention, service security, and service improvement, where these interests are not overridden by your rights.
• Legal Obligation — Processing required to comply with applicable laws and regulations.

You may withdraw your consent at any time by deleting your account or contacting us at privacy@myfuturemirror.app.

We do not sell your personal information. We share your information only in the following limited circumstances:

• Service Providers — We share data with trusted third-party providers who help us operate the service, including Supabase (database and authentication), Cloudflare (infrastructure, image storage, and fallback AI image generation), Anthropic (Claude, AI interview and article generation), OpenAI (fallback AI text generation, photo analysis, and content moderation), Fal.ai (AI image generation), Resend (email delivery), Lemon Squeezy (payments), and Google (Google Analytics, aggregate usage analytics). These providers are contractually bound to protect your data.
• Public Articles — If you choose to make your article public, it will be visible to all visitors of The Someday Post. Public articles are anonymized before publication — your real name and identifying details are replaced with partial anonymizations.
• Shared Links — When you share an article — by link or to social media — the shared version is the anonymized one. Your real name, company names, and locations are replaced before the article leaves your account. Anyone with the link can view that anonymized version. Only you, signed in to your own account, can see the original.
• Legal Requirements — We may disclose your information if required to do so by law or in response to valid legal requests.

The Someday Post is operated from the Republic of Korea. Your data may be transferred to and processed in countries outside your country of residence, including the United States, through our service providers:

• Cloudflare (USA) — Infrastructure, content delivery, image storage (R2), and fallback AI image generation
• Anthropic (USA) — AI text generation for interviews and articles (Claude — our primary model)
• OpenAI (USA) — Fallback AI text generation, photo analysis, and content moderation
• Fal.ai (USA) — AI image generation from the scene description derived from your interview
• Supabase (USA) — Database hosting and user authentication
• Resend (USA) — Transactional email delivery
• Lemon Squeezy (USA) — Payment processing (Merchant of Record)

These providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable.

For EEA users: by using The Someday Post, you acknowledge that your data will be transferred to and processed in countries that may not provide the same level of data protection as your home country.

We retain your personal information for as long as your account is active or as needed to provide the service.

• Account Data — Retained until you delete your account
• Interview Content & Articles — Retained until you delete the article or your account
• Uploaded Photos & AI Images — Deleted from our storage (Cloudflare R2) immediately when you delete the associated article or account
• Contact Messages — Retained only for the purpose of responding to your inquiry
• Payment Records — Retained as required by Korean tax law (generally 5 years)

When you delete your account, all your personal data, articles, and images are permanently deleted from our systems. To prevent abuse of our free tier, a non-reversible hash of your email address and your free article usage count are retained for 30 days after account deletion, after which they are automatically purged. This hashed data cannot be used to identify you or recover your email address.

Under Korean Personal Information Protection Act (PIPA), GDPR, CCPA, and other applicable privacy laws, you have the following rights:

• Right to Access — You may request a copy of the personal information we hold about you
• Right to Correction — You may request correction of inaccurate personal information
• Right to Deletion — You may request deletion of your personal information by deleting your account
• Right to Withdraw Consent — You may withdraw consent to data processing at any time
• Right to Data Portability — You may request an export of your data
• Right to Restrict Processing — You may request that we limit how we use your data
• Right to Object — You may object to the processing of your data based on legitimate interests

To exercise any of these rights, please contact us at privacy@myfuturemirror.app.

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR:

• Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.
• Right to Not Be Subject to Automated Decisions — The Someday Post uses AI to generate articles based on your input, but no automated decisions with legal or significant effects are made about you.

We will respond to all data subject requests within 30 days, as required by GDPR.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to Know — You may request details about the categories and specific pieces of personal information we have collected about you
• Right to Delete — You may request deletion of your personal information
• Right to Opt-Out of Sale — We do not sell your personal information to third parties. There is no need to opt out because we never sell your data
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights

The Someday Post uses cookies for authentication, service operation, and aggregate analytics. We do not use advertising cookies, and we do not allow third-party ad networks to track you through our service.

• Authentication Cookies — Used to keep you signed in via Supabase Auth
• Preference Cookies — Used to remember your language settings
• Analytics Cookies — Google Analytics (GA4), used to understand aggregate usage patterns

We do not display advertisements and do not allow advertisers to track you through our service.

The Someday Post is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. This threshold complies with GDPR requirements for minors. If you believe a child has provided us with personal information, please contact us at privacy@myfuturemirror.app and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a prominent notice on the service. Your continued use of The Someday Post after changes take effect constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: