Privacy Policy

The Someday Post (“we,” “us,” or “our”) operates the website somedaypost.com and provides an AI-powered future storytelling service. We are based in the Republic of Korea.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use The Someday Post. By using our service, you agree to the practices described in this policy.

We collect the following categories of personal information:

• Account information — Your email address and display name or nickname, collected when you create an account or sign in with Google, and your gender if you choose to provide it (“Prefer not to say” stores nothing).
• Google sign-in information — When you sign in with Google, we receive your Google account email address and profile name. We do not receive your Google password.
• Interview content — The text you enter during AI interviews, including your answers, goals, and the stories you share about your future self. This content is used to generate your personalized article.
• Uploaded photos — Photos you upload during the interview process (up to 2 per article). These are stored on Cloudflare R2 and are permanently deleted when you delete the associated article or your account.
• Generated articles — The AI-written front pages created from your interview, stored in your account.
• Information about other people — Your interview answers may mention other people (family, colleagues, friends). We do not ask for their information and we cannot verify or obtain their consent. Personal names are automatically masked before an article is published on the platform, but your original article is not altered. By including someone else, you confirm you have the right to do so — see the Terms of Service, Section 3.
• Guest name — If you use The Someday Post without signing in, the name you enter during the interview is sent with each interview and article request (including to our AI providers) but is not stored on our servers; it stays in your browser for that session. If you then sign in and save your front page, the name is saved with it and suggested as your display name.
• Contact messages — If you contact us through our Contact page, we collect your name, email address, and message content to respond to your inquiry.
• Payment information — If you purchase front page credits, payment is processed by our third-party payment provider (Lemon Squeezy, acting as Merchant of Record). We do not store your credit card details directly.
• Usage data — Basic usage information such as pages visited, article view counts, and service interactions, used to improve the service.

When you access The Someday Post, we may automatically collect certain technical information:

• Device information — Browser type, operating system, and device type
• Network information — IP address and approximate geographic location (country/region level only, via Cloudflare)
• Usage information — Pages visited, features used, and article view counts

This information is collected through standard web server logs, Cloudflare analytics, and Google Analytics (GA4). Google Analytics is used to understand aggregate usage patterns — such as which pages are visited and where users drop off in the interview flow — and is not used to build advertising profiles or track you across other websites.

We use the information we collect for the following purposes:

• To provide, operate, and improve The Someday Post service
• To write your front page with AI, based on your interview
• To manage your account and authenticate your identity
• To process payments and manage your purchases
• To send service-related communications, including your Future Bridge emails, made from your front page (if you turn them on)
• To detect and prevent abuse, spam, and policy violations
• To comply with legal obligations

We do not use your interview content or personal stories for AI model training without your explicit consent.

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Consent — When you create an account, submit interview content, or upload photos, you consent to the processing of that data for the purpose of generating your article.
• Contract performance — Processing necessary to provide The Someday Post service, including account management, article generation, and purchase handling.
• Legitimate interests — Processing for fraud prevention, service security, and service improvement, where these interests are not overridden by your rights.
• Legal obligation — Processing required to comply with applicable laws and regulations.

You may withdraw your consent at any time by deleting your account or contacting us at privacy@somedaypost.com.

We do not sell your personal information. We share your information only in the following limited circumstances:

• Service providers — We share data with trusted third-party providers who help us operate the service, including Supabase (database and authentication), Cloudflare (infrastructure, image storage, and fallback AI image generation), Anthropic (Claude, AI interview and article generation), OpenAI (fallback AI text generation, photo analysis, and content moderation), Fal.ai (AI image generation), Resend (email delivery), Lemon Squeezy (payments), and Google (Google Analytics, aggregate usage analytics). These providers are contractually bound to protect your data.
• Public articles — If you choose to make your article public, it will be visible to all visitors of The Someday Post. Public articles are anonymized before publication — your real name and identifying details are masked.
• Shared links — When you share an article from the Newsstand — by link or to social media — the shared version is the anonymized one. Your real name, company names, and locations are replaced before the article leaves your account. Anyone with the link can view that anonymized version.
• Personal links — If you choose to create a personal link for a front page, anyone with that link can see the original front page — including your name, any photo you uploaded, and your story — without anonymization. We create a personal link only when you confirm it for that front page; it is not listed on the Newsstand, and we mark it so that search engines do not index it. We record when you turned it on. You can turn it off at any time, after which the link, its preview image, and its share card stop working. Copies, screenshots, and social media previews made while it was on are outside our control and cannot be pulled back. Otherwise, only you, signed in to your own account, can see the original.
• Legal requirements — We may disclose your information if required to do so by law or in response to valid legal requests.

The Someday Post is operated from the Republic of Korea. Your data may be transferred to and processed in countries outside your country of residence, including the United States, through our service providers:

• Cloudflare (USA) — Infrastructure, content delivery, image storage (R2), and fallback AI image generation
• Anthropic (USA) — AI text generation for interviews and articles (Claude — our primary model)
• OpenAI (USA) — Fallback AI text generation, photo analysis, and content moderation
• Fal.ai (USA) — AI image generation from the scene description derived from your interview
• Supabase (USA) — Database hosting and user authentication
• Resend (USA) — Transactional email delivery
• Lemon Squeezy (USA) — Payment processing (Merchant of Record)

These providers maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable.

For EEA users: by using The Someday Post, you acknowledge that your data will be transferred to and processed in countries that may not provide the same level of data protection as your home country.

We retain your personal information for as long as your account is active or as needed to provide the service.

• Account data — Retained until you delete your account
• Interview content & articles — Retained until you delete the article or your account
• Uploaded photos & AI images — When you delete a front page or your account, its current images are deleted from our storage (Cloudflare R2) immediately. Any other copies — such as the replacement images of a public version or images from earlier revisions — are removed by an automatic cleanup that runs three times a day
• Contact messages — Retained only for the purpose of responding to your inquiry
• Payment records — Retained as required by Korean tax law (generally 5 years)

When you delete your account, we delete your personal data, front pages, and images, subject to the retention periods and exceptions described in this section. To prevent abuse of our free tier, if you have used your free front page, a one-way hash of your email address and your free usage count are retained for 30 days after account deletion, after which they are automatically purged. The hash cannot be turned back into your email address; it is used only to recognize the same email address if it signs up again within that period.

Under the Korean Personal Information Protection Act (PIPA), GDPR, CCPA, and other applicable privacy laws, you have the following rights:

• Right to access — You may request a copy of the personal information we hold about you
• Right to correction — You may request correction of inaccurate personal information
• Right to deletion — You may request deletion of your personal information by deleting your account
• Right to withdraw consent — You may withdraw consent to data processing at any time
• Right to data portability — You may request an export of your data
• Right to restrict processing — You may request that we limit how we use your data
• Right to object — You may object to the processing of your data based on legitimate interests

To exercise any of these rights, please contact us at privacy@somedaypost.com.

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR:

• Right to lodge a complaint — You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.
• Right to not be subject to automated decisions — The Someday Post uses AI to generate articles based on your input, but no automated decisions with legal or significant effects are made about you.

We will respond to all data subject requests within 30 days, as required by GDPR.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to know — You may request details about the categories and specific pieces of personal information we have collected about you
• Right to delete — You may request deletion of your personal information
• Right to opt-out of sale — We do not sell your personal information to third parties. There is no need to opt out because we never sell your data
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights

The Someday Post uses cookies for authentication, service operation, and aggregate analytics. We do not use advertising cookies, and we do not allow third-party ad networks to track you through our service.

• Authentication cookies — Used to keep you signed in via Supabase Auth
• Preference cookies & local storage — Used to remember your language settings (cookies and your browser’s local storage) and your cookie choice (local storage)
• Analytics cookies — Google Analytics (GA4), used to understand aggregate usage patterns. These are set only after you accept them in the cookie banner; until then, no analytics script is loaded.

You can change your analytics choice at any time: select “Cookie settings” in the footer of any page and the banner will appear again. Declining does not affect sign-in or any feature of the service.

We do not display advertisements and do not allow advertisers to track you through our service.

The Someday Post is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. This threshold complies with GDPR requirements for minors. If you believe a child has provided us with personal information, please contact us at privacy@somedaypost.com and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a prominent notice on the service. Your continued use of The Someday Post after changes take effect constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: