This is a translation of the Korean original. If there is any discrepancy, the Korean version prevails.
정우병 (hereinafter the "Operator") establishes and discloses this Privacy Policy as follows, pursuant to Article 30 of the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
The Operator processes personal information for the following purposes. Personal information being processed is not used for any purpose other than those below, and if the purposes change, the Operator will take the necessary measures in accordance with Article 18 of the Personal Information Protection Act.
The Service does not collect a separate password; sign-up and authentication are performed through Sign in with Apple.
| Category | Items | Notes |
|---|---|---|
| Required (sign-up and authentication) | Email address, member identifier (UUID) | Provided by Apple. If Apple's Hide My Email is used, the relay email address |
| Required (profile) | Name, nickname | Entered by the user |
| Optional (profile) | Date of birth, bio, profile image, nickname for partner | Entered by the user |
| User-generated | Couple connection information (start date, invite code), calendar events (title, time, location, memo), anniversaries, wishlist (title, category, memo, link, completion status), notification settings | Generated in the course of using the Service |
| Optional (photos) | Photos by date (photo files the user selects from their photo library, the date attached, and the uploader) | Only when a photo is attached. Stored in private storage that only the two members of the couple can view. The app reduces the photo (1600px on the long side, JPEG) before uploading, and photo metadata such as location information is not stored |
| Optional (notifications) | Device token for push notifications, device platform, date and time of last access | Only if the user has allowed push notifications |
| Automatically generated | Date and time data was created or modified, login session token | The session token is encrypted and stored in a cookie (7 days) |
The Service does not use behavioral-information analytics or advertising tracking tools such as Google Analytics or advertising SDKs, and does not collect advertising identifiers (ADID/IDFA). It processes only the minimum server access and authentication verification records needed for security and error response, and screen-step usage statistics for improving the Service (e.g., "tapped the share invite code button", app startup time). The usage statistics do not contain information that can identify an individual, such as the member identifier, email address, or invite code.
The ID token delivered during Sign in with Apple is used only to verify identity and is not stored separately. The items the Operator stores are the email address and member identifier listed in the table above.
In principle, the Operator retains personal information until the purpose of its collection and use has been achieved or until the member withdraws (deletes their account), and destroys it without delay thereafter.
| Item | Retention period |
|---|---|
| Member information (profile, couple, events, anniversaries, wishlist, photos by date, notification settings) | Until the member withdraws or the couple connection is ended (photos by date are deleted immediately when the user deletes them) |
| Push notification device token | Until logout or member withdrawal (tokens that are no longer valid on the device are deleted as soon as they are detected) |
| Login session token | 7 days from issuance (may be extended); deleted immediately upon logout |
| Information that must be preserved under applicable laws | The period prescribed by the relevant law |
The Operator does not provide users' personal information to third parties without their consent. However, exceptions apply where the user has given prior consent, or where required by law or requested by an investigative authority in accordance with lawful procedures.
To provide the Service reliably, the Operator entrusts personal information processing tasks (use of infrastructure) as follows.
| Trustee | Entrusted task |
|---|---|
| Apple Inc. | Login and identity verification (Sign in with Apple) |
| Supabase Inc. | Provision of database, photo file storage, and authentication infrastructure (cloud) |
| Google LLC | Operation of the Service's servers (Google Cloud Run), sending push notifications (Firebase Cloud Messaging) |
The data centers of the cloud infrastructure (Supabase) used by the Operator may be located outside Korea, in which case personal information is transferred to and stored outside Korea. Pursuant to Article 28-8 of the Personal Information Protection Act, the Operator provides the following information on overseas transfers.
Data subjects may exercise the following rights at any time.
When a member withdraws or a couple connection is ended, that couple's events, anniversaries, wishlist, and photos by date (including photo files in storage) are deleted together, and upon member withdrawal, notification settings and device tokens are also deleted. Rights may be exercised using in-Service features or by emailing a request to the Privacy Officer below, and the Operator will act without delay.
The Service uses only the following one essential cookie, to keep you signed in.
| Cookie name | Purpose | Security attributes | Validity |
|---|---|---|---|
| session | Maintaining the login session (storing the authentication token) | HttpOnly · Secure (production) · SameSite=Lax | 7 days |
This cookie is essential to providing the Service; if refused, the login function cannot be used. The Service does not use non-essential cookies for advertising or analytics purposes.
The Operator has overall responsibility for matters relating to the processing of personal information and has designated the following Privacy Officer to handle complaints and provide remedies for damages of data subjects.
The Service is not intended for children under 14 years of age. The Operator does not collect personal information of children under 14, and if a user is confirmed to be under 14, the Operator will delete the relevant account and information without delay.
Data subjects may apply to the following organizations for dispute resolution, counseling, and the like in order to obtain remedies for infringement of personal information.
This Privacy Policy applies from the effective date. If any content is added, deleted, or corrected due to laws or policy, the change will be announced through the Service or this page from 7 days before the change takes effect (30 days before for material changes).
Revision history