Privacy Policy
1. What we collect and why
| Type | Information | Why we use it |
|---|---|---|
| Required | Apple or Kakao member number | Signing in and telling accounts apart (we don’t receive your name, email, or photo). If you sign in with Apple, we also keep an encrypted connection token so we can disconnect Apple when you delete your account |
| Required | Birth date (stored encrypted) | Checking that you meet the age limit |
| Required | Nickname, avatar | How you appear in the Service |
| Required | Your answers and replies, reactions, quiz results, progress and level | Running the Service, showing your posts to the people you chose, safety checks |
| Optional | MBTI | “MBTI notes” and circle matching. You can use the Service without it |
| Optional | Partner connection and circle records | Partner and circle features |
| If you buy a Membership | Apple transaction ID, product, start and end dates, trial/renewal/refund status, who paid | Checking your Membership and deciding who a Partner Membership applies to. Apple handles card details; we never receive them |
| Automatic | Language and time zone settings | Showing the app in your language and starting your day at your local midnight |
| Automatic | Access logs (time, IP address, device and browser info), cookies | Keeping you signed in, preventing abuse, fixing problems |
What you write about love and relationships can be personal, and may reveal sensitive information (for example about your sex life or sexual orientation). We ask for your separate consent at sign-up and use it only to provide the Service. We don’t use it to profile you or for ads.
2. How long we keep it
| Information | How long |
|---|---|
| Your account and everything above | Deleted promptly 5 days after you ask to delete your account |
| Sign-up attempts under the age limit | Not stored; deleted right away |
| Safety-check records (a hash, not the text) | Deleted automatically after 30 days |
| Report and penalty records | Up to 1 year, pseudonymized, to handle disputes |
| Access logs | 3 months (as required by Korean law) |
| Membership transaction records (transaction ID, product, end date) | 5 years (as required by Korean e-commerce law). When you delete your account, we remove the link to you, so the record no longer identifies you |
Backups that contain your information are deleted with the backup after 30 days.
3. Sharing
We don’t sell or rent your personal information, and we don’t “share” it for cross-context behavioral advertising. We don’t give it to other companies, except to the service providers below or when the law requires it (for example, a valid legal request).
4. Service providers and where your data is stored
| Provider | What they do | Location |
|---|---|---|
| Cloudflare, Inc. | Security and delivering the website/app traffic | United States and other countries (encrypted in transit) |
| Apple Inc. | Sign in with Apple, Membership payments and refunds | United States |
| Kakao Corp. | Kakao sign-in (only if you use it) | South Korea |
Our service data is stored on servers we manage in South Korea. If you live outside Korea, your information is transferred to and processed in Korea.
5. Your rights and choices
You can ask to see, correct, download, or delete your information, and ask us to stop using it. You can delete your MBTI yourself in Me → My Love Map, and delete your whole account in Me → Settings → Delete Account. For anything else, email us. We’ll answer within 30 days (45 days if the law allows and we need more time), and we won’t treat you differently for using your rights.
US state privacy rights (including California): Residents of California and other states with privacy laws have the rights above — to know, access, correct, delete, and to opt out of the sale or sharing of personal information and of profiling. Because we don’t sell or share personal information, or profile you, there is nothing to opt out of; you can still contact us anytime. We also honor Global Privacy Control signals. You can use an authorized agent; we may ask you to confirm your identity. If we deny a request, you can appeal by replying to our answer.
6. Children
The Service is only for adults (18+, or 19+ in South Korea). We don’t knowingly collect information from anyone under the age limit, including children under 13. If you think a minor has signed up, email us and we’ll delete the account.
7. How we protect your information
We encrypt birth dates, use HTTPS for all traffic, limit admin access, keep access logs, and keep safety records as hashes instead of text. To run the Service (handling reports, safety checks, improving content), we can see posts shared with everyone, a circle, or a partner. We don’t look at “Only me” posts, and we keep a record whenever an admin views a post.
8. Changes
If we change this policy, we’ll post a notice in the Service at least 7 days before it takes effect.
9. Contact
Privacy officer: Jooyong Park (MINDSETUP) · Email [email protected]