Widery Privacy Policy

1. Overview

Widery, operated by Jinwoo Hong (the “Operator,” “we,” “our,” or “us”), respects your privacy and processes personal information lawfully and securely in accordance with applicable privacy laws.

This Privacy Policy explains what information Widery collects, why it is used, how long it is retained, when it may be shared or processed by service providers, international transfers, and how users may exercise their privacy rights.

2. Personal Information We Process

We process personal information necessary to provide the Service.

Account registration and login

• Required: social login provider identifier, email address, and provider information from Google, Apple, or Kakao.
• Optional or provider-supplied: name, nickname, or Apple private relay email address.

Service content and usage

• Diary titles, diary bodies, entry dates, and edit timestamps.
• Photos uploaded by users and the storage paths of those photos.
• AI search questions, AI responses, and related quoted diary records.
• AI report results, report read status, and report target periods.
• Display name, terms agreement history, notification settings, and subscription status.

Payment and subscription management

• RevenueCat customer identifier, App Store product identifier, purchase, renewal, and expiration status.
• We do not directly store raw payment method information such as credit card numbers or bank account numbers.

Automatically generated technical information

• App version, operating system, device information, access time, and service usage records.
• Error logs and technical information used for security and abuse prevention.

3. Purposes of Processing

1. To identify users, maintain login sessions, manage accounts, and process account deletion.
2. To provide core diary, photo upload, calendar, detail view, and record management features.
3. To generate AI weekly reports and answer searches over past records.
4. To verify subscription entitlement and manage free trial, paid subscription, renewal, and expiration status.
5. To provide record reminder notifications according to user settings.
6. To stabilize the Service, respond to errors, maintain security, and prevent abuse.
7. To respond to user inquiries, resolve disputes, and comply with legal obligations.
8. To improve service quality through aggregated or de-identified statistics.

4. Retention Period

In principle, we delete personal information without undue delay when the purpose of processing has been achieved or when a user requests account deletion. Certain information may be retained for the period required by applicable law or for dispute handling.

• Account, diary, photo, AI search, and AI report data: until account deletion.
• Terms and privacy consent history: for the period necessary to respond to disputes after account deletion.
• Records on contracts or withdrawal of offers: 5 years.
• Records on payment and supply of goods or services: 5 years.
• Records on consumer complaints or dispute resolution: 3 years.
• Records on display or advertising: 6 months.
• Connection logs and other legally required technical records: for the period required by applicable law.

5. Third-Party Disclosure

We do not disclose personal information to third parties beyond the purposes described in this Policy without user consent, except where:

• The user has given prior consent.
• Disclosure is required by law or by a lawful request from competent authorities.
• Processing is performed by service providers necessary for authentication, payment, infrastructure, or AI processing.

6. Service Providers

We use the following service providers to operate the Service.

• Supabase: authentication, database, and file storage.
• RevenueCat: subscription entitlement, purchase status synchronization, and purchase event management.
• Apple App Store: in-app purchases, subscription renewal, cancellation, and refund processing.
• Google, Apple, and Kakao: social login authentication.
• OpenAI and Anthropic: AI processing for diary search questions and report generation.
• Expo/EAS: app distribution, updates, and technical support for app operations.

We take reasonable steps to ensure that service providers process personal information securely and only for the purposes necessary to provide the Service.

7. International Transfers

Some cloud, authentication, payment, and AI API providers may be located outside your country or may use infrastructure in other countries. Personal information may be transferred internationally as follows.

• Recipients: Supabase, RevenueCat, Apple, Google, OpenAI, Anthropic, and their affiliates or infrastructure providers.
• Countries: the United States and other countries where each provider operates services.
• Data transferred: account identifiers, email address, diary and photo data, search questions, AI responses, report data, and subscription status as necessary.
• Purpose: authentication, data storage, subscription management, AI analysis, search response generation, and service operations.
• Timing and method: when the user uses the Service, via encrypted network communications.
• Retention: until the relevant processing purpose is achieved or the applicable retention period ends.

8. AI Processing and Automated Decisions

Widery uses AI to generate reports and search responses based on user records. AI results are reference information intended to help users reflect on their records. They do not replace medical, psychological, legal, financial, or other professional advice.

Widery does not make fully automated decisions that produce legal or similarly significant effects for users.

9. Children Under 14

The Service is not primarily directed to children under 14. If a child under 14 wishes to use the Service, consent from a legal guardian may be required, and we may request minimum information necessary to verify such consent.

10. User Rights

Users may request the following at any time:

1. Access to personal information.
2. Correction of inaccurate information.
3. Deletion of personal information.
4. Suspension of processing.
5. Withdrawal of consent and account deletion.

Requests may be submitted through the app settings, account deletion feature, or by email at widery.app@gmail.com.

11. Deletion

When retention periods expire or processing purposes are achieved, we delete personal information without undue delay. Electronic files are deleted in a manner that prevents practical recovery, and paper documents, if any, are shredded or destroyed.

12. Security Measures

• Encryption of data transmission.
• Restriction of authentication and database access privileges.
• Application of least-privilege principles for service operations.
• Review of error and security events.
• Minimization of unnecessary personal information collection.

13. Automatically Collected Technologies

The Service may process technical information necessary for login maintenance, security, error analysis, and app update delivery. If we collect or use behavior information for targeted advertising, we will provide separate notice and obtain consent where required.

14. Privacy Contact

For privacy inquiries, requests, or complaints, users may contact us as follows.

• Privacy officer: Jinwoo Hong
• Contact method: widery.app@gmail.com

15. Remedies

Users may contact the following Korean authorities for privacy counseling or dispute resolution.

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
• National Police Agency: 182 (ecrm.police.go.kr)

16. Changes to This Policy

This Privacy Policy may be updated due to changes in laws, the Service, service providers, or processing practices. For material changes, we will provide notice in the app or by other appropriate means before the effective date.