DearMY Privacy Policy

This English translation is provided for convenience. If it differs from the Korean original, the Korean version prevails.

1. Operator and privacy officer

DearMY is operated by HUNOA (representative Park Seo-a, business registration number 627-70-00638, 302, 60 Bokjeong-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Korea). The privacy officer is the representative, Park Seo-a. Requests to access, correct, delete or stop processing personal information, and privacy questions, go to hunoa@hunoa.kr.

2. Information we process and why

Sign-in uses your email, account identifiers and authentication information. To recognize signed-in devices, we process a random per-install identifier, device model, operating system, app version and last access time. Device information is deleted when that sign-in session ends or when the account is deleted. We do not collect device serial numbers or contacts. Google and Apple sign-in connect using the account information you approve. A birthday (month and day) you optionally enter at sign-up is used only for a celebration badge on that day; it is not required and cannot be changed once saved. Nickname, time zone, language, theme and font settings are used to lay out the screen, and journal entries, characters, photos, AI replies, calendar display and weekly sentences are used to save and show your records. The planner is stored both on our servers per account and on your device, and edits made while offline stay on the device until the next sync. Drafts and photos not yet uploaded are kept on your device or browser. With a DearMy+ subscription we process the subscription status and period and store purchase information (purchase identifier); payment details such as card numbers are never received by the app and are handled by the Google and Apple stores. When you submit a report, its content and the reported records are used for moderation review.

3. Age requirement

Only people aged 14 or older can sign up for DearMY. Age is confirmed at sign-up, and we do not collect personal information from children under 14. If we learn that someone under 14 has signed up, we delete the account and its information.

4. Private and shared journals

Private diaries are designed to be visible only to your account. Text and photos published in DEAR YOU are visible to your connected partner; drafts are visible only to their author. Your own records remain after disconnecting. Deleting your account does not delete records your partner wrote in their own account. Check before sharing someone else’s personal information.

5. Connecting other calendars and shared calendars

If you allow calendar access, DEARMY reads events from calendars synced to your phone (Google, Samsung, Outlook, NAVER, iCloud and others) only on this device to show them in DEARMY and its home screen widgets; they are never sent to the DEARMY server or AI. Only when you choose a destination for a category or an event does DEARMY write that event’s title, date, time and notes to the phone calendar you selected. Connection settings are stored only on this device and can be turned off anytime in Settings. When you create or join a shared calendar with an invite code, its name and color, each member’s chosen display name and shared events (title, date, time, notes) are stored on the server and shown only to members of that shared calendar. Diaries are never part of shared calendars. If the creator deletes the calendar or their account, the shared calendar and its events are deleted; when a member leaves, their membership is deleted.

6. Finding places

When you tap "Find a place" on an event, only your search words (and app language) are sent through the DEARMY server to Google Places to get place names, addresses and map links. No account information or records are sent, and the chosen place is saved only on that event.

7. Weather widget

If you use the ‘Mangle · Weather’ widget, it fetches the current weather every 30 minutes from the free weather service Open-Meteo for the area you chose when adding the widget (city/county-level coordinates). It does not use your phone's location permission and sends no account, record or device information. The chosen area is stored only on this device and is removed when you delete the widget.

8. Inquiries and feedback (DEAR MY HUNOA)

When you use “DEAR MY HUNOA” (letters to HUNOA) in Settings, we process your message, one optional screenshot, and your app version, device model, OS and language to investigate issues, improve the service and reply. Your account email is stored for replies only if you choose to receive a reply. Your diary and other records are not sent. Letters are kept for one year after handling and then deleted, and are deleted immediately when you delete your account.

9. Data sent for AI features you choose

If you optionally consent to AI replies, the diary text and relevant existing entries from the same date are sent to OpenAI for safety checks and reply generation. Nicknames and character names of two or more characters are replaced with temporary names, but not all personal information in the text is anonymized. Basic replies do not send other dates' diaries or photos. With separate consent, AI memory, questions and reflection send your own diaries and question for the chosen period, plus plans from that period if you choose. You review the range before requesting; your partner's private records, shared records and photos are not included. AI results and supporting excerpts are saved in your account. You can decline and still save diaries, plans and photos. Withdrawing consent in Settings stops future AI requests.

10. AI services you connect (optional)

Information is provided to an AI service only if you start the DEARMY connection from an AI service such as ChatGPT’s dots and directly allow it on DEARMY’s connection screen. The connection screen shows the name of the connecting service and the permitted scope. The default scope is viewing category names and the title, date, time and completion status of events and to-dos; if the service requests it, viewing routines and birthdays/anniversaries (name and date) can be added, and this scope is also shown on the connection screen. Registering, editing or completing events and to-dos and rescheduling the day (including leaving a diary draft, depending on the service) are possible only if you turn on a separate switch on the connection screen, and each save or edit is confirmed once more in that AI service. Diary text, photos and DEAR YOU records cannot be read, and a diary draft becomes a diary only when you save it yourself in DEARMY. Connection credentials are stored only as hashes, you must allow again after 30 days of non-use, and you can disconnect anytime in Settings › Connected services. Information provided to an AI service is processed under that provider’s terms and privacy policy and may be processed outside Korea. All core DEARMY features can be used without connecting.

11. Outsourced processing and international transfers

To provide the service, we entrust processing to the following companies, some of which process data outside Korea: (1) Supabase Inc. (data stored in Tokyo, Japan) — storage of accounts, diaries, photos and plans, and authentication; (2) OpenAI (USA) — safety checks and generation for records you consent to send to AI features; (3) Netlify Inc. (USA) — serving the web app; (4) RevenueCat Inc. (USA) — subscription entitlement checks; (5) Google LLC and Apple Inc. (USA) — sign-in, app distribution and payments. Timing and method: data is sent over encrypted connections whenever you use the service. Retention: until you delete your account or the processing contract ends (data sent to AI follows that company's policy). If you do not want international transfers, you can decline AI features or delete your account; basic storage (Supabase) is essential to the service, so without it the service cannot be used.

12. Retention and deletion

Deleted records stay in the trash for 30 days before being permanently deleted, and you can permanently delete them sooner. When you delete your account, your records, planner and files on the server are deleted immediately, and copies in server backups are automatically deleted within 30 days. However, as required by law, contract, withdrawal and payment records under the Act on Consumer Protection in Electronic Commerce are kept for 5 years, consumer complaint and dispute records for 3 years, and access logs under the Protection of Communications Secrets Act for 3 months, then deleted.

13. Your rights and device permissions

In Settings you can change your profile, language and AI consent, export your data as a ZIP with DearMy+, and delete your account regardless of plan. If you cannot use the app, you can request access, correction or deletion at hunoa@hunoa.kr. We only request the permissions needed to choose or take photos and to send notifications; if you decline, you can still write and use the planner. Uninstalling the app does not delete your server account.

14. Changes to this policy

When this policy changes, we announce it in the app 7 days before it takes effect (30 days for changes unfavorable to users).