ppuaeng Privacy Policy

Partadam (파르타담, the "Operator"), which operates ppuaeng (뿌애앵, the "Service"), complies with the Personal Information Protection Act ("PIPA") of the Republic of Korea and other applicable laws, and has established and published this Privacy Policy to protect the personal information of users and their children.

Note on this translation — This English text is provided for your convenience. The Korean version of this Privacy Policy is the official, legally binding text; in the event of any discrepancy, the Korean version prevails.

At a glance

• What do you collect? Login details (email and name), baby details (name, date of birth, and so on), and the care records you write yourself.
• What about my voice? Your voice is converted to text entirely on your iPhone. The original audio is never stored and never leaves your device.
• Is it used to train AI? No. It is used only to organize your records, never to train AI models.
• Any ad tracking? No advertising SDKs and no advertising identifier (IDFA) collection.
• Where is it stored? In the Supabase cloud (data stored in the Tokyo, Japan region), transmitted over an encrypted connection.
• What if I want it deleted? You can delete your account at any time from Settings → Account in the app. Your records are deleted along with it.

This summary is for ease of understanding only; the full text below governs.

Article 1 (General Provisions)

1. This Privacy Policy applies to the Service (the iOS app "ppuaeng" and its accompanying features — including widgets, Lock Screen controls, Live Activities, and push notifications).
2. The Operator publishes this Privacy Policy at all times on the settings screen within the Service and on its web pages.

Article 2 (Categories of Personal Information Processed and Methods of Collection)

① The Operator processes the following personal information.

About voice data — Audio captured through the microphone is converted to text by Apple's on-device speech recognition, inside the user's own device (iPhone). The original audio (recordings, audio data) is not stored and is never transmitted off the device. Only the converted text is sent to the server.

② Payment method details (card numbers and the like) are handled by Apple itself; the Operator neither collects nor stores them.

③ Personal information is collected by the following methods.

1. Collection via Apple/Google account linking at sign-up — login on those platforms is governed by the terms between the user and Apple/Google, and the Operator receives the resulting email address, name, and identifier.
2. Direct input by the user while using the Service (including voice input).
3. Import of export files from third-party apps (such as BabyTime) uploaded by the user.
4. Automatic collection from the device (push tokens and the like).

④ Records entered while the device is offline (transcribed text) are held temporarily on the user's device only until they can be transmitted; once connectivity is restored they are sent to the server and then deleted from the device.

Article 3 (Purposes of Processing)

The Operator processes the personal information it collects solely for the following purposes, and where a purpose changes, it takes the measures required by law, such as obtaining separate consent.

1. Member identification and authentication, and account management.
2. Storage and display of care records, and provision of statistics, patterns, and insights.
3. Provision of care-record sharing between family members.
4. Sending push notifications (confirmation that a record was saved, notice of records made by family members, reminders about gaps in entries, and the like — each type can be turned off in the app's settings).
5. Verification and status management of paid subscriptions.
6. Responding to inquiries and delivering notices.
7. Analyzing errors and improving service quality.
8. Fulfilling obligations under applicable laws.

Article 4 (Processing of Sensitive Information)

1. Among care records, entries for temperature, medication, and hospital visits (reason for visit, diagnosis, next appointment, and the like) may constitute information concerning the baby's health (sensitive information).
2. The Operator processes sensitive information only for the purposes of storing, displaying, and sharing records under Article 3, and obtains separate consent for it, distinct from other consents, during sign-up and use of the Service.
3. The Operator does not disclose sensitive information externally, and there is no possibility of disclosure beyond the viewing scope of the family members the user has invited.
4. Sensitive information is protected in accordance with the security measures set out in Article 13.

Article 5 (Personal Information of Children Under 14)

1. Only persons aged 14 or older may sign up for the Service; children under 14 may not sign up directly.
2. Information about the baby (infant) registered in the Service is entered and managed directly by the member (guardian), who is the child's legal representative. This constitutes the consent of the legal representative under Article 22-2 of PIPA.
3. The legal representative may request access to, correction of, deletion of, or suspension of processing of the child's personal information, and may edit or delete the baby's information and records directly within the app.
4. Where a guardian who is not the legal representative (a grandparent, caregiver, and so on) views or writes records through a family invitation, this occurs pursuant to the invitation (consent) of the member who is the legal representative.

Article 6 (Retention and Use Periods)

① Personal information is destroyed without delay upon withdrawal of membership (account deletion).

② However, the following information is retained for the periods indicated, as required by applicable laws.

Article 7 (Destruction of Personal Information)

1. The Operator destroys without delay any personal information whose retention period has expired or whose processing purpose has been achieved.
2. Information held as electronic files is permanently deleted by means that make recovery impossible; other records are shredded or incinerated.
3. Information that must be retained under applicable laws is stored separately from other personal information and is not used for any purpose other than retention.

Article 8 (Provision of Personal Information to Third Parties)

1. The Operator does not provide users' personal information to third parties, except where the user has separately consented or where specifically provided for by law.
2. About the family sharing feature — When a user creates and shares an invite code, or joins a family using one, members belonging to the same family can view each other's baby information and care records (including the author's display name). This is an inherent feature of the Service in which the user determines the scope of sharing, and it does not constitute provision to a third party. Invite codes expire after 24 hours.

Article 9 (Outsourcing of Personal Information Processing)

To provide the Service reliably, the Operator outsources the following work. Where a processor is a foreign entity, the overseas transfer provisions of Article 10 also apply.

In its outsourcing agreements, the Operator stipulates compliance with personal information protection laws, prohibition of processing beyond the stated purpose, restrictions on sub-processing, and security measures, and it supervises its processors.

Article 10 (Overseas Transfer of Personal Information)

① For the outsourced processing and storage necessary to provide the Service, the Operator transfers personal information overseas as set out below, pursuant to Article 28-8 (1) 3 of PIPA, and discloses the details through this Privacy Policy.

② Users may refuse the overseas transfer. To do so, you may decline to sign up, delete your account from Settings → Account in the app, or contact us using the details in Article 15. However, because these transfers are essential to providing the Service, if you refuse, you will not be able to use the Service.

Article 11 (AI Processing)

1. The Service interprets what the user says or types using AI (a large language model), converts it into structured records such as feeding amounts and times, and generates a one-line summary.
2. Only text (the result of voice transcription) is transmitted in this process, and the transmitted data is not used to train AI models (per the API data policy of the processor, OpenAI).
3. AI interpretation may be inaccurate; users can review, edit, and delete every record in the app. Records with low interpretation confidence are flagged as "needs review."
4. The Service's AI processing is merely a tool to assist with writing records; it does not constitute a "fully automated decision" under Article 37-2 of PIPA that materially affects users' rights or obligations.

Article 12 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

1. Users may at any time request access to, correction of, deletion of, or suspension of processing of their own personal information (or, for a legal representative, that of the child).
2. Actions you can take directly within the app:
   • Reviewing, editing, or deleting a record: select the record in the timeline.
   • Editing baby or family information: the settings screen.
   • Deleting your account: Settings → Account → Delete account (this deletes your account together with your records).
3. Other requests may be made using the contact details in Article 15 (email); the Operator will act within the statutory deadline (10 days) and notify you of the outcome.
4. Baby records that are shared within a family are the family's joint records and may be retained for the remaining members even if some members withdraw. If you wish to delete a family's records in full, you may request this using the contact details in Article 15.
5. Users are responsible for keeping their personal information current and accurate, and must not infringe the personal information of others.

Article 13 (Security Measures)

1. Encryption in transit — All data is transmitted encrypted with TLS.
2. Encryption at rest — Data is held in encrypted storage (AWS).
3. Access control — Row-level security (RLS) is applied in the database so that no one other than you and members of your family can access your records. Administrative secret keys are not included in the client app.
4. Data minimization — The Service uses an on-device speech recognition architecture that does not collect original audio.
5. Least privilege — The number of people who can access personal information is kept to the Operator's minimum.

Article 14 (Automatic Collection Devices and Behavioral Information)

1. The Service (app and website) does not use cookies. Visit statistics for the website (ppuaeng.app) are also measured in a cookieless manner that uses neither cookies nor local storage.
2. The Service does not collect the advertising identifier (IDFA) and does not collect or use behavioral information for advertising.
3. To improve the Service, an external analytics tool (PostHog, EU data center) is used. In the app it collects non-identifying behavioral information such as screen transitions and feature usage; on the website it collects visits, acquisition sources, and download button clicks. Identifying or sensitive information — such as baby or guardian names, email addresses, the content of voice input or notes, and exact dates of birth — is not sent to the analytics tool. Overseas transfer is governed by Article 10.

Article 15 (Privacy Officer and Complaint Handling)

Inquiries, complaints, and requests for remedy relating to personal information may be sent to the contact above, and the Operator will respond and act without delay.

Article 16 (Remedies for Infringement of Rights)

If you need to report or consult about an infringement of personal information, you may contact the following organizations in Korea.

• Personal Information Dispute Mediation Committee: 1833-6972 (no area code) / www.kopico.go.kr
• Privacy Infringement Report Center (Korea Internet & Security Agency): 118 (no area code) / privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301 (no area code) / www.spo.go.kr
• Korean National Police Agency: 182 (no area code) / ecrm.cyber.go.kr

Article 17 (Changes to This Privacy Policy)

1. Where the contents of this Privacy Policy are added to, deleted, or modified, notice will be given within the Service or by notification from 7 days before the effective date.
2. Changes that materially affect users' rights, such as changes to the categories collected or the purposes of processing, will be announced 30 days before the effective date.

Supplementary Provisions

• Announced: June 15, 2026
• Effective: June 15, 2026