Callog Privacy Policy

Effective April 29, 2025 · Operated by GKUER · Contact team.gkuer@gmail.com

Article 1 (Purpose of Processing Personal Information)

Callog (hereinafter referred to as "the Service") processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

1. Membership Registration and Management
   • To confirm the intention to sign up, provide member-only services, identify and authenticate users, maintain and manage membership qualifications, prevent misuse of services, and deliver various notices and notifications.
2. Provision of AI Counseling Services
   • To analyze diary and conversation data, perform emotion analysis, provide counseling services, and generate personalized responses.
3. Provision of Subscription Services
   • To provide paid subscription services, manage subscription information, and process payments.

Article 2 (Items of Personal Information Processed)

The Service collects and processes the following personal information items:

1. Required Items
   • Member Identification Information: Name, Firebase UID
   • Account Information: Social account information used for login (Google, Apple)
2. Optional Items
   • Profile Information: Email, Year of Birth, Gender
   • Conversation Data: Content of conversations between the user and AI, voice recordings (when using voice features)
   • Photo and Image Data: Photos and image files uploaded by users
   • Emotion Analysis Data: Emotional states analyzed through conversations, category information
   • Counseling Content Analysis Data: Conversation summaries, depression scores, inner state analysis
3. Payment Information
   • Subscription information provided by platforms when making payments through Apple App Store or Google Play (subscription start date, expiration date, platform, etc.)

Article 2-2 (Special Provisions Regarding Photo and Image Data Processing)

The Service processes photos and images uploaded by users as follows:

1. Purpose of Collection and Processing
   • Generate personalized responses through photo content analysis in AI diary services
   • Accurate understanding and analysis of users' emotional states and situations
   • Provide comprehensive analysis including visual elements of diary content
2. Processing Process
   • Photos uploaded by users are safely stored in AWS S3
   • Photos are sent to OpenAI's GPT model for content analysis
   • After analysis is completed, photos are immediately deleted from OpenAI servers, but stored in S3 linked to user accounts
3. Security and Access Restrictions
   • Photo files are safely accessed through Amazon S3
   • Secure transmission through HTTPS connections
4. User Rights
   • Users can request deletion of uploaded photos by contacting customer service or through account withdrawal
   • Users can choose not to use photo analysis features if they do not wish to
   • Users can receive transparent information about the photo data processing process

Article 3 (Retention and Use Period of Personal Information)

The Service processes and retains personal information within the period agreed upon when collecting personal information from the data subject or as required by law.

1. Member Information
   • Retained Items: Member identification information, profile information
   • Retention Period: Until membership withdrawal
2. Conversation and Analysis Data
   • Retained Items: Conversation content, emotion analysis data, counseling content analysis data
   • Retention Period: Until membership withdrawal (However, anonymized data may be retained for service improvement purposes even after withdrawal)
3. Photo and Image Data
   • Retained Items: Photos and image files uploaded by users
   • Retention Period: Until membership withdrawal (However, anonymized data may be retained for service improvement purposes even after withdrawal)
4. Withdrawn Member Information
   • Retained Items: Information of withdrawn members and conversation data
   • Retention Period: 1 year after withdrawal (for service recovery and dispute resolution purposes)
5. Payment Information
   • Retained Items: Subscription information
   • Retention Period: Retention period in accordance with the Act on Consumer Protection in Electronic Commerce, etc.

Article 4 (Provision of Personal Information to Third Parties)

The Service does not provide personal information to third parties without the separate consent of the data subject or unless required by law.

Article 5 (Entrustment of Personal Information Processing)

The Service entrusts personal information processing tasks as follows to provide services:

1. Firebase (Google LLC)
   • Entrusted Tasks: Member authentication and management
   • Retention and Use Period: Until membership withdrawal
2. Amazon Web Services, Inc.
   • Entrusted Tasks: Server hosting, database management (DynamoDB), photo and image file storage (S3)
   • Retention and Use Period: Until membership withdrawal
3. OpenAI
   • Entrusted Tasks: Conversation content analysis, response generation, voice conversion (TTS), photo and image content analysis
   • Retention and Use Period: Until the purpose of processing is achieved (immediately deleted after analysis)
4. Apple Inc., Google LLC
   • Entrusted Tasks: Payment and subscription management
   • Retention and Use Period: Until the end of the subscription

Article 6 (Rights of Data Subjects and Methods of Exercising Them)

Data subjects may exercise the following rights regarding personal information protection at any time with respect to the Service:

1. Request correction if there is an error
2. Request deletion
3. Request individual deletion of photo and image data

These rights can be exercised by email, and the Service will promptly take action without delay.

If the data subject requests correction or deletion of errors in their personal information, the Service will not use or provide the information until the correction or deletion is completed.

Article 7 (Measures to Ensure the Security of Personal Information)

The Service takes the following measures to ensure the security of personal information:

1. Administrative Measures
   • Use of AWS ID/PW security to ensure the stability of personal information processing
2. Technical Measures
   • Management of access rights to personal information processing systems
   • Encryption of personal information
   • Utilization of AWS and Firebase security systems
   • Secure storage and transmission of photo and image files (using S3 presigned URLs)
3. Physical Measures
   • Physical access restrictions to servers and databases

Article 8 (Installation, Operation, and Rejection of Automatic Collection Devices for Personal Information)

The Service uses cookies and similar technologies to store and retrieve user information from time to time.

1. Purpose of Use of Cookies
   • To analyze the user’s access frequency or time of visit, understand the user’s preferences and interests, and provide customized services
   • To provide personalized services by understanding usage history and visit frequency
2. How to Reject Cookie Settings
   • You can change the cookie settings in your web browser. However, doing so may limit the use of some services.

Article 9 (Personal Information Protection Officer)

The Service designates the following person as the Personal Information Protection Officer, responsible for overall personal information handling, complaint resolution, and damage relief related to personal information:

• Personal Information Protection Officer
  • Email: team.gkuer@gmail.com

Article 10 (Changes to the Privacy Policy)

This Privacy Policy will be effective from June 1, 2024. In the event of changes, advance notice will be given at least 7 days prior to the effective date.

Article 11 (Transfer of Personal Information Overseas)

To provide services, the Service transfers personal information overseas as follows:

1. Firebase (Google LLC)
   • Information Transferred: Member identification information, authentication information
   • Destination: United States
   • Time and Method of Transfer: Transmitted over the network at the time of service use
   • Purpose of Use: Member authentication and management
   • Retention and Use Period: Until membership withdrawal
2. OpenAI
   • Information Transferred: Conversation content, voice data, photo and image data
   • Destination: United States
   • Time and Method of Transfer: Transmitted over the network at the time of service use
   • Purpose of Use: Conversation analysis, response generation, voice conversion, photo and image content analysis
   • Retention and Use Period: Until the purpose of processing is achieved (immediately deleted after analysis)
3. Amazon Web Services, Inc.
   • Information Transferred: Photo and image files
   • Destination: United States (ap-northeast-2 region)
   • Time and Method of Transfer: Transmitted over the network at the time of photo upload
   • Purpose of Use: Storage and management of photo and image files
   • Retention and Use Period: Until membership withdrawal

Effective Date: April 29, 2025