Dearytale Privacy Policy

Effective: November 1, 2026 (v2026-11-01)

1. Information we collect

• Sign-in: the account ID provided by Apple or Google and your email (a hidden relay address if you use Apple's Hide My Email)
• What you write: diary text you send to become a tale, the text and pictures of tales, shelf settings (character, art style, hero name, reader) and the cast list
• What you choose (optional): MBTI, gender and age group (yours and your hero's), tale language, delivery time, consent to news notifications
• Reading together (optional): invitations you send to read a storybook together, and the account IDs of the people reading along. They see only the tales in that storybook, never your diary.
• Created automatically: your phone's time zone, push token, badge records, how often you open a tale and whether you read it to the end, ratings and notes you leave, access and error logs, subscription records (purchase IDs and periods from the app store; we never receive card numbers)

Diary drafts stay on your phone and are not sent to our servers.

• Launch alerts on our website (optional): the email you leave on dearytale.com, the language you chose and the country you visited from, even if you don't use the app. Used only to send one launch announcement.
• Dictation (optional): your phone's speech recognition (Apple or Google) turns your voice into text. We never receive your voice, only the text that appears in the diary box.
• Photos attached to a diary (optional, up to 3): used only as a reference for your story. We use them once to describe in words the place, its mood, and where people stand and how they pose, then delete them right away. We never store the photos, never describe faces, looks, clothing or sign text, and never make characters from them. Only those words remain, encrypted like your diary.

2. Sensitive information

Diaries may include information the law treats as sensitive, such as health, feelings, religion or family matters. We do not deliberately collect it, but if you write it we process it to make your tale.

That is why we ask for separate consent at sign-up. Without it we cannot make tales, so you cannot sign up.

Sensitive information is used only to make and show your tales and for no other purpose.

3. How we use it

• Making and reviewing tales from diaries, morning delivery and notifications
• Sign-in, account management, subscriptions and tale counts
• Fixing problems, preventing abuse and answering inquiries
• Improving tale quality: we keep only the reasons a review flagged a tale, without knowing who wrote it (never the original diary)
• News and event notifications: only if you consent separately

4. Retention and deletion

We keep your information until you delete your account and delete it immediately when you do. Copies in server backups are deleted within 30 days.

Records the law requires us to keep are stored separately only for that period: contract, withdrawal and payment records for 5 years, consumer complaint and dispute records for 3 years (Korean E-Commerce Act), and access logs for 3 months (Korean Protection of Communications Secrets Act).

So the free trial can't be repeated by deleting and recreating an account, when you delete your account we keep your Apple or Google sign-in ID in a form that can't be reversed (a hash), together with your trial start date and how many tales you used. We don't keep your diary, email or name, and this record can't identify you.

Launch-alert emails are deleted right after the launch announcement is sent, or sooner if you ask.

Deleted records are erased so they cannot be restored.

5. Sharing with others

We do not sell or give your information to other companies, except when a government authority requests it through the legally required procedure.

6. Service providers and international transfers

We entrust some work to the companies below, and your information is transferred to their servers outside your country. Information is sent over encrypted internet connections when tales are made or notifications are sent.

• Anthropic, PBC (USA, privacy@anthropic.com): writing and reviewing tale text. Sent: diary text, photos attached to a diary (optional), shelf settings, summaries of past stories. Not used to train AI; deleted after its retention period (up to 30 days).
• Cloudflare, Inc. (USA and Cloudflare data centers, privacyquestions@cloudflare.com): running servers, storing data, making pictures (Workers AI). Sent: all service data (original diaries encrypted) and picture prompts. Kept until you delete your account.
• 650 Industries, Inc. (Expo) (USA, privacy@expo.dev): sending notifications. Sent: push token and notification text. Deleted after sending.
• RevenueCat, Inc. (USA, privacy@revenuecat.com): verifying subscription purchases. Sent: account number (no name or email) and app store purchase records. Kept until you delete your account.
• Apple Inc. and Google LLC (USA): sign-in, subscription payments, notification delivery and dictation (your phone's speech recognition), under the terms you have with them.

If you do not want your information transferred abroad, you can delete your account; we cannot make tales without it.

7. Your rights

You can ask at any time to access, correct, delete or stop processing your information. Most of this can be done directly in the app (deleting diaries and tale books, Settings → Delete account); for anything else, email us and we will act within 10 days.

You may also make requests through a legal representative or an authorized agent. Depending on where you live (for example the EU, UK, California or Japan), you may have additional rights such as data portability or complaining to your local data protection authority.

8. How we protect it

• Original diary text is encrypted with AES-GCM and opened only to make tales
• Sign-in tokens are stored only as irreversible hashes
• All connections are encrypted (HTTPS)
• The operator does not read original diaries, except when you allow it while asking for help, or when the law requires
• Server access is limited to the minimum number of people and logged

9. Automatic collection

The app does not use cookies or advertising identifiers and does not track you for ads or across other apps.

10. Children

People under 14 (or the higher age of digital consent in your country) cannot sign up. If we learn we have collected such a person's information, we delete it right away.

11. Privacy officer

• Privacy officer: SUH KANGWON (Representative)
• Email: hello@dearytale.com

In Korea you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr).

12. Changes

This Policy takes effect on November 1, 2026. We announce changes in the app at least 7 days in advance (30 days for important changes).

Operator

WoodK · Representative SUH KANGWON · Business registration 711-61-01056 · Mail-order registration 제2025-경기김포-5428호

Room 230, 2F, Cotton Bldg., 25 Pungmu 2-ro, Gimpo-si, Gyeonggi-do, Republic of Korea · hello@dearytale.com