Privacy Policy
This is a draft. It will be reviewed by a lawyer before official launch.
1. Personal Data We Collect
Email, password (stored encrypted), profile photo, birth year (age), gender, city, letter/reply content, and access logs & device information.
2. Purpose of Use
- Member identification and login
- Letter matching & delivery (based on country, age, gender conditions)
- Service operation/improvement, safety (reports, abuse prevention)
- Email notifications (e.g., reply received, with consent)
3. Retention & Deletion
On account deletion, your personal data is deleted without delay (right to be forgotten). Data with legal retention obligations is kept for the required period, then deleted.
4. Third Parties & Processors
- We do not share personal data with third parties without consent.
- We may delegate cloud hosting and email delivery for operations; such delegation will be stated in this policy.
5. Your Rights
You may request access, correction, deletion, or suspension of processing of your personal data (via the in-app profile and account-deletion features).
6. Security Measures
- One-way password encryption, encrypted transport (HTTPS)
- Access controls, data minimization
- Location collected only to city level (no precise coordinates/address)
7. Children’s Data
We do not collect data from anyone under the age of 18.
8. International Transfer
When operating across countries (Korea, Japan, etc.), personal data may be stored and processed on overseas servers.
9. Data Protection Officer
Contact: [to be added at launch]