Privacy Policy

1. Personal Information We Collect

1.1 Information collected automatically

The app installation identifier is a random value that is not linked to a user’s name, email address, or telephone number, and it disappears when the app is deleted. The Service does not create user accounts and operates anonymously.

1.2 User-generated Content

• Study-deck and card content
• Requests submitted to generate AI study decks
• Card questions, answers, and attached images when sharing (exporting) a deck

Stored only on the device:

Study-deck and card content is stored through the user’s Apple account in iCloud on iOS and in internal device storage on Android. This content itself is not transmitted to the Company’s servers.

Transmitted to the Company’s servers:

Content submitted for AI study-deck generation and, when a user chooses to share (export) a deck, that deck’s card content and attached images are transmitted and stored. Both features operate only when the user initiates them.

1.3 Payment information

Payments for paid services are processed through the Apple App Store on iOS and Google Play on Android, and subscription status is managed by RevenueCat. The Company does not access payment-method information such as card or bank-account numbers and only checks anonymized subscription information needed to confirm payment status.

2. Purposes for Using Personal Information

• Providing and maintaining the Service
• Providing AI study-deck generation
• Providing deck sharing (export and import)
• Verifying subscription status and providing paid features
• Responding to user inquiries
• Service usage statistics and analysis
• Correcting app errors and improving performance
• Personalized advertising for free users

3. Third-Party Service Providers

The Company uses the following third-party services to provide the Service:

Content submitted to generate an AI study deck is sent to OpenAI for question generation. Information that identifies the user is not sent with it.

4. Retention and Destruction of Personal Information

4.1 Retention periods

iCloud data (iOS):

Until the user deletes it, subject to Apple’s policies

Data stored internally on the device (Android):

Until the user deletes it or removes the app

AI study-deck generation records:

One year after generation

Shared (exported) decks:

Until the user deletes the share

App usage statistics (iOS):

Two years after collection

Error logs (iOS):

90 days after collection

4.2 Destruction process

Personal information is destroyed without delay once its retention period expires or its processing purpose has been achieved. Information in electronic-file form is deleted by a method that prevents recovery.

5. User Rights

Users may exercise the following rights:

Delete data:

Delete all study-deck data stored on the device through Settings > Reset All Data in the app (iOS · Android).

Delete cloud data:

On iOS, app data can be deleted in iCloud account settings. Android does not store this data in the cloud, so it is removed with the app.

Limit advertising tracking:

On iOS, personalized advertising can be limited under Settings > Privacy & Security > Tracking; on Android, under Settings > Privacy > Ads.

Request information or deletion of server data:

Use the contact email below to request access to collected personal information or deletion of AI generation records and shared decks stored on the server.

6. Children’s Privacy

The Service is intended for users aged 18 and older and is not directed to children under 14. The Company does not knowingly collect personal information from children under 14. If the Company learns that such information has been collected, it will delete it immediately.

7. Measures to Protect Personal Information

The Company takes the following measures to protect personal information:

• SSL/TLS encryption during data transmission
• Secure storage through iCloud on iOS and app-specific internal storage on Android
• Use of anonymous identifiers without creating user accounts
• Collection of only the minimum personal information needed
• Regular security reviews

8. Changes to This Privacy Policy

If this Privacy Policy changes, the Company will announce the changes through a notice in the app or an app update. Material changes will be announced seven days before their effective date.

The Korean version of this Policy is the original. Translations are provided for convenience, and to the extent permitted by applicable law, the Korean version prevails if a translation differs from it.

9. Privacy Officer

kyulabs · Privacy inquiries: kyulabs@kyulabs.app

Users who need remedies or counseling for a privacy infringement may contact the following Korean institutions:

• Personal Information Infringement Report Center: 118 (without area code)
• Personal Information Dispute Mediation Committee: 1833-6972
• Supreme Prosecutors’ Office Cyber Investigation Division: 1301 (without area code)
• Korean National Police Agency Cyber Safety Bureau: 182 (without area code)