Privacy Policy

Personal Information We Collect and Specific Purposes

Unstirred does not collect unnecessary sensitive information or real-time GPS location data. The Company lawfully collects only the information necessary to operate the Service, analyze usage, verify paid transactions, and serve advertisements. The principal categories are listed below.

1. User ID
   Specific data: social-login identifiers and a unique member number.
   Purpose: to identify an Account after Kakao, Google, Apple, or another social login and match the Account with the Supabase database for app functionality and analytics.

2. Name
   Specific data: user nickname and username.
   Purpose: to allow AI characters to address the Member in conversations and comments and to provide a personalized experience.

3. Email Address
   Specific data: email address.
   Purpose: to create an Account through Supabase Auth, authenticate the user, prevent duplicate registrations, provide important notices, and maintain security.

4. Photos or Videos
   Specific data: image files selected by the Member for feed posts.
   Purpose: to operate the core user-generated-content feature and allow AI models to analyze post context and generate relevant interactions.

5. In-App Purchases
   Specific data: subscription product ID, transaction ID, and purchase receipt.
   Purpose: to verify subscription status and tier, validate Coin purchases, enable paid features, support settlement, and respond to refund inquiries.

6. Device ID
   Specific data: push token, device model, and operating-system version.
   Purpose: to send real-time and scheduled notifications, including direct-message notifications, identify the device, and support app functionality and third-party advertising.

7. Advertising Data
   Specific data: advertising identifiers, including ADID or IDFA, and advertisement-viewing records.
   Purpose: to confirm delivery of Google AdMob advertisements, validate rewarded-advertising benefits, prevent abuse, and support third-party advertising.

8. Product Interaction
   Specific data: app launches, screen taps, scrolling activity, and similar interaction logs.
   Purpose: to optimize the timing of AI-character responses and analyze usability and service statistics.

9. Other Usage Data
   Specific data: post text, direct-message conversations, and keywords.
   Purpose: to process Member input within AI systems and generate detailed real-time virtual comments and replies that correspond to the input.

10. Crash Data
    Specific data: error records created when the application terminates abnormally.
    Purpose: to identify crash causes, debug the application, and provide stable updates.

11. Performance Data
    Specific data: initial loading speed and API response latency.
    Purpose: to monitor and optimize Expo-stack and network performance.

12. Other Diagnostic Data
    Specific data: Edge Function failure logs.
    Purpose: to prevent server-side API errors and verify the integrity of backend infrastructure.

13. Support Inquiries (unstirred.ai website)
    Specific data: email address, subject, and message content submitted through the support form.
    Purpose: to review and respond to the inquiry.
    How collected: voluntarily submitted by the user through the support form.
    Retention: three months after the inquiry is resolved.

Processing Service Providers and Overseas Transfers

The Company does not disclose or provide Members’ personal information to outside parties without authorization. However, to provide AI interaction features, operate cloud infrastructure, process in-app payments, deliver notifications, and serve advertising, the Company entrusts processing to and may transfer information overseas to the following specialized service providers.

• Supabase, Inc. — United States
  Purpose: user authentication, database storage, and storage infrastructure for photographs.
  Retention: until Account deletion or termination of the applicable service agreement.

• OpenAI, L.L.C. — United States
  Purpose: receiving Member photographs and caption text and processing them to generate real-time virtual comments.
  Retention: temporarily retained and then deleted in accordance with the provider’s policy and the applicable contract; configured not to be used for model training.

• Anthropic, PBC — United States
  Purpose: generating conversational direct-message text responses for virtual persona characters.
  Retention: temporarily retained and then deleted under the provider’s internal policy; configured not to be used for model training.

• Google LLC — United States
  Purpose: serving Google AdMob rewarded advertisements, processing advertising and device identifiers, settling Android in-app purchases, validating receipts, and delivering notifications through Firebase Cloud Messaging.

• Apple Inc. — United States
  Purpose: processing iOS in-app purchase settlements, validating subscription plans, and providing Apple Push Notification service infrastructure.

• Expo, Inc. — United States
  Purpose: operating cross-platform push-notification relay systems and processing push-token information.

Retention and Destruction of Personal Information

1. As a general rule, when a Member deletes an Account, the Company permanently deletes all collected personal information and uploaded data without the possibility of recovery.

2. Information required to be retained under Korean law, including the Act on the Consumer Protection in Electronic Commerce and the Commercial Act, will be stored separately and securely for the applicable statutory period and then destroyed.

• Records relating to payment and the supply of goods or services: five years.

• Records relating to contracts or withdrawal from purchases: five years.

• Records relating to consumer complaints or dispute resolution: three years.

• Service access logs: three months.

• Support inquiries submitted through the unstirred.ai website: three months after the inquiry is resolved.

3. To prevent repeated abuse involving fraudulent advertising rewards or circumvention of payment procedures, a minimum device identifier associated with a deleted Account may be securely stored separately for six months from the deletion date and then destroyed.

Your Rights and How to Exercise Them

1. Members may exercise rights to access, correct, delete, or withdraw consent to personal-information processing, and may delete an Account, through the following in-app paths.

• Access or correct profile information: My Page > Settings > Edit Profile.
• Withdraw consent or delete the Account: My Page > Settings > Account Management > Delete Account.

2. If a Member requests correction of inaccurate personal information, the Company will not use or provide the relevant information to an external party until the correction is completed.

Advertising Identifiers and Opting Out of Personalized Advertising

The Company uses device advertising identifiers to serve rewarded advertisements that provide Coins. Members may restrict personalized-advertising tracking through the device operating-system settings.

• iOS: Settings > Privacy & Security > Tracking, then disable tracking permission for Arloff.

• Android: Settings > Google > Ads, then reset or delete the advertising ID.

The exact menu names may vary depending on the operating-system version and device manufacturer.

Privacy Officer and Remedies

Unstirred’s Operations Team is responsible for personal information protection and handles privacy-related inquiries.

• Department: Operations Team
• Email: privacy@unstirred.ai

For specialized counseling or reports regarding infringement of personal-information rights in the Republic of Korea, Members may also contact the Personal Information Infringement Report Center operated by the Korea Internet & Security Agency at privacy.kisa.or.kr or 118, or the Personal Information Dispute Mediation Committee at koprc.go.kr or 1833-6972.

Effective Date and Business Information

This Policy is established and takes effect on 8 August 2026.