Privacy Policy

Kiuring Inc. (the "Company") complies with the privacy protection provisions of the applicable laws that providers of information and communications services must observe, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Personal Information Protection Act, the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Consumer Protection in Electronic Commerce, and does its best to protect users' rights through this Privacy Policy based on those laws.

1. Personal Information Processed and Purposes

We process the following for account authentication and management, AI conversations and personalization, purchases, refunds and entitlements, support, security and troubleshooting, usage analysis and the advertising measurement described below.

- Account: email, name or nickname, account and social identifiers, a profile photo URL when supplied, and profile information you provide such as age or gender.

- AI conversations: messages, AI replies, conversation history, relationship and preference memories, and context needed for replies.

- Support, reports and withdrawal: email, content and subject, withdrawal reasons and handling records.

- Purchases: products, amounts and currencies, order and transaction identifiers, store verification information, payment status and entitlements or balances.

- Operations: connection IP, request, response and error records, feature use, app, device and browser information, and response times. Operational records may include conversation, account or transaction information from requests.

- Website analytics: visitor and session identifiers, pages and features used, referral and campaign information.

- Optional app Firebase analytics and diagnostics: screen and feature outcomes, sessions and automatic purchase measurement, app and device information, installation identifiers, IP-derived approximate location, crash diagnostics and predefined error categories. We do not collect precise location through location permissions.

The information varies by social account and chosen feature. App Firebase consent is separate from AI conversation and account or purchase processing.

2. Rights of Data Subjects and How to Exercise Them

Users and their legal representatives may exercise the following rights regarding personal information. To access or correct your personal information, contact the privacy officer by phone or email and we will act without delay.

- Request to access personal information

- Request to correct errors

- Request to delete

- Request to suspend processing

3. Processing and Retention Period

Our retention policy is set out below. Deletion requests are handled after checking the retention basis and the records and scope involved. Records required by law are retained on that basis.

- Stored for 5 years from the last access date

- Stored for 1 year after account withdrawal

Withdrawal currently disables the account, clears key profile fields and revokes login sessions. Name, email, social identifier and reason are retained in a separate withdrawal record. Related conversations, memories, support and transactions are not all erased at that time. All related records are not automatically purged on withdrawal or merely because the periods above have elapsed.

To request deletion of your account and related information, contact contact@dearling.ai. After verifying your identity, we review the deletion scope and any retention exceptions and provide guidance.

4. Provision to Third Parties

External services used to provide Dearling are described in Section 5. For signup and purchases originating on the website, advertising measurement may send Meta those events, product, amount, currency and order information, hashed email and account identifiers, IP and browser information, and advertising cookie identifiers when present. Hashed identifiers can still match users. The iOS and Android apps use the Meta SDK for advertising measurement and may send Meta app install and launch, signup, store visit and App Store or Google Play in-app purchase (product, amount, currency) events, together with hashed email and account identifiers, app and OS version, device model and the Meta SDK installation identifier. Advertising identifiers (iOS IDFA, Android advertising ID) are sent on iOS only if you choose to allow app tracking, and on Android according to your device's advertising ID settings; you can change this at any time in iOS Settings › Privacy & Security › Tracking or Android Settings › Privacy › Ads. Chat content is never sent to Meta. Website advertising measurement is separate from the app's optional Firebase consent.

Information may also be provided with your consent, in response to lawful requests, or where necessary to address urgent risks to life or safety, in accordance with applicable law.

5. External Services Used to Process Information

The data sent depends on the feature and provider used.

- Amazon Web Services (AWS): hosting, databases, files and operational logs involving account, conversation, transaction, support and other information needed to operate the service.

- Google Firebase Analytics and Crashlytics: app usage analytics and crash or error diagnostics, each enabled by optional consent. Data includes installation identifiers, app and device information, and Analytics' IP-derived approximate location, sessions and automatic purchase measurement. Events and error reports sent directly by our app do not include chat text, names, email, authentication information or purchase receipts.

- OpenAI, Google, Anthropic and Venice: depending on the AI model and fallback, the relevant provider processes messages, context and memories for conversations, replies and memory processing. Not every provider receives every conversation. The app requires consent to AI data transmission before chat; you can withdraw it in MY settings.

- Slack: support, payment, error and slow-request notifications, which may include the relevant email, support content, parts of requests and responses, and transaction or error information.

- Apple, Google and Kakao: authentication and profile information for your chosen social login. Apple App Store and Google Play also process app purchases and transaction verification.

- Toss Payments or Stripe, as shown at checkout: website payments, recurring billing, cancellations and transaction checks involving transaction and customer identifiers, amount and currency, payment results and payment method information. These are separate from app store payments.

- Meta: advertising measurement information described in Section 4.

Information may be processed outside your country depending on the provider's terms and feature used. Contact the address in Section 9 about processing or deletion.

6. Deletion Procedure and Method

We determine records for deletion after checking retention periods, purposes and legal retention requirements. Account withdrawal and deletion of all related records are distinct; Section 3 describes the current scope.

Deletion Procedure

A deletion request is handled after identity verification and identification of the records. We check the basis and scope of records that need to be retained. This does not mean all database and operational records are automatically erased together when a retention period ends.

Deletion Method

Electronic records are handled through the relevant storage system's deletion process; paper records are shredded or incinerated. Records already sent to external providers may require separate processing under their procedures.

7. Security Measures

The Company regards the security of users' personal information as very important.

To prevent unauthorized access, disclosure, use, and alteration, the Company operates the following measures:

1. Encrypted communication of users' personal information

2. Encrypted storage of important information

3. Systems placed in areas with controlled external access to prevent leakage or damage by hacking or computer viruses

4. Measures to prevent forgery or alteration of access records

5. Access to personal information restricted to those whose duties require it

8. Automatic Collection and Changing Optional Consent

The website uses cookies and browser storage for login, language preferences and usage analytics. Visitor and session identifiers, page and feature usage and referral information are sent to our analytics server. Advertising cookies, when present, may be used for advertising measurement. You can block or clear cookies and site data in your browser, although login and other features may be affected. Clearing cookies does not delete account, transaction or existing server records.

In the app's MY screen, you can independently choose 'Share usage statistics' and 'Share error reports'. Both are off initially, and app features remain available without consent. Usage statistics may include IP-derived approximate location and SDK session and automatic purchase measurement. Firebase advertising ID collection and advertising personalization consent are disabled.

Withdrawal stops new app analytics and error submissions. On Android, fully close and reopen the app to stop automatic crash reporting. Withdrawal does not delete information already sent to Firebase. Account, conversation and purchase processing, server operational records, and website analytics and advertising measurement are handled separately from these app settings.

9. Privacy Officer and Customer Service

The Company takes overall responsibility for personal information processing and designates the following privacy officer and customer service department to handle users' complaints and provide remedies for damage related to personal information processing.

Privacy Officer

- Name: Taesung Kim

- Email: contact@dearling.ai

Users may direct inquiries, access requests, complaints, and remedy requests to the privacy officer and the responsible department. The Company responds and acts without delay.

For further reporting or consultation about privacy infringement, you may contact the following agencies:

- Personal Information Protection Commission: 118 (https://www.pipc.go.kr)

- Privacy Infringement Report Center: 118 (https://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee: 1833-6972 (https://kopico.go.kr)

- Supreme Prosecutors' Office Cyber Investigation Division: 1301 (https://spo.go.kr)

- National Police Agency Cyber Bureau: 182 (https://cyberbureau.police.go.kr)

10. Changes to This Privacy Policy

The Company may revise this Privacy Policy to reflect changes in laws or the service.

When revised, the Company posts the changes, and the revised policy takes effect 7 days after posting.

However, material changes such as the items collected or purposes of use are announced at least 30 days in advance.

This Privacy Policy applies from March 19, 2026.

- Announced: March 19, 2026

- Effective: March 19, 2026