This is a previous version (1.1) of this document. See the latest version

Aria Privacy Policy

Lipson Inc. (“we”, “us”) operates Aria, a personal assistant app for iPhone, iPad and Mac (the “Service”). This policy explains what personal information we process when you use the Service, why, where it goes, and how you can control it.

• Posted: 2026-10-11 · Effective date: 2026-10-11
• This English version is a translation. The Korean version is the official version; if the two differ, the Korean version prevails to the extent permitted by the law that applies to you.

At a glance

1. What we process, why, and for how long

We process only what we need for the purposes below and do not use it for other purposes without a further legal basis.

1.1 Processed to provide the Service (no separate consent)

We process the following to perform our contract with you (to provide the Service you asked for). Server access logs are processed for our legitimate interest in keeping the Service secure, and records that a law requires us to keep are processed to comply with that legal obligation.

1.2 Processed with your consent (AI features)

Aria is an assistant built on generative AI, so AI processing is an essential part of the Service. Before anything is sent to an AI provider, the app shows which AI provider receives which information and when (including the destination country, the retention period and what happens if you decline) and asks for your explicit consent. New users consent in the AI step of initial setup; existing users who have not yet consented (including those who had AI features off in an earlier version) see a consent screen the next time they open the app. Nothing is sent to an AI provider before you consent.

• When it is sent: when you use an AI feature after consenting; while you use the Service, the app may also send it in the background to refresh briefings, organize content and build the search index.
• Identifiers: requests go through our server. We do not send your account identifier or email address to Anthropic or OpenAI.
• If you do not consent: you may decline, but AI processing is an essential part of the Service, so if you do not consent you cannot use the Service. Without consenting, you can still go from the consent screen to Settings to manage or delete your account.
• Withdrawing consent: you can withdraw your consent at any time in either of these ways.
  • In the app (deleting your account): In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and data are deleted from our server and your device (Section 2), transfers to AI providers end, and so does your use of the Service.
  • Stopping AI processing while keeping your account (by email): Email our privacy officer at contact@lipson.kr (Section 10). Once we record the withdrawal for your account on our server, our server refuses AI requests from that account, and each of your devices returns to the consent screen at its next AI request. You cannot use the Service until you consent again. Results already created (chat history, memories, embeddings, etc.) stay on our server until you delete them or your account.
• Age: People under 14 may not use the Service (Section 11).
• No training: we do not use your content to train AI models, and Anthropic and OpenAI do not use it to train their models under their commercial terms and policies.

1.3 Processing our server does automatically

Our server does not send your content to external AI providers on its own (there are no automatic server summaries or tags). Content is sent to an AI provider only by the app, and only after you consent to AI processing (Section 1.2). Our server records your account’s most recent AI consent decision and when it was made (Section 1.1), and uses it only to confirm consent and to refuse AI requests from an account whose consent has been withdrawn.

1.4 Device features (permissions)

• Location
  • Location reminders: When you create a location reminder, the name and coordinates of the place you pick on the map or search for, or of your device’s position when you tap “Use current location”, are stored with the reminder on our server and synced (Section 1.1). Your device decides when a reminder fires; your movements and real-time location are not sent to our server.
  • Attaching your current location in a chat: If you choose “Current location” from the attachment menu in an AI chat, the name and coordinates of your device’s position are included in that message, stored with your chat history on our server, and sent to Anthropic to generate the reply. If you do not choose it, no location is included in the chat.
  • Weather: To show weather, your device sends your current location rounded to two decimal places (about 1 km) directly to Open-Meteo; these coordinates are not sent to our server and we do not collect them. To show an area name (such as a city name) on the dashboard weather card, your device also sends the same rounded coordinates to Apple’s map service and receives the name of that area. It does this only when it does not have a name yet or when the rounded coordinates or the app language change; the name is stored only on your device and is not sent to our server or to AI providers. AI providers receive a weather summary sentence, not coordinates. A weather card shown in an AI chat (weather values, and a place name if the AI named one) is stored with that chat history.
• Calendar: The app shows events from your device calendar and adds or changes events you ask for. Calendar events themselves are not synced to our server. However, the title, time and place of events you look up, add or change in an AI chat are stored with that chat history and sent to Anthropic.
• Health (read-only): Step count and sleep data are used only to show cards in the weekly review and are processed only on your device. They are never sent to our server or to AI providers, never used for advertising, and nothing is written to the Health app.
• Microphone and speech recognition: Used for voice memos and dictation. Audio recordings stay on your device; only the transcript is synced. Transcription runs on your device; if your device cannot transcribe on its own, audio may be sent to Apple’s speech recognition service, which is governed by Apple’s privacy policy.
• Camera and photos: Used to take or choose photos to attach. The app does not request access to your whole photo library; it processes only the photos you choose.
• Notifications: Used for reminders, briefings and check-ins. Your remote push token is not sent to our server.

1.5 Information kept only on your device (we do not collect it)

Mood check-in scores, voice recordings, health data, the name received when you sign in with Apple (used to address you in the app), nickname, interests and tone settings, and app settings are stored only on your device. However, the items listed in Section 1.2 (nickname, interests, tone; weekly average mood score) are sent to Anthropic with your AI requests.

1.6 When your device connects to other services directly

• Link previews: To fetch the title and preview image of a link you save, your device connects directly to that website, which receives ordinary connection information such as your IP address.
• Weather: Your device requests weather from Open-Meteo as described in Section 1.4 (see Section 5).
• Apple: Sign in with Apple, App Store payments and subscription management, the speech recognition fallback, and Apple’s map service (showing maps and searching for places, finding the place name for a location reminder or a location you attach in a chat, and the area name on the weather card) are handled by Apple under Apple’s privacy policy. We never receive your payment card details.

2. Deletion

1. Principle: We delete personal information without delay when it is no longer needed, for example when the retention period ends or the purpose has been achieved.
2. Deleting your account: In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and its data on our server (all synced data, attachments, subscription verification records and usage counts) are deleted immediately, your Sign in with Apple authorization is revoked, and the data on that device is erased. This cannot be undone.
3. Backups: Deleted data may remain in disaster-recovery database backups for up to 8 days until those backups are automatically replaced. Backups are used only for disaster recovery.
4. Items you delete individually: They are removed from your device immediately (or after the trash period, where the app has a trash). Our server keeps a deletion marker so your other devices stay in sync. Currently the content of those items also remains on the server until you delete your account; we do not use it for anything other than sync. To have it erased from the server now, delete your account or contact us (Section 10).
5. Signing out: Signing out of your Apple account erases Aria data on that device. Your data stays in your account on the server and is restored when you sign in again. Content already shown in a Home Screen widget may remain until the widget refreshes.
6. Guest accounts: A guest account can be reached only from the device that created it. Before deleting the app, use Settings → Account → “Delete all my data” to erase your server data. If the app is deleted first, we hold nothing that links that guest account to you, so we may be unable to find and delete it even if you ask.
7. Method: Electronic data is deleted from our database and storage so that it cannot be restored. We do not keep personal information on paper.
8. Retention required by law: Subscription payments and receipts are handled and kept by Apple; we do not hold payment methods or payment amounts. Records of consumer complaints and disputes that we receive by email are kept for 3 years under Article 6(1)(4) of the Enforcement Decree of the Korean Act on the Consumer Protection in Electronic Commerce, separately from other information, even if you delete your account, and then deleted. If any other law requires us to keep information, we likewise keep it separately for the period required and then delete it.

3. Disclosure to third parties

We do not sell or provide your personal information to third parties, except where the law specifically requires or permits it.

4. Service providers (processors)

We use the following service providers to run the Service.

We engage these providers under their terms of service and data processing terms, and we are completing, for each provider, a written agreement that covers every item required by Article 26(1) of the Korean Personal Information Protection Act (processing only for the entrusted purpose, security measures, limits on onward processing, our oversight, and responsibility for damages). They may use sub-processors they publicly disclose (for example, cloud infrastructure). We will update this policy if our providers change.

5. International transfers

Your information is stored and processed outside your country, including outside Korea. For users in Korea, we disclose the items below under Article 28-8(1)(3)(a) and (2) of the Personal Information Protection Act. Transfers to the AI providers (Anthropic and OpenAI) additionally depend on the consent you give before the app sends anything to them (Section 1.2).

How to refuse a transfer, and what happens

• Anthropic and OpenAI: AI processing is an essential part of the Service, so you cannot use the Service if you refuse these transfers. To refuse, do not consent on the consent screen, or, if you have already consented, withdraw your consent in one of the ways in Section 10 (deleting your account, or by email). The effect of withdrawal is described in Section 1.2 (Withdrawing consent).
• Supabase: Storage is essential to the Service, so we cannot provide the Service without this transfer. If you object, stop using the Service and delete your account in Settings → Account.

Direct connections from your device: For weather, your device sends rounded coordinates (about 1 km) directly to OpenMeteo GmbH (Switzerland, info@open-meteo.com). We do not receive or store them. Open-Meteo states that its troubleshooting server logs, which may contain coordinates and IP addresses, are deleted after 90 days. To show an area name on the weather card, your device also sends the same rounded coordinates to Apple’s map service (Section 1.4), which is governed by Apple’s privacy policy. If you prefer not to, do not allow location access or do not use the weather feature.

6. Sensitive information

We do not ask for consent to collect sensitive information, and Apple Health data stays on your device. If you choose to write sensitive things (for example about health or beliefs) in notes or chats, they are processed only to provide the Service (storage and sync, and AI processing) and may appear in the “memories” the AI keeps from conversations. The Service has no feature that shows your content to other people. You can avoid entering such content, and you can review and delete memories in Settings → AI → “Memory”.

7. Security

• Organizational: access to personal information limited to the minimum number of people.
• Technical: encryption of all data in transit (TLS), per-account access control (row-level security), restricted access to server administration credentials and keys, encryption of stored data, private storage for attachments, retention of server access logs (up to 7 days).
• Physical: data is kept in cloud data centers operated by our provider (Supabase), whose security programs cover physical access control. We do not run our own server rooms.

No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach as required by law.

8. Cookies and similar technologies

• The app does not use cookies, does not collect the advertising identifier (IDFA), does not include analytics, advertising or tracking SDKs, and does not ask for App Tracking Transparency permission.
• To keep you signed in, the app stores an authentication token on your device. It is strictly necessary and is removed when you sign out or delete your account.
• The website that hosts this policy does not use cookies or analytics. Its hosting provider (GitHub, Inc.) may keep ordinary access logs such as IP addresses for security and operations.
• We do not collect, use or provide behavioral information for targeted advertising.

9. Automated decisions

We do not make decisions based solely on automated processing that significantly affect your rights or obligations. AI replies, organizing and classifications are assistive features that you can review, edit or delete. Free usage limits are applied only by counting requests.

10. Your rights and how to exercise them

1. You can ask to access, correct, delete, or stop the processing of your personal information, and you can withdraw consent at any time.
2. In the app
   • View, edit or delete your content: directly on each screen
   • Review or delete AI memories: Settings → AI → “Memory”
   • Withdraw AI consent: Settings → Account → “Delete account” or “Delete all my data” (your account and data are deleted and your use of the Service ends). To stop AI processing while keeping your account, email us as described in item 3 (Section 1.2).
   • Delete your account and all data: Settings → Account → “Delete account” or “Delete all my data”
3. By email: For requests you cannot complete in the app (for example, accessing information stored only on our server, stopping processing, or withdrawing AI consent while keeping your account), email our privacy officer at contact@lipson.kr. We act within 10 days of receiving your request (or within the shorter period required by the law that applies to you) and tell you the result. If we need more time for a legitimate reason, we will tell you why and when. We may ask for information to confirm that the request comes from you or your authorized representative.
4. Representatives: You may exercise your rights through a legal guardian or an authorized agent with written authorization.
5. Limits: A request may be limited where the law allows (for example, where another law requires the information to be kept). We will tell you the reason.
6. Your responsibility: When you enter information about other people (for example, a friend’s name and notes in “People”), please respect their rights.

11. Children

The Service is intended for people aged 14 and over. We do not offer a parental-consent process, and people under 14 may not use the Service. If the law where you live sets a higher age for consenting to the processing of personal information, you must meet that age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 14 (or under 13), we will delete the account and its data without delay. A parent or guardian can ask us to delete it using the contact details in Section 12.

12. Privacy officer and contact

13. Complaints

You can contact the privacy officer above at any time. Users in Korea may also contact the Personal Information Dispute Mediation Committee (+82-1833-6972, www.kopico.go.kr), the Korea Internet & Security Agency privacy center (dial 118 in Korea, privacy.kisa.or.kr), the Supreme Prosecutors’ Office (1301) or the Korean National Police Agency cyber bureau (182, ecrm.police.go.kr). Users elsewhere may contact their local data protection authority (see Section 15).

14. Device permissions

All permissions are optional and are requested by the operating system when you first use the related feature. If you decline, everything except that feature keeps working, and you can change your choice at any time in your device’s Settings.

15. Additional information for specific regions

Users in the European Economic Area, the United Kingdom and Switzerland

• Controller: Lipson Inc., 3F, 16 Eonju-ro 147-gil, Gangnam-gu, Seoul 06048, Republic of Korea, contact@lipson.kr.
• Legal bases: performance of our contract with you (Section 1.1, Art. 6(1)(b) GDPR); your consent for AI processing (Section 1.2, Art. 6(1)(a)); our legitimate interests in security and preventing abuse (access logs and usage counts, Art. 6(1)(f)); and compliance with legal obligations where applicable (Art. 6(1)(c)). AI processing is at the core of the Service, so if you do not give that consent, or withdraw it, you can no longer use the Service. You can withdraw consent at any time (Section 1.2); withdrawal does not affect the lawfulness of processing before it.
• Transfers: Our providers store and process your information in the United States (Section 5). We do not rely on an EU adequacy decision for these transfers. Our providers offer data processing terms that include the European Commission’s Standard Contractual Clauses, and we are completing them with each provider (see Section 4). You can ask us for more information about these safeguards.
• Your rights: access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. Email contact@lipson.kr; we respond within one month. You also have the right to lodge a complaint with the supervisory authority where you live or work.

Users in the United States (including California)

• In the past 12 months we have collected the categories of information described in Section 1: identifiers (account ID, Apple email), commercial information (subscription status), user content, usage information (daily AI request counts), internet activity (server access logs), the precise location of places you set for reminders or attach in a chat, and the content of inquiries you send us. We collect them from you and your device, for the purposes in Section 1, and disclose them only to the service providers in Section 4.
• We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit.
• Do Not Track: We do not track you across other websites or apps, so we do not respond differently to Do Not Track signals.
• Depending on your state, you may have the right to know, access, correct and delete your information, and not to be discriminated against for exercising these rights. Email contact@lipson.kr.

16. Changes to this policy

We will announce changes in the app or on the website that hosts this policy at least 7 days before they take effect (30 days for changes that are unfavorable to you or significant). Previous versions remain available on that website.