This is a previous version (1.2) of this document. See the latest version

Aria Privacy Policy

Lipson Inc. (“we”, “us”) operates Aria, a personal assistant app for iPhone, iPad and Mac (the “Service”). This policy explains what personal information we process when you use the Service, why, where it goes, and how you can control it.

• Posted: 2026-10-13 · Effective date: 2026-10-13
• This English version is a translation. The Korean version is the official version; if the two differ, the Korean version prevails to the extent permitted by the law that applies to you.

At a glance

1. What we process, why, and for how long

We process only what we need for the purposes below and do not use it for other purposes without a further legal basis.

1.1 Processed to provide the Service (no separate consent)

We process the following to perform our contract with you (to provide the Service you asked for). Server access logs are processed for our legitimate interest in keeping the Service secure, and records that a law requires us to keep are processed to comply with that legal obligation.

1.2 Processed with your consent (AI features)

Aria is an assistant built on generative AI, so AI processing is an essential part of the Service. Before anything is sent to an AI provider, the app shows which AI provider receives which information and when (including the destination country, the retention period and what happens if you decline) and asks for your explicit consent. New users consent in the AI step of initial setup; existing users who have not yet consented (including those who had AI features off in an earlier version) see a consent screen the next time they open the app. Nothing is sent to an AI provider before you consent.

• When it is sent: when you use an AI feature after consenting; while you use the Service, the app may also send it in the background to refresh briefings, organize content and build the search index.
• Identifiers: requests go through our server. We do not send your account identifier or email address to Anthropic or OpenAI.
• If you do not consent: you may decline, but AI processing is an essential part of the Service, so if you do not consent you cannot use the Service. Without consenting, you can still go from the consent screen to Settings to manage or delete your account.
• Withdrawing consent: you can withdraw your consent at any time in any of these ways. You can check your app version in Settings → Info → “Version”.
  • In the app, keeping your account (app version 1.1 or later): In Settings → AI, tap “Withdraw AI Consent” and confirm. That device immediately stops sending anything to AI providers and returns to the consent screen, and the withdrawal is recorded on our server (as soon as the device is online). From then on our server refuses AI requests from that account, and your other devices return to the consent screen at their next AI request. You cannot use the Service until you consent again. Your records, such as tasks and notes, and results already created (chat history, memories, embeddings, etc.) are not deleted; they stay on our server until you delete them or your account.
  • By email (app version 1.0 and other earlier versions): Earlier versions do not have that menu, so email our privacy officer at contact@lipson.kr (Section 10). You may also use email with any version. Once we record the withdrawal for your account on our server, the effect is the same as above (each of your devices returns to the consent screen at its next AI request).
  • Deleting your account (any version): In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and data are deleted from our server and your device (Section 2), transfers to AI providers end, and so does your use of the Service.
• Age: People under 14 may not use the Service (Section 11).
• No training: we do not use your content to train AI models, and Anthropic and OpenAI do not use it to train their models under their commercial terms and policies.

1.3 Processing our server does automatically

Our server does not send your content to external AI providers on its own (there are no automatic server summaries or tags). Content is sent to an AI provider only by the app, and only after you consent to AI processing (Section 1.2). Our server records your account’s most recent AI consent decision and when it was made (Section 1.1), and uses it only to confirm consent and to refuse AI requests from an account whose consent has been withdrawn.

1.4 Device features (permissions)

• Location
  • Location permission: From app version 1.1, the app requests location permission only “While Using the App”, and location reminders work with that permission. App version 1.0 also asked for “Always” permission when you created a location reminder (Section 14).
  • Location reminders: When you add a location reminder to a task or routine, app version 1.1 or later stores and syncs only the place name with the reminder on our server (the name of a place you searched for and chose, an area name, or “Current location” / “Selected location”) (Section 1.1); the place’s coordinates are stored only on that device. On your other devices, choose the place again for the reminder to fire there. Version 1.0 stored and synced the place’s name together with its coordinates. Your device decides when a reminder fires; your movements and real-time location are not sent to our server.
  • Attaching your current location in a chat: If you choose “Current location” from the attachment menu in an AI chat, app version 1.1 or later includes only the area name of your device’s position (neighborhood and district) in that message, stores it with your chat history on our server, and sends it to Anthropic to generate the reply. The coordinates are stored only on that device and are used only for its map preview and location reminders; your other devices show the area name only. Version 1.0 sent the place name together with the coordinates. If you do not choose it, no location is included in the chat.
  • Coordinates sent by app version 1.0: Coordinates that version 1.0 sent with chat attachments and location reminders may remain on our server until you ask us to delete them (Section 10) or delete your account. Version 1.1 or later does not include coordinates from earlier chats in AI requests or search embeddings, and when that device syncs such a chat or reminder again, the server copy is overwritten without coordinates.
  • Weather: To show weather, your device sends your current location rounded to two decimal places (about 1 km) directly to a weather service: Apple’s weather service (WeatherKit) in app version 1.1 or later, and Open-Meteo in version 1.0. These coordinates are not sent to our server and we do not collect them. To show an area name (such as a city name) on the dashboard weather card, your device also sends the same rounded coordinates to Apple’s map service and receives the name of that area. It does this only when it does not have a name yet or when the rounded coordinates or the app language change; the name is stored only on your device and is not sent to our server or to AI providers. AI providers receive a weather summary sentence, not coordinates. A weather card shown in an AI chat (weather values, and a place name if the AI named one) is stored with that chat history.
• Calendar: The app shows events from your device calendar and adds or changes events you ask for. Calendar events themselves are not synced to our server. However, the title, time and place of events you look up, add or change in an AI chat are stored with that chat history and sent to Anthropic.
• Health (read-only): Step count and sleep data are used only to show, in the Weekly Briefing, how they relate to the tasks you complete, and the calculation happens only on your device. They are never sent to our server or to AI providers (they are not included in the AI-written text of the Weekly Briefing either), never used for advertising, and nothing is written to the Health app.
• Microphone and speech recognition: Used for voice memos and dictation. Audio recordings stay on your device; only the transcript is synced. Transcription runs on your device; if your device cannot transcribe on its own, audio may be sent to Apple’s speech recognition service, which is governed by Apple’s privacy policy.
• Camera and photos: Used to take or choose photos to attach. The app does not request access to your whole photo library; it processes only the photos you choose.
• Notifications: Used for reminders, briefings and check-ins. Your remote push token is not sent to our server.

1.5 Information kept only on your device (we do not collect it)

Mood check-in scores, voice recordings, health data, the name received when you sign in with Apple (used to address you in the app), nickname, interests and tone settings, and app settings are stored only on your device. However, the items listed in Section 1.2 (nickname, interests, tone; weekly average mood score) are sent to Anthropic with your AI requests.

1.6 When your device connects to other services directly

• Link previews: To fetch the title and preview image of a link you save, your device connects directly to that website, which receives ordinary connection information such as your IP address.
• Weather: Your device requests weather directly from a weather service (Apple WeatherKit in app version 1.1 or later; Open-Meteo in version 1.0) as described in Section 1.4 (see Section 5).
• Apple: Sign in with Apple, App Store payments and subscription management, the speech recognition fallback, Apple’s map service (showing maps and searching for places, finding the place name for a location reminder or a location you attach in a chat, and the area name on the weather card), and Apple’s weather service (WeatherKit — weather data in app version 1.1 or later) are handled by Apple under Apple’s privacy policy. We never receive your payment card details.
• Meta (iPhone and iPad app version 1.1 or later): The ad measurement information in Section 1.7 is sent by your device directly to Meta’s servers. Nothing is sent if you turn off Settings → Privacy → “Ad Measurement”.

1.7 Ad measurement (iPhone and iPad app version 1.1 or later; you can opt out)

To see whether our ads on Meta (such as Instagram and Facebook) lead to installs and subscriptions, the iPhone and iPad app (version 1.1 or later) includes the SDK of Meta Platforms, Inc. (the Meta SDK), and your device sends the information below to Meta (a disclosure to a third party, Section 3, and an international transfer, Section 5). We rely on our legitimate interest in measuring our advertising (for users in Korea, Article 15(1)(6) and Article 17(1)(2) of the Personal Information Protection Act), and you can opt out at any time as described below.

• What is never sent: your name, email, Aria account identifier, advertising identifier (IDFA), location coordinates, or the content you create (tasks, notes, chats, etc.). The app does not ask for App Tracking Transparency permission.
• When it is sent: when you open the app (including the first launch after installing), when a free trial of a new subscription starts, and when you subscribe directly or a free trial first converts to a paid subscription (once per subscription). Renewals and restored purchases are not sent.
• How to opt out, and what happens: turn off Settings → Privacy → “Ad Measurement”, and that device sends nothing more to Meta. The setting applies to each device separately and is on by default. Opting out does not limit the Service.
• Mac app and app version 1.0: they do not include the Meta SDK and do not send this information.

2. Deletion

1. Principle: We delete personal information without delay when it is no longer needed, for example when the retention period ends or the purpose has been achieved.
2. Deleting your account: In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and its data on our server (all synced data, attachments, subscription verification records and usage counts) are deleted immediately, your Sign in with Apple authorization is revoked, and the data on that device is erased. This cannot be undone.
3. Backups: Deleted data may remain in disaster-recovery database backups for up to 8 days until those backups are automatically replaced. Backups are used only for disaster recovery.
4. Items you delete individually: They are removed from your device immediately (or after the trash period, where the app has a trash). Our server keeps a deletion marker so your other devices stay in sync. Currently the content of those items also remains on the server until you delete your account; we do not use it for anything other than sync. To have it erased from the server now, delete your account or contact us (Section 10).
5. Signing out: Signing out of your Apple account erases Aria data on that device. Your data stays in your account on the server and is restored when you sign in again. Content already shown in a Home Screen widget may remain until the widget refreshes.
6. Guest accounts: A guest account can be reached only from the device that created it. Before deleting the app, use Settings → Account → “Delete all my data” to erase your server data. If the app is deleted first, we hold nothing that links that guest account to you, so we may be unable to find and delete it even if you ask.
7. Method: Electronic data is deleted from our database and storage so that it cannot be restored. We do not keep personal information on paper.
8. Retention required by law: Subscription payments and receipts are handled and kept by Apple; we do not hold payment methods or payment amounts. Records of consumer complaints and disputes that we receive by email are kept for 3 years under Article 6(1)(4) of the Enforcement Decree of the Korean Act on the Consumer Protection in Electronic Commerce, separately from other information, even if you delete your account, and then deleted. If any other law requires us to keep information, we likewise keep it separately for the period required and then delete it.

3. Disclosure to third parties

We do not sell your personal information, and we do not provide it to third parties except as shown below or where the law specifically requires or permits it.

4. Service providers (processors)

We use the following service providers to run the Service.

We engage these providers under their terms of service and data processing terms, and we are completing, for each provider, a written agreement that covers every item required by Article 26(1) of the Korean Personal Information Protection Act (processing only for the entrusted purpose, security measures, limits on onward processing, our oversight, and responsibility for damages). They may use sub-processors they publicly disclose (for example, cloud infrastructure). We will update this policy if our providers change.

5. International transfers

Your information is stored and processed outside your country, including outside Korea. For users in Korea, we disclose the items below under Article 28-8(1)(3)(a) and (2) of the Personal Information Protection Act. Transfers to the AI providers (Anthropic and OpenAI) additionally depend on the consent you give before the app sends anything to them (Section 1.2). The transfer to Meta Platforms is a disclosure to a third party (Section 3), not processing on our behalf; it happens in the iPhone and iPad app version 1.1 or later for ad measurement, and you can turn it off in Settings at any time (Section 1.7).

How to refuse a transfer, and what happens

• Anthropic and OpenAI: AI processing is an essential part of the Service, so you cannot use the Service if you refuse these transfers. To refuse, do not consent on the consent screen, or, if you have already consented, withdraw your consent in one of the ways in Section 10 (in app version 1.1 or later, Settings → AI → “Withdraw AI Consent”; in earlier versions, by email; or by deleting your account). The effect of withdrawal is described in Section 1.2 (Withdrawing consent).
• Supabase: Storage is essential to the Service, so we cannot provide the Service without this transfer. If you object, stop using the Service and delete your account in Settings → Account.
• Meta Platforms: Turn off Settings → Privacy → “Ad Measurement”, and that device sends nothing more. The Service works the same.

Direct connections from your device: For weather, your device sends rounded coordinates (about 1 km) directly to a weather service. App version 1.1 or later uses Apple’s weather service (WeatherKit, Apple Inc.), which is governed by Apple’s privacy policy (Apple states that location used for weather requests is used only to provide forecasts, is not associated with personally identifiable information, and is never tracked between requests). App version 1.0 uses OpenMeteo GmbH (Switzerland, info@open-meteo.com), which states that its troubleshooting server logs, which may contain coordinates and IP addresses, are deleted after 90 days. We do not receive or store these coordinates. To show an area name on the weather card, your device also sends the same rounded coordinates to Apple’s map service (Section 1.4), which is also governed by Apple’s privacy policy. If you prefer not to, do not allow location access or do not use the weather feature.

6. Sensitive information

We do not ask for consent to collect sensitive information, and Apple Health data stays on your device. If you choose to write sensitive things (for example about health or beliefs) in notes or chats, they are processed only to provide the Service (storage and sync, and AI processing) and may appear in the “memories” the AI keeps from conversations. The Service has no feature that shows your content to other people. You can avoid entering such content, and you can review and delete memories in Settings → AI → “Memory”.

7. Security

• Organizational: access to personal information limited to the minimum number of people.
• Technical: encryption of all data in transit (TLS), per-account access control (row-level security), restricted access to server administration credentials and keys, encryption of stored data, private storage for attachments, retention of server access logs (up to 7 days).
• Physical: data is kept in cloud data centers operated by our provider (Supabase), whose security programs cover physical access control. We do not run our own server rooms.

No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach as required by law.

8. Cookies and similar technologies

• The app does not use cookies, does not collect the advertising identifier (IDFA), and does not ask for App Tracking Transparency permission.
• The iPhone and iPad app (version 1.1 or later) includes the Meta SDK to measure our ads (Section 1.7). The SDK creates a random ID for each app install, stores it on your device, and sends app opens and free-trial and subscription starts to Meta. You can turn it off in Settings → Privacy → “Ad Measurement”. We also learn which ads installs came from through Apple’s SKAdNetwork (Apple aggregates this so that individuals cannot be identified). The Mac app and app version 1.0 do not include this SDK, and we use no analytics or advertising SDK other than the Meta SDK.
• To keep you signed in, the app stores an authentication token on your device. It is strictly necessary and is removed when you sign out or delete your account.
• The website that hosts this policy does not use cookies or analytics. Its hosting provider (GitHub, Inc.) may keep ordinary access logs such as IP addresses for security and operations.
• Behavioral information: We do not show ads in the app, and we do not use your content or your activity in the app (tasks, chats, searches, etc.) for advertising. However, the app opens and subscription starts that the Meta SDK sends may count as information about your app activity, and Meta may use it to improve ad delivery under its own terms and policies (what is collected, how, why, for how long and how to opt out: Sections 1.7 and 3).

9. Automated decisions

We do not make decisions based solely on automated processing that significantly affect your rights or obligations. AI replies, organizing and classifications are assistive features that you can review, edit or delete. Free usage limits are applied only by counting requests.

10. Your rights and how to exercise them

1. You can ask to access, correct, delete, or stop the processing of your personal information, and you can withdraw consent at any time.
2. In the app
   • View, edit or delete your content: directly on each screen
   • Review or delete AI memories: Settings → AI → “Memory”
   • Withdraw AI consent (app version 1.1 or later): Settings → AI → “Withdraw AI Consent” (your account and records stay, and you cannot use the Service until you consent again). In earlier versions, email us as described in item 3 or delete your account as below (Section 1.2).
   • Delete your account and all data: Settings → Account → “Delete account” or “Delete all my data”
3. By email: For requests you cannot complete in the app (for example, accessing information stored only on our server, stopping processing, or withdrawing AI consent while keeping your account in an earlier app version), email our privacy officer at contact@lipson.kr. We act within 10 days of receiving your request (or within the shorter period required by the law that applies to you) and tell you the result. If we need more time for a legitimate reason, we will tell you why and when. We may ask for information to confirm that the request comes from you or your authorized representative.
4. Representatives: You may exercise your rights through a legal guardian or an authorized agent with written authorization.
5. Limits: A request may be limited where the law allows (for example, where another law requires the information to be kept). We will tell you the reason.
6. Your responsibility: When you enter information about other people (for example, a friend’s name and notes in “People”), please respect their rights.

11. Children

The Service is intended for people aged 14 and over. We do not offer a parental-consent process, and people under 14 may not use the Service. If the law where you live sets a higher age for consenting to the processing of personal information, you must meet that age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 14 (or under 13), we will delete the account and its data without delay. A parent or guardian can ask us to delete it using the contact details in Section 12.

12. Privacy officer and contact

13. Complaints

You can contact the privacy officer above at any time. Users in Korea may also contact the Personal Information Dispute Mediation Committee (+82-1833-6972, www.kopico.go.kr), the Korea Internet & Security Agency privacy center (dial 118 in Korea, privacy.kisa.or.kr), the Supreme Prosecutors’ Office (1301) or the Korean National Police Agency cyber bureau (182, ecrm.police.go.kr). Users elsewhere may contact their local data protection authority (see Section 15).

14. Device permissions

All permissions are optional and are requested by the operating system when you first use the related feature. If you decline, everything except that feature keeps working, and you can change your choice at any time in your device’s Settings.

From app version 1.1, the app no longer asks for “Always” location permission. If you allowed “Always” in version 1.0, you can change it to “While Using the App” in your device’s Settings and still use location reminders.

15. Additional information for specific regions

Users in the European Economic Area, the United Kingdom and Switzerland

• Controller: Lipson Inc., 3F, 16 Eonju-ro 147-gil, Gangnam-gu, Seoul 06048, Republic of Korea, contact@lipson.kr.
• Legal bases: performance of our contract with you (Section 1.1, Art. 6(1)(b) GDPR); your consent for AI processing (Section 1.2, Art. 6(1)(a)); our legitimate interests in security and preventing abuse (access logs and usage counts, Art. 6(1)(f)) and in measuring our advertising (Section 1.7, Art. 6(1)(f) — you can object at any time by turning off “Ad Measurement”); and compliance with legal obligations where applicable (Art. 6(1)(c)). AI processing is at the core of the Service, so if you do not give that consent, or withdraw it, you can no longer use the Service. You can withdraw consent at any time (Section 1.2); withdrawal does not affect the lawfulness of processing before it.
• Transfers: Our providers store and process your information in the United States (Section 5). We do not rely on an EU adequacy decision for these transfers. Our providers offer data processing terms that include the European Commission’s Standard Contractual Clauses, and we are completing them with each provider (see Section 4). You can ask us for more information about these safeguards.
• Your rights: access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. Email contact@lipson.kr; we respond within one month. You also have the right to lodge a complaint with the supervisory authority where you live or work.

Users in the United States (including California)

• In the past 12 months we have collected the categories of information described in Section 1: identifiers (account ID, Apple email), commercial information (subscription status), user content, usage information (daily AI request counts), internet activity (server access logs), precise location (coordinates that app version 1.0 sent for location reminders and current locations attached in a chat; from version 1.1, only place names and area names are sent), and the content of inquiries you send us. We collect them from you and your device, for the purposes in Section 1, and disclose them to the service providers in Section 4. The iPhone and iPad app (version 1.1 or later) also discloses identifiers (a random per-install ID, IP address), device information and app events (installs, opens, free-trial and subscription starts with price and currency) to Meta Platforms, Inc. for ad measurement (Sections 1.7 and 3).
• We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit. Because Meta may use the app-event data described in Section 1.7 to improve ad delivery, some state laws may treat that disclosure as “sharing” for targeted advertising. You can opt out at any time by turning off Settings → Privacy → “Ad Measurement” on each device.
• Do Not Track: We do not collect your advertising identifier or ask for App Tracking Transparency permission, and we do not respond differently to Do Not Track signals. To stop ad measurement, use the in-app setting above.
• Depending on your state, you may have the right to know, access, correct and delete your information, and not to be discriminated against for exercising these rights. Email contact@lipson.kr.

16. Changes to this policy

We will announce changes in the app or on the website that hosts this policy at least 7 days before they take effect (30 days for changes that are unfavorable to you or significant). Previous versions remain available on that website.