Aria Privacy Policy
Contents
- At a glance
- 1. What we process, why, and for how long
- 2. Deletion
- 3. Disclosure to third parties
- 4. Service providers (processors)
- 5. International transfers
- 6. Sensitive information
- 7. Security
- 8. Cookies and similar technologies
- 9. Automated decisions
- 10. Your rights and how to exercise them
- 11. Children
- 12. Privacy officer and contact
- 13. Complaints
- 14. Device permissions
- 15. Additional information for specific regions
- 16. Changes to this policy
Lipson Inc. (“we”, “us”) operates Aria, a personal assistant app for iPhone, iPad and Mac (the “Service”). This policy explains what personal information we process when you use the Service, why, where it goes, and how you can control it.
- Posted: 2026-10-15 · Effective date: 2026-10-15
- This English version is a translation. The Korean version is the official version; if the two differ, the Korean version prevails to the extent permitted by the law that applies to you.
At a glance
| Topic | Summary |
|---|---|
| Main information we process | Your account identifier, the content you create (tasks, notes, chats, etc.), your subscription status |
| Ads and tracking | There are no ads in the app, and we do not show personalized ads or track you across other companies’ apps and websites. However, to measure our ads, the iPhone and iPad app (version 1.1 or later) tells Meta when the app is installed or opened and when a free trial or subscription starts (we never collect your advertising identifier (IDFA); turn it off in Settings → Privacy → “Ad Measurement”; Section 1.7) |
| Sale or sharing for advertising | We do not sell your personal information. To measure our ads, the iPhone and iPad app (version 1.1 or later) shares limited app-event data with Meta Platforms, Inc.; you can opt out in Settings (Section 3) |
| Service providers and international transfers | Supabase (data storage in the United States (AWS US East – N. Virginia region, us-east-1)), Anthropic and OpenAI (AI features — including Anthropic web search, United States), Meta (ad measurement — iPhone and iPad app, United States) |
| Health data | Processed only on your device; never sent to our servers or to AI providers |
| Location | From app version 1.1, location permission is requested only “While Using the App”, and location coordinates are not sent to our server or to AI providers (only an area name or a place name you chose; coordinates stay on your device; for weather, your device asks Apple’s weather service directly) |
| Withdrawing AI consent | App 1.1 or later: Settings → AI → “Withdraw AI Consent” · earlier versions: by email · any version: delete your account |
| Deletion | You can delete your account and data inside the app |
| Contact | Privacy officer KIM HYUNGI · contact@lipson.kr |
1. What we process, why, and for how long
We process only what we need for the purposes below and do not use it for other purposes without a further legal basis.
1.1 Processed to provide the Service (no separate consent)
We process the following to perform our contract with you (to provide the Service you asked for). Server access logs are processed for our legitimate interest in keeping the Service secure, and records that a law requires us to keep are processed to comply with that legal obligation.
| Purpose | Information | Retention |
|---|---|---|
| Account and sync across your devices | (Required) Account identifier — a guest account ID created automatically for each device the first time you open the app (If you sign in with Apple) your Apple user identifier and the email address Apple provides (an Apple relay address if you choose Hide My Email) | Until you delete your account |
| Storing and syncing your content | Tasks, projects, areas, routines and routine completion records, repeat rules, saved filters, links between items; notes (scraps), sealed letters; photos and files you attach (including photos and PDFs you send to Aria from another app’s share sheet) and the text your device reads from them; transcripts of voice memos; people you add (name, relationship, nickname, interests, notes); briefings; AI chat history (including the title, time and place of calendar events discussed in chat, and the area name of a current location you attach); AI memories; Synapse (knowledge graph); search vectors (embeddings); the names of places you set for location reminders (coordinates stay on your device); location coordinates sent by app version 1.0 (current locations attached in chat and location reminder places — Section 1.4) | Until you delete your account (for items you delete individually, see Section 2) |
| Verifying a paid subscription | Apple original transaction ID, product ID, expiry date and status, environment (production or test) | Until you delete your account |
| Counting free usage and preventing abuse | Number of AI requests per day; number of web look-ups per day; a question marker used to count the several requests made for one question as one (a message identifier — it contains no chat content) | Until you delete your account (question markers from earlier days are deleted when you ask a new question on a later day) |
| Confirming and recording AI consent (refusing AI requests from an account whose consent has been withdrawn) | Your account’s most recent AI consent decision (given or withdrawn) and when it was made | Until you delete your account |
| Answering inquiries, handling reports of inappropriate AI replies, handling consumer complaints and disputes | If you email us: your email address, the content of your inquiry or report and any attachments. If you use “Report Inappropriate Response” in the app, the email is pre-filled with that reply (up to 1,000 characters), its time and the app version. If you use “Send Feedback” in the app (Settings → Info, app version 1.1.2 or later), the email includes the feedback type you chose, the reply email address you entered, the screenshot you picked (a copy with photo details such as location removed) and, if “Include App and Device Info” is left on, the app version, device model, OS version and app language | 3 years after we finish handling it (the retention period for records of consumer complaints and dispute handling under Article 6 of the Korean Act on the Consumer Protection in Electronic Commerce and Article 6(1)(4) of its Enforcement Decree) |
| Security and troubleshooting | Server access logs (IP address, time, request path, user agent containing device and OS information) | Up to 7 days |
1.2 Processed with your consent (AI features)
Aria is an assistant built on generative AI, so AI processing is an essential part of the Service. Before anything is sent to an AI provider, the app shows which AI provider receives which information and when (including the destination country, the retention period and what happens if you decline) and asks for your explicit consent. New users consent in the AI step of initial setup; existing users who have not yet consented (including those who had AI features off in an earlier version) see a consent screen the next time they open the app. Nothing is sent to an AI provider before you consent.
| Purpose | Information | Retention |
|---|---|---|
| AI chat replies, daily and weekly briefings, automatic organizing of tasks and notes, Synapse concept extraction, AI memory, weekly reflection questions, recording summaries, organizing reminders you import (Anthropic) | Messages you send and the photos (images) or current location (area name only — app version 1.0 sent the place name and coordinates) you attach; the tasks, notes, events, people, memories and file text needed for that request; routine completion rates and streaks; your nickname, interests and tone settings; your weekly average mood score (only for weekly reflection questions); a mood you ask the AI to log in a chat (app version 1.1.2 or later); a short weather summary; your D-days (name and date of the nearest 5 — app version 1.1.1 or later); (past chats — app version 1.1.2 or later) the dates, titles and snippets of earlier chats found on your device, and the titles and short summaries of the previous day’s chats; (Aria Pro overnight recap) the recent messages of the chat you tap; (recording summaries — app version 1.1.2 or later) the transcribed recording text, when the recording started, its length and the title of the event you linked; (Apple Reminders import — app version 1.1.1 or later) the titles, the beginning of the notes and the list names of reminders in the lists you choose | Our server: results (chats, briefings, memories, etc.) until you delete your account Anthropic: see Section 5 |
| Web look-ups (finding up-to-date information in a chat · “Look it up” on a task) (Anthropic) | The search query the AI writes from your question or task (title, notes, due date); your question as you asked it (web look-ups in chats, app version 1.1.2 or later) or the task title (“Look it up”); if the app or device language is Korean, an approximate location (country: Republic of Korea · time zone: Seoul) | Our server: the chat (including answers based on what was found) and any task you create from an option (including the source URL) until you delete your account · the list of sources found and the option cards are stored only on that device · Anthropic: see Section 5 |
| Semantic search (embeddings) (OpenAI) | Text of tasks, notes, chats, etc., and search queries | Our server: vectors until you delete your account OpenAI: see Section 5 |
- When it is sent: when you use an AI feature after consenting; while you use the Service, the app may also send it in the background to refresh briefings, organize content and build the search index.
- Identifiers: requests go through our server. We do not send your account identifier or email address to Anthropic or OpenAI.
- Past chats (app version 1.1.2 or later): When you ask about an earlier conversation (e.g. “What was that restaurant I mentioned last time?”), the app searches the chat history on that device and sends with that request to Anthropic only the date, title and speaker of the chats it found (up to 5) and a short snippet around the matching words. The search itself happens on your device. Free users search the last 7 days; Aria Pro users search all their chats. The daily briefing also includes the titles and short summaries of the previous day’s chats (up to 2 chats, 160 characters each). When an Aria Pro user taps that chat in the briefing, the app sends that chat’s recent messages (up to 20 messages, 3,000 characters) to Anthropic once to write an “overnight recap” (up to 3 next steps) and adds it to the end of that chat (once per chat per day; nothing is sent unless you tap it). Turning off Settings → AI → “Use past chats” stops all three (on by default; set separately on each device).
- Web search: When a chat needs up-to-date information outside your own records (an official announcement, a schedule, opening hours, a price), or when you tap “Look it up” on a task (app version 1.1.2 or later) or ask for it, our server sends the request to Anthropic with its web search feature enabled. The search query the AI writes passes through Anthropic to the search provider Anthropic uses, and the addresses and parts of the result pages are used to write the answer. In chats from app versions earlier than 1.1.2, our server adds web search to the chat request (up to one search per question) and adds the names of the source sites (domains) to the end of the answer, which is saved as part of the chat history. Account identifiers, email and location coordinates are not sent. Available on Free and Aria Pro, with a daily limit.
- If you do not consent: you may decline, but AI processing is an essential part of the Service, so if you do not consent you cannot use the Service. Without consenting, you can still go from the consent screen to Settings to manage or delete your account.
- Withdrawing consent: you can withdraw your consent at any time in any of these ways. You can check your app version in Settings → Info → “Version”.
- In the app, keeping your account (app version 1.1 or later): In Settings → AI, tap “Withdraw AI Consent” and confirm. That device immediately stops sending anything to AI providers and returns to the consent screen, and the withdrawal is recorded on our server (as soon as the device is online). From then on our server refuses AI requests from that account, and your other devices return to the consent screen at their next AI request. You cannot use the Service until you consent again. Your records, such as tasks and notes, and results already created (chat history, memories, embeddings, etc.) are not deleted; they stay on our server until you delete them or your account.
- By email (app version 1.0 and other earlier versions): Earlier versions do not have that menu, so email our privacy officer at contact@lipson.kr (Section 10). You may also use email with any version. Once we record the withdrawal for your account on our server, the effect is the same as above (each of your devices returns to the consent screen at its next AI request).
- Deleting your account (any version): In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and data are deleted from our server and your device (Section 2), transfers to AI providers end, and so does your use of the Service.
- Age: People under 14 may not use the Service (Section 11).
- No training: we do not use your content to train AI models, and Anthropic and OpenAI do not use it to train their models under their commercial terms and policies.
1.3 Processing our server does automatically
Our server does not send your content to external AI providers on its own (there are no automatic server summaries or tags). Content is sent to an AI provider only by the app, and only after you consent to AI processing (Section 1.2). Our server records your account’s most recent AI consent decision and when it was made (Section 1.1), and uses it only to confirm consent and to refuse AI requests from an account whose consent has been withdrawn.
1.4 Device features (permissions)
- Location
- Location permission: From app version 1.1, the app requests location permission only “While Using the App”, and location reminders work with that permission. App version 1.0 also asked for “Always” permission when you created a location reminder (Section 14).
- Location reminders: When you add a location reminder to a task or routine, app version 1.1 or later stores and syncs only the place name with the reminder on our server (the name of a place you searched for and chose, an area name, or “Current location” / “Selected location”) (Section 1.1); the place’s coordinates are stored only on that device. On your other devices, choose the place again for the reminder to fire there. Version 1.0 stored and synced the place’s name together with its coordinates. Your device decides when a reminder fires; your movements and real-time location are not sent to our server.
- Attaching your current location in a chat: If you choose “Current location” from the attachment menu in an AI chat, app version 1.1 or later includes only the area name of your device’s position (neighborhood and district) in that message, stores it with your chat history on our server, and sends it to Anthropic to generate the reply. The coordinates are stored only on that device and are used only for its map preview and location reminders; your other devices show the area name only. Version 1.0 sent the place name together with the coordinates. If you do not choose it, no location is included in the chat.
- Coordinates sent by app version 1.0: Coordinates that version 1.0 sent with chat attachments and location reminders may remain on our server until you ask us to delete them (Section 10) or delete your account. Version 1.1 or later does not include coordinates from earlier chats in AI requests or search embeddings, and when that device syncs such a chat or reminder again, the server copy is overwritten without coordinates.
- Weather: To show weather, your device sends your current location rounded to two decimal places (about 1 km) directly to a weather service: Apple’s weather service (WeatherKit) in app version 1.1 or later, and Open-Meteo in version 1.0. These coordinates are not sent to our server and we do not collect them. To show an area name (such as a city name) on the dashboard weather card, your device also sends the same rounded coordinates to Apple’s map service and receives the name of that area. It does this only when it does not have a name yet or when the rounded coordinates or the app language change; the name is stored only on your device and is not sent to our server or to AI providers. AI providers receive a weather summary sentence, not coordinates. A weather card shown in an AI chat (weather values, and a place name if the AI named one) is stored with that chat history.
- Calendar: The app shows events from your device calendar and adds or changes events you ask for. Calendar events themselves are not synced to our server. However, the title, time and place of events you look up, add or change in an AI chat are stored with that chat history and sent to Anthropic.
- Reminders (read-only · app version 1.1.1 or later): Only when you use “Import Apple Reminders”, the app reads the reminder lists you choose and turns them into tasks. It only reads your reminders and never changes or deletes them. To organize the items and show them in a preview, the app sends to Anthropic through our server the title, the beginning of the notes (up to 200 characters) and the list name of each incomplete reminder in the chosen lists that has not been imported yet, whether it already has a due date or repeat, and the names of your task categories. Locations, URLs and alert times are not sent to the AI. Only the items you select in the preview are saved and synced as tasks (Section 1.1 — a reminder’s URL goes into the task notes, and only the place name of its location is synced; coordinates stay on that device), and which reminders have already been imported is recorded only on that device to prevent duplicates. If AI is unavailable, reminders are imported as they are, without AI.
- Health (read-only): Step count and sleep data are used only to show, in the Weekly Briefing, how they relate to the tasks you complete, and the calculation happens only on your device. They are never sent to our server or to AI providers (they are not included in the AI-written text of the Weekly Briefing either), never used for advertising, and nothing is written to the Health app.
- Microphone and speech recognition: Used for voice memos, dictation and recording summaries. Voice memo recordings stay on your device; only the transcript is synced. Transcription runs on your device; if your device cannot transcribe on its own, audio may be sent to Apple’s speech recognition service, which is governed by Apple’s privacy policy.
- Recording summaries (app version 1.1.2 or later): When chat dictation runs long, or when you tap “Start Recording” or “Record and Summarize”, the app keeps transcribing for up to 2 hours even while the screen is off or you use other apps (your device shows its microphone-in-use indicator). Recording summaries work only on devices that can transcribe on the device itself (nothing is sent to Apple’s servers), and audio is never saved. The transcribed text stays only on that device (excluded from sync and backup) until you finish the summary, move it to the text field, clear it or sign out. When you tap “Summarize”, the transcribed text, when the recording started, its length and the title of the event you linked are sent through our server to Anthropic to produce a summary, decisions and suggested to-dos. A one-line reply is saved and synced with your chat history; the summary card is stored only on that device and may be included in AI requests when you ask your next question in the same chat. If a calendar event is in progress when you start recording (and you have allowed calendar access), the app links it on the device, and the summary is added below that event’s notes only when you tap “Add to Notes”.
- Camera and photos: Used to take or choose photos to attach. The app does not request access to your whole photo library; it processes only the photos you choose.
- Share extension: When you pick Aria in another app’s share sheet, Aria receives the text or links you shared and, from app version 1.1.2, photos (up to 5 at a time) or a PDF (1). Photos and PDFs wait in a temporary folder on your device until you open Aria, then become attachments and the temporary copy is deleted; reading the text and finding dates happen on your device. The attachments are stored and synced like other attachments (Section 1.1), and their text may be sent to AI providers for automatic organizing and the search index (Section 1.2). When you tap “Turn what I shared into events and tasks”, the text your device read (not the image itself) is sent to Anthropic to suggest events and tasks.
- Notifications: Used for reminders, briefings, check-ins and a notice before a free trial ends (app version 1.1.2 or later). Your remote push token is not sent to our server.
- Alarms (iPhone and iPad app version 1.1.2 or later): Used to ring tasks you set to “Ring as Alarm” like an alarm, even in Silent mode or a Focus. Alarm settings are stored only on that device and are not sent to our server (when an alarm rings, the task title appears on the Lock Screen).
1.5 Information kept only on your device (we do not collect it)
Mood check-in scores and daily mood records, voice recordings, transcribed recording text before it is summarized, D-days, photos you add to a day on the calendar (app version 1.1.2 or later), health data, the name received when you sign in with Apple (used to address you in the app), nickname, interests and tone settings, and app settings are stored only on your device. However, the items listed in Section 1.2 (nickname, interests, tone; weekly average mood score; a mood you ask the AI to log in a chat; D-days; recording text you ask to summarize) are sent to Anthropic with your AI requests. Result cards for past chats, the list of web sources found (page title and address) and option cards, the overnight-recap step list and recording summary cards are also stored only on that device and are not synced (the reply text is saved and synced as part of the chat history).
1.6 When your device connects to other services directly
- Link previews: To fetch the title and preview image of a link you save, your device connects directly to that website, which receives ordinary connection information such as your IP address.
- Weather: Your device requests weather directly from a weather service (Apple WeatherKit in app version 1.1 or later; Open-Meteo in version 1.0) as described in Section 1.4 (see Section 5).
- Apple: Sign in with Apple, App Store payments and subscription management, the speech recognition fallback, Apple’s map service (showing maps and searching for places, finding the place name for a location reminder or a location you attach in a chat, and the area name on the weather card), and Apple’s weather service (WeatherKit — weather data in app version 1.1 or later) are handled by Apple under Apple’s privacy policy. We never receive your payment card details.
- Meta (iPhone and iPad app version 1.1 or later): The ad measurement information in Section 1.7 is sent by your device directly to Meta’s servers. Nothing is sent if you turn off Settings → Privacy → “Ad Measurement”.
1.7 Ad measurement (iPhone and iPad app version 1.1 or later; you can opt out)
To see whether our ads on Meta (such as Instagram and Facebook) lead to installs and subscriptions, the iPhone and iPad app (version 1.1 or later) includes the SDK of Meta Platforms, Inc. (the Meta SDK), and your device sends the information below to Meta (a disclosure to a third party, Section 3, and an international transfer, Section 5). We rely on our legitimate interest in measuring our advertising (for users in Korea, Article 15(1)(6) and Article 17(1)(2) of the Personal Information Protection Act), and you can opt out at any time as described below.
| Purpose | Information | Retention |
|---|---|---|
| Ad measurement (counting which ads installs and subscriptions came from) and improving how we run our ads | The fact and time of app install and app open; the fact that a free trial or subscription started, with that product’s price and currency; a random ID the Meta SDK creates for each app install; device and app information (model, OS and app version, language, time zone, screen size, carrier name); IP address; errors and crashes that occur inside the Meta SDK (if Meta has turned that collection on) | Us: not kept (sent from your device directly to Meta) Meta: see Section 3 |
- What is never sent: your name, email, Aria account identifier, advertising identifier (IDFA), location coordinates, or the content you create (tasks, notes, chats, etc.). The app does not ask for App Tracking Transparency permission.
- When it is sent: when you open the app (including the first launch after installing), when a free trial of a new subscription starts, and when you subscribe directly or a free trial first converts to a paid subscription (once per subscription). Renewals and restored purchases are not sent.
- How to opt out, and what happens: turn off Settings → Privacy → “Ad Measurement”, and that device sends nothing more to Meta. The setting applies to each device separately and is on by default. Opting out does not limit the Service.
- Mac app and app version 1.0: they do not include the Meta SDK and do not send this information.
2. Deletion
- Principle: We delete personal information without delay when it is no longer needed, for example when the retention period ends or the purpose has been achieved.
- Deleting your account: In Settings → Account, tap “Delete account” (if signed in with Apple) or “Delete all my data” (guest). Your account and its data on our server (all synced data, attachments, subscription verification records and usage counts) are deleted immediately, your Sign in with Apple authorization is revoked, and the data on that device is erased. This cannot be undone.
- Backups: Deleted data may remain in disaster-recovery database backups for up to 8 days until those backups are automatically replaced. Backups are used only for disaster recovery.
- Items you delete individually: They are removed from your device immediately (or after the trash period, where the app has a trash). Our server keeps a deletion marker so your other devices stay in sync. Currently the content of those items also remains on the server until you delete your account; we do not use it for anything other than sync. To have it erased from the server now, delete your account or contact us (Section 10).
- Signing out: Signing out of your Apple account erases Aria data on that device. Your data stays in your account on the server and is restored when you sign in again. Mood records, D-days and photos added to a day on the calendar have no copy on our server, so instead of being erased they are kept on that device for each account and restored when you sign in to the same account again; they are deleted when you delete your account. Content already shown in a Home Screen widget may remain until the widget refreshes.
- Guest accounts: A guest account can be reached only from the device that created it. Before deleting the app, use Settings → Account → “Delete all my data” to erase your server data. If the app is deleted first, we hold nothing that links that guest account to you, so we may be unable to find and delete it even if you ask.
- Method: Electronic data is deleted from our database and storage so that it cannot be restored. We do not keep personal information on paper.
- Retention required by law: Subscription payments and receipts are handled and kept by Apple; we do not hold payment methods or payment amounts. Records of consumer complaints and disputes that we receive by email are kept for 3 years under Article 6(1)(4) of the Enforcement Decree of the Korean Act on the Consumer Protection in Electronic Commerce, separately from other information, even if you delete your account, and then deleted. If any other law requires us to keep information, we likewise keep it separately for the period required and then delete it.
3. Disclosure to third parties
We do not sell your personal information, and we do not provide it to third parties except as shown below or where the law specifically requires or permits it.
| Recipient | Purpose | Information | Retention | How to opt out |
|---|---|---|---|---|
| Meta Platforms, Inc. (United States — iPhone and iPad app version 1.1 or later) | Ad measurement (counting which ads installs and subscriptions came from) and improving how we run our ads. Under its own terms and policies, Meta may also combine this information with other data to improve ad delivery and for safety and security | The items in Section 1.7 | Up to 2 years under Meta’s Business Tools Terms (other processing under Meta’s Privacy Policy) | Turn off Settings → Privacy → “Ad Measurement”. Opting out does not limit the Service |
4. Service providers (processors)
We use the following service providers to run the Service.
| Provider | What they do for us |
|---|---|
| Supabase Pte. Ltd. | Database and file storage, authentication, server functions |
| Anthropic, PBC | Generating AI replies, summaries, classifications and extractions, and web search (with your AI consent) |
| OpenAI OpCo, LLC | Generating text embeddings for semantic search (with your AI consent) |
| NAVER Cloud Corp. (NAVER WORKS) | Hosting our email (contact@lipson.kr) — receiving and storing inquiry and report emails |
We engage these providers under their terms of service and data processing terms, and we are completing, for each provider, a written agreement that covers every item required by Article 26(1) of the Korean Personal Information Protection Act (processing only for the entrusted purpose, security measures, limits on onward processing, our oversight, and responsibility for damages). They may use sub-processors they publicly disclose (for example, cloud infrastructure). We will update this policy if our providers change.
5. International transfers
Your information is stored and processed outside your country, including outside Korea. For users in Korea, we disclose the items below under Article 28-8(1)(3)(a) and (2) of the Personal Information Protection Act. Transfers to the AI providers (Anthropic and OpenAI) additionally depend on the consent you give before the app sends anything to them (Section 1.2). The transfer to Meta Platforms is a disclosure to a third party (Section 3), not processing on our behalf; it happens in the iPhone and iPad app version 1.1 or later for ad measurement, and you can turn it off in Settings at any time (Section 1.7).
| Recipient (contact) | Country | Information | Purpose | When and how | Retention by recipient |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. (privacy@supabase.com) | Stored in the United States (AWS US East – N. Virginia region, us-east-1). Server functions that relay requests may run on Supabase infrastructure near you | Everything in Section 1.1 (account identifier, Apple email, content, attachments, subscription and usage records, access logs) | Storage, authentication, server functions | From right after you first open the app, each time data syncs; encrypted in transit (TLS) | Until you delete your account (backups up to 8 days; access logs up to 7 days) |
| Anthropic, PBC (privacy@anthropic.com) | United States | The Anthropic items in Section 1.2 (including the area name of a current location you attach in a chat — app version 1.0 sent the place name and coordinates — and the query and approximate country and time zone of web search requests; queries may be passed to the search provider Anthropic uses) | Generating AI replies, summaries, classifications and extractions, and web search | After you consent: when you use AI features and during background processing while you use the Service; via our server over TLS | Deleted within 30 days of receipt or generation. If flagged for a usage policy violation, inputs and outputs up to 2 years and safety classification scores up to 7 years |
| OpenAI OpCo, LLC (privacy@openai.com) | United States | Text for embeddings, search queries | Generating embeddings for semantic search | After you consent: when you use AI features and during background processing while you use the Service; via our server over TLS | Kept up to 30 days for abuse monitoring, then deleted |
| Meta Platforms, Inc. (https://help.meta.com/support/privacy; Korean local agent: korealocalagent@support.facebook.com) | United States | The items in Section 1.7 | Ad measurement and improving how we run our ads | In the iPhone and iPad app version 1.1 or later, when you open the app and when a free trial or subscription starts; sent from your device directly to Meta over TLS (only on devices where “Ad Measurement” is on) | Up to 2 years under Meta’s Business Tools Terms |
How to refuse a transfer, and what happens
- Anthropic and OpenAI: AI processing is an essential part of the Service, so you cannot use the Service if you refuse these transfers. To refuse, do not consent on the consent screen, or, if you have already consented, withdraw your consent in one of the ways in Section 10 (in app version 1.1 or later, Settings → AI → “Withdraw AI Consent”; in earlier versions, by email; or by deleting your account). The effect of withdrawal is described in Section 1.2 (Withdrawing consent).
- Supabase: Storage is essential to the Service, so we cannot provide the Service without this transfer. If you object, stop using the Service and delete your account in Settings → Account.
- Meta Platforms: Turn off Settings → Privacy → “Ad Measurement”, and that device sends nothing more. The Service works the same.
Direct connections from your device: For weather, your device sends rounded coordinates (about 1 km) directly to a weather service. App version 1.1 or later uses Apple’s weather service (WeatherKit, Apple Inc.), which is governed by Apple’s privacy policy (Apple states that location used for weather requests is used only to provide forecasts, is not associated with personally identifiable information, and is never tracked between requests). App version 1.0 uses OpenMeteo GmbH (Switzerland, info@open-meteo.com), which states that its troubleshooting server logs, which may contain coordinates and IP addresses, are deleted after 90 days. We do not receive or store these coordinates. To show an area name on the weather card, your device also sends the same rounded coordinates to Apple’s map service (Section 1.4), which is also governed by Apple’s privacy policy. If you prefer not to, do not allow location access or do not use the weather feature.
6. Sensitive information
We do not ask for consent to collect sensitive information, and Apple Health data stays on your device. If you choose to write sensitive things (for example about health or beliefs) in notes or chats, they are processed only to provide the Service (storage and sync, and AI processing) and may appear in the “memories” the AI keeps from conversations. The Service has no feature that shows your content to other people. You can avoid entering such content, and you can review and delete memories in Settings → AI → “Memory”.
7. Security
- Organizational: access to personal information limited to the minimum number of people.
- Technical: encryption of all data in transit (TLS), per-account access control (row-level security), restricted access to server administration credentials and keys, encryption of stored data, private storage for attachments, retention of server access logs (up to 7 days).
- Physical: data is kept in cloud data centers operated by our provider (Supabase), whose security programs cover physical access control. We do not run our own server rooms.
No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach as required by law.
8. Cookies and similar technologies
- The app does not use cookies, does not collect the advertising identifier (IDFA), and does not ask for App Tracking Transparency permission.
- The iPhone and iPad app (version 1.1 or later) includes the Meta SDK to measure our ads (Section 1.7). The SDK creates a random ID for each app install, stores it on your device, and sends app opens and free-trial and subscription starts to Meta. You can turn it off in Settings → Privacy → “Ad Measurement”. We also learn which ads installs came from through Apple’s SKAdNetwork (Apple aggregates this so that individuals cannot be identified). The Mac app and app version 1.0 do not include this SDK, and we use no analytics or advertising SDK other than the Meta SDK.
- To keep you signed in, the app stores an authentication token on your device. It is strictly necessary and is removed when you sign out or delete your account.
- The website that hosts this policy does not use cookies or analytics. Its hosting provider (GitHub, Inc.) may keep ordinary access logs such as IP addresses for security and operations.
- Behavioral information: We do not show ads in the app, and we do not use your content or your activity in the app (tasks, chats, searches, etc.) for advertising. However, the app opens and subscription starts that the Meta SDK sends may count as information about your app activity, and Meta may use it to improve ad delivery under its own terms and policies (what is collected, how, why, for how long and how to opt out: Sections 1.7 and 3).
9. Automated decisions
We do not make decisions based solely on automated processing that significantly affect your rights or obligations. AI replies, organizing and classifications are assistive features that you can review, edit or delete. Free usage limits are applied only by counting requests.
10. Your rights and how to exercise them
- You can ask to access, correct, delete, or stop the processing of your personal information, and you can withdraw consent at any time.
- In the app
- View, edit or delete your content: directly on each screen
- Review or delete AI memories: Settings → AI → “Memory”
- Withdraw AI consent (app version 1.1 or later): Settings → AI → “Withdraw AI Consent” (your account and records stay, and you cannot use the Service until you consent again). In earlier versions, email us as described in item 3 or delete your account as below (Section 1.2).
- Delete your account and all data: Settings → Account → “Delete account” or “Delete all my data”
- By email: For requests you cannot complete in the app (for example, accessing information stored only on our server, stopping processing, or withdrawing AI consent while keeping your account in an earlier app version), email our privacy officer at contact@lipson.kr. We act within 10 days of receiving your request (or within the shorter period required by the law that applies to you) and tell you the result. If we need more time for a legitimate reason, we will tell you why and when. We may ask for information to confirm that the request comes from you or your authorized representative.
- Representatives: You may exercise your rights through a legal guardian or an authorized agent with written authorization.
- Limits: A request may be limited where the law allows (for example, where another law requires the information to be kept). We will tell you the reason.
- Your responsibility: When you enter information about other people (for example, a friend’s name and notes in “People”), please respect their rights.
11. Children
The Service is intended for people aged 14 and over. We do not offer a parental-consent process, and people under 14 may not use the Service. If the law where you live sets a higher age for consenting to the processing of personal information, you must meet that age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 14 (or under 13), we will delete the account and its data without delay. A parent or guardian can ask us to delete it using the contact details in Section 12.
12. Privacy officer and contact
| Item | Details |
|---|---|
| Name | KIM HYUNGI |
| Title | Representative |
| contact@lipson.kr | |
| Company | Lipson Inc., 3F, 16 Eonju-ro 147-gil, Gangnam-gu, Seoul 06048, Republic of Korea |
13. Complaints
You can contact the privacy officer above at any time. Users in Korea may also contact the Personal Information Dispute Mediation Committee (+82-1833-6972, www.kopico.go.kr), the Korea Internet & Security Agency privacy center (dial 118 in Korea, privacy.kisa.or.kr), the Supreme Prosecutors’ Office (1301) or the Korean National Police Agency cyber bureau (182, ecrm.police.go.kr). Users elsewhere may contact their local data protection authority (see Section 15).
14. Device permissions
All permissions are optional and are requested by the operating system when you first use the related feature. If you decline, everything except that feature keeps working, and you can change your choice at any time in your device’s Settings.
| Permission | Why | If you decline |
|---|---|---|
| Location (while using) | Weather for your location; setting a reminder location and arrive/leave reminders | Weather, “Use current location” and location reminders are unavailable |
| Calendar | Viewing, adding and changing events | Calendar features are limited |
| Camera | Taking photos to attach | Cannot attach new photos from the camera |
| Microphone and speech recognition | Voice memos, dictation and recording summaries | Voice input and recording are unavailable |
| Reminders (read) | Importing Apple Reminders as tasks (read-only · app version 1.1.1 or later) | Import is unavailable |
| Health (read) | Steps and sleep in the Weekly Briefing (calculated on your device) | Those cards are hidden |
| Notifications | Reminders, briefings, check-ins, a notice before a free trial ends | You do not receive notifications |
| Alarms (iPhone and iPad) | Ringing tasks set to “Ring as Alarm” like an alarm, even in Silent mode or a Focus (app version 1.1.2 or later) | Ordinary notifications are used instead |
From app version 1.1, the app no longer asks for “Always” location permission. If you allowed “Always” in version 1.0, you can change it to “While Using the App” in your device’s Settings and still use location reminders.
15. Additional information for specific regions
Users in the European Economic Area, the United Kingdom and Switzerland
- Controller: Lipson Inc., 3F, 16 Eonju-ro 147-gil, Gangnam-gu, Seoul 06048, Republic of Korea, contact@lipson.kr.
- Legal bases: performance of our contract with you (Section 1.1, Art. 6(1)(b) GDPR); your consent for AI processing (Section 1.2, Art. 6(1)(a)); our legitimate interests in security and preventing abuse (access logs and usage counts, Art. 6(1)(f)) and in measuring our advertising (Section 1.7, Art. 6(1)(f) — you can object at any time by turning off “Ad Measurement”); and compliance with legal obligations where applicable (Art. 6(1)(c)). AI processing is at the core of the Service, so if you do not give that consent, or withdraw it, you can no longer use the Service. You can withdraw consent at any time (Section 1.2); withdrawal does not affect the lawfulness of processing before it.
- Transfers: Our providers store and process your information in the United States (Section 5). We do not rely on an EU adequacy decision for these transfers. Our providers offer data processing terms that include the European Commission’s Standard Contractual Clauses, and we are completing them with each provider (see Section 4). You can ask us for more information about these safeguards.
- Your rights: access, rectification, erasure, restriction, objection, data portability, and withdrawal of consent. Email contact@lipson.kr; we respond within one month. You also have the right to lodge a complaint with the supervisory authority where you live or work.
Users in the United States (including California)
- In the past 12 months we have collected the categories of information described in Section 1: identifiers (account ID, Apple email), commercial information (subscription status), user content, usage information (daily AI request counts), internet activity (server access logs), precise location (coordinates that app version 1.0 sent for location reminders and current locations attached in a chat; from version 1.1, only place names and area names are sent), and the content of inquiries you send us. We collect them from you and your device, for the purposes in Section 1, and disclose them to the service providers in Section 4. The iPhone and iPad app (version 1.1 or later) also discloses identifiers (a random per-install ID, IP address), device information and app events (installs, opens, free-trial and subscription starts with price and currency) to Meta Platforms, Inc. for ad measurement (Sections 1.7 and 3).
- We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes that would require offering a right to limit. Because Meta may use the app-event data described in Section 1.7 to improve ad delivery, some state laws may treat that disclosure as “sharing” for targeted advertising. You can opt out at any time by turning off Settings → Privacy → “Ad Measurement” on each device.
- Do Not Track: We do not collect your advertising identifier or ask for App Tracking Transparency permission, and we do not respond differently to Do Not Track signals. To stop ad measurement, use the in-app setting above.
- Depending on your state, you may have the right to know, access, correct and delete your information, and not to be discriminated against for exercising these rights. Email contact@lipson.kr.
16. Changes to this policy
We will announce changes in the app or on the website that hosts this policy at least 7 days before they take effect (30 days for changes that are unfavorable to you or significant). Previous versions remain available on that website.
| Version | Effective | Notes |
|---|---|---|
| 1.3 | 2026-10-15 | Added Anthropic web search (finding up-to-date information in chats · “Look it up” on tasks — queries are passed to the search provider Anthropic uses) · added items sent to AI (past chats · overnight recap · recording summaries · Apple Reminders import · D-days · moods logged in a chat) · added question markers and web look-up counts for free-usage counting · added photos and PDFs from the share extension, day photos on the calendar (device only) and “Send Feedback” email contents · added Reminders (read) and Alarms permissions |
| 1.2 | 2026-10-13 | Added disclosure and international transfer to Meta Platforms for ad measurement (iPhone and iPad app version 1.1 or later; opt out in Settings) · weather data now from Apple’s weather service (WeatherKit, app version 1.1 or later) · added in-app withdrawal of AI consent (Settings → AI, app version 1.1 or later) · stopped asking for “Always” location permission · stopped sending coordinates for chat locations and location reminders (area or place names only, app version 1.1 or later) · clarified where health data is used (Weekly Briefing) · View 1.2 |
| 1.1 | 2026-10-11 | Data storage location (Supabase) moved from India (AWS Asia Pacific – Mumbai region) to the United States (AWS US East – N. Virginia region, us-east-1) · View 1.1 |
| 1.0 | 2026-10-06 | First version · View 1.0 |