singleSentence (the “Service”) complies with the Korean Personal Information Protection Act and other applicable laws. This Policy is established and disclosed to handle members’ personal information safely.
1. Personal Information We Process
a. Received from external OAuth providers
- Google: email address, name, profile image URL, provider identifier
b. Entered by the member
- displayName (the visible nickname)
- bio (one-sentence self-introduction, optional)
- Sentences written for Content and Sympathy history
c. Automatically generated during use of the Service
- Access timestamps, session cookies, service usage logs
- Timestamp of consent to Terms / Privacy Policy
2. Purpose of Processing
- Member identification and login authentication
- Core Service features such as writing Sentences and casting Sympathies
- Handling reports of inappropriate content and moderation
- Service operation, incident response, and security management
- Compliance with legal obligations
3. Retention and Use Period
- Upon account deletion, account-identifying information (email, external OAuth identifier, displayName, etc.) is destroyed immediately.
- Sentences written by the member may remain on the Service in anonymized form as part of the community record; authorship information is removed.
- Information that must be retained under applicable law (e.g., access logs under the Korean Protection of Communications Secrets Act) is stored separately for the period set by that law and then destroyed.
4. Disclosure to Third Parties
The Service does not disclose members’ personal information to third parties. However, where there is a lawful request from an investigative authority under applicable law, the Service may provide information under the prescribed procedure.
5. Processing Entrusted to Vendors
For smooth operation, the Service entrusts personal-information processing to the following vendors.
| Vendor | Entrusted task | Location |
|---|---|---|
| Supabase, Inc. | Storage of account and content data, authentication | United States (or member’s nearest region) |
| Vercel, Inc. | Service hosting and traffic handling | Global edge network |
| Google LLC | OAuth login authentication; Gemini API English translation assistance | United States |
For AI translation assistance, the original text entered by the member is sent to the Google Gemini API; the call is made so that the text is not used for further model training. Do not enter sensitive or personally identifying information into the translation step.
6. Data Subject Rights
Members may exercise the following rights at any time.
- Request access to personal information
- Request correction or deletion in case of errors
- Request suspension of processing
- Request account deletion
Requests can be sent to the privacy officer below. The Service will respond without undue delay.
7. Security Measures
- End-to-end HTTPS encrypted communication
- Access control through Supabase Row Level Security
- Separation of operator privileges and audit logging of moderation actions
- Rate limiting on API calls to block abnormal access
8. Personal Information of Children Under 14
The Service does not allow registration by children under the age of 14. If an account is confirmed to belong to a child under 14, the account and related information are deleted immediately.
9. Privacy Officer
Name: KIM KYEONGTAE
Email: unumest.com@gmail.com
Data subjects may direct privacy-related inquiries to the officer above. Other reports or consultations may be made with the Personal Information Protection Commission (privacy.go.kr, 182 in Korea) and other relevant authorities.
10. Changes to this Policy
When this Privacy Policy is amended, the effective date and reason will be announced in the Service at least 7 days before the effective date. Material changes will be announced at least 30 days in advance, and renewed consent may be required where appropriate.