Privacy Policy
Draft — not yet reviewed by a lawyer. This is not the final version. Items marked [To be confirmed] are still open or being checked. This is a translation of the Korean draft; if they differ, the Korean draft applies.
[To be confirmed — company name] ("we") provides the DD Daengdaeng phone app and the PC app that works with it (the "App"). We follow the Personal Information Protection Act of Korea and other applicable laws, and this policy explains how we handle your personal information.
At a glance
- There is no sign-up. We don't collect your name, phone number or email.
- Your to-dos, notes, reminders, memories, activity log and Inner stay on your device. We keep no copy on our server.
- When you ask for something that needs AI, the text goes through our server to an AI company. Our server does not store that text.
- The first time you open the App you choose how much it can send out (Section 3). Until you choose, it stays "On this phone only".
- There are no ads or behavioral analytics tools, and we don't sell personal information.
1. Why we process information
We process personal information only for the purposes below. If a purpose changes, we tell you in advance and ask for consent where needed.
- Doing what you ask — getting a plan from AI, searching, weather and exchange rates, interpreting, looking at photos, making pictures
- DD-to-DD messaging (only if you turn it on)
- Managing trial allowance and credits, and preventing abuse
- Safety — if signs of a crisis appear, we show a helpline (we don't block the conversation)
- Fixing errors and speed — diagnostic numbers (only if you turn it on)
2. What stays only on your device — we don't receive it
| What | How to delete |
|---|---|
| What you throw into the box; to-dos, notes, reminders, memories; "done" records (these may include health information, such as "I took my medicine"); activity log; interests; "My map"; consent records; settings | Delete line by line in the App · uninstall the App |
| Inner — a space locked with your password (encrypted with a key made from your password). Never sent to AI, our server or a PC. If you forget the password, not even we can recover it | Delete inside Inner · uninstall the App |
| Voice profile (only if you turn on "Answer only my voice", which asks separately) — not sound, but numbers describing the shape of a voice. It is biometric information used only to check whether the voice is the one you registered, and it is kept where it is not backed up | "Delete voice samples" · uninstall the App |
| Contacts and incoming call numbers — used on the device only, to make calls and to screen spam calls | Turn off the permission in phone settings |
| Places for place reminders — your device decides whether you've arrived | Delete that reminder |
| Photos and album tidying — photos, and text the device reads from them, stay on the device (for when they go to AI, see Section 4) | Your phone's gallery |
| Which app is on screen right now (only if you turn on "Usage access") — used only to pause name listening while a recorder or camera app is in use; not recorded or sent | Phone settings › Usage access |
| Exercise type names (only if you tap "Exercise" in interest import · Health Connect) — times, distances and heart rate are not read, and nothing is sent to AI or our server | Turn off the permission in Health Connect |
App records are excluded from your phone's Google cloud auto-backup. Device-to-device transfer follows your phone's settings.
3. How much it can send out — three levels
| Hand it all over | Uses every path in Section 4. |
|---|---|
| Hand over, masked | Your device hides names, numbers, email addresses, street addresses and similar before sending, and puts them back in the answer. Only sent to AI that doesn't store anything (zero retention). Web search only when you turn it on; making pictures and AI photo viewing are off. |
| On this phone only | The App opens no connections. Speech recognition runs on the device too. Calls and texts you ask for still go through your carrier, app and model downloads come from Google Play, and your keyboard and phone backup follow your phone's settings. |
You can change this any time in Settings.
4. What goes out
| When | What · where | What is kept |
|---|---|---|
| A request that needs AI (throwing · speaking) | What you said (including transcribed speech); device time, language and country; a few lines you threw shortly before on the same device; text in photos (when you mention the text, or turn on "Look at photos and handle them" · up to 3,000 characters) → our server → OpenRouter (USA) → model providers that store nothing (zero data retention). The same text is also checked for signs of crisis | No text on our server (Section 5) |
| Showing a photo to AI (only if you separately turn on "Let an AI look at photos with words" · off by default) | Photos you threw with words (long side 1024px · up to 3) → our server → OpenRouter → zero-retention providers. It does not identify who is in the photo | Not stored |
| Search (shops · numbers · opening hours · web) | Search words (up to 60 characters), language, country, city name, and, when finding the nearest branch, coordinates rounded to about 100 m → our server → Kakao (Korea) · Serper · Brave · Exa. Exa, the last step, is not a zero-retention provider [To be confirmed — Serper country] | Not stored |
| Weather · exchange rates | City name, country, language → Open-Meteo [To be confirmed — country] / exchange rates from the Export-Import Bank of Korea (no personal information) | Temporary cache in server memory (30 min to 7 days · nothing that identifies you) |
| YouTube search | Search words, language, country → Google (YouTube) | A hash of the search words and the video ID, 7 days |
| Making pictures ("Hand it all over" only) | The picture request → OpenRouter → OpenAI (USA). Sent on the condition that it isn't used for training, but this is not a zero-retention provider | Not stored |
| Interpreter "listen automatically" (only if you turn it on · off by default) | Voice clips (up to 45 seconds) → our server transcribes and discards them at once → translation goes the same way as the first row | Size and time only |
| Transcribing when you speak | Your voice → your phone's speech recognition service (usually Google). "On this phone only" uses on-device recognition | That company's policy |
| DD-to-DD messaging (only if you turn it on) | Messages sealed phone to phone (our server can't open them), mailbox number, device number, notification token, who you've added each other as, last used time → our server → the other device | Undelivered messages 7 days (deleted on delivery) · devices unused for 90 days are deleted |
| Wake-up notifications | A "something new arrived" signal (no text) and a notification token → Google's notification service (FCM) | — |
| Trial allowance | A hash of the Android device ID visible only to this app → our server (hashed again, with the amount used and the first day) | Until the trial program ends [To be confirmed — period] |
| Diagnostic numbers (only if you turn it on · off by default · never at "On this phone only") | Once a day, numbers such as counts and response times, and the app version → our server. No text, names, numbers or location | 90 days |
| If you connect your Google account | One backup file (to-dos, notes, reminders, memories and so on — Inner stays locked, assets stay locked if you set a password, the rest is plain text), calendar events, your Books library → your own Google Drive and Calendar (not through our server) | Google's policy · you delete it |
| If you connect home appliances (SmartThings · LG ThinQ) | Appliance commands and the connection key → our server → Samsung · LG | Not stored or logged |
| Turning a photo location or your current spot into a place name ("Hand it all over" · "masked") | Coordinates → your phone's location service (Google) | That company's policy |
| Opening links · texts · messengers · email | Search words, recipient and message → the app or site you opened. DD only fills them in; you tap send | That app's policy |
File names and text in photos can contain personal information such as names or document types. So we don't claim that "only text goes out, so no personal information goes out."
5. Our server — where it is and what it keeps
- The server is in Vultr's Seoul data center.
- For each request we record the time, feature, device key name, result, response time, size, cost and AI provider name. We don't record what you threw, your photos or your voice. Retention period [To be confirmed]
- IP addresses are used only in memory to count request limits, and are not recorded.
6. Retention and deletion
We don't hold records on your device. What remains on our server is deleted without delay once the periods in Sections 4 and 5 pass. If payments are introduced, payment records will be kept for the period the law requires (5 years under Korea's e-commerce law) [To be confirmed — when payments open].
7. Sharing with third parties
We don't sell or give your personal information to third parties, except when required by law. Opening links, texts and email in Section 4 are done directly by your device because you asked.
8. Processors and international transfers
| Recipient | Country | Task |
|---|---|---|
| OpenRouter, Inc. and the model providers it routes to (zero-retention providers) | USA and others [To be confirmed — provider countries] | AI planning · interpreting · photo viewing · summarizing search results |
| OpenAI (via OpenRouter) | USA | Making pictures |
| Kakao Corp. · Serper · Brave Software · Exa | Korea · [To be confirmed] · USA · USA | Search |
| Open-Meteo | [To be confirmed] | Weather |
| Google LLC | USA | Wake-up notifications (FCM) · YouTube search |
| Vultr | Server in Korea (Seoul) | Running our server |
Each request is sent over an encrypted connection, and these companies use what they receive only for that task. If you don't want any transfer, choose "On this phone only". [To be confirmed — whether notice is enough or separate consent is needed (Korea PIPA Art. 28-8)]
9. Sensitive information
Health information in "done" records and the voice profile (biometric information) stay on your device. The voice profile and AI photo viewing are each asked about separately when you turn them on. If you don't want photos such as ID cards or medical records sent to AI, turn off AI photo viewing or choose "masked" or "On this phone only". [To be confirmed — scope of separate consent]
10. Generative AI and automated processing
In DD Daengdaeng, generative AI reads what you say and makes a plan; the App's code carries it out. What was done is shown as a line built from the record, and you can check it, undo it or delete it. AI can make mistakes.
11. Security measures
- Records stay on your device, with no copy on our server.
- Inner is locked with your password, and DD-to-DD messages are sealed phone to phone.
- The AI brain uses only providers that store nothing (zero retention). The exceptions (making pictures, the last search step) are listed in Section 4.
- All connections are encrypted (HTTPS). Server keys stay only on the server.
12. Cookies and analytics
Neither the App nor this website has ad identifiers or behavioral analytics tools. This website uses no cookies and loads no outside fonts or scripts.
13. Your rights
- You can view and delete what is on your device yourself (Section 2).
- For what remains on our server (messaging, trial, diagnostics), you can ask to view, correct, delete or stop processing. We don't know your name, so when you ask we'll explain how to identify the device [To be confirmed — how to request].
- You can also exercise these rights through a representative.
14. Children
We don't knowingly collect personal information from children under 14. [To be confirmed — minimum age · guardian consent wording]
15. Users in other countries
DD Daengdaeng launches in many countries. Where the law of your country gives you stronger protection, we follow it. We don't sell or share personal information for cross-context behavioral advertising. [To be confirmed — EU GDPR · US state laws · Japan APPI wording · representatives]
16. If you also use the PC app
The PC app's records, bin (30 days) and backups stay on your PC. Your phone and PC exchange through your own Google Drive, and KakaoTalk "Chat with myself" notifications go through your own Kakao account (not through our server). Once a day the PC app downloads a signed emergency switch-off list, and its hosts (Cloudflare · GitHub) can see the connecting IP address.
17. Privacy officer
| Officer | [To be confirmed] |
|---|---|
| Contact | hello@dddaengdaeng.com |
18. Remedies
In Korea you can apply for dispute resolution or advice to the Personal Information Dispute Mediation Committee (1833-6972 · www.kopico.go.kr), the Personal Information Infringement Report Center (118 · privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301 · www.spo.go.kr) or the National Police Agency (182 · ecrm.police.go.kr). You may also contact the data protection authority of your country.
19. Changes
If we change this policy, we'll announce it in the App and at this address 7 days before it takes effect (30 days for changes that are unfavorable to you or important). For features that send more information out, we update this policy before the feature opens.
Addendum — This policy takes effect on [To be confirmed — effective date].