This English translation is provided for reference only. If there is any inconsistency between this translation and the Korean original, the Korean version prevails.
AIMHYER (the "Company") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act of Korea and other applicable laws, in order to protect users' personal information and to promptly handle related concerns.
Article 1 (Personal Information We Collect)
The Company collects the following personal information to provide the Service.
| When collected | Items collected |
|---|---|
| At sign-up | Email, password, nickname, age group, areas of interest (optional) |
| At payment | Payment method information, payment records, refund records |
| While using the Service | Service usage records, access logs, IP address, device information |
| During counseling | Counseling content, counseling records |
| When recording emotions | Emotional state, emotion intensity, notes, attached photos (optional) |
| During psychological self-assessment | Self-assessment responses and results |
| When using the weather feature | Approximate location (temporary processing used only for real-time requests, optional) |
Information related to mental health — such as emotion records, counseling content, and self-assessment results — is treated as sensitive information and is not used for any purpose other than providing the Service (keeping records, generating emotion-based music, and providing personalized content).
Article 2 (Purposes of Using Personal Information)
Collected personal information is used for the following purposes.
- Member management: identity verification, member identification, prevention of fraudulent use
- Service provision: use of user information for disposition and psychological analysis, provision of personalized content
- Payment processing: payment for paid services, refund processing
- Service improvement: usage statistics analysis, service quality improvement
- Customer support: responding to inquiries, delivering notices
Article 3 (Retention and Use Period of Personal Information)
The Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, where retention is required by applicable law, the information is kept for the corresponding period.
| Retained item | Retention period | Legal basis |
|---|---|---|
| Records of contracts or withdrawal of offers | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payments and supply of goods | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of consumer complaints or dispute handling | 3 years | Act on Consumer Protection in Electronic Commerce |
| Access records | 3 months | Protection of Communications Secrets Act |
Article 4 (Provision of Personal Information to Third Parties)
In principle, the Company does not provide users' personal information to external parties. The following cases are exceptions.
- When the user has given prior consent
- When required by law, or when requested by investigative authorities in accordance with the law
- When the minimum necessary information is provided to the payment gateway (Toss Payments) for payment processing
- When in-app purchases are processed through the Apple App Store or Google Play (payment information is handled according to each store's policies)
Article 5 (Use of External AI Services and Overseas Processing)
To provide AI features requested by users — such as AI character conversations, empathic messages for emotion records, insights and summaries, explanations of psychological self-assessments, and content related to emotion-based music — the Company may use OpenRouter and the systems of AI model providers selected through OpenRouter. The Company informs users separately and obtains their consent before they use AI features that require this processing.
| Recipient of processing | Purpose of processing | Items processed | Country, timing, and method | Retention and use period |
|---|---|---|---|---|
| OpenRouter, Inc. and the AI model providers and inference infrastructure operators selected under OpenRouter's ZDR conditions | AI responses, empathic messages, summaries and insights, content recommendation and generation, and safety checks | Conversations and questions the user enters into AI features; emotional state, intensity, and notes; self-assessment responses and results; and the minimum conversation and record context needed to generate responses. Email addresses and payment information are not transmitted unless the user includes them directly in their input. | The United States and the countries where the selected AI processing servers are located; transmitted over encrypted connections when an AI feature is requested | The period needed to generate the AI response. The Company applies ZDR (Zero Data Retention) conditions to each request so that inputs and outputs are not sent to endpoints that store them or use them for model training. However, the processing of technical metadata that is not content (such as request volume and latency) and of information required by law follows each provider's policies. |
The actual models and processing infrastructure may vary among ZDR-supporting providers — including those affiliated with Anthropic, Google, and DeepSeek — depending on the feature, quality, and availability. The latest per-provider processing policies are available in the OpenRouter ZDR guide. ZDR is a setting that restricts external AI endpoints from storing or training on inputs and outputs; it does not change the retention period of emotion records or conversation records that users have saved directly in CommaDay.
Users may choose not to consent to AI processing and not to use AI features. Even after consenting, users may stop using AI features and request withdrawal of consent or suspension of processing by email (hello@aimhyer.io). If you decline or withdraw consent, features that require external AI processing become unavailable, but features that do not require it — such as account management — remain available.
Article 6 (Destruction of Personal Information)
- The Company destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the purpose of processing has been achieved.
- Information in electronic file format is deleted securely using technical methods that prevent recovery and restoration.
- Personal information printed on paper is destroyed by shredding or incineration.
Article 7 (User Rights and How to Exercise Them)
Users may exercise the following rights.
- Request to access their personal information
- Request to correct or delete their personal information
- Request to suspend the processing of their personal information
- Withdrawal of membership
These rights can be exercised through the in-service settings or by email (hello@aimhyer.io), and the Company takes the necessary measures without delay. Detailed procedures are available on the Account Deletion Guide and Data Deletion Request pages.
Article 8 (Measures to Secure the Safety of Personal Information)
The Company takes the following measures to secure the safety of personal information.
- Encryption of personal information
- Security systems against hacking and similar threats
- Restriction and management of access to personal information
- Training of staff who handle personal information
Article 9 (Personal Information Protection Officer)
Effective Date
This Privacy Policy applies from August 10, 2026.
AIMHYER
CEO: Hyeoksu Choi
Address: 501-191A, 5F, 61, Daehak-ro 12-gil, Jongno-gu, Seoul, Republic of Korea
Business Registration No.: 651-03-03617