Supabase
Database storage
Stores memories, account identifiers and search data. The project runs in the Seoul region (ap-northeast-2).
Privacy policy
What we collect,
and where we keep it.
ASR stores the original text of your memories. We explain regular memories and sensitive values, what is sent to outside AI services, and the scope of deletion and backups — separately.
About this translation
This English version is provided for convenience. If it differs from the Korean version, the Korean version governs.
Article 1 · Operator and purpose
We store memories so you can use them again in the next tool.
We keep only the records that are needed, and we disclose how they are processed.
The controller of personal information is 주식회사 아이디오, the operator of the ASR service. Requests to access, correct, export or delete are received at the email address below.
idoweddings@naver.com · Contract-based use that requires verification of a legal guardian or business details follows the notices in the separate contract.
Article 2 · What we collect and why
We keep only what a save request needs.
| Item | Example | Purpose |
|---|---|---|
| Original text | content_raw | Preserving the original, search, recall, original-text card |
| Classification and search data | summary, tags, embedding | Search, classification, linking related memories |
| Owner and speaker | user_id, speaker_id | Isolating each user's space and each AI's source |
| Time and language | occurred_at, created_at, lang | Viewing by date, language filter, audit |
| Country of access | Country code (e.g. KR) | Operating statistics. Only the country is determined, inside our server, from the request's IP address; the IP address itself is not stored or sent anywhere. Country lookup uses GeoLite2 data created by MaxMind. |
| Sign-up source | The link's utm values (source, campaign, post name, e.g. x, esa_open), the answer you pick on the dashboard after signing up (e.g. X, search, a friend), and the name of the first AI tool you connect (e.g. ChatGPT, Claude) with how it connected (sign-in connection or key) | Operating statistics on what led to a sign-up and which connection you started with. utm values are recorded only when the link carries them. The answer is recorded only if you pick one, and you can skip it. These two are each recorded once, within 7 days of sign-up. The first connected tool is recorded only once per account, the first time. No name, email or IP address is included. |
| Optional data | file_path, secret_* | Linking to the source document, storing sensitive values separately |
Article 3 · Processors and outside transfers
By default, some memory content is sent outside.
This is needed for search and automatic classification. Each path can be turned off or switched to a self-hosted Ollama.
OpenRouter
Embedding generation
By default, the full saved text and search queries may be used to generate vectors for meaning-based search.
Google Gemini
Automatic classification · recall text
The summary, or the beginning of the original, may be used to classify tags and to generate recall text. When you press [Summarize] in Madang, summaries of the selected memories are used to write a project summary.
secret_save valuesEncrypted in the application before storage, and never passed to the embedding or classification paths. The values are not sent to outside AI vendors, but the key names you save may remain as separate metadata.
Article 3-2 · Processing outside Korea
Your memories are processed on servers outside Korea.
Disclosed under Article 28-8 of Korea's Personal Information Protection Act. Data is sent over the network (TLS) each time you use the service.
| Recipient | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Hetzner Online GmbH | Finland (Helsinki data center) | Every request that reaches the ASR server: memory text, search queries, account identifiers, connecting IP (used to find the country, then not stored) | Running the ASR server | While the request is processed. Only the operator's own account backups are kept on this server |
| OpenRouter, Inc. | United States | Saved text and search queries | Creating vectors for semantic search | Per OpenRouter's policy |
| Google LLC (Gemini) | United States and other Google processing regions | Summary or the start of the text. When you press [Summarize] in Madang, summaries of the selected memories | Tag classification, recall sentences, Madang project summaries | Per Google's policy |
| CipherStash | Australia (AWS Sydney region, ap-southeast-2) | Key management for secret_save values (the values themselves are not sent) | Encrypting secret values | Per CipherStash's policy |
To refuse
Because the ASR server is outside Korea, the service cannot be used without this processing. Deleting your account stops further transfers. Contact: idoweddings@naver.com (IDO Inc.)
Article 4 · Encryption and access
Not every memory is end-to-end encrypted.
Regular memories are stored in plain text in the original-text column.
Data in transit is protected by TLS, and the Supabase platform's encryption at rest applies. However, the service operator can read the original text of regular memories with service-level access.
Values saved with secret_save are encrypted separately at the application level. This is not end-to-end encryption applied to all regular memories.
Article 5 · Retention and destruction
Kept indefinitely by default; deleted on request.
memory_delete · trash
Excluded from search and recall and marked is_deleted. The original remains and can be restored with memory_restore.
memory_purge · permanent deletion
The database row is deleted only when the user asks to “permanently delete”. It cannot be restored with the service's tools.
Backups and outside vendors
Even after deletion from the database, recovery may remain possible for the backup retention period. Data already sent to outside vendors is subject to each vendor's policy.
Current limits
The retention period of the operator's file backups is managed according to operating conditions. A deletion request does not immediately remove data from every backup and outside system.
Article 6 · Your rights
Most rights can be exercised directly with MCP tools.
Access
Check with memory_search, memory_card and memory_stats.
Correction
If a drawer is wrong, fix the tags with memory_retag. For the original text itself, we recommend recording the correction as a new memory.
Portability
Receive your memories as JSON Lines with memory_export. Up to 5,000 memories; for secret values only their existence is included. ChatGPT, claude.ai and Kakao PlayMCP connections don't have this tool; use Export in the dashboard's Memory tab instead.
Deletion
Use memory_delete and an explicit memory_purge as separate steps. ChatGPT, claude.ai and Kakao PlayMCP connections don't have memory_purge; use permanent deletion in the dashboard's Memory tab instead. Requests the tools can't handle are received at the contact address.
Deleting your account
Delete your account yourself with 계정 지우기 (Delete account) on the dashboard's 계정 (Account) tab. After you type the confirmation phrase, the account is deleted together with your memories, API keys, mailbox messages, project summaries, feedback you sent and invite records. This cannot be undone. What remains in backups and at outside vendors follows the section above.
Article 7 · Records about children and minors
Processed under a guardian's responsibility.
When a family service stores records about a minor, a guardian creates and manages the account and must confirm the consent needed for saving, viewing and deleting. Related requests are handled after verifying the guardian's identity.
Article 8 · Founding member sign-up
We use your email only for the invitation.
Since 2026-09-29 anyone can sign up directly, so we no longer take applications. Emails already received are deleted as described below.
| What we collect | Email address, whether and when you agreed, the page language, and the referral source when the link carries one |
|---|---|
| Why | To tell you your place and send your invitation. News and new features are sent only if you separately agree to marketing messages |
| How long | Deleted once you create an account or withdraw the application. You can withdraw marketing consent at any time through the same form or by email |
| If you decline | Without the required consent you cannot sign up. Declining the optional consent does not affect your application or invitation |
Article 9 · Sending feedback
We use your feedback and email only to reply and to improve the service.
| What we collect | Type (bug, idea, partnership inquiry), message, reply email (if you have no account) or your account (if you do), the page and language, and the time sent |
|---|---|
| Why | To reply, fix bugs, improve the service and review partnerships |
| How long | Kept for one year after we finish handling it, then deleted. Deleting your account also deletes feedback sent from it |
| If you decline | Without an account you cannot send without consent. You can email idoweddings@naver.com instead |
Policy changes
When the items processed, outside transfers or retention periods change, we update both the effective date and the content of this page. See Security & data for more.