Supabase
Database storage
Stores memories, account identifiers and search data. The project runs in the Seoul region (ap-northeast-2).
Privacy policy
What we collect,
and where we keep it.
ASR stores the original text of your memories. We explain regular memories and sensitive values, what is sent to outside AI services, and the scope of deletion and backups — separately.
About this translation
This English version is provided for convenience. If it differs from the Korean version, the Korean version governs.
Article 1 · Operator and purpose
We store memories so you can use them again in the next tool.
We keep only the records that are needed, and we disclose how they are processed.
The controller of personal information is 주식회사 아이디오, the operator of the ASR service. Requests to access, correct, export or delete are received at the email address below.
idoweddings@naver.com · Contract-based use that requires verification of a legal guardian or business details follows the notices in the separate contract.
Article 2 · What we collect and why
We keep only what a save request needs.
| Item | Example | Purpose |
|---|---|---|
| Original text | content_raw | Preserving the original, search, recall, original-text card |
| Classification and search data | summary, tags, embedding | Search, classification, linking related memories |
| Owner and speaker | user_id, speaker_id | Isolating each user's space and each AI's source |
| Time and language | occurred_at, created_at, lang | Viewing by date, language filter, audit |
| Country of access | Country code (e.g. KR) | Operating statistics. Only the country is determined, inside our server, from the request's IP address; the IP address itself is not stored or sent anywhere. Country lookup uses GeoLite2 data created by MaxMind. |
| Optional data | file_path, secret_* | Linking to the source document, storing sensitive values separately |
Article 3 · Processors and outside transfers
By default, some memory content is sent outside.
This is needed for search and automatic classification. Each path can be turned off or switched to a self-hosted Ollama.
OpenRouter
Embedding generation
By default, the full saved text and search queries may be used to generate vectors for meaning-based search.
Google Gemini
Automatic classification · recall text
The summary, or the beginning of the original, may be used to classify tags and to generate recall text.
secret_save valuesEncrypted in the application before storage, and never passed to the embedding or classification paths. The values are not sent to outside AI vendors, but the key names you save may remain as separate metadata.
Article 4 · Encryption and access
Not every memory is end-to-end encrypted.
Regular memories are stored in plain text in the original-text column.
Data in transit is protected by TLS, and the Supabase platform's encryption at rest applies. However, the service operator can read the original text of regular memories with service-level access.
Values saved with secret_save are encrypted separately at the application level. This is not end-to-end encryption applied to all regular memories.
Article 5 · Retention and destruction
Kept indefinitely by default; deleted on request.
memory_delete · trash
Excluded from search and recall and marked is_deleted. The original remains and can be restored with memory_restore.
memory_purge · permanent deletion
The database row is deleted only when the user asks to “permanently delete”. It cannot be restored with the service's tools.
Backups and outside vendors
Even after deletion from the database, recovery may remain possible for the backup retention period. Data already sent to outside vendors is subject to each vendor's policy.
Current limits
The retention period of the operator's file backups is managed according to operating conditions. A deletion request does not immediately remove data from every backup and outside system.
Article 6 · Your rights
Most rights can be exercised directly with MCP tools.
Access
Check with memory_search, memory_card and memory_stats.
Correction
If a drawer is wrong, fix the tags with memory_retag. For the original text itself, we recommend recording the correction as a new memory.
Portability
Receive your memories as JSON Lines with memory_export. Up to 5,000 memories; for secret values only their existence is included.
Deletion
Use memory_delete and an explicit memory_purge as separate steps. Requests the tools can't handle are received at the contact address.
Article 7 · Records about children and minors
Processed under a guardian's responsibility.
When a family service stores records about a minor, a guardian creates and manages the account and must confirm the consent needed for saving, viewing and deleting. Related requests are handled after verifying the guardian's identity.
Policy changes
When the items processed, outside transfers or retention periods change, we update both the effective date and the content of this page. See Security & data for more.