Re:Set (Jeonghwasu) Privacy Policy
This is an English translation of the Korean Privacy Policy. To the extent permitted by applicable law, in the event of any discrepancy or conflict between the two versions, the Korean version shall prevail.
LivLab (the "Company") has established this Privacy Policy in accordance with the Personal Information Protection Act of the Republic of Korea, to protect users' personal information and to handle related concerns promptly.
- Effective date: October 29, 2026
- Applies to: the mobile app "Re:Set (Jeonghwasu)" and its related web pages (the "Service")
1. Purposes of Processing
The Company processes personal information only for the purposes below. If a purpose changes, we will notify you in advance and obtain any consent required.
- Providing the Service: creating a guest account; saving and showing your daily ritual records such as Dawn's Welcome and Night's Embrace; providing reflections based on your records, such as Echo of Mind and Trace of Mind
- Nature of Mind reflection (optional): providing a reflection based on the date and time of birth you enter
- Providing paid services: confirming subscription purchases, granting access, restoring purchases, and handling refunds and cancellations
- User protection: showing where to get help when crisis wording is detected
- Service stability: responding to service outages
- Service improvement: analyzing feature usage and subscription conversion as statistics that cannot identify any individual, to improve the Service (analysis results contain no information that can identify an individual, and we do not use any external analytics tools)
2. Personal Information We Process
| Category | Items | How collected | Legal basis |
|---|---|---|---|
| Required | Guest account identifier (random ID), time zone | Created automatically on first launch | Performance of contract (Art. 15(1)(4)) |
| Optional | Date of birth, whether the date was entered in the lunar calendar, time of birth | Entered by you (can be skipped) | Your consent (Art. 15(1)(1)) |
| Service usage records | Intention sentence (up to 40 characters); Night's Embrace records (moon scale, feeling choice, Glow, Dear Tomorrow); A Sip of Calm choices (purpose, area, feeling options); daily water-level value; number of times Gift of Mind was used; record of Today's Wisdom provided | Generated as you use the Service | Performance of contract (Art. 15(1)(4)) |
| Payment | Store transaction identifier, product, purchase and expiry date/time, renewal status | Sent to us by the App Store and Google Play | Performance of contract and legal obligation (Art. 15(1)(2) and (4)) |
| User protection | One item only: whether a crisis flag exists for that day's record (yes/no). What you write and the words themselves are never sent to the server; the check happens on your device | Generated as you use the Service | Performance of contract and protection of life and physical safety (Art. 15(1)(4) and (5)) |
| Automatically collected | Firebase installation ID (an identifier per app installation), app version and OS information | Automatically, when the app receives remote settings (Firebase Remote Config) | Performance of contract (Art. 15(1)(4)) |
"Art." refers to the Personal Information Protection Act of Korea.
- We do not collect your name, phone number, email address, or payment card information. Payments are processed directly by the App Store and Google Play.
- The only text we store on the server is your morning intention and, from Night's Embrace, "Glow" and "Dear Tomorrow" (up to 40 characters each). What you write as "Grow" in Night's Embrace, your morning worries, your thoughts in A Sip of Calm, and any text used for crisis detection are used only on your device and are never sent to our servers.
- The "feeling choice" in Night's Embrace is an everyday emotion record in which you pick how you feel that day from a few options. It is not information that diagnoses or judges any illness or health condition. We store only the option you picked, not anything you write, and we do not use this record for diagnosis or evaluation.
- The crisis flag is used only to show you where to get help and to present that week's State of Mind reflection with care. It is never provided to third parties.
- Processing for service stability and for creating statistics that cannot identify any individual (Section 1, items 5 and 6) is based on the Company's legitimate interest in operating a safe and sustainable Service (Art. 15(1)(6)).
3. Retention Period
| Item | Period |
|---|---|
| Account and records | Deleted immediately when you use "Delete all records." Deleted if there has been no use for 2 years since your last use (we notify you by a device notification 30 days in advance; you may not receive it if notifications are turned off) |
| Payment records | 5 years, as required by the Act on the Consumer Protection in Electronic Commerce, etc. (records of payment and supply of goods). Kept separately with the link to your account removed |
| User protection information (crisis flag) | Same as account and records (only the last 7 days of records are used for the crisis check) |
4. Destruction of Personal Information
When the retention period ends or the purpose has been achieved, we destroy the information without delay. Electronic files are deleted in a way that cannot be recovered. Payment records kept under law are stored separately from other information.
5. Provision to Third Parties
The Company does not provide your personal information to third parties, except where specifically required by law.
6. Outsourcing of Processing
| Recipient | Outsourced task |
|---|---|
| Google LLC (Google Cloud) | Server operation |
| Supabase, Inc. | Database storage |
| Google LLC (Firebase Remote Config, Firebase Hosting) | Providing app remote settings; web address connection |
7. Transfer of Personal Information Overseas
To provide the Service through outsourced processing and storage, personal information is transferred to overseas companies as follows (Google Cloud Run and Supabase store it in the Seoul region).
| Recipient | Country | When and how | Items | Purpose | Retention |
|---|---|---|---|---|---|
| Google LLC (Google Cloud Run) | United States (headquarters) — stored and processed in the Republic of Korea (Seoul region) | Sent over the network when you use the Service | Items in Section 2 | Server operation and connection | Same as Section 3 |
| Supabase, Inc. | United States (headquarters) — stored in the Republic of Korea (Seoul region) | Sent over the network when you use the Service | Items in Section 2 | Database storage | Same as Section 3 |
| Google LLC (Firebase Remote Config, Hosting) | United States and other Google infrastructure | Sent over the network when you run the app or visit the web | Automatically collected items in Section 2 | Providing app remote settings; web address connection | Deleted if not used for 270 days after the app is removed; deleted within 180 days of a deletion request (Firebase policy) |
- The Company does not send your information to any external artificial intelligence service.
- Contacts: Google — https://support.google.com/policies/contact/general_privacy_form · Supabase — privacy@supabase.com
- How to refuse, and the effect: You may refuse the overseas transfer. However, because the servers are operated by overseas companies, refusing makes it difficult to use the Service. If you wish to refuse, you can delete your account with "Delete all records" or contact us below.
8. Your Rights and How to Exercise Them
- You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time.
- You can delete your account and records right away in the app under Settings › Account › Delete all records. Web guide: https://api.livlab.app/account/delete?lang=en
- The Service uses guest accounts and does not collect email addresses or phone numbers. Please use "Delete all records" before you remove the app. On iPhone, reinstalling the app on the same device restores your previous account, so you can delete it then. In other cases, it is difficult for us to find and delete your account, and your records are deleted automatically 2 years after your last use (Section 3).
- For any other request, contact us below and we will handle it without delay.
- The Company does not sell your personal information or share it for targeted advertising, and will not treat you differently for exercising your rights.
- Deleting your account does not cancel your subscription automatically. Please cancel it in App Store or Google Play subscription management.
9. Security Measures
We apply the following security measures to protect your information: encryption in transit (HTTPS), minimum access rights, storing authentication tokens only as hashes (never in plain text), separate storage of secrets, and collecting only the minimum information needed.
10. Automatic Collection Tools — Installation, Operation, and Refusal
- The Company does not use web cookies or advertising identifiers (IDFA, Advertising ID), and does not use behavioral analytics tools (such as Google Analytics).
- The app contains no error-collection or usage-analytics tools. A Firebase installation ID is created so that the app can receive remote settings (Firebase Remote Config); it is not used for advertising or tracking.
- The web experience keeps its settings only inside your browser (local storage) and does not send them to the server.
- How to refuse: once you delete the app, the installation ID is no longer used. Values stored on the web can be removed by clearing the site data in your browser.
11. Children's Privacy
- If the date of birth you enter shows that you are under 14 years old (Korean legal age), we do not store your date of birth on the server, and you can use the Service without the Nature of Mind reflection.
- Outside Korea, the Service is not directed to children under 13. If the Company learns that personal information of a child under 13 has been processed, it will delete that account and its records without delay. Parents or guardians can delete the records right away with "Delete all records" in the app, or let us know at support@livlab.app.
12. Chief Privacy Officer
- Name: Su Young Lim (Representative)
- Contact: support@livlab.app
- To report or seek advice on a privacy violation (Korea): Personal Information Infringement Report Center (dial 118 in Korea), Personal Information Dispute Mediation Committee (1833-6972)
13. Changes to This Privacy Policy
If this Privacy Policy changes, we will announce it in the app (notice or pop-up) and on the web starting 7 days before it takes effect (30 days for changes unfavorable to users).
Business information: LivLab · Representative: Su Young Lim · Business Registration No. 179-49-01191 · 6F z23, 602 Yeongdong-daero, Gangnam-gu, Seoul 06083, Republic of Korea · Mail-Order Sales Registration No. 2026-서울강남-06087 (Gangnam-gu Office) · support@livlab.app