Privacy Policy
Damu (the "Operator") takes your privacy seriously and complies with the Personal Information Protection Act and other applicable laws of the Republic of Korea. This policy applies to the mobile application Damu (the "App").
This is a reference translation of the Korean original. If the two differ in meaning, the Korean version prevails.
1. Basic principle
The App does not require an account or a login. It does not collect information that could identify you, such as your name, email address, phone number, or contacts, and the entries and photos you create are stored only on your device. The Operator does not keep them on any server.
2. Information processed
The information you enter or choose in the App is as follows.
- Photo — one photo you select in order to make a card
- Entry text — the record you write for that day
- Date — the date you assign to the record
- Place — a place name you type, or one filled in automatically from the capture information of the photo you selected
The App does not access your whole photo library. The iOS photo picker runs outside the App, so only the single photo you choose is passed to it.
The App does not request location permission. However, if the photo you select contains capture location data, those coordinates are sent to Apple's geocoding service to turn them into a place name. You are free to edit or delete the place name obtained this way.
3. Purpose of processing
The information collected is used for one purpose only: creating a card. It is not used for advertising, profiling, or training artificial intelligence models.
4. Processing entrusted to third parties and transfers abroad
Only at the moment a card is created, the information below is sent to overseas providers in order to process that request. If you do not create a card, no information leaves your device.
| Recipient | Country | Items | Purpose · Retention |
|---|---|---|---|
| Supabase, Inc. | United States | Photo, entry text, date, place | Relaying the request. Not stored; discarded as soon as it is processed |
| OpenAI, L.P. | United States | Photo, entry text, date, place | Generating the card image and analysing the entry. Retained for up to 30 days for abuse monitoring, then deleted |
| Apple Inc. | United States | Capture location coordinates of the photo | Converting coordinates into a place name. Subject to Apple's policy |
The photo sent is not the original but a copy reduced to 1024 pixels on its longer side. The original stays only on your device. All transfers are encrypted with HTTPS.
You may prefer not to have information transferred abroad. In that case, simply do not use the card creation feature; every other function of the App works normally.
5. Retention and destruction
- Operator's servers — no information is stored at all.
- Your device — kept until you delete it. You can erase everything with "Erase all memories" on the Settings screen, and it disappears together with the App if you delete the App.
- Processors — deleted according to each provider's policy once the periods in the table above have passed.
6. Your rights
Because the App has no user accounts, the Operator neither identifies nor holds any particular user's information. Access, correction, and deletion are therefore things you carry out yourself, directly and immediately, on your own device.
- Delete one — delete that card from its detail screen
- Delete all — Settings → Erase all memories
- Delete completely — delete the App
7. Children under 14
The App is not directed at children under the age of 14 and does not knowingly collect personal information from children.
8. Security measures
- All communication between the device and servers is encrypted with HTTPS.
- Because the Operator's servers do not store your entries or photos, there are no records that a server breach could expose.
- The App offers a lock using biometric authentication (Face ID · Touch ID).
9. Privacy officer
Name: Damu Operator
Email: me@jahoon.me
Please direct enquiries, complaints, and requests for redress concerning the handling of personal information to the contact above.
10. Remedies for infringement of rights
If you need advice or dispute mediation regarding an infringement of personal information, you may contact the following Korean bodies.
- Personal Information Dispute Mediation Committee — 1833-6972 · www.kopico.go.kr
- Privacy Infringement Report Centre — 118 · privacy.kisa.or.kr
- Cybercrime Investigation Division, Supreme Prosecutors' Office — 1301 · www.spo.go.kr
- Cyber Bureau, National Police Agency — 182 · ecrm.police.go.kr
11. Changes to this policy
If this policy changes, notice will be posted on this page from 7 days before it takes effect. Changes that materially affect your rights will be announced 30 days in advance.
Effective 4 September 2026