Consent to the Collection and Use of Personal Data
Effective 12 October 2026 · Version 2.1
Recnovo Inc. (the “Company”) requests your consent to collect and use personal data as set out below, in accordance with Article 15 of the Personal Information Protection Act. You may refuse; the consequences of refusing are in section 5.
1. Items collected, purposes, and retention
| Category | Items | Purpose | Retention |
|---|---|---|---|
| Required | Email address, social sign-in identifier (Apple/Google), the name and profile-image address the sign-in provider passes on (only if you sign in with Apple or Google, and only what you allow on the provider’s screen), account identifier, password (stored one-way hashed) | Sign-up and identity verification, sign-in and authentication (including two-factor), account management, service notices | Until you delete your account |
| Required | Purchase receipts, subscription status, credit balance and usage history | Providing paid services (subscriptions, credits), verifying payment status, deducting and reconciling credits, refunds | Until you delete your account, except records the law requires us to keep (section 2) |
| Generated through use | Recorded audio, transcripts, AI outputs (summaries, organized notes, translations), note titles, descriptions, tags, speaker names | Storing and syncing recordings, speech recognition, and the AI features built on them | Until you delete the data or your account (the cloud copy is additionally subject to the unpaid-storage process in Article 8 of the Terms) |
| Collected automatically | App/browser version, device type and OS, error and crash diagnostics, access time and IP (processed in transit) | Service stability, fault and error diagnosis, abuse prevention | Destroyed without delay once the purpose is met; diagnostic data is kept by the processor for 30 days and then deleted (the processor’s backups are deleted 90 days after they are created) |
| App usage events (can be turned off) | Which feature was used (app launch, transcript completed, paywall viewed, purchase, credits running out, and similar) with short values such as the plan or a text length; account ID, install ID, session ID, app version, platform. Never recording or transcript content | Improving the Service, understanding how features are used | Deleted 180 days after collection. On by default; turn off at any time in Settings → Usage diagnostics |
Your content (recordings, transcripts, summaries) is encrypted on your device before it is stored on the Company's servers. The decryption key is derived on your device from your sign-in password, security PIN or recovery key, and the Company does not keep that key in readable form; the Company therefore does not read the stored copy. For accounts that sign in with a password, however, that password passes through the Company's authentication server when you sign in, so the Company does not claim that reading the stored copy is technically impossible for it. What is said above concerns the stored copy; it does not extend to processing. Transcription and AI features require plaintext at the moment they run, so while transcription or AI processing is running a readable copy exists on the Company's servers and at the processors named in the international transfer notice, and they handle the content. If you use the sharing feature, the person you send the link to also holds a key to that copy; even then, the Company does not read it. The Company does not use your content to train AI models; how each processor treats the data it receives is set out, processor by processor, in the international transfer consent.
2. Retention required by law
| Statute | Records | Period |
|---|---|---|
| Act on Consumer Protection in Electronic Commerce | Contracts and withdrawal of subscription | 5 years |
| Act on Consumer Protection in Electronic Commerce | Payment and supply of goods | 5 years |
| Act on Consumer Protection in Electronic Commerce | Consumer complaints and dispute handling | 3 years |
Data kept under these provisions is used only for the purpose the statute prescribes and is destroyed without delay once the period ends.
3. How data is destroyed
Personal data is destroyed without delay once its retention period ends or its purpose is met. Electronic files are deleted irrecoverably from live systems; for content encrypted on your device, destroying the encryption key also makes recovery impossible. A copy of deleted information may remain for a limited time in the backups kept by our database provider, until those backups are replaced; we do not use such copies for any other purpose.
Account deletion is available in Settings in both the app and the web, and you can export your data before deleting. Deletion takes effect after a 7-day grace period, during which you can cancel it.
4. Minimum age
The Service is available only to people who have reached the minimum age for the country selected at sign-up — 19 in Korea, 18 in the United States, 16 in Japan, 15 in France, 14 in Spain and 16 elsewhere — and the Company does not knowingly collect personal data from anyone younger. If we learn that an account belongs to someone below that age, we delete the account and its data without delay.
For Korean and US accounts, the iOS app asks Apple at sign-up and at purchase whether the person has reached that age. If the person agrees to share it, only that yes-or-no answer is checked on the device and used to decide whether to continue; it is not sent to or stored by the Company.
5. Your right to refuse, and what refusing means
You have the right to refuse consent to this collection and use.
These items are the minimum needed to provide the Service, so refusing means you cannot sign up or use cloud features (transcription, AI summaries and organized notes, sync). On-device local recording in the mobile app remains available without consent.
6. Privacy Officer and contact
Privacy Officer: Junmee You (Representative Director)
Contact: hello@recnovo.com
You may request access, correction, deletion or suspension of processing, or withdraw consent, at that address or in Settings. See the Privacy Policy for details.