Privacy Policy

1. What we collect

At sign-up: email address, password (stored only as a hash — never in plain text), name (optional).

While using the service: notes, folders, tags and other content you create; photos and files you attach; usage records (sign-in times, AI usage).

If you use voice capture: the audio recording and its transcript. Audio is sent to our AI processor to be transcribed (see §4).

Automatically: technical information for error diagnosis (browser and device type, where the error occurred).

If you answer a survey or send feedback: your answers and what you write, plus a usage summary that helps us read them (days since sign-up, number of notes, recent active days, app version, language). Both are optional.

If you report an AI result: the reason and any comment you write (the card content itself is not sent).

When you visit our website landing page: a cookie that tells visits apart (up to 90 days) and how you arrived (referrer and campaign tags), plus your email if you join the waitlist.

Note: what you write may itself be sensitive. We do not use note content for advertising or profiling.

The service is not directed to children under 14.

2. Why we use it

To authenticate you and provide the service (storing, searching and syncing notes).

To provide AI features — your notes are analysed to generate connections, insights and summaries. This sends note content to our AI processor (see §4).

To transcribe voice captures — the recording is sent to the same AI processor and returned as text.

To keep the service reliable (error diagnosis, abuse prevention).

To improve the service — we analyse survey answers, feedback you send and feature usage statistics to decide what to fix. Note content is not used for this analysis.

News and tips — only if you opt in at sign-up or in Settings, we email occasional product news and writing tips. Saying no does not limit the service, and you can withdraw anytime in Settings → Account.

We do not sell your personal information or note content.

3. Retention

We keep your data while your account exists, and delete it without undue delay when you delete your account.

Encrypted backups kept for disaster recovery are retained for up to 30 days. When you delete your account, your data is removed from the service immediately and from backups once that period has passed.

Deleted notes can be restored from trash; permanent deletion destroys them immediately.

Records we are legally required to retain are kept for the required period.

4. Processors and international transfers

We use the processors below to run the service. All are located outside Korea (in the United States). Your note content is sent to OpenAI when AI features are used, and voice recordings when you transcribe them.

These processors act only on our instructions. They do not use your data for their own purposes and it is not used to train AI models.

AI processing only happens with your consent. The app asks before anything is sent to OpenAI. You can decline, or turn AI features off later in the app under Settings › AI features. From then on none of your data is sent to OpenAI, and your notes keep working. You can turn it back on in the same place.

OpenAI — AI features (note content and titles are sent for analysis and generation) (USA)

Vercel — Hosting and deployment (USA)

Neon — Database (notes and accounts) (USA)

Cloudinary — Attachment and file storage (USA)

Resend — Verification, password reset and account-change emails; forwarding reports and feedback you send to the operator; news and tips emails if you opt in (USA)

Sentry — Error monitoring (USA)

Ably — Realtime sync (USA)

Liveblocks — Character-level realtime collaboration (USA)

GitHub — Runs the database backup job (processed transiently before encryption; not stored) (USA)

Cloudflare — Stores encrypted database backups; domain routing; receiving support email (USA)

What, when, how: only the data needed for the purposes above, at the time you use the service, over encrypted connections.

5. Deletion

Deleting your account deletes your notes, folders, AI outputs and attachments. This cannot be undone.

Export your data first from Settings → Data (Markdown ZIP or JSON).

6. Your rights

You may request access, correction, deletion, or suspension of processing at any time.

Access and correction: directly in the app. Export: Settings → Data. Deletion: Settings → Account → Delete account.

For anything else, contact support@byeori.ai.

7. Security measures

Passwords are stored only as one-way hashes (bcrypt); the operator cannot read them.

All traffic is encrypted with HTTPS.

Sign-in attempts are rate limited to prevent brute force.

Changing or resetting your password invalidates every previously issued session.

8. Privacy contact

신우철 · support@byeori.ai

Please direct privacy questions, complaints or remedy requests to the address above.

9. Changes

We will announce changes in the service. Significant changes will be announced before they take effect.