Privacy Policy

Last updated: November 6, 2026

What changed — applies from when you agree to this version

Minimum age and parental consent (November 6, 2026): the minimum age to sign up goes from 14 to 13. If you are under 14, we send a consent link to the parent's or legal guardian's e-mail address you give at sign-up, and you can use the service only after they agree. We ask for your year of birth at sign-up but do not store it; only for users under 14 do we keep the birth year, the guardian's e-mail address and the time of consent as the parental-consent record (sections 1 (1), 3 and 8). Nothing changes if you are 14 or older.
Lifetime study history · pseudonymized research (November 5, 2026): when you delete a material, its title and your answer history stay in your study history. Its text, questions and review schedule are still deleted (section 1 (2) and section 3). We may pseudonymize your answer history, your app usage and your "About you" answers and use them for statistics and research on learning effectiveness. We do not use your name, email, material text, question text or material titles (section 1 (5) and section 14).
iPhone app · Sign in with Apple · App Store payments (October 27, 2026): in the iPhone app you can choose Sign in with Apple (section 1 (1)), and Pro subscriptions are paid through Apple (App Store) (section 1 (6)). If you sign up with Apple, we receive the account identifier Apple provides, your e-mail (which may be a private relay address) and, once, your name, and we keep an Apple connection token so we can disconnect from Apple when you delete your account (section 3). Friend notifications on iPhone are delivered through Google (Firebase) to the Apple Push Notification service (sections 5 and 6). Nothing changes on Android.
Rewards ended (October 27, 2026): the rewards programme ended on October 23, 2026. No new points are earned or applied to payments, and reward records from before that date are kept only until you delete your account (section 1 (2) and section 3). We removed the purposes, processing and automated decisions that existed only for rewards.
Free-trial record (October 27, 2026): we do not currently give a free trial at sign-up, so the record used to give each person the trial only once (section 1 (7)) is not created.
Friends (optional, October 15, 2026): only if you start Friends in the Friends tab, your nickname and study summary (streak, this week's questions, accuracy and study time, and the names of materials you choose to show) are visible to users who accepted an invite and became mutual friends with you (section 1 (8) and section 4 ②). Material contents, questions and your e-mail are never shown. Cheers from friends, new-friend alerts and ranking alerts among friends (you can turn these off) are delivered through Google LLC (Firebase Cloud Messaging) (sections 5 and 6). Nothing changes if you do not start Friends.
AI provider for questions (October 12, 2026): the AI company that generates questions from your material text changes from Groq LLC to Google LLC (Gemini API) (sections 5 and 6). Until you agree to this version, Groq LLC continues to do this. Afterwards Groq LLC handles Pro figure reading and serves as a backup when Google is unavailable. The information entrusted, the purpose and the retention stay the same, and we use both companies on paid terms under which your text and images are not used to train models.

Mirimi ("the service") is built to collect as little as possible and to let you take it all back. This policy explains what we collect, why, who processes it for us, and when it is deleted. The service is operated from the Republic of Korea and follows the Personal Information Protection Act (PIPA); if you live elsewhere, the rights your local law gives you still apply.

Operator (data controller)

Legal / trading name: ITERIA (이터리아), represented by Jinwook Choi
E-mail: support@iterialab.com
Address: Room 310, College of Business Administration and Economics, 70 Hannam-ro, Daedeok-gu, Daejeon 34430, Republic of Korea

1. What we collect

(1) When you sign up

E-mail sign-up: your name (nickname), your e-mail address and your password, stored only as an irreversible hash, so we never see the password itself.
Google sign-in: your Google account identifier and e-mail address, plus the name and profile picture URL that Google passes on, and the name (nickname) you confirm when you finish signing up. The name from Google only pre-fills the name field; we keep only the name you confirm and save.
Sign in with Apple (iPhone): the account identifier Apple provides, your e-mail address (an Apple relay address if you choose "Hide My Email"), the name Apple provides the first time, and the name (nickname) you confirm when finishing sign-up. Apple's name only pre-fills the name field; we keep only the name you confirm and save. We keep an Apple connection token in a separately locked part of the server (the app cannot read it), used only to ask Apple to disconnect when you delete your account.
Both: the sign-up date, your app language and your device time zone.
Users under 14 (section 8): year of birth, the parent's or legal guardian's e-mail address, and the time of their consent with the versions of the terms and this policy they agreed to (the parental-consent record).
Your name (nickname) is used only to address you in the app and to tell accounts apart. It does not have to be your real name, and you can change it any time in Me → Settings → Name. We do not collect your phone number. We ask for your year of birth at sign-up only to check your age and do not store it; only for users under 14 is the birth year kept in the parental-consent record (section 8). Things like your age range or gender are collected only as the optional items in (5) below, and only if you choose them.

(2) What builds up on the server as you use the service

Study material: the text extracted from the file you chose, its title, page and character counts, its language, and an optional exam date.
The original file is never uploaded. Text extraction happens on your device, including reading text in scanned pages and in images inside your files.
Only if you turn on Pro's "Also read figures and charts", pages that contain figures are turned into images (JPEG) and sent to our AI provider, which turns charts, diagrams and tables in images into text. These images are used only while the request is processed and are not stored; the resulting text is stored with your material text. The original file is still never sent. We count the pages read each month.
Questions: the AI-generated questions, options, answers, explanations and short source excerpts (120 characters or fewer), and the name of the model that produced them.
Study activity: your answers, whether they were correct, response times, the question format, whether you used a hint, whether you graded yourself, when you answered and when the server received it, the number of the sitting (study session) each answer belonged to, your review schedule and an estimate of your current level.
Lifetime study history: the titles of materials you uploaded, when you uploaded and deleted them, and for each answer the time, whether it was correct, response time, question format, difficulty and concept name. It does not include question text or the answers you chose.
Notification settings: whether reminders are on, the times, the days, the daily limit and your quiet hours.
Question reports: the question you reported and the reason.
Generation logs: the model name, prompt version, success or failure, token counts, duration and error message. The text of your material is not kept in these logs.
Plan usage: your plan and how many generations you have used today and this month.
Entitlements: the Pro periods from a free trial, a paid subscription, the launch promotion and similar offers, and a record of when each period was created or changed (when you became Pro and when it ended, including periods pushed back by rewards while they ran).
Consent records: which document and version you accepted, when, and in which language you read it. We also keep, with the time, each time you give, decline (including simply closing the consent sheet) or withdraw consent to ad data sharing. We keep a decline so that we don't ask you the same question again on another device or after you reinstall the app.
Rewards (ended October 23, 2026 — if you used Pro before then): the records built up until then — when rewards applied to you, daily study totals (including whether you completed the quest and how many long-term correct answers you had), the point ledger, settlement results, billing-date deferral records and any signals that needed review. Nothing new is recorded since the programme ended.
Usage analytics — app sessions: when you opened and left the app, how long you stayed, how you came in (launch, return, or a notification tap), and how often you visited each screen and for how long (the kind of screen only — never the IDs or contents of your materials or questions).
Usage analytics — feature events: the event name with a few simple properties (for example: opened from a notification, reached a plan limit, changed a setting, opened the plans screen, how many questions were due when you started studying, how many notifications were set), the app build number and the time. On the free plan this also records whether an ad slot opened, whether an ad or a note from Mirimi was shown, and the revenue amount and currency of a single ad. The content of the ads is never recorded.
Usage analytics — device information: operating system and version, device model, app version, device language and region setting, and time zone.
Usage analytics never contain your e-mail, your material or question text. We do not collect device identifiers, advertising IDs or location (GPS). What Google receives, such as your advertising ID, when ads are shown on the free plan is described separately in sections 4 and 13.
Turn "Send usage data" off under Me → Settings → Privacy and we stop collecting them and delete what your device was still holding. The ad records above follow this switch too. However, what the Google ads SDK sends directly to Google cannot be turned off with this switch (section 13).
Daily summaries: a per-user daily summary the server computes from the records above and your study activity (how many times you opened the app, time spent, first and last use, questions answered, study sessions, notification opens, and your plan that day).

(3) Stored on your device

App language, sound, daily goal and whether you have seen the welcome screen.
A copy of your notification settings and the scheduled reminders (including the upcoming-payment notice). Review reminders are raised by your device, so their contents never reach us (only friend updates are sent from our server, as in section 1 (8)).
A friend invite code you received through an invite link, until it is accepted.
Answers that have not been uploaded yet. They are sent when you are back online, then removed from the device.
The consent boxes you ticked at sign-up. They are written to the server at your first sign-in and then cleared.
On the free plan: how many practice rounds you have used today, the order of ad slots, the date until which notes from Mirimi are paused, and whether you have already seen one-time notices (trial ended, free plan changes and similar).
These values stay on your device. However, while "Send usage data" is on, events such as changing a setting, a practice round being counted, a notice being shown or choosing "Don't show for 7 days" are recorded as the feature events described in (2).

(4) Crash reports (only in builds where this is enabled)

When crash reporting (Sentry) is enabled, an error sends us its type and location, the app version, the device model and the OS version.
Before anything is sent we strip out e-mail addresses and anything that looks like content: extracted text, question text and similar. We never send screenshots, tap recordings or session replays.
Builds without the setting send nothing at all.
Turn "Send crash reports" off under Me → Settings → Privacy and we stop collecting them. (In builds without crash reporting the switch is not shown.)

(5) Optional "About you" information (only what you choose)

Items: age range, gender, status (high school student, university student, employee and so on), year of study, field, reason for studying, how you found Mirimi, and the region you live in. Every item is optional and we collect only what you pick.
Purpose: improving the service, statistics by user type, marketing planning, and research on learning effectiveness after pseudonymization (section 14). We look at it only as statistics that do not identify you and as pseudonymized research data, and never use it to send you personal advertising.
Retention: until you delete it or your account.
You may refuse, and refusing has no effect at all on your use of the service. You can change or delete your answers any time under Me → Settings → About you.

(6) When you subscribe (once billing is open)

Google Play (Android) or Apple's App Store (iPhone) processes the payment. We never receive your card number, bank account or other payment details.
What we receive: from Google Play, the purchase token (kept on the server only) and the order number; from the App Store, the transaction ID and original transaction ID; and from both, the product and plan, the payment status (paid, grace period, on hold, cancellation scheduled, refunded), the subscription period (start, end and next billing date), the price, currency and country, and a record of billing dates pushed back by rewards while they ran.
To confirm which account a purchase belongs to, the app sends Google Play an irreversible hash of your account number when you buy, and sends the App Store an identifier made from the start of that hash (in UUID form). Your account number itself is never sent.
Purpose: confirming your subscription and turning Pro on, handling renewals, cancellations and refunds, upcoming-payment notices, and checking for fraudulent payments.

(7) Free-trial record

We do not currently give a free trial at sign-up, so this record is not created. If we offer a trial again, we collect it as follows.
Items: an irreversible hash of the e-mail address you signed up with, and the date you received the trial. The e-mail address itself is not kept in this record. For Gmail addresses, dots and anything after a "+" are ignored before hashing, so variants count as the same address.
Purpose: to give each person the free trial only once (so that deleting an account and signing up again does not restart the trial). If a record exists, you can still sign up but you will not get another trial.
Retention: kept for one year even after you delete your account, then deleted (section 3).

(8) Friends (only if you start Friends in the Friends tab)

Items: your nickname (2–16 characters), invite code, friendships (with whom and since when), cheers you send and receive (type, the material cheered, time, whether read), block and report records (the reason and the nickname at that time), daily counters (codes entered, cheers, reports), each material's "show to friends" setting, a device token for friend notifications (Firebase Cloud Messaging) with your app language, and ranking-alert records (your last seen rank that week, the friends above you, how many ranking alerts were sent today and when) with your ranking-alert setting, and the friend groups you create (group name and the friends in it — visible only to you; friends are not notified).
On iPhone this device token is linked to the Apple Push Notification service (APNs) device address.
What friends can see is listed in section 4 ②. There is no search by name or e-mail — only people who accept an invite become friends.
Purpose: sharing study progress with friends, cheering each other on and a weekly ranking among friends; friend notifications (cheers, new friends, and when a friend passes you or you reach #1); preventing harassment, spam and abuse and handling reports.
Retention: removing a friend deletes that friendship and its cheers; turning off Friends immediately deletes your friends, cheers, nickname, invite code, device tokens, ranking-alert records and friend groups (block and report records are kept until you delete your account, to prevent repeat harassment). Deleting your account deletes everything.
If you invite through KakaoTalk, the invite message (your nickname and invite link) goes from your device directly to Kakao (KakaoTalk sharing — not through our servers, and subject to Kakao's policy).

2. Why we use it

To create and keep your account and sign you in.
To generate practice questions from your material.
To schedule reviews and remind you on your device.
Friends (optional): sharing study progress with friends, cheers, a weekly ranking among friends, and friend notifications.
To show your progress, accuracy and memory state.
To apply plan limits, control costs and prevent abuse.
To provide paid subscriptions: confirming payments, handling renewals, cancellations and refunds, and upcoming-payment notices.
To keep records from the ended rewards programme and answer questions about them.
To show ads on the free plan (ads are served by Google and follow sections 4 and 13).
To prevent the free trial from being given more than once (section 1 (7)).
To answer your questions and handle reports.
To improve the service through aggregate statistics.
To improve features by analysing how the app is used (how often, for how long, which features, how many questions per sitting).
To improve the service and develop new features through statistical analysis.
To show your lifetime study history.
To compile statistics and research learning effectiveness using pseudonymized answer history (section 14).
To plan marketing using statistics that do not identify anyone. We will ask for your separate consent before sending you any advertising.
To meet our legal obligations.

3. How long we keep it

As a rule, while your account exists. When you delete your account, we delete it without delay.
Deleting a single material also deletes its text, its questions and its review schedule. The title and your lifetime study history stay in your study history and are deleted when you delete your account. If you also want this history deleted, please contact us.
Account deletion removes your profile, materials and extracted text, questions, study history and review schedule, level estimates, notification settings, question reports, generation logs, plan usage and entitlements, entitlement change records, consent records, daily summaries, your optional "About you" answers, all reward enrolment, daily totals, ledger, settlement and review records, and every Friends record (section 1 (8)). The payment and subscription records and the free-trial record below (deleted after one year) are the exceptions.
If you signed up with Apple, deleting your account first asks Apple to revoke the connection (deletion continues even if that request fails) and deletes the Apple connection token. After revocation, Mirimi disappears from the "Sign in with Apple" list in your Apple Account.
Raw usage analytics (app sessions and feature events) are deleted after one year. Older trends are kept only as daily totals that belong to no one (sign-ups, active users, time spent and so on).
Your optional "About you" answers are deleted as soon as you delete them under Me → Settings → About you.
Deleted accounts are kept only as a monthly count (how many accounts, by bands of account age, plan and number of active days). We do not keep whose account it was or when it was deleted, and use the count only for statistics to improve the service.
Points lost through account deletion are kept only as a monthly total (how many accounts left how many points). We do not keep whose points they were or when the account was deleted, and use the total only to reconcile our points liability.
Two exceptions: usage analytics and billing notification records are kept with the user identifier removed, for statistics and reconciliation only (usage analytics still within the one-year limit above). What remains cannot identify you.
Payment and subscription records (section 1 (6)) are kept even after you delete your account, as required by Korea's E-Commerce Act: records of contracts, withdrawals, payments and supply for 5 years, and records of consumer complaints and disputes for 3 years. After you delete your account we cut the link to it and keep them only for this purpose. Before billing opens there are no such records.
The free-trial record (section 1 (7)) is kept for one year after account deletion and then deleted.
The parental-consent record (section 8) is kept while the account exists, as proof that consent was given, and deleted with the account. The guardian's e-mail address is used only to obtain and record consent; we never send ads or promotions to it.
Deletion is permanent. Copies inside backups disappear as the backup cycle rolls over.

4. Sharing

We do not sell your data. We share it with third parties only in the following cases.

① Sharing for ads (free plan, only if you choose to consent)

Recipient: Google LLC (privacy contact: googlekrsupport@google.com)
Purposes: showing ads, limiting how often the same ad appears, preventing fraudulent clicks and keeping ads secure, measuring ad performance
Items: advertising ID and app set ID, IP address (and the approximate location estimated from it), device/OS/app information, ad views and clicks together with usage such as app launches and taps, and app and ad SDK performance data
Retention: as set by Google's own policy. Google says it anonymizes ad server logs by removing part of the IP address after 9 months and cookie information after 18 months. If you withdraw consent, we stop providing it from then on.
How: not through our servers — the Google ads SDK inside the app sends it to Google directly.
You may refuse, and you can still use every learning feature of the free plan. You will see occasional notes from Mirimi instead of Google ads, and only unlocking extra practice rounds by watching ads (up to 2 a day) won't be available.

② What your friends can see (only if you start Friends)

Recipients: other users who accepted your invite (link or code) and became mutual friends with you.
Purpose: sharing study progress, cheering each other on and competing on a weekly ranking among friends.
Items: nickname, streak, whether you studied today, this week's number of questions, accuracy and study time (the sum of time spent answering), the names of materials with "show to friends" turned on and this week's numbers for each, last week's #1, and the cheers you sent to that friend. Material contents, questions, source sentences, your e-mail and name are never shown.
Retention: until you remove or block the friend, turn off Friends, or delete your account (they stop seeing it immediately).
You can refuse: if you do not start Friends, nothing is shared and you can still use the whole service. You can hide any material from friends (Friends tab → Settings).

③ Where the law requires it (a valid warrant, court order or similar)

Everything else needed to run the service is handled by the processors in section 5.

5. Processors

Supabase Inc. — database, authentication and server functions. Entrusted: everything stored on the server under section 1 (1), (2), (5), (6) and (7). Kept until you delete your account (the exceptions in section 3 until their periods end).
Google LLC (Gemini API) — generating questions from your material text. Entrusted: the passage to build questions from and the generation settings. Kept only for as long as the request takes. From when you agree to this version (October 12, 2026).
Groq LLC — Pro figure reading, and a backup for question generation (when Google is unavailable, or for users who have not yet agreed to this version). Entrusted: the passage to build questions from and the generation settings, and (if figure reading is on) images of pages that contain figures. Kept only for as long as the request takes.
Google LLC — Google sign-in. Entrusted: the account details needed to verify the sign-in.
Apple Inc. — Sign in with Apple (iPhone) and disconnecting on account deletion. Entrusted: the account details needed to verify the sign-in, and the connection token. Kept as set by Apple's policy.
Functional Software, Inc. (Sentry) — crash reporting, in builds where it is enabled. Entrusted: the error data in section 1 (4).
Google LLC (Firebase Cloud Messaging) — delivering friend notifications (cheers, new friends and ranking). Entrusted: the device token and the notification text (the nickname of the friend who cheered or passed you, the cheer type, the material name and your rank this week). Kept only while the notification is delivered. Only if you start Friends.
Apple Inc. (Apple Push Notification service) — delivering friend notifications to iPhones (handed over by Firebase Cloud Messaging). Entrusted: the device token and the notification text (as in the Firebase line above). Kept only while the notification is delivered. Only for iPhone users who start Friends.
Google LLC (Google Play) — Android app distribution, payment and subscription processing and purchase verification (our server checks the subscription with the purchase token). Entrusted: the purchase token and order and subscription details. Kept as set by Google's policy and contract.
Apple Inc. (App Store) — iPhone app distribution, payment and subscription processing and purchase verification (our server checks the subscription with the App Store using the transaction ID, and Apple notifies us of renewals, cancellations and refunds). Entrusted: the transaction ID, subscription details and the account identifier sent at purchase. Kept as set by Apple's policy and contract.

Ads on the free plan (Google AdMob) are not listed here as processing on our behalf, because Google also uses the data for its own purposes; they are disclosed as sharing under section 4 ①.

Each processor is bound by contract to protect the data and not to use it for any other purpose. If this list changes, we update this policy and announce it.

6. Transfers outside Korea (PIPA art. 28-8)

All of the processors in section 5, and the sharing for ads in section 4 ①, involve transfers outside the Republic of Korea.

Supabase Inc. (United States) — Items: everything stored on the server under section 1 (1), (2), (5), (6) and (7). When and how: continuously over encrypted connections (HTTPS) while you use the service. Purpose: database, sign-in and server functions. Retention: until you delete your account (the exceptions in section 3 until their periods end). The servers that hold the data are in the Seoul region, but because the company is US-based and its staff may access the data for operations and support, we disclose this as an overseas transfer.
Google LLC (United States) — Gemini API, from when you agree to this version — Items: the passage to build questions from and the generation settings. When and how: over HTTPS each time questions are generated. Purpose: question generation. Retention: for the duration of the request. We use the paid API, under which your text is not used to train models.
Groq LLC (United States) — Items: the passage to build questions from and the generation settings, and (if Pro figure reading is on) images of pages that contain figures. When and how: over HTTPS each time figures are read, and when used as the question-generation backup (Google unavailable, or users who have not yet agreed to this version). Purpose: turning figure content into text, question generation. Retention: for the duration of the request. We use the provider on terms under which your text and images are not used to train models.
Google LLC (United States) — Items: the account details needed to verify a Google sign-in. When and how: over HTTPS at sign-in. Purpose: authentication. Retention: per Google's own policy.
Google LLC (United States) — Google Play purchase verification — Items: purchase token, order number and subscription status. When and how: over HTTPS when you pay, renew, cancel or get a refund. Purpose: confirming subscriptions. Retention: per Google's own policy.
Apple Inc. (United States) — Sign in with Apple, only if you sign up with Apple — Items: the account details needed to verify the sign-in, and the connection token. When and how: over HTTPS at sign-in and at account deletion. Purpose: sign-in and disconnecting. Retention: per Apple's own policy.
Apple Inc. (United States) — App Store purchase verification, only if you subscribe on iPhone — Items: transaction ID, subscription status and the account identifier sent at purchase. When and how: over HTTPS when you pay, renew, cancel or get a refund (including notifications Apple sends). Purpose: confirming subscriptions. Retention: per Apple's own policy.
Google LLC (United States and other countries) — ads (free plan, only if you separately consent to the transfer abroad) — Countries: the United States and other countries where Google operates servers. Items, purposes and retention: as in section 4 ①. When and how: each time an ad is loaded or shown, the ads SDK in the app sends it over an encrypted connection (TLS), not via our servers. Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · privacy contact: googlekrsupport@google.com. How to refuse: do not consent, or turn off Me → Settings → Privacy → "Ad data sharing"; you will then see notes from Mirimi instead of Google ads.
Google LLC (United States) — Firebase Cloud Messaging, only if you start Friends — Items: device token and the notification text (the nickname of the friend who cheered or passed you, the cheer type, the material name and your rank this week). When and how: over HTTPS when a friend cheers you, a new friend joins, or your rank among friends changes. Purpose: delivering the notification. Retention: while it is delivered.
Apple Inc. (United States) — Apple Push Notification service, only for iPhone users who start Friends — Items: device token and the notification text. When and how: over encrypted connections via Google (Firebase) when a notification is sent. Purpose: delivering the notification. Retention: while it is delivered.
Functional Software, Inc. / Sentry (United States) — Items: the error data in section 1 (4). When and how: over HTTPS when an error occurs. Purpose: diagnosing and fixing faults. Retention: the provider's configured period.
Privacy contacts of the recipients: Supabase Inc. privacy@supabase.com · Groq LLC privacy@groq.com (P.O. Box 1778, Mountain View, CA 94042, USA) · Google LLC googlekrsupport@google.com (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) · Functional Software, Inc. (Sentry) compliance@sentry.io (45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) · Apple Inc. https://www.apple.com/legal/privacy/contact/ (One Apple Park Way, Cupertino, CA 95014, USA)

You can refuse. You may refuse these transfers. However, sign-in, storage and question generation are the core of the service, so refusing means you cannot really use it; you would refuse by not signing up, or by deleting your account. Crash reports, usage data, ad data sharing and Friends can be refused on their own: turn off Friends under Friends tab → Settings → Turn off Friends, and turn off "Send crash reports", "Send usage data" and "Ad data sharing" under Me → Settings → Privacy. If you cannot reach those switches, write to support@iterialab.com instead.

7. Your rights

You can ask to see, correct, delete or stop the processing of your personal data at any time.
Things you can do in the app right away: review your study history (Me tab), delete materials and questions, change notification settings, turn off crash reports, usage data and ad data sharing (Me → Settings → Privacy), change or delete your optional answers (Me → Settings → About you), and delete your account (Me → Settings → Delete account).
You can withdraw your consent to ad data sharing at any time (Me → Settings → Privacy → "Ad data sharing"). You can delete or reset your phone's advertising ID under Settings → Google → Ads (menu names differ slightly between devices). Once deleted, only an all-zero value is passed on. The iPhone app does not ask for "Allow Apps to Request to Track", so the iPhone advertising identifier (IDFA) is not shared (only zeros).
For anything else, use Me → Settings → Send feedback or write to support@iterialab.com. We reply within 10 days of receiving the request.
A legal representative or an authorised agent may act for you; we will verify the authorisation.
We will never treat you differently for exercising these rights.

8. Children under 14

You must be at least 13 to sign up. We ask for your year of birth at sign-up; if you are 14 or older we keep only the record of that confirmation (not the year itself).
If you are under 14, Korea's Personal Information Protection Act (Article 22-2) requires a parent's or legal guardian's consent before we may collect and use your personal information. You give their e-mail address at sign-up, we send them a consent link, and you can use the service only after they read and agree there. Until then the app shows only a "waiting for your parent's consent" screen, and study materials, friends and payments are unavailable.
The parental-consent record (year of birth, the guardian's e-mail address, the time of consent and the versions of the terms and this policy agreed to) is kept as proof that consent was given, and the guardian's e-mail address is used only to obtain and record that consent (section 3).
A parent or guardian can withdraw consent, or ask to see, correct or delete the child's data, at any time (support@iterialab.com, section 7). If consent is withdrawn, we delete the child's account and its data.
Accounts left without parental consent, and accounts found to belong to someone under 13, are deleted together with their data. If you know of such an account, please tell us at support@iterialab.com.
We encourage every user under 19 to agree study times with a parent or guardian.
For every user, including those under 18, ad requests are sent with teen protections and we never request personalized ads.

9. How we protect your data

Access control: the database uses row-level security, so each account can read and write only its own rows.
Encryption in transit: all traffic between the app and the server uses HTTPS.
Passwords: stored only as irreversible hashes.
Secrets: AI provider keys and similar values live on the server and are never shipped inside the app.
Purchase tokens and Apple connection tokens: on the server they are kept only in an area the app cannot read; the tables the app reads hold only an irreversible hash of the purchase token.
Data minimisation: we do not keep original files, and crash reports are scrubbed of anything that looks like content.
On the device: app data is stored where other apps cannot read it and is excluded from device backups.

10. Automated decisions

The service automatically decides which question to ask next and when to schedule a review, based on your study history. This is there to help you learn and does not affect your legal rights or obligations.
The rewards programme ended on October 23, 2026, so points are no longer applied to payments automatically. For questions about earlier records, write to support@iterialab.com.

11. Data protection officer

Data protection officer: Jinwook Choi (Representative)
Contact: support@iterialab.com
Responsible for privacy enquiries, complaints and remedies.

In Korea you may also contact the Korea Internet & Security Agency privacy centre (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), or the police cybercrime bureau (ecrm.police.go.kr, 182). If you are in the EU or the UK, you may also complain to your local supervisory authority.

12. Changes to this policy

When this policy changes we announce the change and its effective date in the app. For changes that matter to you we ask you to accept the new version, and until you do, we keep handling your information the way we did before (the change applies from when you accept).

13. Behavioural information: collection, use, sharing and how to refuse

We do not use behavioural information such as your app usage for personalized ads, and we do not ask any ad company for personalized ads.
When ads are shown on the free plan, the Google ads SDK (AdMob) inside the app requests an ad from Google, and Google receives the information in section 4 ① (if you chose to consent to ad data sharing).
Settings we apply to every ad: personalized ads off (non-personalized ads only), teen protections, ad content rating G (all ages), and ads in sensitive categories blocked (gambling, alcohol, dating, weight loss, loans, sexual content, politics, religion and similar). Your study materials, questions and "About you" answers are never put into ad requests.
When we do not request ads: while you use Pro, a trial or the launch offer; before you accept the Terms and the Privacy Policy; and if you have not consented to ad data sharing. While you use a screen reader (TalkBack or VoiceOver) or Switch Access, we do not request full-screen ads after a session (except "Watch an ad for 1 more round", which you choose yourself).
The ad records in our usage analytics (section 1 (2)) follow the "Send usage data" switch, but what the Google ads SDK sends directly to Google cannot be turned off with that switch. To stop it, use the options below.
How to refuse or control it: ① in the app, turn off Me → Settings → Privacy → "Ad data sharing" ② on your phone: on Android, Settings → Google → Ads → "Delete advertising ID"; on iPhone, Mirimi does not ask to track, so the advertising identifier is not shared (see Settings → Privacy & Security → Tracking) ③ use Pro ④ where the law requires it (such as in Europe), Me → Settings → "Ad privacy choices"
How Google handles data: Google Privacy Policy (https://policies.google.com/privacy) and "How Google uses information from sites or apps that use our services" (https://policies.google.com/technologies/partner-sites)
Contact: the data protection officer in section 11

14. Pseudonymized information (Personal Information Protection Act, Article 28-2)

Purpose: compiling statistics and scientific research on learning effectiveness.
Items: the study activity, lifetime study history, usage data (including device information) and daily usage summary in section 1, your sign-up date and time, plan records, and the optional "About you" items you answered. Materials and concepts appear only as arbitrary values that tell them apart. We do not use your name, nickname, email, material text, question text, the answers you chose, material titles or concept names.
How: an arbitrary value replaces your account, and the information needed to reverse this is stored separately. Where a combination of items fits so few people that someone could be guessed, we group it more broadly or remove it. We do not process the data to identify a particular person, and we keep records of this processing.
Period: until the research ends, for up to 5 years from pseudonymization, then destroyed. Pseudonymized information created before you delete a material or your account may remain for this period.
Sharing with third parties: none. If this becomes necessary, we will first list the recipient in this policy.
Under the Act (Article 28-7), some rights, such as access, deletion and suspension of processing, do not apply to pseudonymized information. Your rights over records before pseudonymization are described in section 7.