Privacy Policy

Effective Date: March 26, 2026 | Last Updated: May 1, 2026

This Privacy Policy describes how Gratitude Diary (the "App") collects, uses, shares, and protects your personal information. The developer (the "Operator") values your privacy and complies with applicable data protection laws.

1. Information We Collect

Data Category	Purpose	Retention Period
Email address, password (encrypted)	Account registration and login	Until account deletion
Google account info (name, email)	Social login	Until account deletion
Gratitude diary entries	Core service functionality, automated sentiment/keyword analysis, premium AI insights and recommendations (with consent)	Until account deletion
App usage data (streaks, XP, level)	User statistics and motivation features	Until account deletion
Purchase info (transaction ID, product ID)	In-app purchases and subscription management	As required by applicable law
Device identifier, IP address	Ad delivery (non-personalized)	Anonymized immediately after collection
App usage events (screen views, sessions, etc.)	App quality improvement and analytics (Firebase Analytics)	Up to 14 months (Firebase Analytics default retention)
Push notification token	Sending reminder notifications	Until app uninstall or notifications disabled
Time zone (IANA, e.g., Asia/Seoul)	Accurate matching of daily/monthly AI recommendations and statistics in the user's local time zone	Until account deletion

2. How We Collect Information

• Directly provided by you during registration or social login
• Automatically generated through your use of the App (diary entries, usage data, etc.)
• Automatically collected through payments via Google Play Store or Apple App Store

3. How We Use Your Information

• Service delivery: Writing, saving, and viewing gratitude diary entries
• Account management: User identification and login authentication
• Statistics features: Streaks, XP, levels, and other motivation tools
• Payment management: Processing premium subscriptions and ad-removal purchases
• Notifications: Sending gratitude reminders and morning alerts
• Advertising: Displaying non-personalized ads
• Sentiment and keyword analysis: Automated analysis of sentiment scores and key nouns in diary text for statistics and charts (applies to all users)
• AI insights (Premium only): Generating monthly AI insights and daily gratitude recommendations from diary text (with separate consent)
• Quality analytics: Collecting app usage events to improve the service

4. Sharing Your Information

We do not sell or share your personal information with third parties except as described below. None of the recipients use your data for model training; processing is limited to storage and the stated purpose.

Recipient	Data Shared	Purpose	Consent Type
Google (Firebase Authentication / Firestore)	Authentication data, diary entries, profile	Cloud data storage and authentication services	Agreed at sign-up
Google (Cloud Natural Language API)	Gratitude diary text	Automated sentiment and noun analysis (for all users; no training use)	Agreed at service use
Google (Gemini API) ※ via Firebase Cloud Functions	Gratitude diary text, user display name	Premium AI insights and recommendations (no training use). Diary text is transmitted through Firebase Cloud Functions (our server code) to Gemini API; it is not stored and is discarded immediately after response generation.	Separate consent (revocable)
Google (Firebase Analytics)	App usage events, device info, advertising ID	App quality improvement and analytics	Agreed at service use
Google (AdMob)	Device identifier, IP address	Non-personalized ad delivery	Agreed at service use
Google Play Store / Apple App Store	Payment information	In-app purchase processing	Agreed at purchase

5. Data Retention and Deletion

• Upon your request to delete your account, we will promptly delete your personal data.
• Diary entries, usage records, and profile information will be permanently deleted within 30 days of account deletion.
• Payment records will be retained for 5 years as required by applicable law.
• Local data stored on your device (notification settings, etc.) is automatically removed when the App is uninstalled.

6. AI Feature Consent (Premium Only)

• When consent is obtained: At premium subscription checkout, or at first use of AI features
• Data transferred: Gratitude diary text, user display name (for personalization)
• Purpose: Generation of monthly AI insights and daily gratitude recommendations
• Processing: The Gemini API does not use transmitted data for model training (Google's official policy).
• Retention: Data is transmitted transiently during the API call. Generated responses are stored in the user's Firestore document (users/{uid}/recommendations, users/{uid}/insights) and are deleted when the account is deleted.
• Revocation: You may revoke consent at any time via [Settings > Revoke AI Feature Consent] inside the App.

AI feature consent applies only to premium AI insights and recommendations via the Gemini API. Even if you decline or revoke consent, the following features remain available:

• Writing, saving, and viewing gratitude diary entries
• Automated sentiment and noun analysis with charts (via Google Cloud Natural Language)
• Premium subscription and ad-removal benefits
• Streaks, XP, levels, and statistics features

7. Advertising and Tracking

• Users who have purchased a premium subscription or the ad-removal product will not see any ads.
• We do not use third-party analytics or tracking SDKs (e.g., Amplitude, Mixpanel).
• Google Firebase Analytics is used solely for app quality improvement analytics and is not used for personalized advertising tracking.

8. Your Rights

You have the following rights regarding your personal data.

• Right of access: You may request a summary of the personal data we hold about you.
• Right to rectification or erasure: You may request correction or deletion of inaccurate information.
• Right to restriction: You may request that we stop processing your personal data.
• AI feature consent revocation: You may revoke AI feature consent instantly at Settings > Revoke AI Feature Consent.
• Account deletion: You can delete your account at any time from the App's settings.

To exercise any of these rights, please contact us at the address below and we will respond promptly.

9. Data Security

• Passwords are stored in encrypted form and are not accessible to the Operator.
• All data transmission uses SSL/TLS encryption.
• Firebase security rules ensure that only authorized users can access their own data.
• Diary data is securely stored on Google Cloud (Firebase Firestore).

10. Children's Privacy

This App does not knowingly collect personal information from children under the age of 13 (or 16 where applicable under local law). If we become aware that a child under this age has provided us with personal data, we will delete it immediately. Premium subscription and AI features are available only to users aged 14 and older.

11. Changes to This Policy

If this Privacy Policy changes, we will notify you at least 7 days before the changes take effect via an in-app notice or email. The updated policy will be posted on this page.

12. Contact Us

For any privacy-related inquiries or to exercise your rights (access, correction, deletion, or restriction), please contact us at the email above and we will respond without undue delay.