Privacy Policy

Effective: May 25, 2026

ILJI ("we," "us," or "our") operates the ILJI mobile application (the "Service"). This Privacy Policy explains what information we collect, why we collect it, and how we protect it.

1. Information We Collect

1-1. Account Information

1-2. Data You Enter

The following data is entered by you for your own scheduling and personal management. We do not access, analyze, sell, or use this data for any purpose other than storing and displaying it back to you.

Third-party information: If you enter another person's contact details or appointment information into the Service, you are responsible for ensuring you have the right to do so under applicable laws. We store this data on your behalf and do not independently collect consent from those individuals.

1-3. Documents & Signatures

When you share a PDF, it may include contact information, business details, photos, and signature images. Once shared via an external app, the recipient's handling of that data is governed by their own policies.

1-4. Location

• Location is captured once at timer start — we never track you in the background.
• Personal appointments do not send location to our servers.
• Your location is visible only to you, not to other team members.
• If you deny location permission, the timer still works — it just won't record a location.

1-5. Payment Information

We never collect or store your card number, bank account, or other payment credentials. All payments are processed through the Apple or Google in-app purchase systems, and we only receive the transaction result (receipt identifier and subscription status) via RevenueCat.

1-6. Automatically Collected Information

Personal information such as email addresses and phone numbers is removed from error logs before transmission. Your email and name are never sent, and IP addresses are not stored.

2. How We Use Your Information

3. Sharing Your Information

We do not sell your data, and we do not share it for advertising or marketing purposes. We may disclose your information only in these circumstances:

• When required by law or a valid legal process
• With your explicit consent
• In connection with a merger or acquisition (with prior notice)

Content you add to a team calendar is visible to other team members — this is a core feature of the Service. When you send messages or PDFs through your device's SMS app or share sheet, the data leaves our Service and is subject to the receiving app's or recipient's own policies.

4. Service Providers

We use the following third-party service providers to operate the Service:

5. International Data Transfers

Your primary data (appointments, contacts, photos) is stored in Supabase's Seoul, South Korea data center. Some information is transferred to servers outside South Korea as described below:

6. Your Rights

7. Data Deletion

7-1. Account Deletion

When you delete your account through the app, we immediately and permanently delete:

• All personal appointments, contacts, templates, recurring rules, D-Day items, and AI generation logs
• All personal photos (personal-photos storage bucket)
• Your change history records
• Your profile and authentication record

If you belong to a team, you will be removed from the team first. Data you contributed to team calendars (team appointments, team photos) remains with the team. If you are the sole Owner, ownership automatically transfers to the next member; if no members remain, the team and its data are deleted as well.

7-2. Regular Deletion

• Individual deletions: marked as deleted, then permanently removed from the server after 60 days.
• Photos: automatically deleted from the server 90 days after upload.

7-3. Legal Retention

Where required by Korean law, certain records (such as payment and refund history) may be retained for the period specified by the applicable statute, even after account deletion.

8. Security

• On-device encryption: Sensitive fields (contacts, memos, message templates) are encrypted and stored locally. Encryption keys are managed by the device's secure enclave.
• Business profile protection: Your business profile and payment instructions are stored in a separate encrypted storage on your device.
• Encryption in transit: All communications use TLS 1.2 or higher.
• Access control: Row-level access controls on the server database ensure you can only access your own data or data belonging to your teams. File storage is accessible only through temporary access URLs.
• Photo metadata removal: GPS and other metadata are stripped from photos at upload time.
• Phone number hashing: Phone numbers are stored as one-way hashes for lookup purposes; plaintext search on the server is not performed.
• Login security: Rate-limited login attempts, CAPTCHA verification, and password reset cooldowns.
• Error log scrubbing: Personal data patterns and sensitive fields are masked before any error log is transmitted. If scrubbing fails, the content is emptied (fail-closed).
• Access management: The sole operator holds all administrative privileges and follows the principle of least privilege. All service management consoles are protected with two-factor authentication (2FA), and credentials are stored in an encrypted password management tool.

9. Device Permissions

All permissions are optional and can be changed at any time in your device's system settings. On iOS, contact selection uses the system picker and requires no separate permission; Caller ID uses a CallKit Directory Extension.

10. AI Features

10-1. What We Send

• Sent: The natural-language prompt you type (e.g., "Create an AC repair estimate template")
• Not sent: Your appointments, contacts, photos, memos, or any other data

10-2. How It Works

Your prompt is routed through a Supabase Edge Function (Seoul) to the Google Gemini API. The app does not call Gemini directly. Our database records only the request timestamp and your user ID — the prompt text and the generated result are not stored on our servers.

10-3. Important

Do not include personal information (client names, phone numbers, addresses) in your prompts. AI-generated templates are for reference only — review and edit them before use.

10-4. Opting Out

You are not required to use AI template generation. All regular template features work without it.

11. Children

The Service is intended for users aged 14 and older. We do not knowingly collect information from anyone under 14. If we learn that a user is under 14, we will promptly delete their account and associated data.

12. Advertising & Tracking

We do not collect advertising identifiers (ADID/IDFA), use cookies for tracking, or collect behavioral data for targeted advertising. There are no ads in the Service.

13. Automated Decision-Making

We do not make automated decisions that produce legal or similarly significant effects on you.

14. Contact Us

15. Changes to This Policy

If we make changes to this policy, we will notify you at least 7 days in advance (or 30 days for material changes) through an in-app notice or email.