Hyeyoung Seo (“we,” “us,” or “the Company”) operates the mobile application Noted (the “Service”) that allows users to record, organize, and analyze wine and whiskey tasting notes. This Privacy Policy explains how we collect, use, store, share, and protect your personal information, and the rights you have regarding that information.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
We do not collect or store your credit card number, bank account, or other payment instrument details. All subscription payments are processed by Apple App Store (StoreKit) or Google Play (Play Billing). We receive only:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Account creation, authentication, and account management | Performance of contract |
| Providing core service features (creating, storing, viewing tasting notes; calendar; insights dashboard) | Performance of contract |
| AI-based summarization and taste analysis (via Anthropic Claude API) | Performance of contract |
| Generating shareable templates upon your request | Performance of contract |
| Subscription billing, refunds, and dispute resolution | Performance of contract / Legal obligation |
| Sending push notifications about new features or events (with your consent) | Consent |
| Service improvement, statistical analysis, troubleshooting | Legitimate interest |
| Compliance with applicable laws | Legal obligation |
We do not sell your personal information. We share information only with the following categories of recipients, and only as necessary to provide the Service.
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Authentication, database, and file storage | United States |
| Anthropic, PBC | AI summarization and analysis (Claude API). Your inputs are not used for model training. | United States |
| Google LLC | Push notifications (FCM), social login (OAuth), in-app billing (Google Play) | United States |
| Apple Inc. | Sign in with Apple, in-app billing (StoreKit) | United States |
| Kakao Corp. | Kakao Login (OAuth) | Republic of Korea |
Each processor is contractually bound to handle your data only as instructed by us, to maintain appropriate security measures, and to comply with applicable data protection laws.
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court or government agency).
The Service is operated from the Republic of Korea, but data is processed and stored in the United States and other countries through our service providers (see Section 3.1). When we transfer your personal information across borders, we rely on appropriate safeguards such as Standard Contractual Clauses, the EU–US Data Privacy Framework, and equivalent mechanisms under applicable law.
For users in the Republic of Korea: by accepting this Privacy Policy you provide consent under Article 28-8 of the Personal Information Protection Act (PIPA) for the international transfers described above. You may refuse the transfer, in which case some or all features of the Service may be unavailable.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.
| Data | Retention Period |
|---|---|
| Account information (email, identifier, display name) | Until account deletion |
| Backup of deleted accounts | 30 days after deletion |
| Tasting notes and images | Until account deletion |
| Payment and transaction records | 5 years (Korean Act on Consumer Protection in E-Commerce) |
| Consumer complaints and dispute records | 3 years (same Act) |
| Service access logs | 3 months (Korean Protection of Communications Secrets Act) |
After the applicable retention period, your information will be permanently deleted using methods that prevent recovery.
Regardless of your location, you have the right to:
You also have the right to:
California residents have the right to:
To exercise any of these rights, contact us at the address in Section 11. We will respond within the timeframes required by applicable law.
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information, including:
No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
The Service is a native mobile application and does not use traditional web cookies. We do, however, use the following identifiers:
You may disable these as follows:
You may disable push notifications at any time through your device's system settings or within the app's notification preferences.
Because the Service contains content related to alcoholic beverages (wine and whiskey), the Service is intended for users 19 years of age or older (the legal drinking age in the Republic of Korea). We do not knowingly collect personal information from anyone under 19. If we become aware that a user under 19 has created an account, we will terminate that account and delete the associated information.
We use Anthropic's Claude API to generate summaries and taste analyses based on your tasting notes. When you request such a feature:
You may choose not to use AI-powered features at any time.
If you have any questions about this Privacy Policy, or if you wish to exercise any of your rights, please contact us:
For users in the Republic of Korea, you may also contact the following authorities to file a complaint or seek dispute resolution:
We may update this Privacy Policy from time to time. We will notify you of any material changes through an in-app notice at least 7 days before they take effect, or at least 30 days in advance if the changes materially affect your rights.
The “Last Updated” date at the top of this Privacy Policy reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.
Revision History