Privacy Policy

1. Information We Collect

Required Information

• Account information: Email address, password, display name
• Photo and video data: Photos and videos you upload or transfer via auto-sync, EXIF metadata (date, location, camera info), and file metadata (file name, album/folder name, file hash)

Optional Information (only when you use the feature)

• Referral code (if entered at signup) and profile image
• Real-time location: Your device's current location when you ask the AI agent location-based questions
• Voice input: The content of voice commands when you use voice input
• Waitlist: Email address and name (optional) when you join the waitlist before signup

Automatically Collected Information

• Device information: Device type, operating system, app version
• Log information: Access time, IP address, service usage records
• Push notification token (FCM): When you allow notifications

Information Generated by AI Analysis

• Photo analysis data: AI-generated captions, tags, location information, and image feature vectors
• Face recognition data: See "Sensitive Information (Face Recognition)" below

2. Sensitive Information (Face Recognition)

• To organize and search photos by person, the Service detects faces in uploaded photos, generates facial feature vectors, and automatically groups similar faces (clustering).
• Facial feature vectors are sensitive information under the Personal Information Protection Act. The Service uses them only to organize and search photos by person and for no other purpose.
• You can delete a person (face group) or exclude specific photos from a person at any time; the related feature vectors are deleted together. To stop face recognition processing entirely, contact [email protected].

3. Purpose of Collection

• Service provision and user authentication (including MFA)
• Photo storage, management, search, and organization by person
• AI-based photo analysis and auto-classification, AI agent conversation and search, AI image editing (Studio)
• Photo sharing with friends and Pods
• Push notification delivery
• Service improvement and new feature development
• Abuse prevention (bot protection) and customer support

4. AI Processing and External AI Providers

• To generate photo captions and tags, power AI agent conversations, and edit images, your photos and conversation content may be transmitted to and processed by external AI providers (Google, OpenAI, Anthropic, xAI). Which providers are used depends on your plan and the model you select.
• Face detection and image feature extraction are processed by the Service's own models on GPU infrastructure rented from RunPod.
• Google (paid API), OpenAI, and Anthropic state in their API terms that customer content is not used to train their AI models. For other providers, the respective provider's API data policy applies.
• See "Processing Delegation and Overseas Transfer" below for transferred items and retention periods.

5. Shared Content (Pods)

• Photos shared to a Pod (shared space) are visible to all Pod members.
• Each member can choose in Pod settings whether to allow AI processing (model sharing) of the content they have shared.

6. Retention and Disposal

• Account information: Until account deletion (deleted within 30 days after withdrawal)
• Photo data: Upon user deletion request or after trash retention period (default 30 days)
• Facial feature vectors: Deleted together when the source photo or the person (face group) is deleted
• Log information: Retained for 1 year after collection
• Disposal method: Electronic files are permanently deleted using methods that prevent recovery

7. Processing Delegation and Overseas Transfer

To provide the Service, we delegate personal information processing to and store personal information with the following overseas providers. Transfers occur over the network as needed while you use the Service, to the extent necessary to perform the service agreement.

You may refuse the overseas transfer of your personal information (contact: [email protected]). However, since these transfers are essential to providing the Service, refusal may make it impossible to use the Service in whole or restrict features such as AI analysis.

8. Third-Party Disclosure

Ascendy does not provide personal information to third parties without user consent, except when required by law or with prior user consent.

9. Automatic Collection Tools and External Services

• Authentication token: Stored to keep you signed in (web: cookie; app: on-device storage)
• Google reCAPTCHA: Runs on login, signup, and password reset to prevent bots; usage information is sent to Google (Google's Privacy Policy and Terms apply)
• Web speech recognition: When you use voice input in a web browser, audio may be sent to the browser vendor's (e.g., Google's) speech recognition servers

10. User Rights

• Request to view, correct, or delete personal information; suspend processing; withdraw consent
• Delete a person (face group) or exclude photos from a person
• Deactivate or delete your account directly in settings

Contact: [email protected]

11. On-Device Biometric Authentication

App lock (Face ID / fingerprint) uses your device operating system's biometric authentication. Your biometric data never leaves your device and is not stored on the Service's servers.

12. Children's Personal Information

The Service is not directed at children under 14 and does not collect personal information from children under 14. If we learn that such information has been collected, we will delete it without delay.

13. Security Measures

• Encrypted storage and transmission
• Access control and minimization of access privileges
• Security software and regular audits

14. Privacy Officer and Remedies

Privacy Officer email: [email protected]

Users in Korea may also seek remedies from the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the KISA Privacy Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301), or the National Police Agency (182).

15. Policy Changes

This policy may be updated due to legal or service changes. Changes will be announced via in-app notifications at least 7 days before taking effect (30 days for changes that materially affect your rights).