🌐 한국어EnglishTiếng Việtไทยខ្មែរລາວမြန်မာFilipino日本語EspañolPortuguês (Brasil)FrançaisDeutsch繁體中文Bahasa Indonesia

Privacy Policy

Effective date: October 15, 2026

1. Personal information we collect

2. How we collect it

• Entered directly by the user during in-app social sign-in and use of the Service
• Entered through the microphone of the app or the web while voice chat is on
• Generated and collected automatically by the app and server (tokens, logs)

3. Purposes of use

• Member identification and authentication; providing and operating room and announcement features
• Sending announcement push notifications
• Providing AI Noti's announcement drafting assistance
• Relaying AI Task (PC connection) connections and sending notifications that results have arrived or a response is requested
• Providing voice chat, applying usage limits, and managing usage and costs
• Verifying and managing paid subscriptions; granting and deducting Ink, notifying of Ink expiry, and processing withdrawals and refunds; and responding to customer inquiries
• Preventing fraudulent use and improving the stability and quality of the Service

4. Outsourcing of personal information processing and overseas transfer

To provide the Service we outsource the processing of personal information to the following parties, some of which process it outside Korea.

What voice chat transmits and by which path, the details of the overseas transfer (countries, timing, method, retention period, contact), and how to refuse are set out in 4-1 below.

The outsourcing and transfer items above may be updated as the Service changes; any change will be announced through this Policy. Users may refuse the overseas transfer, in which case use of the relevant feature may be restricted.

Under each provider's terms of use and data processing terms, the Company sets out matters such as the prohibition of processing beyond the outsourced work and measures to ensure safety, and manages and supervises the processors so that they protect personal information at a level equal to or higher than this Policy.

The Company does not provide users' personal information to third parties, except where the user has separately consented or where a law has a special provision (such as a court warrant). The outsourcing above has the processors handle the Company's work on its behalf and is not a provision to third parties; processors may not use personal information beyond the outsourced purpose. The Company does not sell personal information or provide it for marketing purposes.

4-1. AI Tasks (PC connection) and voice chat

A. AI Tasks (PC connection)

• AI Tasks let you send requests from the phone app or the web (conoti.app) to the Conoti desktop app on your PC and receive the results. Requests, replies, and session content are stored on your PC; the phone app and the web receive them to display them on screen.
• Messages between your phone or the web and your PC are sent with end-to-end encryption that only the two devices can decrypt. The Company's server relays the connection and only passes on the ciphertext in memory; it does not store the content or record it in logs, and it does not keep messages when the receiving device is not connected. However, when voice chat is on, the information in B below is transmitted to the voice engine provider through the Company's server.
• While relaying, the Company's server processes the access IP and time, message size and count, app version, and device number. The relay function uses this information only in server memory while the connection is maintained and does not store it in a database or logs.
• AI Task notifications (results arriving, responses requested, and so on) are sent through Google (FCM) using the device push token. Notifications carry only fixed text and the notification type (a response-request notification includes a short value identifying the PC) and do not carry the content of requests or replies. To find the devices that should receive a notification, a sealed (encrypted) value containing the account identifier, valid for up to 7 days, is used; the Company's server does not separately store this value.
• Disconnecting: you can disconnect or remove a device on the AI Tasks screen of the phone or the web, or in the settings of the PC app. When you withdraw membership, the phone app deletes that account's PC connection information, but connection information stored in your web browser and the PC app remains, so please delete it yourself by deleting the site data in your browser (Article 8) or removing the device in the PC app.
• Data stored on your PC: requests, replies, session content, and connection information are stored in the data folder of the Conoti desktop app on your PC, protected by operating system file permissions but not separately encrypted. You can view and delete them directly in the PC app (as this content is not on the Company's server, the Company cannot view or delete it on your behalf).

B. Voice chat

• A feature for talking and giving task instructions by voice on the AI Tasks screen. It works only while you have it on, and in the app, the first time you turn it on, a separate screen explains what is transmitted and to whom and asks for your consent.
• Age: voice chat is available only to users aged 18 or older, in accordance with the voice engine provider's (Google's) terms of use.
• Legal basis: processing to provide a feature you requested, based on Article 15(1)4 (performance of a contract) of the Personal Information Protection Act; the overseas transfer is disclosed below under Article 28-8(1)3 of the same Act.
• Transmission path: audio from your device is transmitted in real time over an encrypted connection (TLS) through the Company's server to the voice engine provider. Voice chat is not end-to-end encrypted; while transmitting, the Company's server processes the audio, transcript, and task information in memory but does not store them in a database or logs.
• Items transmitted: (1) microphone audio and its transcript; (2) the names, project names, and status of AI task sessions on connected PCs (up to 8); (3) an excerpt of the recent conversation in the current session (up to about 5,500 characters) and an excerpt of the last request and result (up to about 1,700 characters); (4) each time an AI reply arrives from the PC, its summary and part of the reply (up to about 1,500 characters each); (5) task instructions created by voice.
• Voice engine: the default is Google Gemini Live. If you choose GPT-Live in the settings, if Gemini Live is unavailable in your region, or if Gemini Live is turned off for service reasons, the connection is made to OpenAI GPT-Live. In that case, the transcript, session names, and conversation excerpts are also transmitted to an OpenAI text model to decide task instructions. Your region is determined from the device time zone, region and language settings, and the store billing country.

• The items transferred are the same as the "Items transmitted" above. The Company uses both providers' services under API terms that do not allow the provider to use the outsourced information for its own purposes such as training AI models. The Company also does not use your voice or conversations to train AI models and does not use voice to identify the speaker. We recommend not mentioning sensitive information about yourself or others in voice chat.
• How to refuse, procedure, and effect: if you do not turn on voice chat, no transfer occurs. In the app, decline on the explanation screen or withdraw consent in the voice chat settings; in that case only the voice chat feature is unavailable and other features remain available.
• Retention: audio, transcripts, and conversation excerpts are not stored on the Company's servers. The Company's servers keep only voice chat usage records and AI usage records (Article 5).

C. Moving between PCs and sessions by voice (feature requiring additional consent)

Only if this feature is provided and you turn it on and give additional consent, the display names of your connected PCs (up to 40 characters), the names of sessions, projects and tags and the agent type (up to 80 characters per name), a one-line preview of sessions on other PCs (up to 80 characters), and parts of the original requests, results and progress you ask to have read aloud (up to about 1,200 characters at a time and about 12,000 characters per voice chat) are also transmitted to the providers above to move between and read sessions. You can turn this feature off in the voice chat settings, and it is turned off together when you withdraw consent to voice chat.

D. (Planned) Saving voice chat records on your PC

This feature is planned. Once provided, if both the phone app and the connected PC app support it and have it on (on by default), the transcript of voice chats held with a session you selected is transmitted to that PC app over an end-to-end encrypted connection and stored only on your PC. It is not stored on the Company's servers or on the phone. Records stored on the PC are protected by operating system file permissions but are not separately encrypted, so anyone who can use that PC can see them, and they are not deleted automatically. You can delete them one by one or all at once in the PC app, or together when you delete the session, and you can turn the feature off in the settings of the phone app and the PC app. Records may be passed, together with your next request, to the AI tools you use on that PC, and that processing follows the terms between you and the provider of that AI tool. When the feature becomes available, we will revise this Policy and notify you again together with the effective date.

5. Retention and use period

• Content such as announcements and attachments: retained for the archive period of your plan — 30 days on Free and Basic, 365 days on Pro, AI Pro and Professional. It is deleted automatically once that period passes.
• AI Task relay information: processed only in server memory while relaying the connection and not stored. AI task content and connection information stored on your PC remain on that PC until you delete them in the PC app.
• Voice chat usage records (time and duration of use, counts, token counts, estimated cost, reason for ending, engine, model and language used): kept until membership withdrawal to apply usage limits and manage usage and costs, and destroyed together with account information 30 days after the withdrawal date. AI usage records (model, token counts, estimated cost) are kept to manage costs, and 30 days after the withdrawal date their link to the account is removed so that they remain only as statistics that cannot identify an individual. Records of Ink deducted for this use are kept as the payment records below.
• Subscription expiry or cancellation: after a grace period of about one week (7 days) from expiry, rooms created under the paid plan and their data are deleted (the scheduled deletion date is notified in advance).
• Account information: when you withdraw membership, your personal information is retained for 30 days from the withdrawal date and then destroyed by a method that makes recovery impossible. Those 30 days exist so that an accidental withdrawal can be identified; during that time you still cannot sign in to the withdrawn account. The measures that take effect immediately (stopping notifications, stopping the scheduled and recurring announcements you set up, revoking external AI integration keys, and so on) are listed in Account and Data Deletion. When you withdraw, your remaining Ink (including purchased Ink) expires. Records of Ink purchases and use are retained as payment records for the statutory period (5 years) and then destroyed.
• Retention required by law: under Article 6 of the Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce, Etc., records of contracts or withdrawal of offers, and records of payment and supply of goods (including subscription payments and Ink purchase and refund records), are retained for 5 years, and records of consumer complaints or dispute handling are retained for 3 years when such records arise; they are destroyed once the period has elapsed. These records are kept for these periods even after membership withdrawal, and after withdrawal they are managed separately from other information.

6. Destruction procedure and method

Personal information is destroyed without delay once its retention period has elapsed or its processing purpose has been achieved. Destruction of account information following membership withdrawal, however, is carried out after the 30-day retention period in Article 5 above. Electronic files are deleted by a method that makes recovery impossible, and attachments are permanently deleted from storage.

Usage statistics and billing aggregates processed so that no individual can be identified may remain after destruction.

7. Rights of users

• Users may request access to, correction of, deletion of, or suspension of processing of their own personal information.
• You can delete your account and data yourself in the app under [Settings → Account → Delete account]; see Account and Data Deletion for how.
• Withdrawing consent to voice chat can be done at any time in the app's voice chat settings; withdrawing it also cancels the consent for "Moving between PCs and sessions by voice".
• AI task content is not on the Company's server, so you view and delete it directly in the Conoti desktop app on your PC. How to disconnect is described in 4-1.
• You may also exercise these rights by request to eldyeojh@gmail.com.

8. Automatic collection devices and advertising

On the Free and Basic plans, ads may be shown through Google AdMob, and the advertising SDK may process advertising identifiers and similar information to deliver personalized ads. You can reset your advertising identifier or limit personalized ads in your device settings. No ads are shown on the other paid plans.

The web (conoti.app) uses cookies and browser storage (localStorage), a technology similar to cookies.

• Cookie: a value that remembers the language you chose (site_lang).
• Browser storage: a value used to tell devices apart (sent to the server with every request), a sign-in token (sent to the server when sign-in is renewed), AI Task connection keys and the connection list (not sent to the server), and display settings.
• These values are stored in that browser without separate encryption. When you withdraw membership, the sign-in token is deleted but the connection keys and connection list remain, so please delete this site's data in your browser settings. If you block or delete this storage, remembering your language, staying signed in on the web, and connecting to your PC from the web will not be available. We recommend not connecting to your PC from the web on a computer shared with others.

The app keeps sign-in information and AI Task connection keys in the device's secure storage (based on the iOS Keychain and the Android Keystore).

9. Measures to ensure safety

• Encryption in transit (HTTPS/TLS) and access control based on authentication tokens
• End-to-end encryption of AI Task (PC connection) messages
• Passwords and access keys are stored in a form that cannot be decrypted
• Minimization of access privileges and management of system access records

10. Children under 14

The Service is not directed at children under the age of 14 and does not knowingly collect their personal information. If we learn that a child's personal information has been collected, we destroy it without delay. Voice chat is available only to users aged 18 or older (4-1).

11. Personal information protection officer and contact

Please contact us below for inquiries or requests regarding personal information.

• Operating company: ELD Co., Ltd. ("주식회사 이엘디") (CEO Jeonghun Yeo (여정훈))
• Personal information protection officer: Privacy Officer
• Email: eldyeojh@gmail.com

For counselling or reports regarding personal information infringement, you may contact the Korea Internet & Security Agency Privacy Infringement Report Center (privacy.kisa.or.kr, 118 within Korea) or the Personal Information Dispute Mediation Committee (1833-6972).

12. Duty of notification

If any content of this Policy is added, deleted, or amended, notice will be given through the Service or on this page before it takes effect.