Privacy Policy
Effective date: 2026-08-21 (first enacted 2026-06-23)
K-Chat (크론AI, the "Service") takes your personal data seriously and complies with applicable laws, including the Personal Information Protection Act. This policy explains what information the Service collects and how it is used, stored, and protected.
1. Personal Data We Collect
| Category | Items |
|---|---|
| Email sign-up | Email, password (stored encrypted), nickname |
| Social login | Email and nickname received from the provider (Google/Kakao/Apple) |
| Guest login | Temporary identifier (auto-generated, no personal data) |
| Profile (optional) | Gender, profile image |
| Phone number login | Phone number (used for account identification and SMS verification) |
| Contact matching (optional) | Phone numbers from your device's address book — collected solely for comparison to find friends who already use the Service, and discarded immediately after the comparison (not stored). Only the resulting friend matches are kept. |
| Creation service use | Prompts you enter, photos/videos you upload, generated websites/images/videos and generation request records |
| Payments (paid services) | Payment approval details (order number, approval number, payment method type, amount, time, approval result). Sensitive payment data such as card numbers, expiry dates and passwords is processed directly by the payment gateway (KG INICIS) and is not stored by the Company. |
| Subscription auto-billing (card registration) | Buyer details (name, email, mobile phone number — required for card authentication), card identifiers (card issuer name and masked card number), and the recurring-payment token (billing key), which is stored encrypted and used only to charge the subscription. The Company does not store full card numbers. |
| Bank-transfer payments | Depositor name, requested amount and product (plan), contact details — used to confirm the transfer and grant credits or a subscription |
| Subscription and credit usage | Plan, billing cycle, renewal date and cancellation history; records of credits granted, deducted and expired each month |
| Service use | Chat content with characters, information and images of user-created characters |
| Voice conversation | Voice audio (collected via the microphone during voice calls, processed in real time and not stored), conversation text (speech-recognition captions and conversation content), call logs (time, access IP, device info, call duration) |
| Automatically collected | Access IP, browser/device info (User-Agent), service usage records and logs |
2. Purposes of Use
- Member identification and authentication, maintaining login sessions
- Providing the AI website, online-store, video and image creation service (processing generation requests, storing and hosting creations)
- Processing payments for paid services and handling subscription auto-billing (recurring charges), renewals and cancellations
- Granting, deducting and monthly expiry of credits (credits included in a subscription plan are granted monthly and expire with no roll-over), and settlement such as refunds
- Payment and subscription notices (payment success/failure, upcoming renewal, cancellation confirmation, etc.)
- Providing ancillary features such as AI character chat and voice conversation, and maintaining conversation context
- Service operation, statistics, quality improvement, and prevention of errors and abuse
- Responding to customer inquiries and sending notices
3. Third-Party Sharing and Processing Delegation
The Service does not sell your personal data to outside parties. However, to provide the Service, processing is delegated to and integrated with the following:
| Processor | Purpose | Details |
|---|---|---|
| AI model providers (Google Gemini, OpenAI, xAI, Anthropic, BytePlus, fal.ai, etc.) | AI website / video / image generation, chat and voice responses | Prompts, uploaded materials, conversation text and voice audio are sent to process generation requests |
| KG INICIS | Payment gateway (PG) · subscription recurring billing (billing-key issuance and recurring approval) | Payment approval, cancellation and recurring charges — card details are collected and processed directly by the PG |
| Amazon Web Services (AWS) | Data storage and server operation | Storage of account data, creations and conversations (DynamoDB · S3), server hosting (Seoul region) |
| Google/Kakao/Apple | Social login (when used) | Login authentication and receipt of basic profile |
Voice audio and conversation text are sent to and processed by Google (Gemini API) during voice calls and chat in order to provide real-time AI language-learning conversations. Such data is transmitted encrypted in transit (HTTPS), and the Service has confirmed that Google provides a level of privacy protection equivalent to this policy. Voice audio is processed in real time solely to generate responses and is not separately stored by the Service.
Related information may be provided only where required by law or upon a lawful request from an investigative authority.
4. Retention and Destruction
- Personal data is destroyed without delay upon account deletion. When you delete your account, your account information and conversation history are permanently deleted.
- Real-time voice data is used solely for the purpose of processing the call and is not separately stored. However, call logs (time, IP, device, call duration) for operation and security are retained for a certain period and then automatically purged.
- Payment, subscription and credit records: under the Act on Consumer Protection in Electronic Commerce, records of contracts and withdrawal of subscription, and of payment and supply of goods, are retained for 5 years, and records of consumer complaints or dispute resolution for 3 years. Records of credits granted, deducted and expired each month are retained for the same periods as settlement evidence.
- Recurring-payment billing key: destroyed without delay upon subscription cancellation or account deletion.
- Where applicable laws require retention, data is kept for the relevant period.
5. Your Rights
- You may view and modify your personal data (nickname, gender, etc.) at any time via the "My Info" menu.
- You may request deletion of your personal data by deleting your account ("More → Delete account").
- Subscribers may stop auto-billing at any time via "Request cancellation" on the subscription page (/subscribe) or through Support; the registered payment token (billing key) is destroyed at that point.
- For other requests to access, correct, or delete your data, please contact us at the address below.
6. Data Protection Measures
- Passwords are stored in a non-decryptable form (PBKDF2 hash).
- HTTPS encryption is applied across all communications.
- Sessions are managed with signed, secure cookies (HttpOnly · Secure).
7. Child Protection
The Service applies a zero-tolerance policy toward child sexual abuse and exploitation (CSAE). For details, see the Child Sexual Abuse and Exploitation Prevention Standards.
8. Privacy Officer and Contact
For privacy-related inquiries and requests, please contact us below.
- Email: aibridgeco@gmail.com
This policy may be revised in line with changes in laws and policies, and any changes will be announced on this page. (Amended 2026-08-21 — subscription auto-billing and credit handling added.)
Terms of Service · Refund Policy · Child Safety Standards (CSAE)