Privacy Policy
Effective date: 2026-08-05 (first enacted 2026-06-23)
K-Chat (크론AI, the "Service") takes your personal data seriously and complies with applicable laws, including the Personal Information Protection Act. This policy explains what information the Service collects and how it is used, stored, and protected.
1. Personal Data We Collect
| Category | Items |
|---|---|
| Email sign-up | Email, password (stored encrypted), nickname |
| Social login | Email and nickname received from the provider (Google/Kakao/Apple) |
| Guest login | Temporary identifier (auto-generated, no personal data) |
| Profile (optional) | Gender, profile image |
| Phone number login | Phone number (used for account identification and SMS verification) |
| Contact matching (optional) | Phone numbers from your device's address book — collected solely for comparison to find friends who already use the Service, and discarded immediately after the comparison (not stored). Only the resulting friend matches are kept. |
| Creation service use | Prompts you enter, photos/videos you upload, generated websites/images/videos and generation request records |
| Payments (paid services) | Payment approval details (approval number, payment method type, amount, time). Sensitive payment data such as card numbers is processed directly by the payment gateway (KG INICIS) and is not stored by the Company. |
| Service use | Chat content with characters, information and images of user-created characters |
| Voice conversation | Voice audio (collected via the microphone during voice calls, processed in real time and not stored), conversation text (speech-recognition captions and conversation content), call logs (time, access IP, device info, call duration) |
| Automatically collected | Access IP, browser/device info (User-Agent), service usage records and logs |
2. Purposes of Use
- Member identification and authentication, maintaining login sessions
- Providing the AI website, online-store, video and image creation service (processing generation requests, storing and hosting creations)
- Processing payments for paid services, granting/deducting credits, and settlement such as refunds
- Providing ancillary features such as AI character chat and voice conversation, and maintaining conversation context
- Service operation, statistics, quality improvement, and prevention of errors and abuse
- Responding to customer inquiries and sending notices
3. Third-Party Sharing and Processing Delegation
The Service does not sell your personal data to outside parties. However, to provide the Service, processing is delegated to and integrated with the following:
| Processor | Purpose | Details |
|---|---|---|
| AI model providers (Google Gemini, OpenAI, xAI, Anthropic, BytePlus, fal.ai, etc.) | AI website / video / image generation, chat and voice responses | Prompts, uploaded materials, conversation text and voice audio are sent to process generation requests |
| KG INICIS | Payment gateway (PG) | Payment approval and cancellation — card details are collected and processed directly by the PG |
| Amazon Web Services (AWS) | Data storage and server operation | Storage of account data, creations and conversations (DynamoDB · S3), server hosting (Seoul region) |
| Google/Kakao/Apple | Social login (when used) | Login authentication and receipt of basic profile |
Voice audio and conversation text are sent to and processed by Google (Gemini API) during voice calls and chat in order to provide real-time AI language-learning conversations. Such data is transmitted encrypted in transit (HTTPS), and the Service has confirmed that Google provides a level of privacy protection equivalent to this policy. Voice audio is processed in real time solely to generate responses and is not separately stored by the Service.
Related information may be provided only where required by law or upon a lawful request from an investigative authority.
4. Retention and Destruction
- Personal data is destroyed without delay upon account deletion. When you delete your account, your account information and conversation history are permanently deleted.
- Real-time voice data is used solely for the purpose of processing the call and is not separately stored. However, call logs (time, IP, device, call duration) for operation and security are retained for a certain period and then automatically purged.
- Where applicable laws require retention, data is kept for the relevant period.
5. Your Rights
- You may view and modify your personal data (nickname, gender, etc.) at any time via the "My Info" menu.
- You may request deletion of your personal data by deleting your account ("More → Delete account").
- For other requests to access, correct, or delete your data, please contact us at the address below.
6. Data Protection Measures
- Passwords are stored in a non-decryptable form (PBKDF2 hash).
- HTTPS encryption is applied across all communications.
- Sessions are managed with signed, secure cookies (HttpOnly · Secure).
7. Child Protection
The Service applies a zero-tolerance policy toward child sexual abuse and exploitation (CSAE). For details, see the Child Sexual Abuse and Exploitation Prevention Standards.
8. Privacy Officer and Contact
For privacy-related inquiries and requests, please contact us below.
- Email: aibridgeco@gmail.com
This policy may be revised in line with changes in laws and policies, and any changes will be announced on this page.
Child Safety Standards (CSAE)