Your space. Your choices.
Privacy information
Where your conversations and memories are processed, what you share, and what you can delete.
1. Information and purposes
- Accounts and sign-in
- We process your email, authentication information, account identifier, display name, language, and time zone to create your account, sign you in, display the app, and express times correctly. We also process information needed for sessions, recovery links, and invitations.
- Conversations and shared records
- We store human messages, requests and replies from Naran, entries, internal plans, reactions, invitations, sharing choices, and assistance settings, and show them within authorized spaces. We also record the AI provider, notice version, consent or withdrawal status and times, room membership, and AI-use exclusions to apply your choices.
- Photos you choose to upload
- Uploaded photos and details you choose to keep, such as a photo's date, support albums and the activity feed. Private uploads can also be stored on the server. Creating a private suggestion is distinct from uploading or publishing.
- Places and music you select
- We display a place chosen using foreground location access, photo coordinates you choose to include, and place names, songs, artists, or music links you save. Including a photo's location can share precise coordinates with your partner. Continuous live location tracking is not offered.
- Notifications and service operation
- When notifications are connected, we process installation and account identifiers, push tokens, platform, language, and enabled status. Authentication/request outcomes, deletion progress, and AI usage and cost records support execution and troubleshooting. Production push delivery is currently off.
- Support requests
- If you email us, we use your sender address, inquiry, and our replies to help resolve the issue. Do not send passwords, authentication links, invitation codes, or unnecessary personal photos or private conversations.
2. How do photo suggestions work?
When you select your partner's face in a photo, Naran reads photos you have allowed on your iPhone and compares facial features on that device. The selected face's feature vector and search index are stored on the device for that account and space. They are not sent to our server or OpenAI. This analysis data is configured to be excluded from device backups.
Suggestions are private drafts and are not published automatically. Matching can miss photos or suggest a different person, so review each photo and its sharing scope before publishing. Disconnecting partner photos clears the corresponding person registration and search cache.
Including iCloud photos and gathering while the app is closed are separate choices. When enabled, Apple’s photo services may retrieve images needed for analysis to the device. If you also allow gathering while locked, that space’s person reference and analysis cache are configured to be readable while locked after the first unlock following a device restart. Face images being selected and temporary publishing images remain separately protected. iOS decides when work can run; immediate processing or continued work after force-quitting is not guaranteed.
Uploaded photos are converted on the server into display, thumbnail, and archive JPEGs with embedded EXIF removed. Dates or locations you separately choose to save can remain in the entry. Deleting your Naran account does not delete the originals in your iPhone photo library.
3. Naran AI and service providers
Your choice before AI data sharing
Before enabling beta AI, we verify that the following safeguards are applied in both the app and production server. Before your first request or enabling assistance, we explain the provider and information to be sent and ask for explicit permission. Your permission is required in a private space. In a shared space, both people must agree to the current notice from their own accounts before a new AI request can be processed. Human conversations remain available without AI consent.
You can withdraw in Me → AI data sharing permission or room settings. Once the server confirms withdrawal, new AI transfers stop. If a connection error prevents confirmation, new messages and requests from that device are excluded from AI while the unconfirmed-withdrawal notice remains in the current signed-in app session. After reopening the app or signing in again, do not assume this temporary block remains: check AI permission and request withdrawal again. AI use on other devices may also continue until the server confirms withdrawal. Requests already sent to OpenAI cannot be cancelled or recalled. Requests made after consenting may include authorized recent conversations.
Information sent to OpenAI
When Naran responds to a request or through an assistance setting, we send a limited recent conversation within the authorized scope to the OpenAI API, including sender and participant display names, language, time zone, channel, and private/shared scope. The current implementation selects up to 18 recent messages within length limits. Replies are stored on Naran's server and shown within the sharing scope displayed in the app.
The current paid AI path does not automatically attach photo files, face vectors, journal entries, or internal plan lists. Personal details, places, or plans you write directly in a message can still be sent as part of that message. Automatic access to external calendar or music account data is not currently offered.
We request that response storage be disabled. This does not mean OpenAI's security or abuse-monitoring logs or caches are immediately deleted. Separate provider retention terms may apply. We do not guarantee that special zero-retention settings apply to Naran's provider account. OpenAI API data controls
Hosting, notifications, and external links
- AWS: Naran authentication, databases, photo storage, and server processing use a self-hosted Supabase-compatible stack in the AWS Seoul region. Naran's server and the AI provider process content to provide the relevant features.
- AWS SES authentication email: Verification and password recovery email setup is in progress. Once enabled, the recipient email address and message containing verification or recovery links are transmitted through AWS SES.
- Expo and Apple: Production push delivery is currently off. Once connected and enabled by you, Expo and Apple APNs receive push tokens, generic notification text, and room/item identifiers used to open the notification. The implementation excludes message contents, names, and photos from notification text.
- Apple photo services: Apple's photo and iCloud features are used when retrieving iCloud photos.
- Music and map links: Opening another service or app is subject to that service's privacy terms. Sharing a music link does not connect your account's listening history.
Hosting Naran's server in Seoul does not mean every external provider processes information only in Korea. Each external service applies its own processing and retention terms.
5. Retention, deletion, and backups
We retain your account and saved conversations, entries, and photos to provide Naran. You can delete individual content or request account deletion. Deleting an entry and deleting a photo file are separate actions. Removing an entry from the feed does not itself delete its uploaded photo files.
Request account deletion in My account → Delete account after confirming your password. Once the request is recorded, existing space access is blocked while the account's server photo files, authored data, profile, and authentication account are cleaned up in sequence. Errors or uploads in progress can leave deletion pending. An accepted request is distinct from completed deletion. Your partner's account and their authored content remain.
Account identifiers, processing times, status, and file-path records used to confirm or retry deletion remain separately, together with AI request identifiers, request hashes, usage and cost records, and room-level usage. These operational records do not duplicate conversation text or photo files, but they contain identifiers and are not fully anonymous statistics. The current beta does not apply automatic expiry to these records.
Scheduled backups and recovery of real users’ data are not yet an implemented service in this beta. Existing restore checks used synthetic test data. We therefore do not promise recovery of deleted or lost data from backups. Retention, disposal, and reapplying deletions after a restore must be addressed before real-user backups are introduced.
Operational logs currently rotate by size rather than automatically being erased after a fixed number of days. Authentication audit records, host logs, and support emails are handled separately, and their retention end points have not been finalized.
Information already sent to an external AI provider and copies downloaded by your partner cannot be recalled just by deleting them in the app. Contact us below for help with related requests.
6. Choices and contact
- You can change photo, location, and notification permissions in iPhone Settings. Disabling access limits the relevant feature; deleting content already uploaded requires a separate deletion action.
- You can change photo connections, iCloud access, background gathering, Naran assistance settings, and AI data sharing permission in the app. Disabling assistance or withdrawing AI permission does not delete previously sent requests or records.
- You can request separation and account deletion in your account. Contact us if you cannot sign in or need help with access, correction, deletion, or withdrawing consent.
Operator: seeso.kr
Service and privacy inquiries: partner@seeso.kr
We may verify your identity as needed to handle a request. Do not send more personal information than your inquiry needs.