TiTi StudioTHINK · TRY · TOGETHERTiTi StudioTHINK · TRY · TOGETHERLegal
개인정보처리방침
This Privacy Policy applies to all applications and web services provided by TITI STUDIO, including Episode, Modam Budget, Money Synapse, and any future services.
We collect only the minimum information necessary to provide our Services. The items below are collected in common, regardless of which app you use.
| Category | Data Collected | How |
|---|---|---|
| Account Info | Email address, display name | Entered at sign-up |
| Social Login Info | Email, display name (providers: Apple, Google, Kakao) | Received from provider at login |
| Usage Data | Feature usage history, error logs | Automatically during use |
| Device Info | Device model, OS version, app version, push token (for notifications) | Automatically during use |
| Subscription & Purchase Info | Subscription status, in-app transaction IDs/order numbers, timestamps, credit purchase ledger (credit card numbers and raw payment methods are processed directly by Apple App Store and Google Play and are never stored on our servers) | Upon in-app purchase or subscription |
Depending on which app you use, the following additional user-generated content is collected. Select an app below to see its details.
Personal financial and household entries you create in Money Synapse are processed solely to provide functional service features. We never sell, disclose, or use them for advertising.
We use the information we collect only for the following purposes.
We do not use your information for targeted marketing or promotional profiling without your prior explicit consent.
We retain personal data only as long as necessary to fulfill the intended purposes. Once the purpose is fulfilled or upon account deletion, data is promptly and irreversibly destroyed. However, minimum statutory transaction evidence required by applicable commercial and consumer protection laws is stored in a strictly segregated vault and permanently deleted upon expiration of the statutory period.
Destruction Principle for User Financial Data:
All private financial, household, budget, investment, loan, insurance, and receipt images entered by the user are NOT statutory transaction records under the E-Commerce Act. Therefore, upon account deletion, all user-entered financial and asset data is immediately and permanently destroyed without residual retention.
Data Retention and Statutory Preservation Schedule
| Category | Data Items | Retention Period | Starting Point | Legal Basis & Purpose | Storage Method |
|---|---|---|---|---|---|
| Account Info | Email, display name, profile, social provider identifiers | Until account deletion | At registration | Service contract fulfillment | Production DB (deleted upon withdrawal) |
| Financial & Asset Content | Accounts, transactions, budgets, savings, investments, loans, insurance, images | Destroyed immediately upon account deletion | Upon entry | Service provision (not subject to statutory retention) | Production DB & Storage (CASCADE purged upon deletion) |
| Contract & Cancellation Records | Subscription agreements, cancellations, Tumblbug redemption history, product IDs | 5 years | Time of contract or cancellation | Article 6(1)(2), Enforcement Decree of Korean E-Commerce Act | Statutory Segregation (statutory standard) |
| Payment & Supply Records | Subscription payments, credit purchases, refund ledgers, hashed receipt digests | 5 years | Time of payment or service delivery | Article 6(1)(3), Enforcement Decree of Korean E-Commerce Act; National Tax Basic Act | Statutory Segregation (statutory standard) |
| Dispute & Complaint Records | Support inquiries, payment dispute reviews, resolution logs | 3 years | Time of dispute resolution | Article 6(1)(4), Enforcement Decree of Korean E-Commerce Act | Statutory Segregation (statutory standard) |
| Advertising & Display Records | In-app display and terms of paid products | 6 months | Time display terminates | Article 6(1)(1), Enforcement Decree of Korean E-Commerce Act | Segregated storage |
| Access Logs | Timestamp, IP address, connection records | 3 months | Time of access | Article 15-2(2), Protection of Communications Secrets Act | Infrastructure security logs |
| Trial Abuse Prevention | 7-day Pro trial history, pseudonymized identifiers (one-way cryptographic hash) | 1 year from issuance | Time of trial issuance | Article 15(1)(6), Personal Information Protection Act (Legitimate interests) | Abuse ledger (aligned with trial release) |
* The statutory retention clock begins on the date of the specific event (payment, contract, resolution), NOT on account deletion. Account deletion does not restart or extend statutory retention periods.
* [Technical Implementation Notice] Segregated statutory retention vaults, automated cron purges, and trial abuse prevention hashes are scheduled to be deployed in conjunction with the V2 account deletion system cutover following rigorous isolation and stability testing.
We work with trusted third-party service providers to deliver and operate our services. Each sub-processor processes personal data strictly under our contractual instructions and is prohibited from processing personal data for unauthorized purposes.
| Provider | Location | Delegated Processing Purpose | Data Categories Processed | Privacy Policy |
|---|---|---|---|---|
| Supabase Inc. | United States | Cloud database infrastructure, backend API hosting, and user authentication management | Email, hashed passwords, OAuth provider identifiers, service user data | View → |
| OpenAI, LLC | United States | Natural language analysis and generation for Money Synapse AI assistant "Moa" | User question prompts (masked of personal identifiers; not used to train models) | View → |
| RevenueCat Inc. | United States | In-app purchase receipt validation and subscription entitlement synchronization | Anonymous app device ID, subscription status, purchase receipt digests | View → |
| Google LLC | United States | Google Sign-In integration and mobile push notifications (Firebase Cloud Messaging) | Google account email, profile name, device push tokens | View → |
| Apple Inc. | United States | Sign in with Apple authentication and iOS In-App Purchase/subscription processing | Apple user identifier, relay email, App Store transaction records | View → |
| Kakao Corp. | South Korea | Kakao Sign-In social login integration | Kakao account email (if consented), nickname, user ID | View → |
| Resend Inc. | United States | Transactional email delivery for account verification and service alerts | Recipient email address | View → |
Our global cloud and AI infrastructure providers (including Supabase, OpenAI, Google, Apple, RevenueCat, and Resend) operate servers primarily located in the United States. In the course of providing services, personal data is transferred across borders as follows:
| Recipient | Destination Country & Timing | Transferred Data Items | Purpose & Method of Transfer | Retention Period |
|---|---|---|---|---|
| Supabase Inc. (privacy@supabase.com) |
United States (Transferred via network upon service use) |
Account info, user financial data, auth tokens | Cloud storage and backend database processing (TLS encryption) | Until account deletion or statutory period expiry |
| OpenAI, LLC (privacy@openai.com) |
United States (Transferred upon asking Moa AI) |
Question prompts entered in Moa (de-identified) | Natural language analysis and financial advice generation (TLS API) | Destroyed immediately after response generation |
| RevenueCat Inc. (support@revenuecat.com) |
United States (Upon purchase/subscription) |
Anonymous device ID, purchase receipts, subscription tier | Subscription entitlement sync | Until account deletion or statutory period expiry |
| Google LLC / Apple Inc. | United States (Upon login or checkout) |
OAuth user IDs, email, store transaction digests | Social sign-in authentication and in-app billing | Subject to respective store policies & statutory rules |
| Resend Inc. (privacy@resend.com) |
United States (Upon email dispatch) |
Recipient email address | Transactional email dispatch delivery infrastructure | Purged upon delivery log expiration |
Each provider adheres to international data protection standards, including Standard Contractual Clauses (SCC) and Data Processing Agreements (DPA). If you object to international data transfers, service usage may be restricted.
We do not sell, rent, or trade your personal information to third parties. We share information only under the following limited circumstances:
As a data subject, you have the following rights under applicable data protection laws:
To exercise your rights, you may use the in-app menu (Settings > Delete Account), the official web deletion guide (Account Deletion Page), or contact our Privacy Officer at `titi@titistudio.kr`.
When you request account deletion (withdrawal), we promptly and permanently destroy your personal data in accordance with the following principles:
Store Subscription Cancellation Notice:
Deleting your account does not automatically cancel recurring in-app subscriptions managed by the Apple App Store or Google Play Store. To avoid unwanted renewal charges, please cancel recurring subscriptions directly in your platform account settings.
Money Synapse may provide new users with a complimentary 7-day Pro trial. In connection with this promotion, the following information is processed:
Our Services are not directed to children under the age of 14. We do not knowingly collect personal information from children under this age. If you believe a child under 14 has provided us with personal information without parental consent, please contact us at titi@titistudio.kr and we will immediately delete the information.
Our website (titistudio.kr) uses cookies strictly for essential authentication and anonymized traffic metrics. You may refuse or disable cookies through your browser settings, though certain authentication features may be impaired. Mobile applications do not use browser cookies.
In accordance with Article 29 of the Personal Information Protection Act, we implement rigorous technical and administrative safeguards:
For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact our Privacy Officer:
TITI STUDIO — Privacy Officer
Officer: Park Dasol
Title: Representative & Data Protection Officer
Email: titi@titistudio.kr
Phone: +82 10-8165-1081
Response SLA: Within 7 business days
For independent dispute resolution or complaints within South Korea, you may also contact:
This Privacy Policy may be updated to reflect legislative changes, government guidance, or service enhancements. Material changes will be announced at least 7 days prior to taking effect (or 30 days prior if changes significantly affect user rights).
Revision History
| Version | Effective Date | Key Amendments |
|---|---|---|
| v1.2 (Current) | October 15, 2026 | Clarified immediate destruction of user financial data upon account withdrawal; established segregated statutory vault policy; added OpenAI sub-processor for Moa AI; instituted 7-day Pro trial anti-abuse data provisions; refined withdrawal execution sequence |
| v1.1 | October 13, 2026 | Added web-based authenticated account deletion flow and store subscription cancellation notice |
| v1.0 | July 6, 2026 | Initial publication of TiTi Studio unified Privacy Policy |