Privacy Policy

Synspear (“Company”, “we”, “us”) operates the novelday service (“Service”). This Privacy Policy explains what personal information we collect, how we use it, and your rights.

1. Purpose of processing

• Account management: authentication, membership, anti-abuse, notices, support
• Service delivery: diary writing/storage, AI style transform, anonymous share/inbox, subscription billing
• Improvement & security: error handling, aggregated analytics, protection of the Service
• Legal compliance: obligations under applicable law and dispute handling

2. Information we collect

2.1 Sign-up / login

• Identifiers from social login (Google / Kakao), email (if provided), display name/profile (if provided)
• Nickname set in the Service
• Invite/sign-up code (validation only; not retained long-term in normal cases)

2.2 Generated while using the Service

• Diary original text, transformed text, selected style, diary date, share status
• Anonymous delivery metadata needed to operate matching
• Subscription/billing metadata (plan, interval, status, processor IDs). We do not store full card numbers
• Session data, access timestamps, approximate device/browser info in server logs
• Cookies / local storage (e.g. language preference)

2.3 Support requests

• Message content and contact details you provide

Paid payments are processed by Toss Payments. Card data is handled by Toss Payments, not stored by us.

3. Retention

• Account data: until deletion/withdrawal (subject to limited retention for abuse prevention or law)
• Diary / delivery data: while needed to provide the Service, then deleted or anonymized per policy
• Billing records: as required by applicable commercial/tax laws
• Logs: for a reasonable period for security and operations

4. Sharing

We do not sell personal information. We may share information when:

• You consent
• Required by law or lawful authority requests
• Necessary for payment processing with our payment providers

In anonymous diary exchange, recipients see transformed content, style, and timing — not your account identity or original text.

5. Processors / international transfers

• Google / Kakao: social authentication
• Google Gemini: AI style transformation (original text may be sent to the AI API)
• Toss Payments: paid subscription billing (authorization, charge, settlement). Only the minimum data needed for payment is shared; we do not store full card numbers
• Hosting / database providers: infrastructure to run the Service

We design prompts to generalize identifiers, but AI processing cannot guarantee complete removal of personal details you write.

6. Deletion

When retention ends or the purpose is achieved, we delete or irreversibly anonymize data without undue delay, except where law requires longer retention.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or withdrawal of consent, and account deletion. Contact synspear.dev@gmail.com. We may need to verify your identity.

8. Security

• Access control and least privilege
• HTTPS in transit
• Session-based authentication
• Original diary text is not exposed to recipients by design

9. Children

The Service is not directed to anyone under 16. We do not knowingly allow accounts for users under 16.

10. Cookies

We may use cookies or local storage for sessions and preferences. Disabling them may limit some features.

11. Contact

• Company: Synspear
• Representative: Hyangshin Lee
• Address: 36, Dongtanjungsimsangga 1-gil, Dongtan-gu, Hwaseong-si, Gyeonggi-do, Republic of Korea
• Email: synspear.dev@gmail.com

12. Changes

We may update this Policy by posting changes on this page. Effective date: July 27, 2026.