Privacy Policy

We may process account information such as email address, name, and authentication provider data to identify users and maintain signed-in sessions.

We may process app language, university, department, course names, professor names, schedules, colors, reminder settings, and other study-environment information that users configure inside the service.

When users import a timetable, we may process the original timetable screenshot and related OCR metadata needed to analyze, debug, and improve timetable recognition.

When you use lecture capture features, we may process audio temporarily as needed for transcription, and we may process transcripts, summaries, formatted notes, prompts, and other study records that users create or save.

We may also generate or collect technical information needed to operate the service, including access logs, browser and device data, cookies, local-storage or session-storage settings, push-notification preferences, crash logs, and usage analytics.

To improve service quality, some app or web screen content and interactions such as taps or clicks may be sent to Amplitude Session Replay. Environments where Replay is enabled are configured to collect 100% of sessions. The app and web SDKs use the minimum masking level for sensitive inputs such as passwords, email addresses, phone numbers, and payment information; ordinary text and other screen content may appear in Replay. Admin screens and payment-only routes are excluded separately. The Replay path does not collect microphone audio or audio files. To request restriction or deletion, contact us at contact@ascentum.co.kr. Replay data already sent remains subject to the retention and deletion rules in Sections 4 and 9.

We process personal information to authenticate users, complete onboarding, personalize language and study settings, manage courses, run timetable OCR and improve its quality, generate transcripts and notes, deliver notifications, measure usage, respond to support requests, provide notices, analyze errors, and improve the service. Some Replay data may also be used to understand app flows, identify usability issues, and improve the experience.

We keep personal information only for as long as needed to fulfill the relevant purpose, unless a longer retention period is required by law.

Account information, course information, transcripts, and notes may remain stored while the user continues to use the service, and will be deleted or isolated when the user requests deletion or account withdrawal unless legal retention obligations apply.

Original timetable screenshots uploaded for OCR may be retained separately for up to six months for debugging and quality-improvement purposes, and are intended to be deleted after that retention window expires.

Audio used for transcription is processed temporarily and is intended to be deleted promptly after processing is complete.

We do not provide personal information to outside parties unless the user has agreed in advance, disclosure is required by law, or a valid request is made by an investigative or supervisory authority within the scope permitted by law.

Before the Archy app begins recording-based AI processing, it tells the user which categories of data will be sent, which external AI providers may receive it, and why the data is needed, and asks for the user's express consent. If the user does not consent, AI transcription, summarization, and translation for that recording do not begin. You may request withdrawal through our privacy contact at contact@ascentum.co.kr. After the request is verified and an account-level server block is set, new external AI processing is blocked before it starts for personal recording chunk transcription and optional transcript refinement, final-note formatting and translation, personal live or rolling summaries, and deferred note translation. Requests already sent to an external provider may finish, and information already sent is not automatically deleted. Shared-class recordings follow separate sharing permissions and role rules, so a personal account withdrawal does not stop shared work as a whole.

We may use external providers to operate the service. Depending on the feature, this may include Supabase for authentication and database hosting, Vercel for application hosting, Toss Payments for web subscription payments, Sentry for error monitoring, and Amplitude for analytics. Amplitude Session Replay may also process the masked screen and interaction data described above.

When we use service providers, we manage those relationships in accordance with applicable privacy laws and require providers to handle personal information securely.

To provide AI-powered features such as transcription, summarization, translation, and OCR, we may use external AI providers including Groq, OpenAI, and Google Gemini. In that process, related information such as audio, transcripts, course metadata, timetable images, and prompts may be processed in countries such as the United States.

More specifically, Groq or OpenAI may process speech transcription, while Google Gemini may process summaries, formatted notes, and translations. We send these providers only the data needed to deliver the Archy feature the user requested.

Even when data is processed internationally, we limit processing to the minimum scope necessary to provide the requested service and use contractual and operational controls intended to apply appropriate privacy and security protections.

Separately, where the recording screen offers a live transcript display, your browser's built-in speech recognition may also run. In that case the microphone audio is sent directly from your browser to the browser vendor's servers (for example, Google LLC for Chrome and Apple Inc. for Safari) without passing through our servers, and that processing is governed by each vendor's own privacy policy. We neither receive nor store that audio.

Text produced by the browser's built-in speech recognition is used only for on-screen display during recording and is not stored on our servers. The transcript saved to your account is generated separately through the paths described in Sections 3 and 6.

You can choose not to use the browser's built-in speech recognition by restricting microphone permission in your browser settings. Recording, transcription, and summarization continue to work without it.

Users may request access, correction, deletion, suspension of processing, or withdrawal of consent for their personal information, subject to applicable law.

Information that can be edited directly inside the service may be updated immediately by the user. Other requests can be submitted through the contact channel listed in this policy.

We review and respond to valid requests without undue delay, although some requests may be limited if retention is legally required or if the request would materially affect other users' rights or service stability.

When personal information is no longer needed, we delete it without undue delay.

Electronic records are deleted using technical measures designed to prevent recovery, and printed or physical records are destroyed by shredding or equivalent methods.

We make reasonable efforts to protect personal information through access control, protection of authentication data, transport security, monitoring of logs and abnormal activity, error monitoring, and operational controls based on least-privilege principles.

We may use cookies and similar storage technologies to keep users signed in, remember language preferences, preserve onboarding progress, understand traffic sources, and improve service quality. We may also store limited settings in local storage or session storage.

Users can reject or delete cookies through browser settings. Doing so may limit some features such as persistent sign-in or saved language preferences.

We operate a contact point for privacy-related questions and rights requests. The current privacy contact point is the Ascentum security team.

If you need to file a complaint or seek consultation regarding privacy issues, you may also contact the relevant public dispute-resolution or reporting bodies available in your jurisdiction.

This Privacy Policy may be updated when laws, service features, or operating policies change. When material changes are made, we will provide notice inside the service or through another reasonable communication channel together with the effective date.