Ollie Privacy Policy

Effective date: October 28, 2026 (Version 2.0, complete revision)

This is an English translation of the Korean privacy policy. If there is any difference, the Korean version prevails. Read the Korean version.

In providing the mobile application Ollie — a cloud friend who remembers you (iOS and Android identifier: com.richjun.ollie; hereinafter "Ollie" or "this app"), Junhyeong Kim (hereinafter the "Developer") complies with the Personal Information Protection Act of Korea and other applicable laws to protect users' personal information, and processes personal information as follows.

Ollie is not a medical service. Ollie is an AI conversation friend that listens to you and helps you take care of your mind. It does not diagnose, treat or prescribe. If you are in danger or feel you may harm yourself, please contact right away the Suicide Prevention Hotline 109 (24 hours), the Mental Health Crisis Hotline 1577-0199, or the emergency numbers 112 / 119 (these numbers apply in Korea).

Outside Korea, please call your local emergency number or find a free helpline at findahelpline.com.

1. Personal Information We Collect and How We Collect It

1-1. Account information

Category	Items collected	Method of collection
Just start (guest)	A randomly generated device identifier created by the app (not linked to a name, phone number, etc.)	Generated automatically when the app is installed
Sign in with Apple	Unique Apple account identifier, email (or private relay address), name (optional)	Provided by Apple after the user consents
Sign in with Google	Unique Google account identifier, email	Provided by Google after the user consents
Kakao login	Kakao member number, email (if consented)	Provided by Kakao after the user consents
Profile and settings	The name Ollie calls you, speech style (informal/formal), language, time zone, notification and call settings (frequency of Ollie reaching out first, quiet hours, check-in time)	Entered directly by the user
Device region	The country/region code set on the device (e.g., KR, JP) — this is not precise location information	Collected automatically from device settings when the app is used

1-2. Conversations and memories (generated while using the service)

Conversation content: messages sent by the user and Ollie's replies, and conversation summaries
Call records: text transcripts of voice calls, call summaries, call time and duration (the original audio is not stored)
Ollie's memories: short sentences Ollie remembers from conversations, calls and diary entries (e.g., "interview next Tuesday"), the numeric vectors used to retrieve them, and memory summaries
Diary: the text of diary entries left by voice or in writing, Ollie's comments, and emotions and inner weather
Inner weather check-ins: the weather (sunny to stormy) chosen for each date, and notes
Scheduled follow-ups: plans that Ollie has agreed to ask about again (e.g., "ask after the interview is over") and the history of messages sent
Usage: the number of conversations and call time per day (used to apply the free usage limit)
Safety signal records: the time at which a crisis signal was detected during a conversation and the risk level (see 1-5 below)

1-3. Processing of voice (important)

Voice calls: During a call, the user's voice is relayed in real time through Ollie's server to Google LLC's Gemini API (Live) and is used to generate Ollie's spoken replies. Call audio is not recorded or stored; only the text transcript is stored so that Ollie can remember the conversation.
Voice diary: The recording is created as a temporary file on the device, passed through Ollie's server, and converted to text by the Gemini API. Immediately after conversion, it is deleted from the device and from server memory. Recordings are not stored on the server.
The microphone operates only when the user answers or places a call, or presses the record button. It does not listen continuously in the background.

1-4. Notice on sensitive information

Conversations and diary entries you share with Ollie may include information about your state of mind, health and other sensitive information under Article 23 of the Personal Information Protection Act that you choose to talk about. Ollie does not ask for such information as a purpose of collection, but because of the nature of the service it is processed. Therefore, we process it only after obtaining separate consent when the app is first launched, and we apply the enhanced protection measures in Section 5 below. You can withdraw your consent at any time in the app settings (if you withdraw consent, you will not be able to use the conversation features).

1-5. Crisis signal detection

For the safety of users, conversations and calls are automatically monitored for crisis signals (such as expressions related to self-harm or suicide). When a signal is detected, Ollie shows information about crisis hotlines, and only the time of detection and the risk level are recorded. This determination is made automatically, and the Developer does not view the content of conversations or notify any outside organization.

1-6. Push notifications, payments and device information

Push: device push token, app version, operating system — only if you allow notifications
App error information: when the app crashes or a call fails to connect — the error details, device model, operating system and app version, app language, and a random identifier created for each app installation — not linked to your account and never containing your conversations.
Payment (Ollie Plus): subscription product, expiration date, renewal status, and the transaction identifier issued by the payment platform — payment method information such as card numbers is processed by Apple and Google, and Ollie does not receive it.
Stored only on the device: sound effects, font, theme and language settings, and login tokens (in the device's secure storage)

1-7. Information we do not collect

Location information, contacts, photo/media library, text messages
Advertising identifiers and behavioral information for personalized advertising — Ollie has no advertising.

2. Purposes of Collection and Use of Personal Information

Item	Purpose of use
Account information	Identifying members, keeping users logged in, linking guest accounts with social accounts
Conversations, call transcripts, diary	Providing Ollie's replies and voice conversations, writing diary comments, summarizing conversations
Ollie's memories	A feature that remembers earlier conversations so you can continue talking (users can view and delete them directly in the app's "Memories")
Settings, scheduled follow-ups, inner weather	A feature in which Ollie starts a conversation or places a call first (respecting the frequency and quiet hours set by the user), and the weekly mind report
Safety signal records	Providing hotline information in a crisis, adjusting the priority of check-in contacts
Device region	Showing hotline and emergency numbers for the country where the user is located
Usage and payment information	Applying the free usage limit, verifying Ollie Plus entitlement
Push token	Sending Ollie's message and call notifications
App error information	Finding the causes of crashes and failed call connections, and improving stability

Ollie does not use users' conversations, memories or diary entries to train AI models, and does not sell them or use them for advertising.

3. Retention and Use Period of Personal Information

Category	Retention period
Account, settings, conversations, memories, diary, check-ins	Until the user deletes them individually or withdraws from membership (permanently deleted immediately upon withdrawal)
Call and diary audio	Not stored (discarded immediately after processing)
App error information	90 days after collection (automatically deleted)
Encrypted database backups	Kept for up to 14 days for disaster recovery, then automatically deleted
Withdrawal records (audit log)	1 year, in a form that cannot identify an individual (for dispute response)

4. Outsourcing of Processing and Overseas Transfer

Ollie's servers and database are operated in the Republic of Korea (Seoul) region. To the extent strictly necessary to provide the service, processing is outsourced as follows, and some of it is transferred overseas.

Processor	Outsourced task	Items transferred	Country	Retention period
Amazon Web Services, Inc.	Operating servers and the database, storing encrypted backups	All stored information described in Section 1 (in encrypted form)	Republic of Korea (Seoul region)	Same as Section 3
Google LLC (Gemini API)	Replies, voice conversations, speech recognition, organizing memories, determining crisis signals	Conversation content, related memories, call and diary audio	United States	Discarded after the request is processed (not used for training)
Google LLC (Firebase Cloud Messaging)	Sending push notifications	Push token, notification text	United States	Until withdrawal
Google LLC (Firebase Crashlytics)	Analyzing app errors	App error information (error details, device model, OS and app version, app language, random per-installation identifier)	United States	90 days
RevenueCat, Inc.	Managing subscription payment status	App user identifier, subscription and transaction information	United States	Until withdrawal
Apple Inc. / Google LLC / Kakao Corp.	Social login authentication	Login authentication information	United States / Republic of Korea	Only at the time of authentication

Overseas transfers take place over an encrypted network at the time of use. Users may refuse overseas transfer, but in that case they will not be able to use the AI conversation, call, push and payment features. Data processing by the Gemini API is subject to the Gemini API Terms.

5. Measures to Ensure the Security of Personal Information

Content encryption: The content of conversations, call transcripts, memories and diary entries is stored in the server database encrypted with AES-256-GCM, and backup files are also kept as ciphertext.
Encryption in transit: All communication between the app and the server is encrypted with HTTPS/WSS (TLS).
Access control: Every request is processed only with the user's own login token, and login tokens have a short validity period and reuse detection (automatically revoked if stolen). Conversation content and tokens are not written to operational logs.
Data minimization: Original audio is not stored, and only the information necessary for the service is processed.

6. User Rights and How to Exercise Them

Right	Method
View, edit and delete Ollie's memories	App → Me → Memories
Delete a diary entry	App → Records → Diary detail → Delete
Download my data	App → Settings → Privacy → Export my data (JSON)
Turn off Ollie reaching out first and calls	App → Settings → How Ollie reaches you
Withdraw consent to AI processing and sensitive information	App → Settings → Privacy
Withdraw from membership (all data deleted immediately)	App → Settings → Account → Delete account
Other requests for access, correction or suspension of processing	Email in Section 8

An Ollie Plus subscription must be cancelled separately, through subscription management in the App Store or Google Play; deleting your account does not cancel it.

7. Protection of Children's Personal Information

Ollie is not directed at children under 14 years of age and does not knowingly collect personal information from children under 14. If we become aware of such information, we will delete it without delay.

8. Privacy Officer and Contact

Privacy Officer: Junhyeong Kim
Email: ggprgrkjh2@gmail.com

9. Remedies for Infringement of Personal Information

Personal Information Dispute Mediation Committee: (no area code) 1833-6972 / www.kopico.go.kr
Personal Information Infringement Report Center: (no area code) 118 / privacy.kisa.or.kr
Supreme Prosecutors' Office, Cyber Crime Investigation Division: (no area code) 1301 / www.spo.go.kr
Korean National Police Agency, Cyber Investigation Bureau: (no area code) 182 / ecrm.cyber.go.kr

10. Changes to This Privacy Policy

Date of announcement: October 21, 2026
Effective date: October 28, 2026
Previous version: in effect from August 5, 2026
Summary of major changes: As the service changed from a voice diary to a "remembering AI conversation friend," this version reflects the collection of conversations, call transcripts, memories and inner weather; separate consent for sensitive information; crisis signal detection; the feature in which Ollie reaches out first; subscription payments (RevenueCat); the server migration (Supabase → AWS Seoul region); content encryption; and the backup retention period.
Supplement (October 26, 2026): added the collection of app error information for stability (Google Firebase Crashlytics, not linked to your account, kept for 90 days) to Sections 1-6, 2, 3 and 4.