Effective date: June 27, 2026 · 한국어
If this English version and the Korean version differ, the Korean version prevails.
Lambox Ventures (the “Company”) adopts this privacy policy (this “Policy”) so that it can protect the personal information of individuals who use the services the Company provides (the “Service” and each a “User”), comply with the Personal Information Protection Act (개인정보보호법), the Act on Promotion of Information and Communications Network Utilization and Information Protection (정보통신망 이용촉진 및 정보보호 등에 관한 법률), and other applicable law, and handle privacy complaints promptly and smoothly.
The business that operates this Service is as follows.
The Company processes Users’ personal information in accordance with privacy laws and this Policy. As a rule, the Company does not provide personal information to a third party without the User’s consent. An exception may apply when a lawful procedure under statute requires the provision.
The Company publishes this Policy, including on the in-service settings screen, so that a User can review it easily at any time.
This Policy may be revised when privacy statutes, guidelines, or public notices change, or when government or Company service policy or content changes.
When the Company revises this Policy, it gives notice by one or more of the following methods:
The Company gives notice at least 7 days before the effective date of a revision. If the change materially affects Users’ rights, it gives notice at least 30 days in advance.
If a User continues to use the Service after the effective date, the User is treated as having agreed to the revised Policy. A User who does not agree may end the contract by deleting the account.
To let a User use the Service (signup and account management), the Company collects the following information.
A User may install the app and use some features without providing an email, password, or nickname. Without that information, core features such as buying, writing, and saving diaries are not available.
This Service is for Users aged 14 or older. As a rule the Company does not accept signups from children under 14. If an account is confirmed to belong to a child under 14, the Company deletes that account and related information without delay.
Diary text a User writes, and AI analysis generated from it, may be sensitive information such as emotional or psychological state. The Company processes that sensitive information only after a separate consent at signup. The method of processing and the safeguards are set out in Article 27.
The Company collects personal information in the following ways:
The Company uses personal information only for the following purposes:
The Company may provide personal information to a third party only when the User has already made it public or has consented to the provision.
In actual operation, use of Back4App, Firebase, Sentry, RevenueCat, AppsFlyer, Bunny CDN, Google Maps, and similar services may take the form of processing entrusted under Article 8-2 or a cross-border transfer under Article 8-3, as applicable law and the form of operation require.
To operate the Service, handle payments, analyze use, and keep the Service stable, the Company entrusts personal-information processing to outside companies as follows.
Member accounts, diaries, and other primary data are stored on servers in the Republic of Korea (AWS Seoul region).
Until the relevant service contract ends, or until the entrustment contract ends.
Member accounts, diaries, and other primary data are stored on servers in the Republic of Korea (AWS Seoul region). The Company may transfer some information overseas only for the third-party services below.
Operating and analyzing the Service, managing payments and subscriptions, diagnosing errors, and improving performance.
Transmission over the network when the app is used.
Retention: until the service contract or the entrustment contract ends, except where statute requires longer storage.
A User may refuse a cross-border transfer. Some features of the Service may then be limited.
RevenueCat receives only the minimum information needed to manage payments and subscriptions, such as receipts and subscription status. Diary text, AI analysis results, and location information are not sent to RevenueCat.
The body and title of a private diary, and sensitive AI analysis information, are end-to-end encrypted on the User’s device in a form the Company cannot decrypt. The Company does not read or transfer that plaintext. Attached images, profile images, and location coordinates are not end-to-end encrypted in the same way as the diary body and title, and may be stored or transmitted on a server or CDN in order to provide the Service.
The Company retains and uses personal information until the purpose of collection and use is achieved.
When a member deletes the account, the Company deactivates the account immediately. After a 30-day grace period for recovery and mistaken registration, the Company destroys personal information and User-generated content in a way that cannot be restored, except for information that must be kept under the following sentence and Article 10.
Under its internal policy, the Company may keep records of misuse for up to 1 year from account deletion in order to prevent fraudulent signup and use.
When a paid service ends, the Company may temporarily keep personal information and usage records, limited to what is necessary, for up to 90 days so it can restore data or answer inquiries, and destroys them without delay after that period, except where statute requires longer storage.
A User may request deletion of all AI analysis and statistics data at any time in settings (AI diary analysis → delete server analysis data). Related data is also destroyed when the account is deleted.
Search terms collected when search is used are destroyed automatically 30 days after the last search.
The Company retains and uses personal information as follows under applicable statutes.
1. The Company collects and uses personal location information only when the User allows location permission, in order to provide location-based diary features.
2. Under Article 16(2) of the Act on the Protection and Use of Location Information (위치정보의 보호 및 이용 등에 관한 법률), the Company automatically records and keeps materials confirming the collection, use, and provision of personal location information in the location-information system for at least 6 months.
3. The subject of personal location information (the User) has the following rights, and the Company provides a way to exercise them:
4. If a guardian of a person covered by Article 26 of the same Act, including a child aged 8 or younger, consents to collection, use, or provision of that person’s personal location information, the Company treats that consent as the person’s own.
5. The Company applies the safeguards in the Korea Communications Commission (방송통신위원회) notice, Standards for Managerial and Technical Protection of Location Information (위치정보의 관리적·기술적 보호조치 기준).
6. Location-information manager
Name: Jonadan / Email: manager@lambox5.com / Phone: 010-2428-1403
When personal information is no longer needed because the purpose of processing has been achieved or the retention period has passed, the Company destroys it without delay.
For a User who has not used the Service for 1 year, the Company may, after prior notice required by applicable law, destroy the personal information or store it separately.
The Company notifies a long-inactive User by email or another means at least 30 days before the date of separate storage.
Separately stored personal information is kept under applicable law and internal policy, then destroyed without delay.
Information a User enters for signup is moved to a separate database after the purpose of processing is achieved, and is destroyed after the retention period under internal policy and applicable law. The Company destroys personal information for which a ground for destruction has arisen after approval by the privacy officer.
The Company deletes personal information stored in electronic files by a method that cannot be restored, and destroys printed personal information by shredding, incineration, or a similar method.
When the Company sends commercial advertising through an electronic medium, it obtains the User’s explicit prior consent. Sending advertising between 9:00 p.m. and 8:00 a.m. the next day requires a separate prior consent. An opt-out or withdrawal of consent is applied immediately. Details follow applicable law.
Only when the User consents through an operating-system consent flow such as iOS App Tracking Transparency, the Company may process a device identifier or advertising identifier for install attribution and service improvement (including through AppsFlyer).
A User may refuse tracking or withdraw consent at any time in the device operating-system settings. Some personalized features may then be limited.
A User and a legal representative may access or correct their personal information at any time, and may request withdrawal of consent to collection and use. When a User asks, the Company takes the necessary steps without delay.
A User may request deletion of all AI analysis and statistics data directly in the Service settings.
A User may request correction of an error in personal information. Until the correction is complete, the Company does not use or provide that information. If it has already been provided to a third party, the Company notifies that party of the correction without delay.
A User must keep personal information up to date. The User is responsible for problems caused by inaccurate information. The User is responsible for keeping account information (email, password, and similar) and security means the Service provides, such as a PIN and recovery code, secure.
The Company takes reasonable technical and organizational measures at the level applicable law requires so that personal information is not lost, stolen, leaked, altered, or damaged. Examples:
Personal information closed or deleted at the request of a User or legal representative is handled according to the retention period in this Policy, and is processed so that it cannot be read or used for any other purpose.
When a User logs out, deletes the account, or switches to another account on the same device, the Company deletes local data stored on that device, including the diary cache and AI analysis data, so that it is not exposed to another user.
Passwords are stored and managed with one-way encryption. Only the person who knows the password can view or change the personal information.
The Company applies safeguards at the level applicable law requires in order to prevent network intrusion and leakage of personal information. It also applies security protocols such as HTTPS/TLS on the transmission path.
The Company limits the people who process personal information to the minimum necessary, and strengthens compliance with law and internal policy through training and other organizational measures.
If the Company learns of a leak of personal information, it notifies Users without delay and reports to the relevant authority as applicable law requires. The notice may include:
If there is a justifiable reason, such as the Company not knowing the User’s contact details, the Company may replace individual notice with an in-service notice or a website posting for 30 days or longer.
The Company designates the following privacy officer to handle privacy complaints and protection work.
Content a User creates and stores in the Service, including diary text, photos, and notes (“User-generated content”), belongs to the User. The Company processes it only within the purpose of providing the Service.
Through on-device AI, the Company infers and generates emotional state, psychological patterns, sleep, relationships, values, and similar matters from the User’s diary, and provides emotion and statistics insights. Diary plaintext is not sent to an external server for analysis. All inference runs on the User’s device. Sensitive fields among the analysis results are encrypted on the device and kept on the server only for sync across devices. The Company cannot decrypt them to read them (see Article 19).
AI analysis can be controlled through the User’s consent and in-service settings, including whether analysis is used and deletion of analysis data.
AI analysis and statistics in this Service are a reference to help the User understand themselves. They do not provide medical diagnosis, treatment, counseling, or crisis intervention. Sensitive information in diaries and analysis results is end-to-end encrypted, so the Company cannot read it and does not identify an individual User’s crisis or intervene directly. If the analysis detects a crisis signal such as self-harm or suicide, the Service may show the User information about professional help, such as the suicide-prevention hotline 1393.
The Company applies reasonable safeguards to User-generated content and related data, including access control, internal control procedures, and access logs.
The Company maintains an internal response procedure and incident plan. If personal information or User-generated content is affected by hacking, an internal mistake, a system error, or a similar cause, the Company confirms the facts and responds without delay.
If personal information leaks, the Company notifies Users and reports to the relevant authority as applicable law requires.
If data is lost, damaged, or abnormally changed, the Company may take recovery steps within what is possible. For content protected by end-to-end encryption, the Company cannot help recover it if the User loses the PIN and recovery code. If damage is caused by the Company’s fault, liability may be limited or damages may be owed under applicable law and the terms of service.
The Company may use cookies or similar technologies to improve service quality and analyze usage statistics. A User may refuse storage in device or browser settings. Some features may then be limited.
The Company may collect and process location information only when the User allows location permission, in order to provide location-based diary features.