Privacy Policy
Last updated: September 19, 2026
Article 1 (Overview)
This Privacy Policy ("Policy") describes what personal information Pet World ("Service") — operated by mojimoji Studio ("Company") — collects when you use the Service, how we use it (including to generate AI content depicting a pet), how long we retain it, and the choices and rights you have. The Company complies with applicable privacy law including the Personal Information Protection Act (PIPA) of Korea, the GDPR (for EEA users), the UK GDPR, and the CCPA (for California users).
Article 2 (Information We Collect and How)
Collected directly from you
| Category | Items | Retention |
|---|---|---|
| Account registration | Name, email, password (encrypted), Google account info (if using Google Sign-In) | Until account closure |
| Pet profile | Pet name, species, breed, gender, age at passing, your relationship, personality traits, hobbies, talk-style notes | Until profile deleted |
| Uploaded media | Photos, videos, letters and writings about the Pet | Until profile deleted, or 3 years after last family activity, whichever is earlier |
| Content you post | Comments, replies, likes, reports | Until profile deleted |
| Direct messages (DM) | DM conversation content between you and the AI Pet | Until profile deleted |
| Payment records | Purchase and subscription records (card details collected directly by our payment processor; we do not store them) | 5 years (as required by commerce law) |
| Customer support | Email, inquiry content, relevant Service-use records | 3 years after resolution (as required by commerce law) |
Collected automatically
| Category | Items | Retention |
|---|---|---|
| Usage & device data | IP address, browser type, access times, visit records, cookies, device model, OS, app version | 3 months (as required by telecommunications law), or until purpose is fulfilled |
Article 3 (How We Use This Information)
The Company uses collected personal information for the following purposes:
① Create and maintain your account — account information ② Review your registration and build the Pet's AI persona — Pet profile information, uploaded media ③ Generate AI posts, images, and video in the Pet's likeness — uploaded photos/videos (reference image), personality/talk-style description ④ Deliver the family feed and notifications — account information, comments/replies/likes ⑤ Respond to reports and enforce our Terms — reported content, reporter identity (visible only to our operators) ⑥ Process payments and manage subscriptions — payment records ⑦ Prevent fraud and ensure Service security — access logs, IP address, device information ⑧ Improve the Service and resolve errors — usage records, access information ⑨ Respond to customer inquiries — email, inquiry content ⑩ Ensure Service safety, enforce our Terms, and comply with applicable law — our operators may access DM conversation content on a limited basis to detect abuse, handle reports, and respond to lawful requests from courts or law-enforcement agencies.
Article 4 (Personal Information Processing Consignment)
The Company entrusts the following companies with personal information processing to provide the Service:
| Processor | Task | Retention |
|---|---|---|
| fal.ai | AI image and video generation (processes Pet reference images) | Until purpose is fulfilled |
| Google LLC (Gemini API) | AI text generation — captions, comment replies, direct messages | Until purpose is fulfilled |
| Supabase | Database operation and file storage | Until service agreement ends |
| Vercel | Service hosting and server operation | Until service agreement ends |
| Polar | Processing paid subscription and credit purchases (acts as merchant of record) | As required by applicable payment law |
Processors handle personal information only within the scope necessary for their task. fal.ai and Google do not use uploaded material to train their general-purpose models. The processor list may change; any changes will be announced through this Policy.
Article 5 (Third-Party Provision of Personal Information)
The Company does not, as a rule, provide your personal information to third parties. Exceptions:
① When you have given prior consent ② When required by applicable law or requested by a law-enforcement authority following legally prescribed procedures ③ In a genuine emergency involving imminent risk to life, body, or property, in accordance with government guidance
The Company does not sell your personal data or Pet profile content to any third party.
Article 6 (International Transfers of Personal Information)
The Company's AI processors and infrastructure providers may process data outside your country of residence, including in the United States. Current international transfers are as follows:
| Recipient | Country | Purpose | Legal Basis |
|---|---|---|---|
| fal.ai | USA | AI image/video generation | SCC or user consent |
| Google LLC | USA (and others) | AI text generation, infrastructure | SCC |
| Supabase | USA | Database and file storage | SCC |
| Vercel | USA | Service hosting | SCC |
| Polar | USA | Payment processing | SCC or user consent |
For transfers from the EEA, the Company relies on the EU Standard Contractual Clauses (SCCs). For transfers from the UK, the Company relies on the UK International Data Transfer Agreement (IDTA), together with supplementary measures where appropriate. If you refuse international transfers, some or all of the Service may not be available to you.
Article 7 (Retention and Use Period)
Personal information is deleted without delay once the purpose for which it was collected has been fulfilled. The following information is retained for the periods shown below, as required by law:
| Category | Legal Basis | Retention Period |
|---|---|---|
| Contract or withdrawal-of-offer records | E-Commerce Act Art. 6 | 5 years |
| Payment and goods-supply records | E-Commerce Act Art. 6 | 5 years |
| Consumer complaint or dispute records | E-Commerce Act Art. 6 | 3 years |
| Advertising and marketing records | E-Commerce Act Art. 6 | 6 months |
| Access (visit) records | Telecommunications Secrets Protection Act Art. 15-2 | 3 months |
| Fraudulent-use records | Company internal policy | 1 year |
Article 8 (Destruction Procedure and Method)
① Procedure: Personal information is moved to a separate storage location after its purpose is fulfilled, then destroyed after the legally required period in accordance with this Policy. It is not used for any other purpose.
② Method: - Electronic files: permanently deleted using technical means that make recovery or reconstruction impossible - Paper documents: shredded or incinerated
③ Immediate deletion: When a Primary Account requests deletion of a Pet profile, all profile data — including originally uploaded photos, videos, and writings — is permanently deleted immediately and cannot be recovered.
④ Automatic deletion: If a profile has no family activity (new posts, comments, replies, direct messages, or new Family Members joining) for 3 consecutive years, the profile and all uploaded material are automatically and permanently deleted without a deletion request. The Company will notify the Primary Account by email 30 days before deletion.
Article 9 (Technical and Administrative Safeguards)
The Company takes the following measures to protect personal information:
① Internal management plan: A Privacy Officer is designated and oversees all personal-information protection activities. ② Technical measures against hacking: Personal information is stored encrypted; data is transmitted securely via HTTPS. An intrusion-prevention system controls unauthorized external access. Access logs are retained for at least 3 months. ③ Access control: Access rights are granted only to the minimum personnel needed to do their jobs; rights are modified or revoked immediately upon personnel changes or departures. ④ Staff training: Personnel who handle personal information receive regular training.
The Company is not responsible for disclosure of personal information caused by a user's own negligence or by issues on the internet outside the Company's control.
Article 10 (Your Rights and How to Exercise Them)
You may exercise the following rights at any time:
① Access and correction: Review and edit your own information and Pet profile persona details from within the Service (Account Settings, Pet profile screen). ② Deletion: Request deletion via the Pet profile delete option (Account → My Pet), or by closing your account, or by contacting the Privacy Officer below. ③ Restriction of processing: You may request that we stop processing your personal information. Note that certain requests may be declined where required by law or where fulfillment would make the Service impossible to provide. ④ Objection to automated decisions: Where an automated decision (e.g., fraud-use determination) has a significant effect on your rights, you may request an explanation of its basis and process, and submit an objection for human review. ⑤ Additional rights (GDPR, CCPA, etc.): Depending on your location, you may have additional rights to access, portability, erasure, or restriction of processing — contact us to exercise these.
To exercise any of these rights, please contact the Privacy Officer in writing or by email. We will respond without undue delay.
Article 11 (Likeness Data)
Photos and videos you upload may constitute biometric data in some jurisdictions. The Company uses this material solely to generate content for the Pet profile you registered it under, and does not use it to identify people across unrelated contexts. For details on how biometric data is specifically handled, see the Biometric Information Privacy Policy.
Article 12 (Automatic Data Collection Tools)
The Company may use cookies to provide an optimized Service.
① What cookies are: Small text files sent by the server and stored on your device. ② Purpose: Optimizing the Service, security, and improving the Service based on usage patterns. ③ How to refuse: You can refuse cookie storage through your browser settings (e.g., Chrome: Menu → Settings → Privacy and Security → Third-party cookies). Note that refusing cookies may limit some features of the Service.
Article 13 (Children's Privacy)
The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If we become aware that personal information has been collected from a child under 13, we will delete it without delay.
Article 14 (Privacy Officer)
You may direct all privacy-related inquiries, complaints, and rights-exercise requests to the officer below. We will respond promptly and faithfully.
Privacy Officer: Jin-woo Heo Operator: mojimoji Studio Email: mojimoji.app@gmail.com
You may also contact the following authorities for privacy complaints: - Korea Internet & Security Agency (KISA): privacy.kisa.or.kr / 118 - Personal Information Dispute Mediation Committee: kopico.go.kr / 1833-6972
Article 15 (Changes to This Policy)
This Policy may be updated when required by changes in law, policy, or security technology. Changes will be announced through an in-Service notice or by email before they take effect. Changes that are unfavorable to users will be communicated at least 30 days in advance.
This Policy is effective as of August 16, 2026.
See also Terms & Conditions.