Sai- Your entries and diary are used only to provide the service (storage, sync and AI analysis)—never for ads or sale.
- AI analysis sends the necessary entries to Google Vertex AI only when you request it, and they are not used for model training.
- After you request account deletion, you can restore it for 30 days; all data is permanently deleted after 90 days.
01Overview
Sai (the “Service”) operates the Sai app for iOS and Android and the related website (moonshotapps.app/sai). We strive to comply with the Personal Information Protection Act of Korea, the EU General Data Protection Regulation (GDPR) and other privacy laws that apply where you live.
This policy explains what personal information we process, why, how long we keep it, which providers process it (including international transfers), and how you can exercise your rights. Contact us at moonshot5730@gmail.com.
02Information we collect
We collect only what is needed to provide each feature. Optional items can be left blank.
| Category | Items | When |
|---|---|---|
| Account | Google sign-in: name, email address, profile photo (if provided), unique identifier (UID) Apple sign-in: email address (or Apple private relay address), name (if provided), UID Phone sign-in: mobile phone number, UID Guest access: randomly generated UID | Sign-in or account linking |
| Profile | Nickname, profile character, MBTI (optional), personality tags (optional) | Profile setup |
| Relationships & entries | Name (nickname), relationship type, description, tags and character of each person you add; emotion entries (mood, core emotions, body sensations, tension, defense mechanisms, title, text, hashtags); one-line notes; personal diary | When you enter them |
| AI results | Relationship reports, persona analyses, healing action history, Mind Talk messages | When you use AI features |
| Articles | Bookmarks, article notes, views and reactions | When you use articles |
| AI credits | Balance, grant and usage history, number of check-ins and rewarded ads used | When credits are granted or used |
| Consent & settings | Version and time of your consent to the Terms and Privacy Policy, account status (e.g. scheduled deletion), language and display settings | During use |
| Collected automatically | Device model, OS and app version, language/region settings, usage events (screens visited, features used), crash logs, app instance ID, IP address, app integrity signals (Firebase App Check) | Automatically while using the app |
| Advertising | Advertising identifier (iOS IDFA only if you allow tracking; Android advertising ID), ad impressions, clicks and rewarded views, ad consent status | When ads are shown |
| Inquiries | Name (nickname), email address, inquiry category, subject and message, device/OS (optional) | When you contact us |
Entries and diary content may include sensitive details about your state of mind. We use them only to provide the journaling and analysis features you request. Information about people you add is entered by you, so please use a nickname instead of details that identify them, such as their full name, phone number or ID numbers.
Sai does not access your camera, photos, location, contacts or microphone. See App Permissions for details.
03How we use information
- Account management: sign-in, linking guest accounts, scheduling and restoring account deletion, preventing abuse
- Core service: storing and syncing your relationships and entries across devices, timelines and summaries
- AI features: generating the relationship reports, persona analyses and Mind Talk messages you request
- AI credits: granting, deducting and refunding credits; enforcing daily limits for check-ins and rewarded ads
- Advertising: showing ads, verifying rewards, personalized ads within your consent, measuring ad performance and preventing ad fraud
- Improvement & reliability: usage statistics, crash diagnostics, security and app integrity checks
- Support: answering inquiries, announcements and policy updates
We do not use personal information for other purposes; if a purpose changes we will let you know in advance and ask for consent where required. For users covered by the GDPR, our legal bases are performance of a contract (providing the Service), consent (personalized ads and advertising identifiers), and legitimate interests (security, crash diagnostics and service improvement).
04AI features and your entries
- AI features use Google's Vertex AI (Gemini) via Firebase AI Logic.
- Only when you request an AI feature, a portion of recent entries for the selected person and the information needed for the analysis (relationship details, profile such as nickname and MBTI, language) are sent. Entries you did not request analysis for are not sent.
- Under Google's Vertex AI terms, the data is used only to process your request and is not used to train AI models. Requests may be processed on Google's global infrastructure.
- Generated results (reports, personas, messages) are saved to your account so you can view them again, and you can delete them at any time. Mind Talk keeps only the latest 7 messages and deletes them automatically after 5 days.
- AI results are automatically generated reference information and may be inaccurate. We do not make automated decisions based on AI results that produce legal or similarly significant effects for you.
05Retention and deletion
| Information | Retention |
|---|---|
| Account and all entries | Until you delete your account. After a deletion request, data is kept in a restorable state for 30 days and permanently deleted 90 days after the request (processed daily). |
| Guest data | Permanently deleted as soon as you sign out of guest mode |
| Deleted entries | Shown in “Trash” and permanently deleted together with the relationship or account |
| Mind Talk messages | Latest 7 only; automatically deleted 5 days after creation |
| Usage statistics (Google Analytics for Firebase) | Automatically deleted after up to 14 months |
| Crash logs (Firebase Crashlytics) | Automatically deleted after up to 90 days |
| Inquiries | 1 year after resolution |
| Legal retention | Periods required by law, such as access logs for 3 months under Korea's Protection of Communications Secrets Act |
When a retention period ends or the purpose is fulfilled, we delete the information without delay using methods that prevent recovery. We do not keep paper records.
06Sharing with third parties
We do not sell your personal information or provide it to third parties, except with your prior consent or when required by law (for example, a lawful request from law enforcement).
07Service providers and international transfers
We use the following providers to operate the Service, and personal information may be transferred outside your country in the process. Transfers occur over the network whenever you use the Service, and information is kept for the periods in this policy or until the contract with the provider ends.
| Provider | Purpose | Location | Data |
|---|---|---|---|
| Google LLC (Firebase) | Authentication, database (Cloud Firestore, Seoul region), server functions, app integrity (App Check) | South Korea, the US and other countries with Google data centers | Account, profile, entries, credits |
| Google LLC (Vertex AI) | AI analysis and message generation | Google global infrastructure, incl. the US | Entries and profile details sent with an AI request |
| Google LLC (Analytics, Crashlytics) | Usage statistics, crash diagnostics | US and others | Automatically collected information |
| Google LLC (AdMob, UMP) | Ads, ad measurement, ad consent management | US and others | Advertising ID, ad interactions, device info, IP address |
| Apple Inc. | Sign in with Apple | US | Apple account identifiers |
| FormSubmit (formsubmit.co) | Delivering website contact form messages | US and others | Inquiry details |
For transfers of personal data of users in the EEA or UK, we rely on appropriate safeguards such as the providers' Standard Contractual Clauses. If you do not want your data transferred, you can stop processing by deleting your account, but you will no longer be able to use the Service.
08Ads and personalized advertising
To keep Sai free, we show Google AdMob ads (banner, rewarded and rewarded interstitial).
- iOS: the IDFA is used only if you choose “Allow” in the App Tracking Transparency prompt. If you decline, you still get non-personalized ads and every feature works. Change it in Settings › Privacy & Security › Tracking.
- Android: reset or delete your advertising ID in Settings › Privacy › Ads (menu names vary by device).
- EEA, UK and Switzerland: we ask for consent to personalized ads through Google UMP. You can change your choice any time in Me › Ad privacy settings in the app.
- Usage statistics (Analytics) are collected with ad storage and ad personalization signals disabled, so they are not used for advertising.
- The content of your entries, diary and AI results is never used for ad targeting.
09Your rights
You can exercise the following rights at any time.
- Access and correction: view and edit your profile, relationships and entries directly in the app.
- Deletion: delete entries, relationships, reports or notes individually, or request deletion of your whole account via Me › My page › Delete account. If you cannot use the app, follow the email instructions in the account deletion guide.
- Restriction and withdrawal of consent: withdraw consent to personalized ads in your device settings or ad privacy settings; deleting your account withdraws all consent to processing.
- Data portability: email moonshot5730@gmail.com if you need a copy of your data.
- Objection and complaints: users in the EEA or UK may lodge a complaint with their local data protection authority.
When contacting us by email, please include the account details you signed up with (email or phone number) so we can verify your identity. We respond without undue delay—within 10 days, or within one month where the GDPR applies. Requests may also be made through a legal representative.
10Children
Sai is not directed to children under 14 and we do not knowingly collect their personal information. The same applies to users below the age at which parental consent is required under local law (up to 16 in the EEA). If we learn that such a child has provided information, we will delete it promptly.
11Security
- All traffic is encrypted with HTTPS (TLS), and stored data is encrypted at rest on Google Cloud.
- Database security rules restrict access so that only you can read and write your own data.
- Important operations such as granting or deducting credits and deleting accounts run in server functions after verifying authentication.
- Firebase App Check blocks requests from unauthorized apps, and operational access is kept to a minimum.
No method of transmission over the internet is completely secure, so please also protect your account, for example by locking your device.
12Website and cookies
The app does not use cookies. This website stores only your language choice and whether you closed the app download banner in your browser's local storage; it uses no tracking cookies or web analytics. Loading fonts (Google Fonts, jsDelivr) may share technical information such as your IP address with those providers.
13Contact and complaints
- Privacy contact: Sai operations team
- Email: moonshot5730@gmail.com
If you believe your privacy rights have been infringed, you may also contact your local data protection authority. Users in Korea can reach the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr).
14Changes to this policy
We will announce changes in the app or on this website at least 7 days before they take effect (30 days for material changes affecting your rights), and ask for your consent again in the app where required.
This policy is effective as of October 5, 2026.