Privacy Policy
Effective date: October 15, 2026
Recarve (the "Service") complies with applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea, and establishes and publishes this Privacy Policy to protect users' personal information.
This is a translation of the Korean original. If there is any discrepancy, the Korean version prevails.
1. Information We Collect
A. When you sign in
| Sign-in method | Information collected |
|---|---|
| Email address, name, profile image URL, provider-specific identifier | |
| Apple | Email address (including private relay), name, provider-specific identifier |
| Kakao | Kakao member number, nickname, email address (if consented) |
| Naver | Naver member identifier, nickname, email address (if consented) |
When you sign in, the Service generates and stores a unique authentication identifier (Firebase UID) based on the above information.
B. Information generated or collected automatically while using the Service
- Device identifier (a random UUID generated by the app itself)
- AI analysis usage (quota) counts
- Device environment information such as app version and OS type
- Usage statistics (collected by Google Analytics for Firebase): anonymous event data such as screen visits, card creation, AI analysis usage, and review notification responses. It does not include personally identifiable information (name, email, card content).
- Advertising identifier (free-plan users only; collected by AdMob): on iOS, the IDFA is collected only if you consent to tracking; if you decline, only non-personalized ads are shown. On Android, the advertising ID (AAID) is collected.
- Subscription status (collected by RevenueCat): purchased product identifier, subscription renewal/expiration dates, and platform (App Store/Google Play) receipt information. Recarve and RevenueCat do not store payment card or other financial information; it is handled by the App Store/Google Play.
C. Content you provide
- Study materials you create, such as card titles, body text, and review Q&A
- Images you capture or select and text you enter for AI analysis
2. Purposes of Collection and Use
- Account identification and keeping you signed in: social sign-in identifier, Firebase UID
- Providing AI analysis and managing usage: device identifier, Firebase UID, quota counts
- Providing study reminders (forgetting-curve-based review notifications): study card data (stored on your device)
- Generating AI summaries, review questions, and supplementary explanations: images and text you submit
- Preventing abuse: cross-checking device identifier against account identifier
- Improving service quality and analyzing usage patterns: usage statistics (GA4)
3. Retention and Deletion
- Study card data is, in principle, stored only on your device (local database) and is not transmitted to or stored on our servers.
- Account identifiers and quota counts are kept for as long as needed to operate the Service. Quota counts are automatically deleted after at most 48 hours.
- Images and text sent for AI analysis are used temporarily for processing only and are not stored separately after analysis is complete.
- When you request account deletion, the following are deleted immediately:
- Your authentication account (Firebase Authentication account)
- Account-level quota counts stored on the server
- All study card data on your device and scheduled notifications
4. Disclosure to Third Parties and Processing Delegation
The Service does not sell your personal information. We delegate processing to the following providers, to the extent necessary to provide the Service.
| Processor | Delegated task | Information transferred |
|---|---|---|
| Google LLC (Firebase Authentication) | Social sign-in authentication and account management | Social sign-in identifier, email, name |
| Google LLC (Firebase Analytics) | Collecting and analyzing anonymous usage statistics to improve service quality | Anonymous event data (no personally identifiable information) |
| Cloudflare, Inc. (Workers) | Relaying AI analysis requests and managing usage | Device identifier, account identifier, images/text to be analyzed |
| Google LLC (Gemini API) | Generating summaries, questions, and supplementary explanations | Images/text to be analyzed |
| Kakao Corp. | Kakao account sign-in authentication | Kakao access token, member number |
| Naver Corp. | Naver account sign-in authentication | Naver access token, member identifier |
| Google LLC (AdMob) | Displaying banner ads to free-plan users | Advertising identifier (IDFA/AAID, with consent), device and app usage information |
| RevenueCat, Inc. | Managing in-app subscription status | Subscription product identifier, subscription status, Firebase UID |
Information may be transferred overseas. The destination countries are where each provider's data centers are located (such as the United States).
5. Your Rights and How to Exercise Them
You may exercise the following rights at any time.
- Access and correction: you can view your account information in the in-app Settings screen.
- Export your study data: Settings → Data Management → Export saves your study cards as a JSON file.
- Delete your account: Settings → Account → Delete Account deletes your account and all data.
- Sign out: Settings → Account → Sign Out.
6. Security Measures
- API keys and secrets required for authentication are stored only on the server (Cloudflare Worker Secrets) and are not included in the app.
- Communication between the app and the server is encrypted over HTTPS.
- AI analysis requests are processed only if they pass shared-token verification.
7. Children's Privacy
The Service is not directed at children under 14. If we learn that an account belongs to a child under 14, we will delete that account information without delay.
8. Privacy Officer
- Email: raonlife@gmail.com
You may submit inquiries, complaints, and requests for remedies regarding personal information to the contact above.
9. Notice of Changes
If this Privacy Policy changes, we will notify you through an in-app notice or by updating this document.