Privacy Policy

• Service delivery: Authentication, analysis features, saving and displaying results
• Payment processing: Billing, receipts, refunds
• AI features: Transmitting input data to AI models to generate analysis recommendations and summaries
• Security & fraud prevention: Detecting abnormal logins, account protection
• Service improvement (optional): Analyzing anonymized usage patterns when you consent
• Marketing (optional): Sending feature announcements and updates when you consent
• Legal compliance: Record retention as required by applicable law

Skari uses external AI services (e.g., Google Gemini) for certain features such as analysis recommendations, interpretation summaries, and code generation. Please note:

• Data entered into AI features is transmitted to the respective AI service provider's servers. The privacy policy of the relevant AI service provider may also apply.
• The Company does not use your data to train its own AI models unless you have explicitly opted in.
• We recommend not entering sensitive personal data (national ID numbers, financial accounts, medical records, etc.) into AI features.
• AI-generated results are not used for sole automated decision-making; final judgment always rests with the user.

The Company does not share personal information with third parties without consent. However, we engage the following processors to provide the Service:

You have the following rights and may exercise them at any time:

• Right to access: View the personal information we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (except legally required records)
• Right to restrict processing: Request that we stop processing for certain purposes
• Right to object: Object to certain processing where permitted by applicable law
• Right to withdraw consent: Withdraw optional consents (marketing, analytics, etc.)
• Right to data portability: Request a data export (Settings > Privacy > Export Data)

To exercise these rights, use the Settings menu in the app or email support@skari.ai. Requests will be processed within 10 business days.

• All data is encrypted in transit (TLS 1.2+) and at rest.
• Secure authentication via Firebase Authentication, with two-factor authentication (TOTP) available
• Login activity monitoring to detect unauthorized access
• Payment data is processed by PCI-DSS certified Stripe and is never stored on Company servers
• Regular security reviews and principle of least privilege access

The Service uses cookies and local storage for the following purposes:

• Essential cookies: Login session maintenance, basic service operation (cannot be declined)
• Functional cookies: Language preference, theme settings
• Monitoring: Error and performance monitoring via Sentry (anonymized technical data, not configurable in Settings)
• Analytics cookies (optional): Usage pattern analysis — can be disabled in Settings

The Service is not intended for children under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that such information has been collected, we will delete it promptly. Please contact us if you believe we have collected information from a child under 14.

While the Company is based in Korea, we use cloud services located in the United States and elsewhere (Google Firebase, Google Cloud, Stripe, etc.) to provide the Service. Your data may be transferred outside Korea. We protect such transfers through Standard Contractual Clauses (SCCs) or equivalent safeguards with each processor. By using the Service, you consent to such international transfers.

Service users can create surveys and collect responses. In that case the user who created the survey is the data controller for those responses, and the Company acts as a processor that stores and processes the data on the user’s behalf. Survey respondents should contact the survey creator first to exercise their rights (access, correction, deletion, etc.).

• Anonymous surveys: When the creator enables the anonymous option, respondent identity (e.g. email) is not stored with responses.
• Sensitive questions: Answers to questions marked sensitive are masked in results and exports, visible only to authorized users.
• Consent: Surveys with sensitive questions, or where consent is required, ask respondents to consent before they begin.
• AI analysis: Open-ended survey answers may be sent to and processed by an AI provider (e.g. Google Gemini) when the user runs AI analysis.
• Responsibility: The survey creator is responsible for lawful collection, use, and consent for the information they gather, and must comply with applicable law (e.g. PIPA) when collecting sensitive or unique-identifier data. Survey creators may also need to provide respondents with a separate privacy notice or collection-and-use consent.

When this Policy is updated, material changes will be notified at least 7 days before taking effect via email or in-app notice. Continued use of the Service after changes constitutes acceptance of the updated Policy.

• Company: Skari Inc. (스카리(Skari))
• Privacy inquiries and general support: support@skari.ai

For privacy inquiries, access, correction, deletion, or restriction requests, contact us at the email above. We will respond within 10 business days. If you are dissatisfied with our response, you may contact the Personal Information Protection Commission of Korea (www.pipc.go.kr).