Privacy Policy

The Company collects personal information through the following methods:

• Direct input: Information entered by users on registration, settings, or payment screens
• Email / inquiries: Information provided through customer support or email
• Automatic collection: IP address, cookies, and usage logs generated automatically during service use
• Third-party login: Information provided by services such as Google when using social login (within the scope of user consent)

• Service delivery: Authentication, analysis features, saving and displaying results
• Payment processing: Billing, receipts, refunds
• AI features: Transmitting input data to AI models to generate analysis recommendations and summaries
• Security & fraud prevention: Detecting abnormal logins, account protection
• Service improvement (optional): Analyzing anonymized or pseudonymized usage patterns when you consent
• Marketing (optional): Sending feature announcements and updates when you consent
• Legal compliance: Record retention as required by applicable law

Skari uses external AI services (e.g., Google Gemini) for certain features such as analysis recommendations, interpretation summaries, and code generation. Please note:

• Data entered into AI features is transmitted to the respective AI service provider's servers. The privacy policy of the relevant AI service provider may also apply.
• The Company does not use your data to train its own AI models unless you have explicitly opted in.
• We recommend not entering sensitive personal data (national ID numbers, financial accounts, medical records, etc.) into AI features.
• AI-generated results are not used for sole automated decision-making; final judgment always rests with the user.

Destruction Methods

• Electronic files: Permanently deleted using technical methods from which recovery is impossible (secure wipe, overwriting, etc.)
• Paper records: Shredded or incinerated

The Company does not share personal information with third parties without consent. However, we engage the following processors to provide the Service:

You have the following rights and may exercise them at any time:

• Right to access: View the personal information we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (except legally required records)
• Right to restrict processing: Request that we stop processing for certain purposes
• Right to object: Object to certain processing where permitted by applicable law
• Right to withdraw consent: Withdraw optional consents (marketing, analytics, etc.)
• Right to data portability: Request a data export (Settings > Privacy > Export Data)

To exercise these rights, use the Settings menu in the app or email support@skari.ai. Requests will be processed within 10 business days. During the period until a correction or deletion request is completed, the relevant information will not be used or disclosed to third parties.

Administrative Safeguards

• We maintain an internal personal information protection management plan.
• Access to personal information is limited to the minimum number of personnel necessary to perform their duties.
• Regular security training is provided to all employees who handle personal information.
• In the event of a personal information breach, we take prompt action to prevent further damage and recurrence.

Technical Safeguards

• All data is encrypted in transit (TLS 1.2+) and at rest.
• Secure authentication via Firebase Authentication, with two-factor authentication (TOTP) available
• Login activity monitoring to detect unauthorized access
• Payment data is processed by PCI-DSS certified Stripe and is never stored on Company servers
• Regular security reviews, vulnerability assessments, and principle of least privilege access
• Access logs for personal information processing systems are securely maintained with integrity controls

The Service uses cookies and local storage for the following purposes:

• Essential cookies: Login session maintenance, basic service operation (cannot be declined)
• Functional cookies: Language preference, theme settings
• Monitoring: Error and performance monitoring via Sentry (anonymized technical data)
• Analytics cookies (optional): Usage pattern analysis — can be disabled in Settings

You may refuse optional cookies through your browser settings. However, refusing essential cookies may limit your ability to log in and use certain features of the Service.

The Service is not intended for children under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that such information has been collected, we will delete it promptly. Please contact us if you believe we have collected information from a child under 14.

While the Company is based in Korea, we use cloud services located in the United States and elsewhere (Google Firebase, Google Cloud, Stripe, etc.) to provide the Service. Your data may be transferred outside Korea. We protect such transfers through Standard Contractual Clauses (SCCs) or equivalent safeguards with each processor. By using the Service, you consent to such international transfers.

Service users can create surveys and collect responses. In that case the user who created the survey is the data controller for those responses, and the Company acts as a processor that stores and processes the data on the user's behalf. Survey respondents should contact the survey creator first to exercise their rights (access, correction, deletion, etc.).

• Anonymous surveys: When the creator enables the anonymous option, respondent identity (e.g. email) is not stored with responses.
• Sensitive questions: Answers to questions marked sensitive are masked in results and exports, visible only to authorized users.
• Consent: Surveys with sensitive questions, or where consent is required, ask respondents to consent before they begin.
• AI analysis: Open-ended survey answers may be sent to and processed by an AI provider (e.g. Google Gemini) when the user runs AI analysis.
• Responsibility: The survey creator is responsible for lawful collection, use, and consent for the information they gather.

When this Policy is updated, material changes will be notified at least 7 days before taking effect via email or in-app notice. For changes that are unfavourable to users, individual notice by email will be provided at least 30 days in advance. Continued use of the Service after changes constitutes acceptance of the updated Policy.

For privacy inquiries, access, correction, deletion, or restriction requests, contact us at the email above. We will respond within 10 business days.

If you have a complaint about the Company's handling of your personal information, please contact us first. If you are not satisfied with our response or require additional assistance, you may contact the following external bodies: