Last updated 2026-10-21 · MintC Inc. · 한국어
MintC Inc. (the “Company”) complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws in providing the Sorimo app (the “App”). This policy explains what information the App processes and where.
The voice of what you say, the transcribed text, and your events, to-dos, and notes are by default processed and stored only on your device, in an encrypted database. Voice is not sent to any server.
Journal entries (diary, etc.) and record search are processed only on your device. The search index exists only on your device and is not backed up or synced.
| Information | When | Purpose | Retention period |
|---|---|---|---|
| Text of what you said and date-interpretation information | When you consent to server processing and use server organizing (subscription or free trial) | Organizing into events, to-dos, and notes | Deleted immediately after organizing. To handle retries of the same request, the result is kept encrypted for up to 24 hours |
| Record chat: your question, some of the events, to-dos, and notes selected by the device (and some journal entries if you separately turned on “Include journal entries”), and the last few turns of the conversation | When you consent to record chat and ask a question | Answering your question; suggesting events and to-dos | Not stored on the Company’s servers and discarded immediately after processing. Only a question identifier (with no content), used to prevent duplicate credit charges for the same question, is kept for 1 hour |
| Sign-in identifiers (Apple or Google account identifier, email) | When you choose to sign in | Account for syncing and backup across devices | Deleted immediately when you delete your account |
| Sync data (events, to-dos, notes, original records, settings, including items received from Google Calendar and Tasks if you connected them) | When you use sync after signing in | Syncing and backup across devices | Deleted immediately when you delete your account. Stored only in a form encrypted on your device; the Company cannot see the contents (end-to-end encryption). |
| Subscription information (anonymous purchaser ID, subscription status, installation links) | When you subscribe | Checking access rights | For the period required by applicable laws after the subscription ends. Installation links are deleted if unused for more than 1 year |
| Server organizing and record chat usage (monthly usage count, token count, and credit deduction records per installation or purchaser ID; no content) | When you use server organizing or record chat | Applying monthly limits; managing costs | 13 months |
| AI improvement samples (text of what you said with personal information masked, organizing results, results you corrected) | Only if you separately consent to “Use my data to improve AI” | Improving organizing quality | 2 years. If you withdraw consent, the data already sent is also deleted |
| Push token, app installation identifier | When you use notifications | Sending notifications | Deleted immediately once confirmed invalid by a failed notification delivery, and at the latest if the App is not used for 1 year |
| Usage statistics (number of times screens and features are used, etc.; no content of what you said), error reports | When “Share usage statistics” is on | Improving the service; fixing errors | Usage statistics 14 months; error reports 90 days |
| Device integrity checks (App Attest, Play Integrity): temporary values for verification, installation identifier, and device attestation public key | When you use server features | Preventing fraudulent use | Temporary values 5 minutes to 1 day. Public keys and installation identifiers are deleted if unused for more than 1 year |
| Hashed device identifiers to prevent repeat grants: on Android, the device identifier (ANDROID_ID) hashed on the device and hashed again with a server secret key; on iOS, a hash of the device attestation key and the result of an Apple DeviceCheck check; if you are signed in, your account identifier hashed with a server secret key | During device integrity checks and when you receive or use free trial credits | Granting free trial credits only once per device and account (they are not granted again if you delete and reinstall the App) | Because the free trial is granted only once per device for its lifetime, kept while the service is provided and destroyed when the service ends. The account hash is deleted immediately when you delete your account. The original Android device identifier is not received by the Company’s servers, and the account identifier is used only to verify sign-in and is not stored in its original form for this purpose (only a hash is stored). The app installation identifier is stored together with this record. On iOS, Apple keeps a per-device marker (2 bits) and the Company does not receive a device identifier |
We do not collect location or contact information. When you connect Google Calendar and Tasks, your Google account permissions and tokens stay only on your device, and data is exchanged only between your device and Google. Items received this way are kept as sync data for your other devices only if you turned on sign-in and sync, end-to-end encrypted, and the Company cannot see the contents. Events visible through reading the device calendar are not sent off the device.
The on-device AI model and speech recognition model are downloaded from Hugging Face (United States). The download server can see your device’s IP address; the Company receives no personal information in this process.
Google Calendar and Tasks sync is an optional feature. The App requests Google account permissions only when you turn it on in Settings. The scopes requested and their uses are as follows.
| Permission (scope) | Data accessed | Use |
|---|---|---|
https://www.googleapis.com/auth/calendar.app.created | The secondary “소리모” (Sorimo) calendar created by the App and the events in it. The App cannot see your other calendars. | Uploading events created in Sorimo to Google Calendar and reflecting changes made in that calendar in the App (two-way sync) |
https://www.googleapis.com/auth/tasks | Names of your task lists (to find the “소리모” (Sorimo) list) and the tasks in the “소리모” list | Two-way sync of Sorimo to-dos with the “소리모” list in Google Tasks |
Sorimo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
| Recipient | Country | Items | Purpose | Timing and method |
|---|---|---|---|---|
| Anthropic, PBC | United States | Text of what you said and date-interpretation information; for record chat, your question and selected parts of your records | AI organizing; record chat answers | Sent over encrypted connections when you request server organizing or record chat |
| Cloudflare, Inc. | United States and data centers worldwide | Server organizing and record chat requests, sync data (encrypted), account and subscription information, AI improvement samples | Server operation and storage | Encrypted connections when you use the App |
| Google LLC (Firebase) | United States | Sign-in information, push tokens, usage statistics, error reports | Authentication, notifications, analytics | Encrypted connections when you use the App |
| RevenueCat, Inc. | United States | Anonymous purchaser ID, subscription status | Subscription management | When you subscribe or restore purchases |
| Apple Inc. | United States | DeviceCheck device token (a one-time value generated by Apple on the iOS device) | Preventing repeat grants of free trial credits | Sent over encrypted connections during iOS device integrity checks |
How long recipients keep the information sent to them follows each company’s policy. If you withdraw consent, information is no longer sent from then on, but this does not mean that information already sent is immediately retrieved from the recipient.
If you do not want your information transferred abroad, set Settings › AI › Processing location to “On device only”, turn off “Share usage statistics”, and do not use sign-in or subscriptions. Even then, you can still use on-device organizing.
Journal entries may contain sensitive information such as health, mental state, or beliefs, or information about other people. Journal entries are stored on your device and are used in record chat only if you separately turn on “Include journal entries” (off by default). You can choose “Exclude from AI chat” for each entry, and the App shows the records it referred to for each answer.
Information whose retention period has ended or whose purpose has been achieved is erased without delay in a way that cannot be recovered. Scheduled cleanup on the server runs automatically every hour.
We apply device database encryption (SQLCipher), end-to-end encryption of sync data, encryption in transit, a logging policy that leaves no content or tokens in access records, and minimized server access rights.
The App is not directed at children, and we do not knowingly collect information from children under the age of 14.
Privacy officer: MintC Inc. · support@mintcinc.com
If we change this policy, we will notify you in the App or on this page. If the recipients of information sent to the server change, we will ask for your consent again in the App.