Layary policy
Privacy Policy
Effective date: September 23, 2026
Personal information processor
Controller: jinian company
Representative and privacy officer: Heesoo Jin
Business registration number: 598-33-01635
Address: Unit 804, Building 201, 153 Daran-ro, Dongan-gu, Anyang-si, Gyeonggi-do, Republic of Korea
Privacy inquiries: [email protected] / 010-4972-9231
Processing purpose/items
Local records: Record title, beverage information, evaluation/flavor/taste, photos, stickers/text placement information are stored on the device for collage creation, storage, and restoration.
Product Search: Sends your search term and selected beverage type to the search server.
Optional Account/Backup: When you log in, we process your provider account identifier, email, records to sync, and selected photos.
Subscription: Check subscription product ID, purchase/expiration/cancellation status. Card numbers and payment methods are processed by Apple and are not stored by Layary.
Legal basis for processing
In-device record processing is performed to provide services requested by users. Account login, backup, and non-essential permissions are processed based on the user's separate selection and consent, and the local recording function can be used even if consent is withdrawn.
Photo, camera, OCR
Photo and camera permissions are only used to add images taken or selected by the user to the record. Label character recognition is performed on-device and photos are not sent to the server for this purpose unless you manually turn on backup.
Retention and deletion
Local records are retained until you delete them or clear app data. Deleted records can be restored from Recently Deleted for 30 days, after which they are deleted from your device and sync target. If you request account deletion, we will delete your account, records, and files from our servers. Information that has separate preservation obligations under the law will be stored separately for the relevant period and then destroyed.
Third-party disclosure
Layary does not sell users' personal information and does not provide it to third parties except in cases where it is required by law or with the user's separate consent.
Processing providers and domestic storage
When the account/backup function is activated, authentication, database, file storage, synchronization, and account deletion processing are entrusted to Supabase, Inc. Layary's Supabase project (tznklzgvhfktcnioiugy) is located in the AWS Seoul Region (ap-northeast-2), and the main data of accounts, records, and photos are stored and processed in Korea. Apple Inc. processes App Store purchases and subscriptions, and Layary does not receive or store card numbers.
Overseas processing
In the process of technical support, security, and failure response of the Supabase platform, overseas corporations or personnel in charge can access data to the extent necessary. The recipient of the transfer is Supabase, Inc. (USA) and Supabase Pte. Ltd. (Singapore), and its purpose is hosting operation, security, and technical support. The target is account identifier, email, and records and photos that the user has selected for backup, and after activating the backup, it is transmitted when necessary through an encrypted communication network. The retention period is until account deletion or termination of the consignment contract, with the exception of legal retention. Users can opt out of international processing by not turning on backup or by turning off backup in Settings and deleting their account. In this case, local history features will still be available, but account backup and restore will not be provided. Supabase notifies that data in a designated region will be stored and primarily processed in that region, and that contractual safeguards will be applied with approved subcustodians.
User rights
Users can turn off backup or request account deletion in settings, and can request to view, correct, delete, suspend processing, or withdraw consent for their personal information. Permissions can be changed at any time in iOS settings. Verification of the requester's identity may be required, and legal representatives may exercise their rights in accordance with the law.
Automatic collection and safety
The app does not create any identifiers or tracking profiles for personalized advertising. The server provider can create access logs for security and failure response, and applies reasonable safety measures such as access control, transmission section protection, minimum authority, and deletion procedures.
child
The service is not intended for backing up accounts of children under the age of 14, and if such information becomes known, it will be deleted through necessary procedures, such as confirmation of legal representative.
Change Notice
If there are significant changes to collection items, processing purposes, consignors, or user rights, we will notify you through an in-app notice or update prior to application.
Effective date
September 23, 2026