Layary policy
Privacy Policy
Effective date: September 29, 2026
Personal information processor
Controller: jinian company
Representative and privacy officer: Heesoo Jin
Business registration number: 598-33-01635
Address: Unit 804, Building 201, 153 Daran-ro, Dongan-gu, Anyang-si, Gyeonggi-do, Republic of Korea
Privacy inquiries: [email protected] / 010-4972-9231
Processing purpose/items
On-device records: the app stores titles, drink details, ratings, aromas and flavors, photos, and collage layout on your device. Product search: search terms and drink type go to the search server whether or not you sign in or enable backup. Account: Apple or Google sign-in processes account IDs, email addresses, and authentication tokens; a Google token may also convey a name or profile photo URL to the authentication server. Email sign-in sends the entered email and password to that server. If enabled, backup syncs records and selected photos. Plus: purchase or restore processes product ID, purchase token, status, expiry, and account linkage. Separately granted Plus access uses account ID and grant and expiry times. Sign-in and Plus processing occur even when backup is off.
Legal basis for processing
We process on-device records, product search, account authentication, and subscription checks to provide requested features. Account creation, server backup, and photo selection are your choices. Turning off backup does not stop server communication needed for sign-in, search, or subscription checks. Processing required by law and optional features you consent to rely on their applicable grounds.
Photo, camera, OCR
Photos are used when you select or capture them for a record. On iOS, change requested photo and camera permissions in device settings. On Android, the app uses the system photo picker and an external camera app without directly requesting photo or camera permissions. Label text recognition and subject segmentation process images on the device. Selected photos are not sent for record backup unless you enable it. Google ML Kit diagnostics on Android are separate.
Retention and deletion
On-device records remain until you delete them or clear app data. Recently deleted records can be restored for 30 days; on Android, expired records are cleared when the app next starts. Turning off backup stops new sync but does not automatically erase existing server data. Account deletion removes the server account, backed-up records and photos, and linked purchase and Plus access data. Delete device records and cancel store subscriptions separately. We keep account deletion request emails for one year after receipt, then delete them. Server backup copies, access logs, and legally retained records follow their operational or statutory retention periods; contact us for the applicable scope and period.
Third-party disclosure
Layary does not sell personal information. Authentication and hosting providers, and Apple and Google sign-in, billing, and diagnostic services may process data for their respective roles in providing the features. Data may also be disclosed where required by law or with separate consent.
Processing providers and domestic storage
We use the Supabase platform for authentication, databases, file storage and sync, and account deletion. The main database region of the Layary server projects currently checked is AWS Seoul (ap-northeast-2). This does not mean all logs, backups, or support access stay in Korea. Apple App Store processes iOS payments and Google Play processes Android payments. When Android purchase verification is enabled, the server sends the purchase token to Google for verification and stores a token hash and account linkage. Layary does not receive or store card numbers.
Overseas processing
Sign-in, search, and purchase verification involve servers and platform providers whether or not backup is used. Access or processing outside Korea may occur during Supabase and its subprocessors’ support, security, and incident response, and through Apple or Google sign-in, billing, and diagnostics. This can involve account IDs, email and authentication information, search requests, purchase details, and records or photos you chose to back up. Contact our privacy address for the relevant recipients, countries, data, purposes, retention periods, or ways to exercise your rights. Search and Android ML Kit diagnostics may still be processed without an account or backup.
User rights
You may turn off backup, request account deletion, or ask to access, correct, delete, restrict, or withdraw consent for your personal information. You can request deletion without the app at https://layary.day/en/account-deletion/. We email the outcome within 30 days after identity verification. Change requested iOS permissions in iOS Settings. Android uses the system photo picker and an external camera app without directly requesting photo or camera permissions. Legal representatives may exercise rights under applicable law.
Automatic collection and safety
The app does not create identifiers or profiles for personalized advertising. Server providers may generate access logs for security and incident response. On Android, Google ML Kit may collect device and app information, device or installation identifiers, performance, errors, and feature usage for diagnostics and usage analysis of text recognition and subject segmentation. Images and recognition results are processed on the device. We apply transport protection and access controls.
child
The service is not intended for backing up accounts of children under the age of 14, and if such information becomes known, it will be deleted through necessary procedures, such as confirmation of legal representative.
Change Notice
If there are significant changes to collection items, processing purposes, consignors, or user rights, we will notify you through an in-app notice or update prior to application.
Effective date
September 29, 2026
Website analytics
Effective September 29, 2026.
We run Google Analytics 4 on this website only after you agree. Google may process page URLs, visit times, browser and device information, and interactions such as page views, scrolling, and outbound link clicks. Analytics cookies may be used. This information is sent to Google and may be processed outside Korea. You can use the site without agreeing and change your choice at any time through “Analytics settings” in the footer. Website analytics is operated separately from your app records and account data and is not used for personalized advertising. Contact our privacy address with questions.