2026-10-02.1
Operator: YUL HEO · [email protected]. This notice describes processing for accounts, entries and public participation in Scoor.
Account IDs, email, authentication data and names supplied by the login provider, nicknames, and the terms version, acceptance action and time are used for login, account services and contract records. This processing relies on necessity for entering into or performing the service contract under Article 15(1)(4) of Korea’s Personal Information Protection Act, rather than separate collection-and-use consent for this scope. Processing is limited to provider-supplied information needed for requested features. We do not receive Apple or Google passwords. Reading this notice is not recorded as optional consent.
Scores and dates, optional notes, bio/avatar, manually chosen country, public posts, comments, World participation, likes, proposals, reports, blocks and support messages are processed only as needed to provide and manage the feature you request. Ordinary data processing relies on performance of that requested service contract. Optional notes, bios and photos are not required for a basic account. Processing requiring separate consent, including sensitive data, is explained and requested when the relevant feature is used, with its data, purpose, retention and refusal options. Signup does not provide that optional consent.
Entries and settings are stored on the device; authentication tokens use Keychain. Signed-in records synchronize with Supabase. Existing device entries are migrated and sent only after you choose an entry action, authenticate and complete the terms receipt. Only content you choose to publish is displayed to others. Private journaling is distinct from Home sharing and public submissions.
Authentication, databases and APIs use Supabase Pte. Ltd. (privacy contact: [email protected]). The primary database is in Seoul, South Korea. Support, security and subprocessors are not necessarily limited to Korea. Inquiry email addresses and messages are received and answered using Google Gmail. Apple/Google sign-in is also subject to their policies. We process data needed for account services and public features you choose; user entries are not provided for advertising sales or external AI training. The operator dashboard is hosted by Vercel Inc. It processes public content, related account identifiers, report/block reasons and moderation actions for operator review. Dashboard server execution is configured in Seoul; network delivery, security, support and subprocessors may process data outside Korea, including in the United States. Private journal text is not retrieved by this dashboard.
Accounts and content are retained while their features are provided. Deleting an entry also unshares its linked Home post. Once a deletion reaches the server, deleted text, scores and mood content are cleared. Minimal synchronization markers (account ID, entry date and deletion timestamp) remain while the account exists to prevent old devices from restoring deleted entries. Deleted post/comment relationship markers and withdrawn or rejected proposals are cleared within 30 days. Account deletion removes associated entries, posts and approved topics. Failed Apple token revocations are retried through a restricted outbox. Copies saved by others or device backups may not disappear at the same time.
An everyday score is not a medical diagnosis or automatically health information. Designated topics revealing sensitive information, such as political opinions, require separate optional consent. Scores, comments and account IDs are used to publish opinions and aggregate results until you delete the participation, withdraw consent or close your account. Anonymous display remains linked to your account on the server. Withdrawal in Settings also deletes participation in those topics. Journaling and ordinary topics remain available without this consent. Do not enter sensitive information or other people’s personal data in other fields.
Essential account processing relies on contract performance rather than separate consent. If you do not want that processing, do not register, or stop account services, sign out or delete your account. Separately obtained optional consent, including sensitive-data consent, can be withdrawn in Settings; refusing or withdrawing it does not prevent basic accounts, journaling or ordinary topics. Contact the operator for access, correction, erasure or restriction. Stopping services alone does not delete previously published content. Earlier consent and withdrawal records retain their original version and are not converted into new optional consent.
The current app does not bundle advertising SDK or cross-app tracking consent into signup. Notifications request separate iOS permission when you enable that feature, not during signup. Optional permissions such as photo access are requested when used. Privacy changes are communicated with their effective date; new processing requiring separate consent starts only after consent. Contact [email protected] with privacy questions.