한국어 · English
Effective: October 16, 2026 (previous version effective September 29, 2026)
US residents: see also our Consumer Health Data Privacy Policy.
This policy is available in English and Korean. If you live outside Korea, the English version controls. If you live in Korea, the Korean version controls.
Mauve Labs ("we," "us") explains in this policy how DailyCumulus (formerly Maeumlog), our mood journal app (the "Service"), handles your personal information.
| Category | What | Why | How long |
|---|---|---|---|
| Account (when you sign in) | Sign-in account ID, email address, name or nickname, sign-in method (Google, Naver, Kakao, or Apple) | Identify you, manage your account, prevent duplicate accounts, help you find the account you signed up with | Until 30 days after you delete your account (Section 2) |
| Sign in with Apple | Apple sign-in token | Ask Apple to revoke the sign-in connection when you delete your account | Deleted once Apple processes the revocation, and in any case when your account is permanently deleted |
| Premium sync | Mood, feelings, activities, notes, photos, entry times, profile photo, app settings (reminder times, font, whether app lock is on) | Cloud backup and sync across devices | 1 year after Premium ends or 30 days after account deletion, whichever comes first (Section 2) |
| Purchases | Product, amount, purchase and expiry dates, auto-renew status, store order number, transaction ID, purchase token, store | Provide Premium, verify purchases, handle refunds and disputes, prevent fraud | 5 years, as required by Korean e-commerce law (Section 2) |
| Consent records | When you agreed and which version of our terms and policy | Proof of consent | Until 30 days after account deletion |
| Crash reports (all users; you can turn this off) | Error details (stack trace), device model and OS, app version, the screen where the error happened, app launch information, a random install ID, and your member ID (UUID) if signed in | Find and fix crashes | Up to 90 days |
| Anonymous usage stats (from November 10, 2026; on iPhone only if you turn them on, on Android you can turn them off) | A random install ID that isn't linked to your account; event names (first app open, entry saved — without its content, notification permission allowed or not, Premium screen viewed and where it was opened from, purchase started, failed, or cancelled); platform (iOS or Android); app version; device region setting; date | Understand which features are used and improve the app (for example, how many new users save their first entry) | Up to 25 months |
| Abuse prevention (including users who aren't signed in) | Email address entered in "Find your account" (not stored after the lookup), IP address | Limit repeated lookups (prevent email enumeration) | IP addresses are automatically deleted after 1 day |
| Server logs (automatic) | IP address, time of access, request path | Security and troubleshooting | Deleted automatically under our provider's log retention (up to 90 days) |
We don't sell or share your personal information with third parties, except with your consent, or where the law requires it or law enforcement requests it through legally required procedures. When we verify a purchase, we look up the transaction with Apple or Google; that's a check of the purchase you made in their store. If you ask Apple for a refund of an App Store purchase and Apple asks us for usage information, we'll share how much the purchase was used only if you've agreed to it.
Other parties data flows to or from: when you sign in, the provider you choose (Google, Naver, Kakao, or Apple) handles the sign-in and gives us your account ID, email, and name. Purchases are processed by Apple or Google. Their own privacy policies apply to what they handle.
Nevada residents: we don't sell personal information. You can send a sale opt-out request to mauvelabs@mauvelabsinc.com.
We use the service providers below. Because these providers are based outside Korea, or may access data from outside Korea, Korean law requires us to disclose the following. Our contracts require them to protect personal information, limit subcontracting, and keep data secure, and we oversee them.
| Supabase, Inc. | Functional Software, Inc. (Sentry) | |
|---|---|---|
| Contact | privacy@supabase.com | compliance@sentry.io |
| What they do | Store and host member accounts, Premium sync data, and purchase records (cloud database and file storage) | Collect and analyze crash reports |
| Data | Account, Apple token, Premium sync, purchases, consent records, abuse prevention, and server log data from Section 1 | Crash report data from Section 1 |
| Location | Data is stored in Korea (Seoul region). The provider is based in the US and may access data from outside Korea for operations and maintenance. | United States |
| When and how | Sent over the network as you use the Service (encrypted in transit) | Sent over the network when an error occurs (encrypted in transit) |
| How long | Per Sections 1 and 2, or until the contract ends | Up to 90 days, or until the contract ends |
Opting out: you can refuse these transfers. Turn off Settings > Send crash reports and nothing is sent to Sentry, with no effect on the app. Transfers to Supabase are necessary for member features like sign-in and Premium sync; to avoid them, use the app without signing in or delete your account. Cloud backup and sync won't be available in that case.
You must be 14 or older to create an account (Terms of Service, Section 4). DailyCumulus isn't directed to children under 13, and we don't knowingly collect personal information from them. If we learn that we've collected personal information from a child under 14, we'll delete it promptly. If you believe a child has given us information, contact us and we'll delete it. For users who aren't signed in, we process only the crash report, abuse prevention, and server log data described in Section 1.
The app doesn't use web cookies. Because we don't track you across third-party apps or websites, we don't change how we handle your data in response to browser "Do Not Track" or Global Privacy Control signals. Crash reports can be turned off in Settings. Anonymous usage stats are sent on iPhone only if you turn them on, and can be turned off on Android (Section 1).
Send privacy questions, complaints, or requests to the email above. We'll respond without delay.
The rights in Section 9 are available to everyone, wherever you live. The following adds what the law in your region requires us to tell you.
United States. Over the past 12 months, we've collected the categories of information listed in Section 1 (identifiers such as email and account ID; commercial information such as purchase records; the content of your entries if you use Premium; and device and crash data) from you, your device, your sign-in provider, and the Stores, for the purposes listed there. We don't sell or share personal information for cross-context behavioral advertising, and we don't use sensitive personal information to infer characteristics about you. You can ask to know, access, correct, or delete your personal information, and we won't discriminate against you for asking. California residents can also ask, once a year, whether we disclosed personal information to third parties for their direct marketing (we don't). If you live in Washington, Nevada, or Connecticut, see our Consumer Health Data Privacy Policy.
Australia. We handle personal information in line with the Australian Privacy Principles. As described in Section 4, your information is stored in Korea and may be accessed by our service providers from the United States. You can ask to access or correct your information by emailing us. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand. You have the right to access and correct your personal information under the Privacy Act 2020. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Singapore. You can access or correct your personal data, or withdraw consent to its collection, use, or disclosure, by emailing our data protection contact at mauvelabs@mauvelabsinc.com. Withdrawing consent may mean we can't provide some features, such as cloud backup. You can also contact the Personal Data Protection Commission (pdpc.gov.sg).
Korea. You can contact the Personal Information Dispute Mediation Committee (www.kopico.go.kr) or the Korea Internet & Security Agency's Privacy Report Center (privacy.kisa.or.kr).
We'll announce changes in the app at least 7 days before they take effect. For important changes, such as collecting new kinds of data or using data for new purposes, we'll give at least 30 days' notice and ask for your consent again where required. Data used only by a new feature may be covered by notice and consent when you first use that feature. Changes that aren't unfavorable to you, such as clarifications to reflect how we actually process data, may take effect immediately.