Privacy policy

1. What we process, why, and for how long

• Account data (email, transformed password, nickname, nationality, app language, region, birth year): account management, channel guidance, blocking sign-up under 14 — deleted when you delete your account.
• Chat messages (author ID, nickname, nationality, text, time): providing chat, handling reports and disputes — 365 days from posting.
• Report records (the reported message and the messages around it): handling reports and disputes — 1 year after handling.
• Public Q&A (messages and nicknames whose authors agreed): public posting — until unpublishing is requested.
• Web push subscription: sending notifications — deleted when you turn notifications off or delete your account.
• IP address (limits on login, sign-up and translation attempts): abuse prevention — deleted within a day after the limit window ends.

2. Automated processing

Chat messages are checked automatically by a classification model on Cloudflare Workers AI to catch dangerous content (scams, hate, etc.). If flagged, the message is hidden and a person reviews it.

When you tap “Translate”, the text is translated by Cloudflare Workers AI and the result is kept for 90 days.

3. Processors and transfer abroad

Cloudflare, Inc. (data centers in the US and worldwide): hosting, database, chat storage, automatic checks and translation, human check (Turnstile). The data in section 1 is sent over the network when you use the Service, kept for the periods in section 1. If you don’t want this transfer, you can choose not to sign up or delete your account.

If you turn on web push, encrypted notifications pass through your browser vendor’s push server (Google, Apple, Mozilla, etc.).

4. Third parties

We don’t give personal data to third parties unless required by law.

5. What we don’t collect

ARC numbers, passport numbers or their photos, phone numbers, real names, or precise location (GPS).

6. Deletion

Data past its retention period is deleted by daily automatic jobs and the chat storage cleanup. Nothing is kept on paper.

7. Your rights

You can view, correct, delete or stop processing of your data under “Me” or by writing to hello@mvpit.dev. You can delete your account under “Me” at once.

8. Cookies and device storage

A login cookie (30 days), a language cookie (1 year), and, for statistics, the type of source of this visit (stored in your browser; only a category is sent). No advertising or tracking cookies.

9. Security measures

Encryption in transit (HTTPS), password hashing (PBKDF2), restricted admin access, automatic deletion after retention, logs of admin actions.

10. Children under 14

We don’t accept sign-ups from people under 14.

11. Privacy officer

MVPIT, representative · hello@mvpit.dev. The Korean version is the official one.