Privacy Policy

Version 2026-09-16 (beta)

This service is operated as a beta. We collect and use the following data to provide the service and to improve its quality. This policy explains what we collect, why, for how long, and where it goes. It applies to both the service (app.reflica.ai) and our website (reflica.ai).

1. What we collect and why

• Account info (Google email, name)

  Sign-in, account management — required to provide the service

• Chat messages and attached files

  Generating AI responses and performing editing tasks — required to provide the service; also used to improve prompts and service quality. Where we receive a report or become aware of circumstances suggesting a violation, also used to determine whether the Terms or applicable law have been violated and to take the measures called for

• Service usage records (page views, feature usage)

  Funnel and usage analysis to improve the service

• Browser device identifier, HMAC-protected IP address, and browser/device fingerprint (identifier and confidence score)

  Preventing repeated sign-ups from reported devices and monitoring account abuse

• Feedback and inquiries you write (satisfaction rating, free-text comment, inquiry content)

  Responding to your inquiry and improving the quality of what the service produces

• Website visit records (before sign-in, reflica.ai)

  Measuring advertising performance and improving the website — linked to your account when you sign in

• Ad click identifiers and conversion records (Google Ads cookies)

  Measuring which ads lead to sign-ups — you can refuse by blocking cookies in your browser settings

Your chat content and creations are never used to train AI models. They are used only to generate your responses and for internal quality improvements such as prompt tuning.

Usage records are collected via cookies and browser local storage. Screen-usage replays (session replay) are collected with all typed input masked. Your sign-in session is kept with essential cookies, so blocking all cookies prevents use of features that require signing in. Analytics cookies can be blocked in your browser settings; blocking them does not affect core features such as editing.

2. Retention and destruction

Data is retained until you request account deletion. Once we receive your request we stop your access immediately and destroy your data irrecoverably without undue delay. Consent records — the email address you signed up with, the time of consent, the versions of the Terms and this Policy you agreed to, and the language shown — are kept for 3 years after deletion to handle any dispute and are used only for that purpose before being destroyed. Data that must be kept under applicable law (e.g., access logs for 3 months under the Protection of Communications Secrets Act) is retained for the period the law requires and then destroyed.

3. Overseas transfer (processors)

To operate the service, data is transferred to and processed by the following overseas providers at the time of use, over encrypted connections. You may refuse the transfer by not using the service or by deleting your account; in that case the service cannot be provided.

Retention by processors follows each provider's processing terms; our retention rule in Section 2 applies to the service.

4. Third-party disclosure

Except where required by law and for the advertising measurement described below, we do not provide your personal data to third parties. The providers in Section 3 that support service delivery process data on our behalf under our instructions — outsourced processing, not third-party disclosure. For advertising measurement, ad click identifiers and the fact that a conversion occurred are transferred to Google (Google Ads), which may also use them to operate its own advertising services. You can refuse this by blocking cookies in your browser settings.

5. Your right to refuse

You may refuse consent. Because this beta operates on analyzing chat and usage data to improve the service, refusing consent means the beta cannot be provided. Before you consent we do not collect service data such as your account information or chat content. Usage records such as website visits and sign-ins are collected as described in Section 1 without being linked to your account; you can refuse them by blocking analytics cookies in your browser settings.

6. Your rights and how to exercise them

You may at any time request access to, correction of, or deletion of your data, suspension of its processing, or withdraw your consent by contacting us below. You can also request account deletion directly in Settings. We act on requests without undue delay, within the statutory deadline. Withdrawal stops further collection and use.

7. Security

Data is encrypted in transit, and access is limited to personnel who need it to operate the service.

8. Children

This service is not directed to children under 14, and we do not knowingly collect their personal data. If such collection is found, we delete it without delay.

9. Changes to this policy

When this policy changes, we announce it in the app and on this page. If we add processing that relies on your consent, we ask for your consent again before you continue using the service. The version at the top of this page identifies the wording you agreed to.

10. Contact and remedies

VoyagerX, Inc. — Majesta City Tower 1, 10F, 12 Seocho-daero 38-gil, Seocho-gu, Seoul, Republic of Korea. Privacy officer: Sedong Nam (CEO·CPO) · privacy@voyagerx.com · +82-2-2161-5189

For dispute mediation or reporting related to personal data in Korea, you may contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr), the KISA Privacy Incident Report Center (dial 118, privacy.kisa.or.kr), or the National Police Agency Cyber Investigation Bureau (dial 182, ecrm.police.go.kr).