MindRoute ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Gyeote mobile application ("Service").
---
## 1. Information We Collect
### 1.1 Information You Provide
| Data Type | Purpose | Retention |
|-----------|---------|-----------|
| Email Address | Account identification, re-login, password reset (Email login only). Apple users may use Apple's *private relay* address. | Until account deletion |
| Nickname (user-supplied display name, **NOT real name**) | Display name within the Service. Hidden from other constellation members for the first 7 days after joining (anonymity policy). | Until account deletion |
| Device Token (FCM) | Push notification delivery | Until account deletion |
**Authentication providers:** Sign in with Apple, Google Sign-In, or Email / Password (Firebase Authentication). Anonymous authentication is no longer used.
**We do NOT collect:** phone number, real name, contacts, location, photos, browsing history, advertising identifiers, or any sensitive information (race, religion, political views, etc.).
### 1.2 Information Generated Through Use
| Data Type | Purpose | Retention |
|-----------|---------|-----------|
| Emotion Check-ins | Emotional tracking and reports. **Visible only to you** — not shared with any other user, including constellation members. | Until account deletion |
| Warmth Messages | Core service functionality | Until account deletion |
| Constellation Connections | Core service functionality | Until account deletion |
| Emotional State Signal | Sharing emotional state with constellation members (opt-in) | Auto-expires after 7 days or cleared on positive emotion |
| **User Reports** | When you report another user, we store the reporter ID, target user ID, an optional care-message reference, reason category (inappropriate / spam / pressure / other), and your optional 100-character note. Used solely for content moderation review by administrators. The reported user is NOT notified. | 90 days after administrative review is complete |
| **Blocked User IDs** | When you choose to stop receiving care from another user ("mute"), we store the target user's account ID on your own user document. Used to filter their messages from your view and prevent push delivery. | Until you unmute them in Settings, or until account deletion |
| App Usage Data | Service improvement | 1 year from collection |
### 1.3 Automatically Collected Information
- Device information (OS version, device model)
- App version
- Access logs (timestamps, IP addresses)
---
## 2. How We Use Your Information
We use the collected information for:
1. **Service Delivery**: User identification, emotion recording, warmth exchange, and other core features
2. **Notifications**: Daily sync reminders, warmth reception alerts
3. **Emotional State Sharing**: When enabled, sharing a gentle signal with your constellation members indicating you could use extra warmth. Opt-in; can be disabled in Settings.
4. **Content Moderation**: Reviewing reports of objectionable user-generated content and applying enforcement actions consistent with our Terms of Service.
5. **Service Improvement**: Analyzing usage patterns to enhance service quality
6. **Customer Support**: Responding to inquiries and resolving issues
7. **Legal Compliance**: Meeting regulatory requirements
---
## 3. Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties except:
1. When you have given explicit consent
2. When required by law or legal process
3. To protect our rights, privacy, safety, or property
---
## 4. Third-Party Service Providers
| Provider | Purpose | Data Handled |
|----------|---------|--------------|
| Google Firebase (Authentication, Firestore) | Account authentication and data storage | Auth UID, email, app data |
| Firebase Cloud Messaging | Push notification delivery | Device token (FCM) |
| Sign in with Apple (Apple Inc.) | User authentication (iOS only) | Apple ID identifier, email (or Apple *private relay* address) |
| Google Sign-In (Google LLC) | User authentication | Google account identifier, email |
We do not collect your phone number, real name, contacts, location, photos, or social media account other than what is strictly required by your chosen authentication provider.
---
## 5. Data Retention and Deletion
### 5.1 In-app deletion (fastest)
1. Open Gyeote app
2. Settings → Account → Delete Account
3. Confirm — all Firebase Auth account, Firestore profile, emotion check-ins, warmth messages, and FCM token permanently deleted
### 5.2 External web request
Visit https://sites.google.com/view/gyeote-deletion-page/%ED%99%88
### 5.3 Email request
Contact anotherday0201@gmail.com with subject "Account Deletion Request". Processed within 7 business days.
---
## 6. Your Rights
You have the right to: Access, Correction, Deletion, Restriction, Data Portability, Account Deletion through app settings.
Contact: anotherday0201@gmail.com
---
## 7. Data Security
Encryption in transit and at rest, secure authentication, access control management, limited staff access to personal data.
---
## 8. Children's Privacy
The Service is intended for users aged 14 and older. We do not knowingly collect personal information from children under 14.
---
## 9. Advertising and Tracking
**We do not:** display third-party advertisements, sell your personal information, track you across other apps, or use your data for targeted advertising.
---
## 10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence with appropriate safeguards.
---
## 11. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes at least 7 days before they take effect through in-app notifications.
---
## 12. Contact Us
- **Company**: MindRoute
- **Service**: Gyeote (곁에)
- **Email**: anotherday0201@gmail.com
---
**Effective Date: May 11, 2026**