App Privacy Policy

What’s In My Mac App Privacy Policy

Last updated: 2026-10-11 · OpenAI sharing consent version: 1

The operator is MEOMUL and the privacy/service contact is wimm.support@gmail.com. The service is intended for adults aged 19 or older in South Korea. The service server and same-VM backups are in Oracle Cloud’s Chuncheon, South Korea region (ap-chuncheon-1). The OpenAI project uses Global (no specific region selected), with data sharing disabled. OpenAI’s default processing country is the United States. The global API does not guarantee processing and storage exclusively within the United States.

Information and purposes

Built-in characters work without sign-in or photo uploads. Apple account identifiers, provided names and email addresses, and device sessions support authentication and restoration. Custom features process selected photos, concept and action text, analysis results, generated images, character settings, purchase transactions, usage and consent records. Access and error records support operations and troubleshooting. Apple processes payments; the app and service do not collect your card number directly.

Sharing with OpenAI

After you consent and start analysis or generation, the service sends your photo, concept and action text, generated images and pseudonymous safety identifiers to OpenAI. These support photo analysis, image generation and verification, and searches to clarify action meanings when needed. Apple login tokens, account names and email addresses are not included in AI requests. Photos or text may themselves contain personal information; upload only what is needed.

OpenAI retention

API data is not used to train models unless data sharing is explicitly enabled. Data sharing Disabled and store:false for Responses are maintained; store:false does not mean zero retention. Abuse monitoring logs may be retained for up to 30 days by default, with legal and safety exceptions. Images flagged as potential child sexual abuse material (CSAM) may be retained for additional manual review, including under zero-retention options. Current documentation: https://developers.openai.com/api/docs/guides/your-data

Overseas transfer notice

Destination country: United States (default processing country). This does not mean a fixed US region or a guarantee that all data is processed and stored only in the United States. The service continues to use the global API.

Recipient: OpenAI OpCo, LLC. Privacy contact: privacy@openai.com (Data Protection Officer). This is the default recipient for South Korea-based customers under the official Data Processing Addendum (DPA).

Data: the selected photo, concept and action text, generated images, and a pseudonymous safety identifier.

Timing and method: when the user runs a photo check or generation, the service server transmits data over encrypted HTTPS.

Purposes: photo analysis, image generation and verification, and action-meaning searches when needed.

Retention: normally up to 30 days for abuse-monitoring logs, subject to the legal, safety, and image-review exceptions described above.

Refusal and effects: you may decline or uncheck OpenAI sharing consent. Photo checks and custom character generation are then unavailable, but built-in characters and existing results remain available. Already-submitted tasks are not automatically canceled and transmitted data is not recalled.

Processing scope: OpenAI sub-processors, support and safety-review activities, and system data may involve processing in other countries. The official sub-processor list is not presented as the actual routing countries of each request from this app. The guidance on the default processing country does not establish the country-specific scope of these exceptions.

Official sources: https://openai.com/policies/data-processing-addendum/ · https://openai.com/policies/sub-processor-list/

Consent and choice

Photo rights confirmation and OpenAI sharing consent are separate. Consent starts unchecked and is not retained after closing the relevant screen. Without consent, photo checks and custom character generation are unavailable; built-in characters and existing results remain usable. Unchecking prevents subsequent requests but does not cancel work already sent or recall data from an external provider. Additional generation for an existing character also requires consent.

Service retention and deletion

Default retention is 30 minutes for unpurchased photo approvals, up to 7 days for approvals reserved for purchase, 7 days for failed jobs, and 30 days since the last change for unfinished setup assets. Periodic cleanup can delay physical deletion. Completing setup queues the original photo and unselected results for deletion and keeps your chosen image and settings for restoration until character or account deletion.

Account deletion

Delete Account in Settings removes server-side names, email addresses, Apple links, sessions, photos, concepts and character settings. Files enter a durable deletion queue and failures are retried. Minimal transaction identifiers, products, timestamps, entitlement records and deletion receipt identifiers remain separately for purchase deduplication. Active account entitlements remain for as long as needed to provide the service. After account deletion ends the service, minimal contract, withdrawal, payment and delivery records remain for five years. Subsequent refund notifications extend this to five years from the latest notification. Minimal deletion receipts for accounts without purchases are cleaned up after 30 days. An actual dispute or statutory preservation order may require a documented, time-limited hold on necessary minimal records only. Account deletion cannot be undone. Local characters and images on this Mac remain; delete them from Collection if desired.

Records and backups

General service audit records are cleaned up after 90 days; expired login challenges are cleaned up one day after expiry. Account identifiers in processed Apple account notifications are cleared within 30 days, while notification IDs remain without account identifiers to block replays. Under Korean electronic commerce rules, contract/withdrawal and payment/delivery records are retained for five years, complaint/dispute handling records for three years, and advertising records for six months. Unnecessary photos or tokens submitted with support requests are excluded. Server process logs rotate by size; the 90-day database audit period does not apply to these logs.

The default backup script includes the database and assets, including temporary images. Backups expire under the default 14-day retention policy and cleanup schedule, so server deletion does not immediately erase all backup copies. Backups are not used to serve ordinary requests. After restoration, deletion requests and retention cleanup must be reapplied and verified before service resumes.

Your rights and contact

You can request account and character deletion in the app. For access, correction, restriction and rights complaints, contact MEOMUL (머물) at wimm.support@gmail.com. Do not attach photos or sign-in tokens; we will explain any minimal identity verification needed separately. The service does not use data for advertising tracking. This policy does not replace permission to use another person’s image or intellectual property.

Refund review and device synchronization

Per-purchase generation-request acceptance and pre-API-call records are retained for refund review even after temporary images are deleted. Unused generation purchases receive a favorable refund recommendation; requested, used, or unverifiable historical usage requires administrator review. Apple makes the final refund decision. Only with separate consent for the purchase do we send delivery status and a refund preference based on usage to Apple. Consent can be withdrawn in Purchase History and Refunds; withdrawal does not recall information already sent.

Shared character settings and purchase entitlements are linked to your account. Position, monitor bounds, app shortcuts, visibility and pause state remain specific to each Mac. A copy removed only from this Mac can be restored from the server. Minimal deletion identifiers are retained to prevent older devices from resurrecting characters deleted across all devices; other devices apply deletion when they next connect.