Privacy Policy

Last Modified: October 30, 2025

1. Purpose of Personal Information Collection and Use

Butties AI processes personal information for the following purposes.

Member registration and management
Service provision and customized AI response generation
Calendar and schedule management features
Storage and management of personal records such as memos and diaries
Service improvement and new service development
Customer inquiry response and announcement delivery

2. Personal Information We Collect

Required Information

Email address
Name (Nickname)
Password (stored encrypted)
Google account information (when using Google login)

Optional Information

Profile image
Conversation content and AI interaction data
Calendar schedule information
Memo and diary content
Relationship information
Accounting data
Payment information (card numbers masked)
Purchase history and subscription information

Automatically Collected Information

Service usage records
Access IP address
Cookies
Access time
Browser information

3. Payment Information Processing

Butties AI manages payment processing securely as follows:

Payment information is processed securely through payment gateways
Sensitive information such as card numbers is transmitted encrypted
We do not store complete card numbers (masked only)
Payment records are retained for 5 years per e-commerce regulations
Only minimal information is tokenized for recurring payments

4. Retention and Use Period of Personal Information

Butties AI immediately deletes all personal information upon membership withdrawal in accordance with the principle of data minimization. However, information required to be retained by relevant laws will be stored separately.

Immediately Deleted Items

Member information: Completely deleted upon membership withdrawal
Conversation content: Deleted when leaving chat room
AI chat records: Deleted upon membership withdrawal
Calendar, memos, diaries: Deleted upon membership withdrawal

Legal Retention Requirements

The following information is retained separately for the period specified by relevant laws:

Contract or withdrawal records: 5 years (E-commerce Act)
Payment and supply records: 5 years
Consumer complaint or dispute records: 3 years
Display/advertising records: 6 months
Subscription purchase and usage history: 5 years

※ Information subject to legal retention requirements will be stored separately even after membership withdrawal

5. Third-Party Provision of Personal Information

📢 Important Notice

Butties AI does not sell users' personal information. We do not provide or sell personal information to third parties for advertising, marketing, or other commercial purposes.

In principle, we do not provide users' personal information to external parties. However, exceptions apply in the following cases:

When users have given prior consent
When required by law or when requested by investigative agencies according to procedures and methods prescribed by law for investigation purposes

Data Transmission for AI Service Provision

Butties AI transmits conversation content and related data to the following companies for AI functionality. Each company is an independent data processor and processes data according to their own privacy policies.

📌 Important Notice:

Butties provides AI services through paid APIs for all users (both free and paid plans). Therefore, the 'paid/API user' policies of each AI provider apply, which generally have the following characteristics:

Conversation content is not used for AI model training
Data retention periods are limited (temporarily stored only for API processing purposes)
Enhanced privacy protection compared to general free service users

Using Butties' free plan within the app is subject to different policies than using AI providers' free services directly.

Companies and Purposes:

1. OpenAI (United States)

Purpose: AI response generation through GPT models

Data transmitted: Conversation content, previous conversation history (context)

2. Anthropic (United States)

Purpose: AI response generation through Claude models

Data transmitted: Conversation content, previous conversation history (context)

3. Google (United States)

Purpose: AI response generation through Gemini models, AI image generation

Data transmitted: Conversation content, previous conversation history (context), image generation request text

4. xAI (United States)

Purpose: AI response generation through Grok models

Data transmitted: Conversation content, previous conversation history (context)

5. Google Firebase (United States)

Purpose: Push notification delivery

Data transmitted: Device tokens, notification content

Important Notice:

The above companies process data according to their respective 'paid API user' data retention policies
Generally, conversations through APIs are not used for model training and are deleted after processing is complete
However, please refer to each company's privacy policy for specific data processing practices
Please be careful not to include sensitive personal information such as resident registration numbers, passport numbers, or complete credit card numbers in conversations

Data Minimization:

Only conversation content necessary for AI response generation is transmitted
Passwords, payment card information, etc. are not transmitted to AI APIs
Password Vault contents are encrypted and stored locally only and are not transmitted externally

6. Destruction of Personal Information

We destroy personal information without delay when the retention period has expired, the purpose of processing has been achieved, or the information is no longer necessary.

Destruction Procedure

Information entered by users is transferred to a separate database after achieving its purpose and is stored for a certain period or immediately destroyed according to internal policies and relevant laws.

Destruction Method

Electronic files: Using technical methods that make records irretrievable
Paper documents: Shredding or incineration

7. Security Measures for Personal Information

We take the following measures to ensure the security of personal information:

Encrypted storage and management of passwords
Password Vault protected with AES-256 encryption
Data transmission encryption using SSL/TLS
Measures to prevent personal information leakage and damage due to hacking or computer viruses
Minimization and training of personnel handling personal information
Regular security checks and updates

8. User Rights and How to Exercise Them

Users may exercise the following personal information protection rights at any time:

Request to view personal information
Request corrections for errors
Request deletion
Request to stop processing

Rights can be exercised through the settings menu or customer center (support@butties.app).

9. Cookie Policy

Purpose of Cookie Use

Maintaining login sessions (JWT token storage)
Saving language settings (Korean/English/Japanese/Chinese)
User preferences (theme, notification settings, etc.)
Service usage statistics analysis

Types of Cookies

Essential Cookies: Provide basic service functions (login maintenance)
Functional Cookies: Save user settings (language, theme)
Analytics Cookies: Usage pattern analysis for service improvement

Cookie Management

You can manage cookies in your browser settings:

Chrome: Settings → Privacy and security → Cookies and other site data
Safari: Preferences → Privacy → Manage Website Data
Firefox: Settings → Privacy & Security → Cookies and Site Data

※ Blocking cookies may limit service use, such as login sessions not being maintained.

10. Personal Information Protection Officer

We have designated a personal information protection officer to oversee personal information processing and handle complaints and damage relief related to personal information processing.

Personal Information Protection Officer

Email: privacy@butties.app

Customer Center: support@butties.app

11. Changes to Privacy Policy

This privacy policy is effective from October 30, 2025. Changes due to laws and policies will be announced through notices at least 7 days before implementation.

12. Protection of Children's Personal Information

Butties AI does not collect personal information from children under 13 years of age. We verify that users are at least 13 years old during service registration, and children under 13 cannot use the service.

If we become aware that we have collected personal information from children under 13, we will immediately delete such information.

13. Service Regions and Data Storage

Service Regions

Butties AI operates from the Republic of Korea and primarily provides services to users in Korea, United States, Canada, Japan, Taiwan, and Hong Kong. We operate in compliance with personal information protection laws in each region.

Data Storage Location

Primary server: Google Cloud Platform (Seoul region, Republic of Korea)
Data is stored and processed on servers located in the Republic of Korea

14. Health Information Disclaimer

The health tracking features of Butties AI (such as menstrual cycle tracking) are provided for informational purposes only and are not intended to diagnose, treat, cure, or prevent any disease or medical condition.

If you need medical advice, diagnosis, or treatment, please consult with a qualified healthcare professional.

Health-related information and predictions provided through this service are for reference only and cannot replace professional medical services.

15. AI-Generated Content Disclaimer

Butties AI uses artificial intelligence technology to generate content. Information generated by AI may be inaccurate or incomplete, and users should use AI responses as reference material only.

For important decisions or professional advice, please consult with experts in the relevant field.

The AI image generation feature prevents the creation of inappropriate content through Google's safety filters.

Announcement Date: 2025-09-07
Effective Date: 2025-09-07