Privacy Policy

1. What information do we collect, and why?

Sign-in and the sharing and notification features users request are based on Article 15(1)4 of the Personal Information Protection Act (개인정보 보호법) (entering into and performing a contract), and security and incident records, to the extent necessary, on subparagraph 6 of the same paragraph (legitimate interests). You can use the date features without adding a birthday or allowing push notifications.

Dasom does not access your Gmail, Contacts, Calendar or Photos. Google user data is used only for the sign-in and profile features above and is not sold or used for ad targeting or to train general-purpose AI models. Dasom complies with the Google API Services User Data Policy, including the Limited Use requirements.

2. What is visible when you invite or link?

When someone who received an invite link or code signs in, they can see the inviter’s Dasom name before accepting. When you send an invite via KakaoTalk, the invite message, the invite code and link, and a card title that may include your name are delivered to Kakao and to the recipient you chose. Anyone the link is forwarded to can also open the invite until it expires.

The one partner you link with can see your Dasom name, the birthday you added, the nicknames you call each other, the day you met, shared days and who added them, and the settings for days you celebrate together. Your sign-in email, profile photo URL, authentication information, device subscription information and personal notification settings are not shown to your partner. We do not provide personal information to third parties except for sharing the user chooses, the entrustment below, and cases under the law.

3. When is information deleted?

• When you leave, we delete from the production database your sign-in account and its linked authentication information, your profile and birthday, personal notification settings, and registered devices and their delivery records. Before that, you can also delete your birthday and the days you added yourself in Settings or in the list of days.
• If one person leaves, the remaining partner’s shared list is kept and the departing person’s link as the creator of entries is removed. When the last person leaves, the shared space and the dates and invite records in it are deleted. An invite code is valid for 24 hours after it is issued and cannot be accepted after it expires.
• When you delete a day you added yourself, it is removed from the list and from notifications immediately. It can be restored for 10 minutes after deletion; days past the restore period and their notification settings are erased by a cleanup job.
• If you turn off device notifications or a subscription expires, we stop sending. While a subscription is deactivated, its registration information may remain. When a device registration is deleted, the delivery records of scheduled notifications for that device are also deleted.
• Inquiry emails are deleted within 30 days after they have been handled. Information that must be kept under law is stored separately for the required period and erased when the period ends.
• By default, the operator can view logs for 1 day for Supabase Free API and database logs, and for 1 hour for Vercel Hobby function execution logs. The operator keeps no separate database dumps or copies of logs and uses no separate backup option. These viewing periods may differ from how long providers keep their own security records.

When there is a reason to delete, electronic records are deleted from the relevant system, and any material kept on paper is shredded. Invites already delivered through external messengers and notifications shown on a user’s device can be managed in that app or on that device.

4. Who processes information, and where?

We entrust the processing needed for sign-in, date storage and web hosting to the companies below. Under Article 28-8(1)3(a) of the Personal Information Protection Act, we disclose the following about overseas transfers resulting from entrustment and storage needed to perform the service contract.

If you do not want overseas entrustment and storage, you can stop before signing up, or after signing up you can leave or ask us to stop the transfer through the contact below. If authentication and storage stop, it is difficult to use the account-based date sharing features.

5. What do your browser and external services process?

• Dasom uses cookies and browser storage to keep you signed in and to return you to the right screen after sign-in. You can delete or block them in your browser; if you block them, staying signed in may be difficult. We do not use visitor or advertising analytics tools.
• When loading screen fonts, your browser sends its IP address, the fonts requested and browser information to Google Fonts (Google LLC, United States). If you choose Kakao sharing, your browser requests Kakao’s script. We do not send the list of anniversaries stored in Dasom to either service.
• If you allow push notifications, the subscription endpoint and encrypted notification content are sent to the push service for your browser (Google, Apple, Mozilla or Microsoft, United States). The time-to-live Dasom sets for undelivered messages is at most 1 hour. You can turn off notifications in your browser permissions or in Dasom’s settings.

We use authenticated sessions and encrypted connections, and the database limits read and write access according to the account and the link between the two people. Operational privileges are used only for administrative tasks.

6. To change or delete your information

You can change your birthday and notifications in Settings and delete your account with “Delete account.” You can also remove Dasom’s access to your Google account under third-party connections in your Google Account. Removing the Google connection and deleting your Dasom account are handled separately.

You or your lawful representative may request access, correction, deletion, suspension of processing, or withdrawal of consent. If you send a request to the email address below, we will verify your identity or the representative’s authority and inform you of the result within the statutory deadline. Dasom is for people aged 14 or older. If information about a child under 14 has been registered, a parent or guardian may also request its deletion.

7. Privacy inquiries and remedies

The operator and Chief Privacy Officer is 고현서. Privacy inquiries and requests to exercise your rights are received at hsgoh@axiommathlab.kr.

For outside counseling and dispute mediation, you can apply to the Personal Information Infringement Report Center (개인정보침해신고센터, 118, no area code) and the Personal Information Dispute Mediation Committee (개인정보분쟁조정위원회, 1833-6972).

This policy first takes effect on November 4, 2026. When it changes, we will announce the effective date and the changes on this page in advance, and where separate consent is needed, we will obtain it before the change applies.

Revision history

• Effective November 11, 2026Upcoming

  Announced November 4, 2026

  • The items the law requires are now set out in separate articles: the purposes of processing, the required, optional and automatically generated items, the retention period for each item, and the destruction procedure.
  • Information we were already processing, such as birth year, the notification time for each timing, how a day is counted, and the wording shown in notifications, is now listed item by item.
  • Added the names, purposes and retention periods of cookies and browser storage and how to delete them in each browser, our security measures, notification in case of a breach, the time limits for handling requests to exercise your rights, and how to raise an objection.
  • Added the Supreme Prosecutors’ Office and the Korean National Police Agency to the bodies you can turn to for remedies, and added a revision history where earlier versions can be read.
  • Server functions now run in the Republic of Korea (Seoul), next to the database, instead of the United States (Virginia). They have run in Seoul since November 5, 2026.
  • For the English screens, the light and dark screen modes and the reminders you can set for each day, all available since November 5, 2026, we now list the display language and per-day reminders in your personal settings, the cookie that remembers the language you chose (dasom-lang), and the browser storage that remembers the screen mode and changed nicknames. This was added to this revision on November 5, 2026.
  • Birthday (year, month and day of birth) moves from the optional items to the required items for using the service. You add it when you start, can change it in Settings, and it is deleted when you leave. This was added to this revision on November 5, 2026.
  • The purposes of processing, whether we provide information to third parties, and the companies we entrust with processing do not change.

• Effective November 4, 2026In effect

  Announced November 4, 2026

  First version