Privacy Policy
Effective date October 20, 2026 · Last updated October 20, 2026
BuddyBird (the "Service") is operated by joynnovate ("we," "us," or "our"). We value the personal information of our users and comply with the Personal Information Protection Act of Korea and other applicable laws.
The Service is used without account registration or login, and we do not collect direct identifiers about you, such as your real name, email address, or phone number. However, to provide app functionality and analyze quality and errors, we collect and process the information described below through analytics tools, and we disclose the details as follows.
1. Purposes of Processing Personal Information
The Service does not offer account registration, login, payment, customer support consultation, or advertising/marketing features. However, we collect and use personal information for the following purposes:
- App usage statistics and usability analysis
- Diagnosing and fixing crashes and errors
- Providing app functionality such as push notifications
- Improving app compatibility and performance
2. Personal Information We Process
1. Information collected automatically through analytics tools
- Device & identifiers: Android Advertising ID (AAID), app instance ID, anonymous install ID (UUID), push notification token (FCM), and a crash-analytics installation identifier (on iOS, the Identifier for Advertisers (IDFA) is included if you allow tracking)
- Approximate location: city/region-level location inferred from your IP address (not precise location)
- App usage: screen navigation, learning sessions, word recording/playback and other in-app events, and session replay (interaction paths such as taps and swipes)
- Device & environment: app version, OS version, device model, and language setting
- Crash & diagnostic information: stack traces, device state at the time of a crash, and similar information
2. Information you enter directly
- Parrot (pet) name, species, age, and learning goal
- Word names you add or edit for learning
3. Information collected only with your consent
- Sounds recorded during training and word recordings you make, recording details (such as time and length), an anonymous identifier (Firebase anonymous uid), and app version and device information
This information is sent to our servers only if you agree on the in-app audio collection consent screen, so we can build and improve the parrot pronunciation training feature. If you do not agree, recordings are stored on your device only, and declining does not change how you use the Service.
Some of the text you enter above, such as the parrot name and word names, is sent to analytics tools (Google Firebase, Microsoft Clarity) for usability analysis. This is information about your pet and learning content, not about you as the guardian.
4. Information we do not collect
- Your real name, email address, phone number, or other direct identifiers about you
- Precise (GPS) location
- Photos or videos (a profile avatar photo is used only on your device and is not transmitted externally)
3. How We Collect Personal Information
The Service collects personal information in the following ways:
- Automatic collection through analytics tools (Google Firebase Analytics, Crashlytics, and Cloud Messaging; Microsoft Clarity) while you use the app
- Information you enter directly in the app
- Transmission of recordings to our servers from users who agreed to audio collection
All collected information is transmitted over the network encrypted using HTTPS/TLS.
4. Processing and Retention Period of Personal Information
Automatically collected analytics and diagnostic information is retained according to each analytics provider's data-retention policy (for example, Firebase Analytics up to 14 months by default; Firebase Crashlytics approximately 90 days).
Information you enter (parrot information, learning words, etc.) is stored on your device by default, and when you uninstall the app, the information stored on your device and the anonymous identifiers are deleted together.
Recordings and recording details sent to our servers with your consent to audio collection are deleted automatically after 180 days from the date of collection.
5. Provision of Personal Information to Third Parties
The Service does not sell your personal information and does not provide it to third parties, except where specifically required by law.
However, we entrust analytics and error-diagnosis work needed to operate the Service to external specialized services, as described in Section 6 below.
6. Entrustment of Personal Information Processing and International Transfer
To improve app quality and analyze usage statistics and errors, the Service entrusts personal information processing to overseas services as follows. The Service also uses a cloud service in a Korean region to operate its servers.
1. Google LLC (Firebase)
- Recipient: Google LLC
- Transfer country / storage location: United States
- Items transferred: device/advertising identifiers, approximate location, app usage, crash/diagnostic information, etc.
- Entrusted work: usage analytics (Analytics), crash diagnostics (Crashlytics), and push notifications (Cloud Messaging)
- Time and method of transfer: transmitted over the network, encrypted using HTTPS/TLS, when you use the app
2. Microsoft Corporation (Clarity)
- Recipient: Microsoft Corporation
- Transfer country / storage location: United States
- Items transferred: app usage, session replay, device information, user behavior data, etc.
- Entrusted work: usability improvement and user experience analysis
- Time and method of transfer: transmitted over the network, encrypted using HTTPS/TLS, when you use the app
3. Amazon Web Services, Inc. (AWS)
- Entrustee: Amazon Web Services, Inc.
- Storage location: Republic of Korea (Seoul region)
- Items processed: recordings and recording details from users who agreed to audio collection, anonymous identifiers, and app version and device information
- Entrusted work: server operation and storage of recordings
- Retention period: deleted automatically after 180 days from the date of collection
7. Consent to Collection and Use of Personal Information and How to Decline
You can make the following choices about the collection of personal information for analytics and tracking purposes:
- iOS: On first launch, the app asks for your tracking permission (App Tracking Transparency). If you decline, analytics/tracking data collection, including the advertising identifier (IDFA), is disabled (except crash diagnostics). You can change this in Settings → Privacy & Security → Tracking.
- Android: Analytics and diagnostic information is collected automatically to provide app functionality and cannot be turned off individually within the app. To stop collection, uninstall the app.
Even if you decline, you can continue to use the app's core learning features normally.
8. Processing of Personal Information of Children Under 14
The Service is an application for all ages (app store age rating 3+) that is not targeted at any particular age group, and it is intended to be used by guardians who care for pet birds.
The Service does not collect personal information from children under 14 without the consent of their legal representative. If a child under 14 uses the Service, we recommend that they do so under the guidance and supervision of their legal representative (parent or guardian).
If we become aware that personal information of a child under 14 has been collected without the consent of their legal representative, we will destroy that information without delay. Requests to access or delete a child's personal information, and related inquiries, may be made through the contact details in Section 15.
9. Cookies and Behavioral Information
The Service does not run personalized advertising. However, the analytics tools above may use advertising identifiers, device identifiers, and similar identifiers for usage statistics and usability analysis.
You can limit some collection by resetting or deleting your advertising identifier, or by limiting ad personalization, in your device settings.
10. Procedures and Methods for Destroying Personal Information
When you uninstall the app, the information stored on your device and the anonymous identifiers are deleted. Information sent to analytics services is destroyed after the retention period expires, according to each provider's retention policy. Recordings and recording details sent to our servers are destroyed automatically after 180 days from the date of collection.
Information in electronic file form is deleted securely so that it cannot be recovered or reproduced.
11. Measures to Ensure the Security of Personal Information
We take the following measures to ensure the security of personal information:
- Encryption in transit: all collected information is transmitted over the network encrypted using HTTPS/TLS.
- Administrative and technical safeguards: we maintain reasonable administrative and technical safeguards, such as managing access rights to personal information.
No method of transmission over a network or electronic storage is completely secure, however, and we cannot guarantee absolute security.
12. Rights and Obligations of Data Subjects and How to Exercise Them
You may exercise the following rights regarding your personal information:
- Request access to your personal information
- Request correction or deletion of your personal information
- Request suspension of processing of your personal information
- Request withdrawal of consent
You may make these requests through the contact details in Section 15 below.
13. Additional Rights for U.S. Residents
Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, Utah, or Texas), you may have some or all of the following rights under the laws of your state:
- The right to know/access the personal information we collect about you
- The right to delete your personal information
- The right to correct inaccurate personal information
- The right to opt out of the "sale" or "sharing" of personal information and of targeted advertising
- The right to limit the use of sensitive personal information
- The right to non-discrimination for exercising your rights
1. Categories of personal information we collect
Under the categories of the California Consumer Privacy Act (CCPA/CPRA), we collect identifiers (device and advertising identifiers); internet or other electronic network activity information (app usage and session replay); approximate geolocation (city/region-level, not precise); and audio information (recordings, if you agreed to audio collection). We do not collect Social Security or other government-issued ID numbers, financial account information, precise geolocation, or biometric information.
2. Sale and sharing
We do not sell your personal information for monetary consideration, and we do not use it to serve you targeted advertising. Our analytics providers do collect advertising and device identifiers; to the extent this is considered "sharing" for cross-context behavioral advertising under applicable state law, you may opt out at any time using your device's advertising settings and, on iOS, by declining tracking (see Section 7). We do not knowingly sell or share the personal information of consumers under 16 years of age.
3. Sensitive personal information
We do not collect precise geolocation or other sensitive personal information for the purpose of inferring characteristics about you, and we do not use or disclose sensitive personal information beyond the purposes permitted by law.
4. How to exercise your rights
You may submit a request by emailing joynnovate@gmail.com. Because the Service operates without accounts or login, we generally cannot associate the analytics data we collect with your identity, which may limit our ability to locate data specific to you. The most effective ways to control your information are to uninstall the app (which deletes on-device data and anonymous identifiers) and to use the choices described in Section 7. We will not discriminate against you for exercising your rights, and where your state provides an appeal process, you may appeal a decision by replying to our response.
5. California "Shine the Light"
We do not disclose personal information to third parties for those third parties' own direct marketing purposes.
14. Additional Information for Residents of the EEA, the United Kingdom, and Switzerland
If you reside in the European Economic Area (EEA), the United Kingdom, or Switzerland, this Section applies to you in addition to the rest of this Privacy Policy, pursuant to the EU General Data Protection Regulation (GDPR) and equivalent laws. Matters not addressed in this Section are governed by Sections 1 through 13.
1. Legal bases for processing
- Providing app features such as push notifications: processing necessary to provide the service you have requested (Article 6(1)(b) GDPR)
- Diagnosing crashes and errors, and improving app compatibility and performance: our legitimate interest in providing a stable service (Article 6(1)(f))
- App usage statistics and usability analysis: your consent where you have allowed tracking on iOS (Article 6(1)(a)); otherwise, our legitimate interest in improving the Service (Article 6(1)(f))
- Collection of recordings and recording details: your consent (Article 6(1)(a))
Where we rely on legitimate interests, we limit the data processed to what does not override your rights and interests. We do not engage in automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
2. Your rights as a data subject
In addition to the rights described in Section 12, you have the following rights:
- Right to restriction of processing: the right to request that we restrict processing in the cases provided by law, such as while you contest the accuracy of your data
- Right to data portability: the right to receive data that is processed by automated means on the basis of consent or of necessity for providing the Service in a structured format, or to have it transmitted to another controller
- Right to object: the right to object at any time to processing based on legitimate interests
- Right to withdraw consent: you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
You may exercise these rights through the contact details in Section 15, and we will respond within one month of receiving your request. Because the Service operates without accounts or login, your ability to exercise these rights over data that we cannot use to identify you may be limited unless you provide additional information that enables your identification (Article 11 GDPR).
3. Right to lodge a complaint with a supervisory authority
You may lodge a complaint with the data protection supervisory authority in the place of your habitual residence, your place of work, or the place of the alleged infringement. In Spain, for example, you may lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
4. Transfers outside the EEA
When we transfer data outside the EEA, we apply the following safeguards:
- The operator in the Republic of Korea and servers in the Seoul region: the European Commission's adequacy decision for the Republic of Korea (December 2021)
- The U.S. processors listed in Section 6 (Google LLC, Microsoft Corporation, and Amazon Web Services, Inc.): each processor's certification under the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses (SCCs)
5. Children
The age of 14 referred to in Section 8 is the threshold under the laws of the Republic of Korea and Spain. Where the law of your country of residence sets a different age (between 13 and 16), processing based on the consent of a child under that age requires the consent of the holder of parental responsibility.
15. Privacy Officer
We have designated the following privacy officer to handle inquiries related to personal information protection:
16. Remedies for Infringement of Rights
If you need to report or seek advice about an infringement of your personal information, you may contact the following organizations:
- Personal Information Infringement Report Center: 118 (no area code)
- Personal Information Dispute Mediation Committee: 1833-6972
- Supreme Prosecutors' Office: 1301
- Korean National Police Agency: 182
Users residing in the EEA, the United Kingdom, or Switzerland may also lodge a complaint with the supervisory authority described in Section 14, item 3.
17. Changes to This Privacy Policy
This Privacy Policy applies from its effective date.
We may revise this Privacy Policy to reflect changes in applicable laws or in the Service, and we will notify you of any changes through this page.
18. Language
This Privacy Policy was written in Korean. Translations into English, Japanese, or other languages are provided for your convenience; if a translation conflicts with the Korean version, the Korean version prevails.
Effective date: October 20, 2026
Last updated: October 20, 2026
← Back to home