AOi V Privacy Policy
Supergene Co., Ltd. (hereinafter referred to as the 'Company') values the personal information of its Users and complies with global data protection standards, including the Children’s Online Privacy Protection Act (COPPA) and the California Consumer Privacy Act (CCPA) of the United States, the General Data Protection Regulation (GDPR) of the European Union, the Personal Information Protection Act (PIPA) of the Republic of Korea, the Act on the Protection of Personal Information (APPI) of Japan, and the Personal Data Protection Act (PDPA) of Singapore.
This Privacy Policy provides information regarding the categories of personal data collected, the purposes of collection and use, retention periods, processing methods, and the rights of Users in connection with the “AOi V” application (the “App” or the “Service”) provided by the Company.
1. Personal Data Collected and Methods of Collection
1.1 Data Collected
The Company collects only the minimum personal data necessary to provide the Service.
- User Content
- AI-processed input data: Original images (photos), prompts (entered during input), selected filters/templates, settings, and other information related to generation requests.
- Content created or uploaded by users through the service’s post features: Images/videos, captions, comments, etc. (※ For more details, see Article 5.)
- Prompts (text) and some generation request information may be stored within the service for user convenience (e.g., history/review) and to provide posting/sharing features. If users use the post/share functions, this information may be disclosed to other users.
- Automatically Collected Information
- Device information (OS, device model, device identifiers, etc.), app usage logs, access timestamps, error logs, cookies, advertising identifiers (e.g., IDFA, GAID)
- Email Address
- Collected when logging in via OAuth (Apple, Google, X (formerly Twitter))
- Used for marketing/CRM purposes only with the User’s explicit consent
- Advertising Interaction Data
- Ad impressions and click records, approximate location data, etc.
- In-App Purchase (Soda Purchase) Information (Transaction and Purchase Data)
- Product Identifiers: Product ID/SKU, date and time of purchase
- Store Transaction Identifiers: Transaction ID, purchase token, and information required for receipt/purchase verification (for server-side validation)
- The Company processes only the minimum information necessary for purchase verification and does not store unnecessary information except as required by law.
- Purchase Status Information: Refund, cancellation, or chargeback status
- The Company does not directly collect or store payment method information, such as credit card or bank account numbers; all payments are processed through the App Store or Google Play in accordance with Store policies.
- Other Information
- Information provided in inquiries and feedback submissions
- Additional items collected with User consent when participating in events
1.2 Methods of Collection
- Automatically collected upon app installation, launch, or use of features
- When uploading AI images/videos or requesting transformations (after user consent)
- When Users directly upload Posts
- When Users log in via OAuth or consent to email collection
- Automatically collected through third-party SDKs when ads are displayed
- When Users directly provide information through inquiries or event participation
- May be collected automatically or provided by the user (e.g., sharing receipts) during in-app purchases (Soda purchase), purchase verification, refund processing, or customer support.
- When the app is launched for the first time (including after deletion and reinstallation), a privacy notice popup informs users of the items collected and how they are processed, and obtains the user’s consent.
- Only if the user consents, original images (photos) and generation request data are transmitted to our servers for processing when requesting AI generation/transformation.
- Users may request withdrawal of consent or suspension of AI processing by contacting customer support at aoi.support@supergene.co
2. Purposes of Use of Personal Data
The personal data collected is used solely for the following purposes:
- Service Provision and Operation
- AI image/ video generation, post sharing, delivery of results, and responding to User requests
- AI Processing: To process generation requests, including the execution of AI video generation and the handling of User-entered prompts (text).
- Feature Provision and Sharing: To provide features for output delivery, post sharing, and the public posting or sharing of information that may include User-entered prompts (text).
- Service Quality Improvement and Stability
- Error analysis, feature enhancement, and statistical analysis
- Email Marketing and Customer Relationship Management (CRM) (with User consent)
- Newsletters, promotional notices, and personalized notifications
- Targeted Advertising and Analytics
- Measuring ad performance and providing retargeted advertising
- Compliance with Legal Obligations and Exercise of Rights
- Responding to illegal content and complying with applicable laws and regulations
- Prohibition on AI Training and Technology Development
- Users’ original images, posts, and generated outputs shall never be used for AI training, technology development, or research purposes.
- In-App Purchase (Soda) Processing and Prevention of Payment/Refund Abuse
- Provision of paid services, including In-App Purchase verification and the issuance or deduction of Soda.
- Processing of refunds, cancellations, and chargebacks, and providing related customer support.
- Detection of fraudulent payments, refund abuse, and abnormal usage patterns to protect the integrity of the Service.
- Provision of Secure Services and Prevention of Abuse
- The Company may review and process prompts (text) and generation request records to the extent necessary to prevent service abuse or unauthorized use, detect attempts to generate harmful or illegal content, and respond to reports or disputes.
3. Retention and Use Period of Personal Data
- Principle: Personal data is deleted immediately once the purpose of collection has been fulfilled.
- Exceptions: Data may be retained for the period required under applicable laws.
- AI original photos: Deleted from the server immediately after AI processing is completed.
- Posts: Retained until deleted by the User or until account termination.
- Email Addresses: Retained until the User withdraws consent for marketing.
- In-App Purchase (Soda) and Transaction Information
- Such information may be retained until the purposes of purchase verification, customer support, prevention of payment/refund abuse, and dispute resolution are fulfilled, or for a period required by applicable laws and regulations.
- However, if necessary for the prevention of fraudulent payments/refund abuse or for dispute resolution, the Company may retain certain information for a designated period in accordance with its internal policies.
- Prompts (Text) and Generation Request Data
- Prompts (text) entered by the User for video generation features may be retained for display or re-verification within the Service (e.g., History, Sharing/Post display, etc.) until the User deletes the content or terminates their account.
- However, if necessary for the provision of secure services, prevention of abuse, or dispute resolution, separate records may be retained for a designated period in accordance with the Company's internal policies.
- When necessary for service stability/security, abuse prevention, or dispute resolution, a minimal record of generation requests (e.g., request time, processing status, error codes) may be retained internally on a limited basis.
- However, these minimal records do not include the original image file itself (binary) or original file metadata (e.g., EXIF), and are deleted promptly once their purpose is fulfilled.
4. Delegation of Processing and Cross-Border Transfer of Personal Data
- For the purposes of service operation, user behavior analysis, and marketing performance measurement, the Company may delegate the processing of certain personal data to the following global service providers, during which personal data may be transferred overseas. In such cases, the Company applies necessary safeguards in accordance with applicable laws, including Japan’s APPI, Korea’s Personal Information Protection Act, Singapore’s PDPA, the EU’s GDPR, and the U.S. CCPA.
- Transferees: Google LLC, Amplitude Inc., Rocket Science Group LLC
- Destination Country: United States
- Data Transferred: Service usage logs, device information, session data, email information, etc.
- Purpose of Transfer: Service improvement, user analytics, and marketing performance measurement
- Safeguards: Encryption during transmission, data minimization, access controls, and execution of data protection agreements
- The Company continuously manages and supervises the transferees to ensure that Users’ personal data is not used for purposes beyond those stated above.
- Purchase Verification for In-App Purchases
- For the purpose of issuing Soda, processing refunds/cancellations, and other related services, the Company may transmit transaction identifiers and purchase verification information to the respective App Store (App Store/Google Play) to perform purchase verification. The actual payment processing and the handling of payment method information are governed by the privacy policies and terms of each respective App Store.
- Important Information Regarding AI Generation Processing
- To provide AI image/video generation features, we transmit the original images (photos) uploaded by users and generation request data (e.g., prompts entered, selected filters/templates, settings) to our servers for processing. The transmitted data is used only for AI generation processing and service stability/security purposes, and we apply protective measures in accordance with applicable laws.
- AI processing is performed on servers operated and managed by us, and original images (photos), prompts, and other data are not transmitted or provided to any external third-party AI services.
- Our servers may be hosted on Amazon Web Services (AWS) cloud infrastructure for service operation purposes (hosting/transmission path: AWS-based infrastructure, e.g., Seoul region, CDN, etc.). In this case, AWS acts as a hosting/processing contractor (infrastructure provider) and applies protective measures such as encrypted transmission and access controls.
- Original images (photos) are deleted from the server immediately after processing, and minimal logs necessary for service stability/security and abuse prevention may be retained on a limited basis.
5. Protection Policy for AI-Generated Images/ Videos and Posts
- Original Images
- Original images are temporarily transmitted to the server for AI generation processing and is deleted immediately upon completion (right after processing).
- They are not stored and shall never be used for any secondary purposes such as AI training, technology development, or marketing.
- Before AI processing, the items to be transmitted and the details of the processing are notified to the user, and processing is carried out only after obtaining their consent.
- Original images (photos) and prompts, etc., are not provided to any external third-party AI services.
- AI-Generated Outputs and Posts
- Generated outputs may be temporarily stored to enable download, preview, or sharing as Posts, and are automatically deleted after a certain period.
- Content uploaded by Users as Posts is retained until deleted by the User, and shall never be used for AI training or other secondary purposes.
- User Deletion Rights
- Users may request the deletion of generated outputs and Posts through the in-app Customer Support center or by email (aoi.support@supergene.co), and the Company will promptly process such requests.
- Precautions for Prompt (Text) Input
- When a User publishes a generated result as a Post or utilizes the sharing features, the prompts (text) entered by the User and certain generation request information may be disclosed to other users within the Service.
- Users are strongly advised not to enter their own or any third party's personal information (such as contact information, account details, addresses, etc.) or sensitive information into the prompts.
6. Provision of Data to Third Parties and Advertising Information
- General Principle: Personal data will not be provided to third parties without the User’s explicit consent or a valid legal basis.
- Advertising Partners:
- Recipients: Google LLC (AdMob, Firebase), Meta Platforms, Inc. (Facebook Ads), and X Corp. (Twitter), among others
- Data Provided: Advertising ID, device information, usage records
- Purpose: Delivery of personalized advertising and performance measurement
- Retention Period: In accordance with each partner’s privacy policy
- We do not share original images (photos), prompts, or other content data sent for AI generation/transformation with advertising or analytics partners.
7. Use of Cookies and Similar Technologies
- Cookies may be used for service analytics and advertising optimization. Users may restrict or delete cookies through their browser settings.
8. External Services and Links
- The App, notifications, or emails may contain links to external services (e.g., X (formerly Twitter), Google Play, Apple App Store). The Company is not responsible for the processing of personal data by such external services, and Users are advised to review their respective privacy policies.
- In-App Purchase Information
- In-App Purchases are processed through the App Store or Google Play. These respective stores may directly collect and process information required for payment processing from the User. Please refer to the privacy policy of each store for further details.
9. Measures for the Protection of Personal Data
- Technical Measures: SSL encryption, access controls, intrusion prevention systems
- Administrative Measures: Principle of least privilege, personal data protection training
- Physical Measures: Secure server facilities and restricted access areas
10. User Rights and How to Exercise Them
- Users may at any time request access to, correction of, or deletion of their personal data, as well as withdrawal of marketing consent.
- Users may restrict or opt out of the use of Advertising Identifiers (ADID) for personalized advertising through their device settings.
- Users in the EU (subject to the GDPR) have the following additional rights:
- Right to Data Portability: The right to receive personal data in a structured, commonly used format, and to request the transfer of such data to another service provider.
- Users can withdraw their consent for AI processing and request a halt to the processing by contacting customer support.
- Customer Support (Contact): aoi.support@supergene.co
11. Protection of Children’s Personal Data
- The Company does not knowingly collect personal data from children under the age of 13. If the Company becomes aware that data has been collected from a child under 13, such data will be promptly deleted.
12. Data Protection Officer
13. Notice and Amendments
- Any changes to this Privacy Policy will be notified in advance through in-app notices, pop-ups, or similar means.
Effective Date: February 10, 2026.