Privacy Policy
Effective date 2026. 09. 25
Midnightplan (the "Company") operates "Murmur" (Korean name 소곤소곤, the "Service"), a mobile app for recording your day by voice. As the controller of personal information collected through the Service, the Company complies with the Personal Information Protection Act of Korea and other applicable laws, and does its best to keep your voice and your journal yours alone.
This Policy explains what we collect, why, where it is stored, and when it is deleted. How voice recordings and AI analysis are handled is explained separately in Section 4.
This English version is provided for reference. If it conflicts with the Korean version, the Korean version prevails.
1. Information We Collect
We collect only what the Service needs. The items and when they are collected are as follows.
| Category | Items | When |
|---|---|---|
| Account | Email address; password (stored encrypted by the authentication system and not visible to the Company); if you sign in with Google or Apple, the identifier and email provided by that account (and your name for Apple sign-in, if you allow it); device language; sign-up date and last sign-in date | Sign-up and sign-in |
| Journal | Voice recording files; attached photos (optional, up to 3 per entry); AI-generated title, summary, keywords, emotion and voice tone; AI companion replies; favorite flag; entry date | Writing an entry or requesting AI analysis |
| Settings | Notification settings (time and text), app-lock PIN, custom emotions, companion persona | When you change settings |
| Subscription | Subscription type, start and expiry dates, cancellation status, payment platform, the transaction identifier issued by the store, and whether the free trial was used. Payment-method details such as card numbers are processed by the stores (Apple and Google) and are not collected by the Company. | Paid subscription or free trial |
| Collected automatically | Push notification token; device OS and app version; usage events (actions such as recording completed, entry saved or shared; journal content is not included); error logs when an error occurs (account identifier, file name and error message; journal content is not included); advertising identifier (only if you allow tracking) | While using the app |
| Inquiries | Your message, account identifier, email address (if you include it), OS and app version | When you use in-app Contact |
We do not collect location, contacts, calendar or call records. Biometric data used for app lock (Face ID, fingerprint) is handled by your device operating system and never leaves the device.
2. How We Collect Information
- Information you enter, record or attach directly while signing up, journaling, changing settings or contacting us
- Information generated automatically while you use the Service (usage events, error logs, push token)
- Information Google or Apple provides with your consent when you sign in with those accounts
- Subscription status and transaction identifiers Apple or Google deliver when you pay through the stores
3. How We Use Information
- Providing the Service: storing and playing entries, AI analysis (emotion, summary, keywords, voice tone), companion replies, monthly reports and memoirs, cloud backup and sync
- Account management: verifying identity, restoring entries on a new device, limiting the free trial to once per account, preventing abuse
- Subscription management: verifying purchases, tracking status and expiry, applying store refunds and cancellations
- Notifications: journaling reminders you set, companion-reply arrivals, memory reminders
- Advertising: showing interstitial ads to free users
- Improvement: usage statistics, diagnosing and fixing errors
- Responding to inquiries and meeting legal obligations
4. Voice Recordings and AI Processing
(1) The Service's AI features are processed by Vertex AI (Gemini models) provided by Google LLC. When you request AI analysis of an entry, the original recording file is sent to Google's servers for analysis, which produces the title, summary, keywords, emotion and voice tone. The Company does not use a separate speech-to-text service.
(2) When generating an AI companion reply, the entry's summary, emotion, title, keywords and voice tone are sent, together with, for context, the summary, emotion and title of up to 5 recent entries and your 30-day average voice tone. When generating a monthly memoir, the dates, emotions, titles, summaries and keywords of that month's entries are sent. Milestone letters use only the emotion distribution of the last 7 days; no journal content is included.
(3) AI processing happens only when you request analysis, a reply or a memoir; the Company never analyzes your recordings on its own. Data is sent directly from your device to Google's servers without passing through a separate Company server, and each request is checked to confirm it comes from a genuine installation of the app (Firebase App Check).
(4) The Company does not use your voice or journal to train AI models. Google states that Google Cloud Vertex AI does not use customer input to train its models under Google Cloud's data processing terms. See Google Cloud's privacy and data governance documentation for details.
(5) AI-generated emotions, summaries and replies are for reference and may be inaccurate. They do not replace professional judgment such as medical or psychological counseling.
5. Where Data Is Stored and Cloud Backup
(1) Voice recordings are stored only on your device by default. Recordings and photos created while a Premium subscription (including the free trial) is active are automatically backed up to the Company's cloud storage (Firebase Storage) so they can be restored on a new device. When the subscription expires, new backups stop, but files already backed up remain available for you to download at any time.
(2) Entry text data (title, summary, keywords, emotion, voice tone, replies, photo addresses, dates), account, settings and subscription data, and monthly memoirs are stored in the Company's cloud database (Cloud Firestore) regardless of subscription, so that you can see the same entries on multiple devices and delete everything at once when you delete your account.
(3) If you turn on app lock (PIN or biometrics), others cannot open your journal on your device. Company staff do not read your journal except where necessary for operations or incident response, and even then only to the minimum extent.
6. Sharing with Third Parties
The Company does not sell your personal information and, as a rule, does not share it with third parties without your consent, except in the following cases.
- You have given prior consent
- Disclosure is required by law or in response to a lawful request from a court or investigative agency
- It is urgently needed to protect the life, body or property of you or a third party
- The operator of the Service changes through a business transfer or merger (we will notify you in advance)
- Data is provided in aggregated statistical form that cannot identify individuals
7. Processors and International Transfers
The Company entrusts processing to the following providers. Their servers are located outside Korea, so personal information is transferred abroad. Transfers occur when you use each feature, over encrypted network connections.
| Processor | Task | Items transferred | Country |
|---|---|---|---|
| Google LLC (Firebase) | Authentication, database and file storage, push notifications, usage analytics, app attestation | Account data, entry text data, backed-up recordings and photos (subscribers), push token, usage events | United States and others |
| Google LLC (Vertex AI) | AI analysis, replies and memoirs | Original recording (when analysis is requested), entry summaries, emotions, keywords, voice tone | United States and others (global endpoint) |
| Google LLC (AdMob) | Ad serving | Advertising identifier (with consent), device information | United States and others |
| Apple Inc. | Apple sign-in, in-app purchases, subscription status notifications | Apple account identifier, transaction identifier (card details are never received by the Company) | United States and others |
| Google LLC (Google Play) | Google sign-in, in-app purchases, subscription status notifications | Google account identifier, purchase token (card details are never received by the Company) | United States and others |
| Functional Software, Inc. (Sentry) | Error and crash diagnostics | Error logs (account identifier, file name, device and app version, error message) | United States |
The purchase-verification server (Cloud Functions) runs in a United States region and handles only store subscription notifications and transaction identifiers. You may refuse international transfers, but because these processors are essential to the Service, refusal makes the Service unavailable.
8. Retention and Deletion
(1) The Company retains your personal information until you delete your account. On account deletion we promptly delete your authentication data, account and settings, entry text data, monthly memoirs, and recordings and photos backed up to the cloud. When you delete an individual entry, its text data and its recording and photos on the device and in the cloud are deleted together.
(2) Recordings stored on your device are removed when you delete the app. If you delete your account but keep the app, files may remain on the device; those are managed by you on the device.
(3) The following records are kept separately for the periods required by law and then deleted.
- Records on contracts, withdrawal of offers, payment and supply of goods (e.g. subscription transaction identifiers): 5 years — Act on Consumer Protection in Electronic Commerce
- Records on consumer complaints or dispute resolution (inquiry history): 3 years — Act on Consumer Protection in Electronic Commerce
- Service access logs: 3 months — Protection of Communications Secrets Act
(4) Data sent to Google for AI processing is handled after the response is generated under Google Cloud's data processing terms; the Company does not keep a separate copy. Electronic files are deleted in a way that makes them unrecoverable.
9. Advertising and Tracking
(1) Free users see interstitial ads provided by Google AdMob. For active Premium subscribers and users who bought the legacy one-time "Remove Ads" product, the app does not even request ads.
(2) On iOS, the app asks for permission under App Tracking Transparency (ATT); the advertising identifier is used for ad serving only if you allow it. Users in the European Economic Area and the United Kingdom are shown a separate ad consent flow. You can limit personalized ads at any time in device settings (iOS: Privacy → Tracking; Android: Ads → reset or delete advertising ID).
(3) The app uses on-device storage for sign-in state, theme and notification settings. This website (murmur.website) does not use cookies.
10. Security Measures
- Encryption in transit (TLS) and encryption at rest in cloud storage
- Database and storage rules that let each account read and write only its own data
- App attestation (App Check) so that only genuine installations can request AI processing
- Passwords stored only as hashes by the authentication system
- App lock (PIN, biometrics) and a design that never shows journal content on lock-screen notifications
- Personal-data handling limited to a single operator
11. Your Rights and How to Exercise Them
(1) You may request access to, correction or deletion of, or suspension of processing of your personal information. Most of this can be done directly in the app.
- Delete or correct an entry: delete it from the entry, or edit its title or emotion
- Export your records: Settings → Account, export recordings and journal data to your device
- Retrieve cloud backups: Settings → Account, download backed-up files
- Delete your account: Settings → Account → Delete account. You will be asked to sign in again to verify identity; the data in Section 8 (1) is deleted immediately.
- Limit ad tracking or change notifications: device settings and app settings
(2) For requests that cannot be handled in the app, email huurray@gmail.com with the subject "Privacy rights request". After verifying your identity, we will act on your request within 10 days of receipt and let you know the result.
(3) Users in the European Economic Area and some other jurisdictions additionally have the rights to object to processing, restrict processing, withdraw consent, data portability, and to lodge a complaint with a supervisory authority. Please contact us first before lodging a complaint; we will do our best to resolve the matter.
12. Children's Privacy
The Company does not knowingly collect personal information from children under 14. If we learn that a child under 14 has signed up without the consent of a legal guardian, we promptly delete the account and its data. Please direct related inquiries to the contact below.
13. Privacy Officer and Contact
The Company designates the following privacy officer to oversee personal-information processing and to handle complaints and remedies. Privacy officer: Junhyeok Heo / Email: huurray@gmail.com
14. Remedies for Infringement
You may seek dispute resolution or counseling regarding personal-information infringement from the following Korean agencies.
- Personal Information Dispute Mediation Committee: 1833-6972 / www.kopico.go.kr
- Personal Information Infringement Report Center (KISA): 118 / privacy.kisa.or.kr
- Supreme Prosecutors’ Office Cybercrime Division: 1301 / www.spo.go.kr
- National Police Agency Cyber Bureau: 182 / ecrm.cyber.go.kr
15. Changes to This Policy
This Policy may be revised to reflect changes in law or the Service. Revisions are announced on this page and in the app at least 7 days before they take effect; changes that materially affect your rights, such as new categories of data or purposes, are announced at least 30 days in advance.
Supplementary Provisions
(1) This Policy was posted on 2026. 09. 18 and takes effect on 2026. 09. 25, replacing the previous policy effective 2025. 01. 01. The descriptions of AI processing (Section 4), error-diagnostics and analytics processors (Section 7) and ad tracking consent (Section 9), which the previous policy lacked, accurately describe how the Service already operates.
The Korean version prevails in case of conflict with this English translation.