Privacy Policy
Effective October 27, 2026 · Announced October 20, 2026 (previous version: October 13, 2026 — added the location item for weather and the entrustment to OpenWeather, and split the overseas-transfer note in Article 5 into AI providers and other processors)
This policy takes effect on October 27, 2026. What changes: if you allow it, your approximate location is sent to OpenWeather Ltd. (UK) to fill in today's weather (Articles 1, 2 and 5). If you don't allow location, nothing changes. And from October 29, 2026 (announced October 22, 2026) you can optionally enter your date of birth in Profile (Article 1) — if you don't, nothing changes.
This is an English translation of the Korean Privacy Policy (개인정보 처리방침), provided for convenience. If there is any discrepancy between this translation and the Korean version, the Korean version prevails.
주식회사 스테이션온 (the "Company") operates the picture diary app Moabomb (모아봄, the "Service") and handles users' personal information as described below, in accordance with the Personal Information Protection Act (「개인정보 보호법」).
A diary is the most private record there is. That is why we collect only what we need, and state openly what we entrust to whom and what operators can see.
Article 1. Personal information processed and how it is collected
| Category | Items | How it is collected |
|---|---|---|
| Account | Account identifier, display name, language and time zone, time of confirming that the user is 14 or older, names of signed-in devices | When the app is first opened; entered in Me |
| Date of birth (optional, from October 29, 2026) | The date of birth the user enters. It is never sent to AI providers and is used only to work out the current age bracket (how you look in pictures). It is never filled in from a social account | Entered by the user in Profile (can be removed at any time) |
| Social account linking (optional) | Unique member number from Apple, Google or Kakao; email and name (nickname) if the provider shares them. If the user consents on Kakao, gender and birth year / age range — the birth year is converted into an age bracket only, and the original value is not kept | From the provider, when the user taps to link an account |
| Me in the pictures (optional) | Gender presentation (female, male, prefer not to say), age bracket (teens to 60s and over, prefer not to say) | Chosen by the user in Me or when making an avatar, or, when empty, filled in from what a social account provided (not filled in again once the user has changed it) |
| Diary | Diary text and date, mood and weather, place names written by the user, attached photos, nicknames and relationships of characters (people, pets) | Written by the user |
| Location (optional) | Approximate location — latitude and longitude rounded to one decimal place (about 11 km). Not stored on the server | When filling in the weather for today's entry, and only if the user has allowed location access on the device |
| Avatar (optional) | Selfie photo (deleted right after the character is made), chosen appearance features, the generated character image | When the user makes an avatar |
| Character photos (optional) | Photos of other people or pets (only when the user confirms they have obtained that person's consent) | When the user creates a character |
| AI output | Pictures, moving pictures (video), polished text, and analysis results extracted from the diary such as mood, themes and characters | Generated automatically when the user requests generation |
| Payments | Subscription product, period and status, store transaction IDs, records of paint (credits) granted and used. We do not receive card numbers (payments are processed by the App Store and Google Play) | From the stores and the payment intermediary service (RevenueCat) |
| Automatically collected | Access logs (IP address, request time, request path), error information (device model, OS and app version), app usage events (such as which screens were opened — no diary content) | Automatically while the app is used |
Diary text and photos are never included in error logs, analytics tools or notifications. We do not collect phone number, home address or profile photos. Date of birth is collected only if the user enters it (from October 29, 2026), and is used only to work out the age bracket. Gender presentation and age bracket are used only to draw the main character of the pictures to resemble the user, and can be changed or set to "prefer not to say" at any time.
Article 2. Purposes of processing
- Storing diaries on the device and on the server, and keeping them in sync across devices
- Filling in the weather for today's entry with the current weather (if location access is allowed — the user can change it at any time)
- Creating the AI pictures, videos, text polishing and analyses that the user requests (gender presentation and age bracket are used only to draw the main character to resemble the user)
- Providing features such as life summaries, statistics and monthly recaps
- Confirming subscription and paint payments, handling refunds, and preventing abuse
- Fixing errors, improving the Service, and responding to customer inquiries
Article 3. Retention period and destruction
| Items | Retention period |
|---|---|
| Account, diaries, photos, AI output, avatar | Deleted 30 days after the user requests account deletion. During those 30 days the user cannot sign in, and can restore the account by contacting Support. Records stored on this device are deleted immediately upon account deletion. |
| Original selfie | Deleted right after the character image is made (if that fails, it is cleaned up automatically within one day at the latest). |
| Payment and paint records, store transaction IDs | 5 years — records of payment and of the supply of goods under the Act on the Consumer Protection in Electronic Commerce (「전자상거래 등에서의 소비자보호에 관한 법률」). They contain no diary content. |
| Access logs (IP) | 3 months — Protection of Communications Secrets Act (「통신비밀보호법」) |
| Records of operator access and actions (audit logs) | At least 1 year — Standards for Measures to Ensure the Safety of Personal Information (「개인정보의 안전성 확보조치 기준」) |
| Error information | Within 90 days |
Information whose retention period has ended is deleted so that it cannot be recovered. Server database backups are deleted after 30 days.
Article 4. Provision to third parties
The Company does not provide users' personal information to third parties. If an exception arises, such as a request from an investigative agency based on law, we respond only after verifying its legal basis.
Article 5. Entrustment of processing and transfer abroad
To operate the Service, we entrust processing to the companies below. We send AI providers only the specific diary entry and photos for which generation was requested, and we call them through APIs that do not use inputs for model training. For each entry, the user can turn on "Don't send this entry to AI" to exclude that entry from AI processing.
| Recipient (country) | Task entrusted | Items transferred | Timing and method | Retention |
|---|---|---|---|---|
| The Constant Company, LLC (Vultr) — servers in Seoul, Republic of Korea | Operating servers and databases | All items stored on the server under Article 1 | Continuously, over encrypted connections | Until the entrustment ends |
| Cloudflare, Inc. (USA) | Storing photo and picture files (R2), generating pictures (Workers AI), storing backups, controlling access to operator screens | Photos, pictures and videos, text used for generation, backups (with diary text kept encrypted) | Continuously and on request, over encrypted connections | Files: 30 days after account deletion; backups: 30 days |
| Wiro AI Inc. (USA) | Generating pictures, videos and characters | Generation request text, character images, selfies and character photos (only when making a character) | When generation is requested, over encrypted connections | Results are retrieved right after generation; according to the provider's policy |
| Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (China) | Polishing diary text, analyzing mood and themes, composing picture scenes | Text of the requested entry, character nicknames | On request, over encrypted connections | Right after the response; according to the provider's policy |
| OpenWeather Ltd. (UK) | Looking up the current weather | Approximate location (latitude and longitude to one decimal place) — account identifiers and diaries are not sent | When filling in the weather, over encrypted connections | Not stored by the Company; according to the provider's policy |
| RevenueCat, Inc. (USA) | Checking subscription and payment status | Account identifier, subscription and transaction information | At payment, over encrypted connections | Until the entrustment ends |
| Functional Software, Inc. (Sentry, USA) | Error logging | Error information, account identifier (excluding diary content) | When an error occurs | Within 90 days |
| PostHog, Inc. (USA) | Analyzing app usage flows | App usage events, account identifier, device information (excluding diary content) | While the app is used | 1 year |
Transfers for running the servers, storing files, recording errors, usage analytics and verifying payments (Cloudflare, Sentry, PostHog, RevenueCat) are needed to provide the service and happen whether or not you use AI. If you do not want your information transferred abroad to the AI providers (Cloudflare Workers AI, Wiro, DeepSeek), you can choose not to use AI features, or turn off AI processing for each entry. In that case, pictures, polishing and analysis will not work for that entry. If you do not allow location access, nothing is sent to OpenWeather and you choose the weather yourself. Sign-in with Apple, Google and Kakao is handled under the terms you have agreed to with each of those companies.
Article 6. Face photos and sensitive information
- Selfies are used only to create the picture character, and are deleted right after the character is made. We do not identify or authenticate people by their faces.
- When you create a character from another person's photo, we ask you to confirm that you have obtained that person's consent. We do not create the faces of real-life celebrities.
- You may write about sensitive matters such as health or beliefs in your diary. The Company does not separately classify that content, use it for advertising, or provide it to outside parties.
Article 7. Access by operators
Designated operators of the Company may view users' diaries, photos and pictures to handle customer inquiries, verify reports and abuse, and resolve outages. Every view and action is recorded in an audit log for each individual diary entry or file — who opened what, and when — and that log cannot be altered. Only authorized persons can open the operator screens.
Article 8. Automatic collection
To analyze usage flows, the app records events with an in-app identifier (PostHog). We do not use advertising identifiers (IDFA, advertising ID), and we do not show ads. The website (moabomb.com) does not use cookies.
Article 9. Users' rights
- You may at any time request access to, correction or deletion of, or suspension of processing of your personal information. In Me in the app, you can change your name, delete entries, and delete your account.
- Viewing and copying your own diary in the app is always free, regardless of your plan. Exporting everything at once as a file is a paid feature, but access requests made through Support are handled regardless of your plan.
- Requests can be made in the app or to cs@stationon.com, and we respond within 10 days.
Article 10. Children under 14
The Service may be used only by people aged 14 or older. We do not collect personal information from children under 14, and we delete such accounts when we become aware of them.
Article 11. Security measures
- Diary text is separately encrypted when stored on the server (AES-256-GCM). All communications are encrypted.
- Requests that would reach another user's data are blocked both in the database and in the server code, and these rules are upheld by automated tests.
- Operator access is limited to the minimum number of people, and every view is recorded. Secret keys are stored separately from the code.
Article 12. Privacy officer
Privacy officer: 이창우 (CEO) · cs@stationon.com · 070-7954-8939
Article 13. Remedies for infringement
If you need advice about an infringement of your personal information, you can contact the agencies below.
- Personal Information Dispute Mediation Committee (개인정보분쟁조정위원회) 1833-6972 (kopico.go.kr)
- Personal Information Infringement Report Center (개인정보침해신고센터) 118, no area code needed (privacy.kisa.or.kr)
- Supreme Prosecutors' Office (대검찰청) 1301 · Cyber Investigation Bureau, Korean National Police Agency (경찰청 사이버수사국) 182
Article 14. Changes
If this policy changes, we will notify you in the app and on this page 7 days before the change takes effect (30 days before, if the change is unfavorable to users).