この英語版はご参考のために提供しています。正式には韓国語版および英語版が優先します。
knoriai (the “Service”) treats your personal data with care. This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it, the legal bases we rely on, and the privacy rights you have, wherever you are located.
Effective date: 3 August 2026 (as amended) · Original effective date: 3 July 2026
Your personal creative records, works, artist notes, and portfolio are stored by default in local storage on your device (SQLite + files). Data is transmitted to and stored in the cloud only when you use the following features:
We process your personal data on the following bases:
We use the following processors under appropriate data-processing agreements. We do not sell your personal data, and we do not share it with third parties except with your consent or where required by law.
Visibility inside a shared room — content you post to a shared room, and the display name and icon you use there, are visible to that room’s members. This disclosure results from your own posting and participation and is distinct from the Company sharing your data with a third party. In addition, the feature by which a room administrator analyses a member’s records with AI works only if that member has consented in that room; where it does, those records fall within the international transfer described in §4.
We are established in the Republic of Korea, so your data is generally processed in Korea. The European Commission has recognized Korea as providing an adequate level of data protection (adequacy decision of 17 December 2021), so transfers from the EEA to Korea do not require additional safeguards such as Standard Contractual Clauses. Two further transfers occur when you use AI coaching or make a paid purchase, described below.
1) AI coaching (Anthropic)
2) Payment & tax processing (Paddle)
Account and collaboration data is stored in our processors’ data centres, which are outside Korea: Supabase in Australia and Railway (the coaching and payment relay server) in the United States. The categories, purposes, and retention periods are those set out in section 3 (processors) and section 6 (retention) above.
AI-coaching conversations may include special-category data (e.g. about health or mental health). We process such data only for coaching and safety purposes and only on the basis of your explicit consent, obtained before your first use of AI coaching. If you do not consent, coaching is unavailable but all other features work normally.
We delete personal data without undue delay once its purpose is fulfilled or its retention period expires. Key retention periods:
You can close your account directly in the app under Settings > Account; doing so deletes your linked personal data (the erasure right). The “statutory retention duty” items above are the exception: they are kept after closure, stored separately together with the email address needed to identify them, and deleted automatically when the statutory period ends.
Our websites may use cookies to keep you signed in, provide convenience, and gather basic usage statistics. In the EEA/UK we ask for consent before setting non-essential cookies, and you can refuse or delete cookies in your browser settings (some features such as sign-in may then be limited). Our desktop and mobile apps use secure device storage to keep your session and do not perform advertising tracking.
You (or your legal representative) may request access, rectification, erasure, restriction, portability, and object to processing, and you may withdraw consent at any time. You can correct account information and close your account (erasure) directly under Settings > Account; for other requests, contact us at the address below and we will respond within the period required by applicable law. We may verify your identity, and may limit a request where the law provides a basis to do so.
Depending on where you live, you may also have the right to complain to your local data protection authority.
AI-coaching responses are a supportive, reference-only aid for your creative work and learning; they do not constitute a fully automated decision producing legal or similarly significant effects on you. Access to features based on usage or plan follows our Terms and pricing. Where applicable law treats a specific processing activity as an automated decision, you may object to it and request an explanation.
Privacy contact / rights requests: support@knoriai.com
The Service is intended for users aged 14 and over, and we restrict sign-up below that age. The Service is not directed to children under 13, and we do not knowingly collect their personal data; if we learn that a user is under 13, we will restrict the account and delete the related data.
We apply technical and organizational measures including encryption in transit (HTTPS), access control (row-level security and least privilege), local-data encryption, and end-to-end encryption for personal sync. Secrets such as AI API keys are never bundled into the app and are held only in server environment variables; access to personal data is limited to the minimum necessary personnel.
Data controller: 노리에이아이 유한회사 · Representative: 김주현
Address: 경기도 파주시 조리읍 탑삭골길 128, 비동
Business registration number: 754-86-04029
Mail-order business registration: 제2026-경기파주-3165호
Contact: support@knoriai.com
We may update this policy as laws or the Service change. We will post the effective date and the changes on this page, announce material changes before they take effect, and, where necessary, obtain your consent again. The current effective date is 3 August 2026 (as amended); the original effective date was 3 July 2026.
What changed on 3 August 2026 — (1) following the move to Paddle as Merchant of Record, payment-related data categories, processors, and international transfers are now stated separately from AI coaching; (2) the statutory retention periods for transaction, payment, and contract records under Korean e-commerce consumer-protection law (5 / 5 / 3 years) are now stated in section 6; (3) section 6 now discloses that, for those statutorily retained records only, we also retain your email address to the extent needed to identify the counterparty to the transaction, and explains the separate storage and automatic deletion that applies; (4) section 6 now states that the cloud-synced copy of your personal creative records is deleted immediately when you close your account; (5) a notice about automated decision-making was added.
What changes on 30 August 2026 — regarding the shared-room feature by which a room administrator analyses a member’s records with AI to prepare feedback: (1) section 2 adds that purpose and states that it is processed only where that member has consented in that room; (2) section 3 explains how visibility inside a shared room differs from the Company sharing data with a third party; (3) section 4(1) reflects shared-room AI analysis in the data transferred, the purpose, and how to refuse (off by default, withdrawable at any time on the room profile screen). It takes effect together with Article 14-2 of the Terms of Service (special terms for shared rooms) on the same date.