Privacy Policy

Special Social Store (the "Company") values the privacy of users of the ORVIA service (the "Service") and complies with applicable laws, including the Personal Information Protection Act of Korea (PIPA), GDPR (EU), CCPA (California), and APPI (Japan).

Article 1 — Information We Collect

1. Sign-up and Sign-in

• Email sign-up: Email address, password (passwords are handled only by our authentication service, Firebase Authentication, and are not stored directly by the Company)
• Google sign-in: Email address, Google account name (used as your nickname), Google profile photo URL

2. While Using the Service

• Nickname, profile photo (the image you upload, if you set one)
• Personality type (personality test results), notification times, language setting, message tone and preferred healing style
• Saved content, tags, and notes you write
• Breathing meditation records
• Content reports: reason for the report, the reported message, and the date and time of the report
• Whether you signed up for subscription launch updates
• Consent records: items consented to, date and time of consent, and consent version

3. Mood Records (Separate Consent)

• Items collected: Mood check-in records, content reaction (like/dislike) records
• Purpose: Generating and personalizing healing messages based on your personality and mood
• Retention: Until account deletion (deleted immediately upon account deletion)

4. Automatically Collected Information

• App usage logs (screen views, feature usage, time spent on screens, etc.)
• Device information (model, OS version, app version, language) and country of access (approximate location)
• Device token for push notifications (FCM)
• The Company does not collect advertising identifiers (Advertising ID).

Article 2 — Purpose of Collection and Use

• User identification, service provision, and account management
• Generating AI-based personalized healing messages and translating them when you change languages
• Push notification delivery
• Reviewing content reported by users and improving service quality
• Service usage statistics and error fixing

Article 3 — Retention Period

• Upon account deletion, all personal information — including account information, mood records, saved content, and content reports — is deleted immediately.
• App usage statistics (Google Analytics for Firebase) are processed in a form that does not directly identify individuals and are deleted after a maximum of 14 months.
• Exceptions apply only where retention is required by applicable law.

Article 4 — Disclosure to Third Parties

We do not provide your personal information to third parties, except with your prior consent or as required by law.

Article 5 — Processing Entrusted to Third Parties and International Transfers

We entrust the processing of personal information as described below to provide the Service, which constitutes an international transfer of personal information. These transfers are entrusted processing and storage necessary to conclude and perform our service agreement with you, and are made by disclosure in this Privacy Policy in accordance with Article 28-8(1)(3) of the Personal Information Protection Act of Korea.

1. Google LLC (Firebase)

• Contact: googlekrsupport@google.com
• Destination: United States and other countries where Google data centers are located
• Data transferred: Account information, service usage information, mood records, and automatically collected information described in Article 1
• Timing and method: Transmitted over the network as needed while you use the Service
• Purpose: Authentication, data storage, profile photo storage, account deletion processing, push notifications, and app usage statistics
• Retention: Until account deletion (app usage statistics: up to 14 months)

2. OpenAI, L.L.C.

• Contact: privacy.openai.com
• Destination: United States
• Data transferred: Personality type, a message direction reflecting your mood that day, time slot, message tone and style settings, recent AI message text (to avoid repeating the same expressions), and text to be translated when you change languages (AI messages, notes and tags you wrote)
• We do not transmit information that directly identifies you, such as your email, name, or user identifier.
• Timing and method: Transmitted in real time over the network when messages are generated or translated
• Purpose: Generating and translating AI healing messages
• Retention: Retained and then deleted in accordance with OpenAI's API data policy after the request is processed

3. If You Do Not Wish Your Data to Be Transferred

You may request that international transfers stop by contacting hello@orvia.care. However, because these transfers are essential to providing the Service, refusing them will limit your use of the Service and may be handled as an account deletion.

Article 6 — Your Rights and How to Exercise Them

You may exercise the following rights at any time:

• Request access to, correction, deletion, or suspension of processing of your personal information
• Withdraw consent — you can withdraw your consent and delete all personal information using the in-app account deletion feature.
• Saved content and tags can be deleted individually from the History screen.
• Right to data portability (GDPR) — You may request a copy of your personal data in a structured format by contacting hello@orvia.care.
• Right to opt out of sale (CCPA) — We do not sell personal information.

You can exercise these rights through in-app features or by contacting hello@orvia.care, and we will act without delay.

Article 7 — Children's Privacy

The Service is available only to users aged 14 and over, and we confirm age at sign-up. If we become aware that personal information of a child under 14 has been collected, we will delete it without delay.

Article 8 — Automatic Data Collection Tools

We use Google Analytics for Firebase in the app to analyze service usage statistics.

• Collected by: Google LLC
• Items collected: App usage logs, device information, and country of access described in Article 1(4)
• Purpose: Service usage statistics and feature improvement
• Retention: Up to 14 months

We do not collect advertising identifiers and do not use the collected information for advertising.

Article 9 — Security Measures

• Access control: We apply database security rules so that users can access only their own data.
• Encryption in transit: All data is transmitted over encrypted connections (HTTPS).
• Password protection: Passwords are handled by our authentication service and are not stored directly by the Company.

Article 10 — Privacy Officer

• Name: Hee Won Lee
• Title: CEO
• Contact: hello@orvia.care

For reports or consultations regarding privacy violations, you may also contact the following Korean authorities:

• Personal Information Dispute Mediation Committee (www.kopico.go.kr / +82-1833-6972)
• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)

If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

Article 11 — Changes to This Policy

If this Policy changes, we will notify you via in-app notice or email at least 7 days before the effective date. Changes that significantly affect your rights will be notified at least 30 days in advance.

Contact: hello@orvia.care

Effective date: October 22, 2026 | Company: Special Social Store