Terms & Policies

1. Purpose

These terms govern the conditions and procedures for using the wiivv service (the "Service") provided by TheAraLab Inc. (the "Company"), and the rights and obligations of the Company and users.

2. The Service

The Company delivers questions to parents via KakaoTalk notification messages, transcribes and organizes the voice or text answers received, preserves them in the memory vault (The Vault), and produces keepsake records (eBooks and physical books) based on them. Additional features may include photo and comment contributions by family members and scheduled anniversary voice messages.

3. Membership

Sign-up is done via Kakao Login or email registration, and users must provide accurate information when registering and using the Service. The Company may restrict use of the Service where a violation of applicable law or these terms is confirmed. Users may close their account at any time from the dashboard, and doing so cancels any active subscription.

4. Registering family information

Before registering the names and phone numbers of parents or family members, the subscriber must directly confirm those individuals’ consent to use of the Service and to the collection and use of their personal information. Participation links issued to parents and family members are accessible without login, so care must be taken not to share them with third parties. If the memory vault share link becomes known unintentionally, a new link can be issued from subscription management in the dashboard, which invalidates the previous one.

5. Purchases and payment

The Company sells digital content (such as eBooks), the Vault subscription (monthly), and physical book products. Payments for digital products are processed by Paddle, the Company’s Merchant of Record, and displayed prices are the final amounts including VAT and other applicable taxes. Payments for physical book products are processed by a domestic payment gateway (PG) designated by the Company. A purchase contract is formed when payment is completed.

6. Subscription auto-renewal and cancellation

The Vault subscription renews automatically each month from the date of first payment, and the monthly fee is charged automatically to the registered payment method upon renewal. You may cancel at any time via subscription management in the dashboard or by contacting support@wiivv.io; upon cancellation, the Service remains available until the end of the period already paid for, and billing stops from the next billing date.

7. User obligations

Users must provide accurate information and may not use the Service in any way that violates applicable law or infringes the rights of others.

8. Ownership of content

All answer data — voices, photos, and stories left by users and their families — is owned by the user. The Company processes it only within the scope needed to provide the Service, such as transcription, story editing, and book production, and never uses it to train AI models.

9. Retention of service data

Without an active Vault subscription, live features such as the memory vault are suspended. Hosted data such as voice recordings and photos is permanently deleted 60 days after your subscription ends, or — if you never started a subscription — 60 days after your eBook is completed. We send one advance notice before deletion, and subscribing before then keeps your data intact. Ownership of purchased eBook (PDF) deliverables is retained regardless of subscription status or deletion.

10. Service interruptions and compensation

(1) The Company may temporarily suspend the service for system maintenance or equipment failure, and will give notice through the service or by email at least 24 hours in advance. Where advance notice is impossible, such as during urgent incident response, notice will be given without delay afterwards. (2) Vault subscribers may receive the following compensation where the service is interrupted or degraded due to the Company’s fault: 1. where, without advance notice, the service is suspended for three days or more, or cumulative interruption exceeds 72 hours in one month: termination of the contract and refund of the fee for the remaining period; 2. where, without advance notice, an interruption of four hours or more occurs: a free extension equal to three times the interruption; 3. where advance notice was given but the interruption exceeds ten hours: a free extension equal to the excess. (3) Interruptions caused by force majeure such as natural disasters, or by the user’s own fault, are excluded from the calculation in paragraph 2. Where the duration is disputed, it is counted from the time the user notifies the Company. (4) The Company will take reasonable measures to preserve recorded stories, voice and photos even while the service is interrupted.

11. Limitation of liability

The Service is provided within the scope permitted by law. The Company is not liable for damage arising from causes beyond its control, such as force majeure or the user’s own fault.

12. Changes to the terms

The Company may amend these terms as needed and will notify users of material changes by email or in-service notice before they take effect.

13. Governing law and disputes

These terms are interpreted under the laws of the Republic of Korea, and disputes related to the Service are subject to the court with jurisdiction over the Company’s location as the court of first instance.

1. Data collected and how

The subscriber’s nickname, email, and phone number are collected as required items needed for member identification and KakaoTalk notification delivery. During Kakao Login the nickname and email are provided by Kakao from the Kakao Account with required consent; with email registration, the email address is entered directly and verified with a one-time passcode (OTP) — no password is collected. The phone number needed for notifications is entered directly during service signup, regardless of sign-in method. The names and phone numbers of parents and family members are registered directly by the subscriber after confirming those individuals’ consent. Answer content such as voice recordings, photos, and story text is collected as answers and uploads are submitted through participation links. During Kakao Login we also receive the URL of your profile photo as an optional consent item and use it only for on-screen display; the image file itself is not stored by the Company — your browser loads it directly from Kakao’s servers (you can sign in without consenting, in which case an automatically generated default image is shown). The memorial guestbook is written without an account, and we store only the display name entered by the writer and the message text — we do not collect real names, contact details or any other identifying information, and we check the visitor’s IP only momentarily for spam prevention without storing it. For paid purchases, full payment credentials such as card numbers and expiry dates are not collected or stored by the Company — they are handled directly by our payment provider. We do, however, receive and retain the card issuer name and a masked portion of the card number from the payment provider in order to display them on the subscription management screen, and destroy them without delay once the subscription ends.

2. Purpose of use

Collected personal information is used for member identification and service delivery, sending questions and notifications via KakaoTalk notification messages, transcribing voice answers and organizing stories, operating the memory vault and producing books, and handling payments, refunds, and consumer inquiries. In addition, we use device and browser information and records of the pages you view in order to analyse how the homepage and signup screens are used and to promote and advertise the Service. This purpose applies only where you have consented, and consent can be withdrawn at any time (Article 6). Answer content — what parents record and the photos family members upload — is never used for this purpose.

3. Processing outsourcing and cross-border transfer

The following work is outsourced to operate the Service, and some data is transferred abroad over the network in the course of use, and stored there. ① KakaoTalk notification delivery and speech-to-text transcription: NAVER Cloud Corp. (Korea) — phone numbers and voice data. Notification delivery is sub-contracted by NAVER Cloud Corp. to Kakao Corp. ② AI processing to organize story text and edit book manuscripts: Anthropic PBC (USA, privacy@anthropic.com) — answer text, destroyed once processing is complete and never used to train AI models. ③ Cloud database, storage, and hosting: Supabase Inc. and Vercel Inc. (USA) — the collected items generally, retained for the periods in this policy. ④ Digital product payments: Paddle (Paddle.com Market Ltd., UK) as Merchant of Record — email address, order details, and payment information. ⑤ Physical book payments: a domestic payment gateway (PG) designated by the Company. ⑥ Email verification (OTP) and service email delivery: Resend, Inc. (USA) — email address, destroyed once the delivery purpose is fulfilled. ⑦ Analysis of site usage and measurement of advertising performance: Google LLC (USA) — online identifiers such as cookie IDs, device and browser information, and records of the pages viewed, using Google Analytics 4, Google Tag Manager, and Google Ads. ⑧ Advertising performance measurement: Meta Platforms Ireland Ltd. (Ireland) — online identifiers such as cookie IDs, device and browser information, and records of the pages viewed. Names, phone numbers, email addresses, and answer content are never passed to ⑦ or ⑧, and no collection takes place at all on the pages where parents answer questions, where family members upload photos, in the memory vault, or in the dashboard. The legal basis for cross-border transfer is Article 28-8(1)3 of the Personal Information Protection Act (processing consignment and storage for contract performance and user convenience, with the matters in Article 26(1) disclosed in this policy); transfers occur on an ongoing basis over the network as the Service is used, with encryption in transit. Users may object to cross-border transfers via the data protection officer. However, because our database, storage and hosting all operate through overseas providers, objecting makes sign-up and use of the Service impossible. Transfers for the analytics and advertising purposes in ⑦ and ⑧ take place only where you have consented; you can refuse them by category in the consent banner, and refusing places no limits on your use of the Service. Changes to recipients or the scope of outsourced work are disclosed through this policy.

4. Third-party provision

Except for the outsourcing and merchant-of-record arrangements in Article 3, and the transfers to advertising and analytics platforms under ⑦ and ⑧ of that Article which take place only with your consent, the Company does not provide personal information to third parties without the user’s consent. What reaches those platforms is limited to online identifiers such as cookie IDs, device and browser information, and records of the pages viewed — names, phone numbers, email addresses, and answer content such as recordings, photos, and stories are never sent.

5. Storage and destruction

Personal information is destroyed without delay upon account deletion or withdrawal of consent. However, under the E-Commerce Act and related laws, records of contracts, order withdrawals, and payments are retained for 5 years, and records of consumer complaints and dispute handling for 3 years. Answer content such as voice recordings and photos is permanently deleted after the 60-day grace period following the end of the subscription, excluding purchased book/PDF deliverables. Electronic files are deleted so that they cannot be recovered, and any copies remaining in backups are removed in turn according to the backup retention cycle.

6. Cookies and automatic collection

The Service uses two kinds of cookies. ① Necessary cookies — required to keep you signed in and to remember your language and similar settings; these cannot be refused. ② Analytics and advertising cookies — used to count how the pages are used and to measure advertising performance, covering Google Analytics 4, Google Tag Manager, Google Ads, and Meta’s advertising measurement tools. Analytics and advertising cookies are set only where you have consented, and only on the homepage, legal notices, sign-in, signup, and payment screens. They are not used on the pages where parents answer questions, where family members upload photos, in the memory vault, or in the dashboard. You choose by category in the consent banner shown on your first visit, and you can withdraw consent at any time afterwards by deleting or blocking cookies in your browser settings or by contacting the data protection officer below. Refusing analytics and advertising cookies places no limits on your use of the Service; blocking necessary cookies in your browser will, however, make features requiring sign-in unavailable.

7. Security measures

The Company takes the following measures to process personal information safely. ① Encryption in transit — all communication with the Service uses HTTPS/TLS. ② Encryption at rest — the database and the storage holding voice and photo content are operated with the storage-level encryption provided by our cloud providers. ③ Access control — voice and photos are kept in non-public storage, and the server issues a time-limited temporary link only at the moment viewing is required. That link expires automatically one hour after it is issued. ④ Least privilege — the number of people and the scope of rights that can access personal information are kept to a minimum.

8. Sensitive information in answers, and who can see them

Because this service records life stories, answers may contain sensitive content such as health and medical history or religious beliefs. Completed stories are shared with family members through the memory vault link that the subscriber distributes, and anyone with that link can view them without signing in. The Company does not separately classify or analyse such content, and does not use it beyond the original purposes of organising stories and producing the book. You may make any story private at any time — the subject can do so from “Past stories” on the question page, and the subscriber from the dashboard. A story set to private is excluded from the memory vault and from books produced afterwards. It cannot, however, be removed from an eBook (PDF) that has already been published, so please set it before publication. The memory vault also shows photos uploaded by family members together with the display name of whoever uploaded them; photos cannot be set to private but can be removed individually. You may request deletion of a specific answer or photo at any time, and the subscriber can delete them directly from the dashboard. The subject can delete photos they uploaded themselves directly from the question page.

9. Automated processing

The Company automatically transcribes voice answers (speech recognition) and applies automated refinement that only smooths fillers and misrecognitions, then uses the result to compose stories and book manuscripts. Speech patterns, dialect, vocabulary and emotional expression are preserved as a matter of principle, and the original transcript is kept unchanged and stored separately. You may request an explanation of any automated refinement, or ask that a person handle it again. In addition, voice and photo data stored with us is deleted automatically 60 days after a subscription ends, with one notice sent before deletion.

10. Children under 14

The Company does not collect personal information from children under 14. If such information is found to have been collected, it is destroyed without delay.

11. Right to decline consent

Users have the right to decline consent to the collection and use of personal information. However, declining consent to required items may restrict sign-up and use of the Service.

12. User rights

Users, as well as parents and family members whose information has been registered, may at any time request access, correction, deletion, suspension of processing, and withdrawal of consent regarding their information, and the Company acts without delay in accordance with the law. Requests are received via the data protection officer below. Because the names and phone numbers of parents and family members are obtained from the subscriber, on request we will promptly inform you of the source, the purpose of processing, and your right to demand suspension of processing or withdraw consent. Deletion requests cover guestbook entries as well as answers and photos. You may close your account directly from the dashboard; doing so cancels any active subscription and destroys stored data (except order and payment records the Company must retain by law). If you continue to use the Service while requesting only suspension of processing, processing essential to providing the Service may continue.

13. Data protection officer

Name: Youngjun Park · Email: support@wiivv.io · Phone: +82 10-7137-6977. Handles personal-information inquiries and requests to exercise rights.

14. Remedies for infringement

To report or seek advice about a personal-information infringement, contact the following Korean authorities: Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center (118, privacy.kisa.or.kr), Supreme Prosecutors’ Office (1301, www.spo.go.kr), National Police Agency (182, ecrm.police.go.kr).

1. Withdrawal for digital content

If you purchase digital content such as an eBook, you may withdraw your order within 7 days of the date the content is made available, in accordance with the Act on Consumer Protection in Electronic Commerce. Before any answers have been recorded, you receive a full refund. Once answers have progressed, we refund the balance after a deduction proportional to the question rounds completed (no penalty fee). Refunds are restricted once storybook editing has begun.

2. Subscription cancellation and refunds

You may cancel the Vault subscription at any time; the Service remains available until the end of the period already paid for, and billing stops from the next billing date. Monthly fees already paid are refunded after deducting the amount corresponding to the days used up to cancellation plus 10% of the fee for the remaining period. If you cancel and request a refund within seven days of the payment date, however, only the amount for the days used is deducted, with no penalty. Where cancellation is due to the Company’s fault, we refund the fee for the remaining period plus an additional 10% of that amount.

3. Exception for made-to-order products (physical books)

For eBooks and physical books individually produced from a user’s voice and stories, withdrawal may be restricted once production has begun. However, if the product is defective or differs from its description or advertising, we will provide a full refund or remake it.

4. Refund processing

Refunds for digital products are returned to the original payment method via Paddle, our Merchant of Record; refunds for physical book products are returned via the domestic payment gateway (PG) that processed the payment. Refunds are processed within 5–10 business days. Please submit refund requests to support@wiivv.io along with your order details.