AGES 14+ (18+ IN US, UK, BR, IN, MX)
Privacy policy
DecoLog · JOYAI · Effective 12 November 2026 · Version 2.4
Use and consent
When you first open the app you agree to the Terms of Service (including the age requirement) and confirm this privacy policy. Signing in does not ask for the same agreement again. If you do not agree, choose “Use device records only, without agreeing” to record on this device only; sign-in, AI, subscriptions and ads are then not used. Optional AI international transfer is chosen separately in settings, and reading a policy is not consent. The minimum age is 14, or 18 in the United States, United Kingdom, Brazil, India and Mexico.
Sharing and external services
Records of the items you choose to share, including earlier records, notes and records you add later, are visible to group members. Personal records and photos are not sold or supplied for advertising. Ads use non-personalized requests. Sign-in, payment and advertising providers also apply their linked policies.
| Device records | Buttons, values, times, notes, photos and settings: recording and display. Stored on your device by default. |
|---|---|
| Sign-in | Google/Kakao identifiers and app account, authentication and security data: identity and access management. Provider passwords are not received. |
| Device saving and legacy account copies | Personal records, buttons, settings and images save automatically on this device. The latest app does not offer account backup or personal-record cloud sync. Records of the items you choose to share, including earlier records, go to the group service. Server copies saved by older versions are not automatically restored or uploaded again and remain within account-deletion scope. |
| Groups · optional | Selected button definitions, shared records and notes, names, author, member, permission and change data: shared use and synchronization. |
| Subscriptions and support | Purchase proof, benefits, account links and processing data: purchase validation, restoration and abuse prevention. Reply address, minimum verification data and handling history: support. Google Play handles card details. |
| Advertising | Google AdMob IP address, approximate location, advertising/device identifiers, interactions and diagnostics: advertising, analysis and fraud prevention. No precise-location collection feature. |
| Basis for account processing | Account identifiers, authentication and session data needed for the contract are processed and stored with AWS in Japan over HTTPS at sign-in and account use. This outsourced processing is based on contractual necessity under PIPA Article 28-8(1)(3), distinct from optional AI international-transfer consent. Local recording is available without an online account. |
| Recipient and contact | Amazon Web Services (AWS) · aws-korea-privacy@amazon.com. Outsourced account, group and subscription processing/storage. No new personal-record backup or cloud sync. |
|---|---|
| Countries | Japan: app server, account, groups and subscription verification. |
| Data and purposes | Account identifiers, linked identities, authentication/session data, group content from the items you choose to share (including earlier records and notes) and subscription-verification information are used to provide those services. |
| When and how | Sent over HTTPS when using sign-in, account, group or subscription services. Personal records are not automatically uploaded. |
| Retention | Account/group processing lasts until its purpose ends or account deletion. Legacy copies, shared records, purchase verification and recovery copies follow the retention exceptions below. |
| Refusal and withdrawal | Device recording remains available without an online account. Withdraw required account consent/delete through identity/final confirmation in Data management or the contact route below. |
| Other processors | Google LLC (United States and other countries): sign-in, Google Play payments and advertising (AdMob) · data sent: IP address, advertising identifier, purchase-verification data. Kakao Corp. (Republic of Korea): Kakao sign-in. To avoid these transfers, do not use the related features (sign-in, subscriptions, ads) or request account deletion. Linked provider policies cover support, security and subprocessors. |
| Device data | Until you delete it. You manage exported files. |
|---|---|
| Accounts, shared records and legacy copies | Until their purpose ends, withdrawal or account deletion, subject to the shared-record and purchase-data exceptions below. |
| Logs and support | General error logs: up to 30 days. Minimum rights/support handling history: 90 days after closure. Extra verification material: deleted after verification. |
| Recovery copies | Targets: 7 server days and 30 days for the operator's encrypted copies. Device or job outages may delay deletion. |
| Unused photos and processing history | Unused photos and processing history in legacy server copies follow a 30-day cleanup criterion. Photos within legacy account copies remain within withdrawal/account-deletion scope; there are no new automatic uploads. |
AI processing and international transfer
| Data and purpose | AI provides the button draft or edit you request, using your request, follow-up answers, selected button name/settings and language. It does not automatically send record history, photos or passwords. Image generation is not offered in the latest app conversation. AI international transfer is optional; withdrawal stops new and in-flight requests. Lifestyle-record analysis and model training are not offered. |
|---|---|
| Recipient and contact | Amazon Web Services (AWS) · aws-korea-privacy@amazon.com |
| Countries | Japan: app server, accounts, shared records and AI button helper. |
| When and how | Each app request is sent through the Japan app server over encrypted connections (HTTPS). |
| Retention | The app server does not retain AI request/answer text. Usage, account and processing metadata follows request-triggered cleanup against a 90-day criterion, with possible delay. AWS security/retention terms also apply; zero retention is not promised. Saved drafts remain on the device. |
| Refusal and withdrawal | Use manual editing without AI. Withdraw under Privacy and device data to stop new transfers. Requests already sent cannot be recalled. Do not enter personal or health information. |
| Legacy-app image requests | The latest app does not offer image generation. Images separately consented to and requested by older versions were or may be processed by AWS in the United States; the earlier notice, withdrawal, retention and deletion scope still apply. |
Retention and deletion exceptions
Account deletion removes account links, sessions and legacy account copies. When a group owner disbands a group, its shared records, shared items, members and invitations are deleted at once and cannot be recovered (evidence copies tied to an open report are held separately only until the case closes, then destroyed). A group that was archived because its owner deleted the account has the same information (shared records, shared items, members and invitations) deleted from the server when its last member leaves, or at the latest within 90 days after archiving, and it cannot be recovered. Deleted data stays in encrypted backups for up to 30 days and is then removed. Shared records of groups that are not disbanded or archived may remain for other members; request correction or deletion of personal content separately. Minimum purchase-reuse prevention data is destroyed within 90 days after rights end and reuse is no longer possible. Where the law requires retention (for example, contract and payment records for 5 years and consumer complaint or dispute records for 3 years under Korean e-commerce law, and connection records for 3 months under the Protection of Communications Secrets Act), the data is kept separately for that period and then destroyed; the reason and period are explained. Completed deletions are reapplied to restored copies.
Destruction procedure and method
Personal information whose purpose is fulfilled or whose retention period has ended is destroyed without delay after the responsible staff member confirms the items. Electronic files are deleted by a method that prevents recovery; records stored on your device can be deleted yourself with the app’s device-data deletion. Information that must be kept by law is held separately and destroyed the same way when the period ends.
Advertising identifiers and automatic collection; how to refuse
The app’s ads (Google AdMob) may automatically collect an advertising identifier, IP address and device information. The app requests non-personalized ads only. To refuse: on Android, open Settings → Google (or Privacy) → Ads and choose “Delete advertising ID” or turn off ad personalization (menu names vary by manufacturer). Where a consent tool is provided, you can change advertising privacy options in the app’s privacy settings. Recording still works if you refuse ads, and ads are not shown while subscribed.
Security measures
(1) HTTPS encryption in transit; (2) server access limited to operating staff with key-based login only; (3) encrypted operational backups; (4) provider passwords are not received and sign-in flows and sessions have short expiry; (5) a designated privacy officer and contact channel.
Your rights and contact
Request access, correction, deletion, restriction or consent withdrawal under Privacy and device data or Data management or through the deletion page below. You can also email support@robotupgrade.win. A first reply is sent within 3 business days, followed by ownership and scope verification. Do not send passwords, tokens, identity-document copies or all your records. Account deletion, device deletion and Google Play cancellation or refunds are separate.
Remedies for infringement
For privacy-infringement reports and advice in Korea you can contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301) and the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).
Country notices
United Kingdom: processing is based on contract (account, groups, subscriptions) and consent (optional AI, advertising consent tool). Data may be transferred to Japan (AWS) and the United States and other countries with safeguards such as the AWS DPA. You may request access, correction, deletion, restriction, portability and objection, and may complain to the Information Commissioner’s Office (ico.org.uk). United States: the app does not use web tracking cookies and does not separately respond to Do Not Track (DNT) browser signals; limit the advertising identifier through the device settings above. Users in other countries have the rights and complaint routes of their country of residence and can write to support@robotupgrade.win.
Safeguards and updates
Confirm authority and consent before sharing other people's or sensitive health information. The service is for ages 14+ (18+ in the United States, United Kingdom, Brazil, India and Mexico). Material changes are announced with an effective date; any additional consent is requested separately. Privacy officer: 조원규 / 매니저 (Manager), support@robotupgrade.win. Initial effective date: 23 October 2026.
Provider policies
Contact JOYAI
DecoLog support · Privacy officer: 조원규 / 매니저 (Manager)
support@robotupgrade.winOperator: JOYAI (조이에이아이) · 대한민국 10568 경기도 고양시 덕양구 통일로 343, 5층 503-a004호(신원동, 삼송 메디피아)
한국어 · 日本語 · Español · Português (Brasil)