Keepin Inc. ("we", "us") operates the Duorang mobile application ("the Service"). This policy explains what personal data we collect, why, who processes it and what rights you have.
Please note first — your conversations with Yuri or Minsu are never stored on our servers. They stay on your phone, and neither your spouse nor we can read them (Section 4).
This is an English translation provided for convenience. The Korean version is the governing text.
We process personal data only for the purposes below. If a purpose changes, we will ask for your consent first.
We collect only what the Service needs.
| Method | Data collected | Type |
|---|---|---|
| Phone number | Phone number, SMS verification record | Required |
| Google account | Google account identifier, email address, name, profile picture (where provided) | Required |
| Kakao account | Kakao member number, nickname | Required |
| All methods | Internal user identifier (UID), sign-up and sign-in timestamps | Required |
We receive only the items listed above from the sign-in provider. We never collect the password of that account.
| Category | Data | Notes |
|---|---|---|
| Profile | Display name, role (wife/husband), language, interests, profile picture, couple code, sharing settings, self-introduction (age, MBTI, blood type, hobbies, interests) | Required (picture, interests and self-introduction optional). Your self-introduction is used only in your conversations with Yuri or Minsu and is never shown to your spouse. |
| Consent record | Version of the Terms and Privacy Policy you agreed to, and the time of agreement | Required — the minimum record needed to evidence consent |
| Couple connection | Invitation code, both user identifiers, your spouse's display name, connection time | Required |
| Couple chat | Message text and its translation, sender, sent and read timestamps, attached photos, videos and files with file names | When used |
| Video calls | Call request, accept and decline states with timestamps, participant identifier | When used. The audio and video of the call itself is not stored. |
| Notifications | Push token (FCM), notification settings | When notifications are enabled |
| Location | Approximate or precise location (latitude, longitude) | Optional. This feature is disabled in the current version — no location is collected or transmitted. If it is enabled later we will ask for separate consent and it will default to off. |
| Payment and pass | Purchase identifier issued by the app store (purchase token or transaction ID), payment platform (Google Play / App Store), product and plan identifier, subscription state, order number, pass expiry date, any promotional code entered and when it was granted | When you use paid features. Card numbers and other payment details are handled by the app store; we never collect or store them. |
| Usage metric | Total time spent talking, per day, in seconds | When you use AI conversation. We record only how long you spoke, never what was said. It is stored on our servers so it survives reinstalling the app or changing phones. It is never shown to your spouse. |
| Device and operational data | App version, OS version, device model, access time, request status and error codes, app crash logs and diagnostics | Generated automatically. Crash and diagnostic data is used only to find the cause of errors and improve stability. Conversation and translation content is never written to server logs. |
The AI features (conversation with Yuri or Minsu, speech recognition, speech synthesis, chat translation, call subtitles and dubbing) are delivered by the AI providers listed in Sections 6 and 7, either through our backend or directly from the app.
The following never leaves your phone. It is not sent to our servers and is not available to your spouse.
You can view, edit and delete this data inside the app. Deleting the app or your account removes it from the device completely.
The app disables automatic backup. Even if you turn on a phone-level backup (such as Google backup), this data is not included, so it cannot be recovered and read by someone who shares your account. The trade-off is that your conversations and memories do not move to a new phone, because no copy exists on our servers.
Health data is never sent to our servers and is never shared with your spouse. The Service does not diagnose health conditions or provide medical advice.
We delete personal data as soon as the purpose is fulfilled. Electronic files are deleted irrecoverably; any printed material is shredded or incinerated.
| Data | Retention |
|---|---|
| Account, profile, profile picture, consent record | Deleted immediately when you close your account |
| Couple connection data | The items you registered are deleted when the connection ends or you close your account |
| Couple chat messages | The entire chat room (messages, read receipts, call signals) is deleted immediately when the couple is disconnected or either partner closes their account |
| Chat attachments (photos, videos, files) | Automatically deleted 14 days after upload (immediately when the couple is disconnected or an account is closed) |
| Push token | Deleted immediately on sign-out or account closure |
| Data sent for AI processing | Not stored on our servers (discarded after processing) |
| Usage metric (time spent talking) | Deleted immediately when you close your account |
| Payment and pass records | Retained for the statutory period below (5 years) even after you close your account, then destroyed. The pass itself ceases to have effect when you close your account or end the couple connection. |
| Operational and error logs | 90 days from collection |
We keep certain records for the periods required by Korean law:
We use the following processors to operate the Service, under contracts that require them to protect personal data.
| Processor | Purpose |
|---|---|
| Google LLC (Firebase, Google Cloud) | Authentication, database and file storage, push notifications, backend (cloud functions), maps, app crash and diagnostics collection (Crashlytics) |
| Google LLC (Google Play) | Processing Android subscription payments, verifying receipts and checking subscription state and renewal notifications |
| Apple Inc. | Processing iOS subscription payments, verifying receipts and checking subscription state and renewal notifications |
| Google LLC (Gemini API) | AI conversation, speech recognition, speech synthesis, chat translation, live call subtitles and audio |
| OpenAI, L.L.C. | Speech recognition, speech synthesis and text analysis (used optionally, depending on settings) |
| ElevenLabs Inc. | Speech synthesis (used optionally, depending on settings) |
| xAI Corp. | AI conversation (used optionally, depending on settings) |
| LiveKit, Inc. | Video call connection and media relay |
| Kakao Corp. | Kakao account sign-in |
If the processors or the scope of processing change, we will publish the change in this policy.
Operating the Service involves transferring personal data abroad, over the network, at the time you use the relevant feature.
| Recipient | Country | Data | Purpose · retention |
|---|---|---|---|
| Google LLC privacy@google.com |
Singapore (realtime chat database), United States (other cloud and AI services) | Account identifier, profile, couple data, chat messages and attachments, push token, payment and pass data, usage metric, text and audio sent for AI processing | Cloud infrastructure and AI processing / for the periods in Section 5 (AI processing data is not stored) |
| OpenAI, L.L.C. privacy@openai.com |
United States | Text and audio sent for AI processing | Speech recognition and synthesis / discarded after processing (the provider may retain briefly for abuse monitoring) |
| ElevenLabs Inc. | United States | Text to be synthesised | Speech synthesis / discarded after processing |
| xAI Corp. | United States | Conversation input text | AI conversation / discarded after processing |
| Apple Inc. apple.com/legal/privacy/contact |
United States | Purchase identifier (transaction ID), subscription state | Processing iOS subscription payments and verifying receipts / for the periods required by law |
| LiveKit, Inc. | United States and other service regions | Call participant identifier, call audio and video streams | Video call relay / not stored (relayed in real time) |
These transfers are made under Article 28-8(1) of the Personal Information Protection Act, as processing and storage entrusted to provide the Service and improve user convenience, and are disclosed in this policy.
You may refuse international transfer, but in that case the core features — AI conversation, translation and video calls — cannot be provided. To refuse, contact us using the details in Section 14.
We do not share your personal data with third parties beyond the purposes in Section 1, except:
Duorang is used by two partners, so the following is visible to your connected spouse:
By contrast, your conversations with Yuri or Minsu, your memories, your call subtitle history, your self-introduction, your usage metric and your health data are never made available to your spouse in any form.
Status sharing such as location may be offered in future. If so, it will default to off, only the items you switch on will be shared, and only while they are on. What is currently being shared is always shown in the app and you can switch it off at any time. The Service must not be used to monitor a partner.
You may at any time:
You can do most of this yourself in the "Me" tab of the app:
Because the couple chat is a shared space, deleting it when you close your account also removes the conversation from your spouse's screen.
Closing your account is not cancelling your subscription. If you subscribe, you must cancel separately in Google Play or App Store subscription settings for the charges to stop.
You may also make a request in writing or by email using the contact details in Section 14, and we will act without delay. Requests made through a representative require a letter of authority.
The Service is not available to anyone under the age of 18 and we do not knowingly collect their personal data. If we learn that we have, we delete it without delay.
Optional permissions can be refused; only the related feature will be unavailable. You can change any permission in your phone settings at any time.
| Permission | Used for | Type |
|---|---|---|
| Microphone | Voice conversation with Yuri or Minsu, video call audio | Required |
| Camera | Video calls, taking photos and videos for chat | Optional |
| Notifications | New message and incoming call alerts, daily reminder | Optional |
| Bluetooth (scan, connect) | Connecting the watch device. Not used in the current version | Optional |
| Location | Sharing your area with your spouse, only if you turn it on. Not used in the current version | Optional |
| Photo picker | Attaching photos and videos to chat and your profile. We use the phone's own photo picker, so we do not request access to your photo library — only the files you pick are shared. | No permission |
| Full-screen notification, vibration | Showing an incoming call like a phone call | Optional |
| Ignore battery optimisation | Receiving calls promptly when the app is in the background | Optional |
| Data protection officer | Sangjun Choi, Chief Executive Officer |
|---|---|
| help@keepin.co.kr | |
| Company | Keepin Inc. |
| Address | Room 406-2, Daeryung Technotown 22, 146 Gasan Digital 1-ro, Geumcheon-gu, Seoul, Republic of Korea |
| Business registration no. | 147-88-00229 |
| Mail-order business no. | 2024-서울금천-1468 |
You can raise any privacy question with us at the address above and we will respond without delay.
If you need to report or discuss a privacy concern, you may contact the following Korean authorities:
If you need help because of domestic violence or isolation, the Danuri Call Centre (1577-1366) offers 24-hour counselling in several languages.
If this policy changes, we will announce it in the app or on this page at least 7 days before it takes effect — 30 days in advance where the change is unfavourable to you.
This policy takes effect on August 7, 2026.