This summary is for convenience. The full text below governs.
Y2do ("Company") recognizes the importance of the personal information of Itdasy ("Service") users and establishes this Privacy Policy in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA) and related laws.
Swipe horizontally to read the full table.
| Type | Items | Purpose | Retention |
|---|---|---|---|
| Required | Email, hashed password, name | Authentication, support | Until account deletion |
| Optional | Shop name, address, phone, Instagram handle, industry | AI caption personalization | Until account deletion |
| Auto-collected | IP, device info (model/OS), usage logs, cookies | Security, quality improvement | Login logs: 3 months. Member usage, action and generation records support limits, statistics, deduplication and work history until deletion request or account deletion, subject to statutory retention. Not every record automatically expires by age. |
| Social sign-in (optional) | If you choose Kakao, Naver, Google or Apple sign-in: the account identifier, email and name (nickname) that service provides | Account identification, sign-in | Until account deletion |
| Billing | App Store/Play transaction IDs; web payment records (amount, order number) | Subscription status, refunds | Store transaction IDs: until account deletion · Web payment records: 5 years after deletion (e-commerce law) |
Information entered by salon owners about their own customers is treated as entrusted processing on behalf of the owner as controller. Salon owners are responsible for obtaining valid consent from their end-customers before entering data into Itdasy.
Customer names identify bookings and records. Optional customer phone numbers, birthdays, notes and visit history support customer management. Review text entered by an owner is used for review management and requested caption drafts. Health notes such as allergies and treatment reactions require separate explicit consent from the customer and are eligible for scheduled content removal after 30 days when classified as medical notes. Customer linkage and record timestamps can remain. Automated classification may miss a note; owners can delete it or request removal. Other customer records remain until owner deletion or account deletion, subject to statutory retention.
This disclosure compares the operating configuration with official provider information as of October 14, 2026. Data retained by Itdasy and data processed by providers have separate deletion rules. Image-deletion periods below do not apply to every provider account, billing, security or backup record.
Swipe horizontally to read the full table.
| Provider / location | Purpose | Data |
|---|---|---|
| Google LLC / Google Cloud · Korea / US and others | Hosting (Seoul, Korea), AI processing (Gemini API), Android push (Firebase), Google sign-in | Service requests, AI inputs/responses, device push tokens, Google sign-in data; AI terms in 2-1 |
| Apple Inc. · US | iOS push notifications, Sign in with Apple, App Store subscription checks | Device push tokens, Apple sign-in identifier and email, subscription transaction data |
| Meta Platforms, Inc. · US / Ireland | Instagram connection, publishing, style analysis | User ID/name, posts, access tokens, photos and captions submitted for publication |
| Supabase, Inc. / Amazon Web Services · Korea | Database and photo storage | Account, customer, booking, revenue and photo records |
| Cloudflare, Inc. · Korea / US / Asia-Pacific | Storage traffic protection and transport, hosting the marketing site (itdasy.com), storing launch-notice sign-ups | Connection data and service requests, launch-notice emails |
| Resend, Inc. · US | Member email delivery: signup verification codes and password resets | Recipient email, name, verification code or reset link, message body |
| Discord Inc. · US | Internal operations alerts: forwarding support messages, new-signup alerts, AI content reports, Instagram reconnection alerts | Support: name, email, message and part of the prior conversation / Signup: name, partially masked email, member number / Reports: hashed member value, masked report preview / Reconnection: member number |
| Functional Software, Inc. (Sentry) · US | App and server error tracking | Error details, device/browser info, member number. Personal fields in request bodies, cookies and headers are removed before sending |
Stored records follow Section 3. Disconnecting Instagram stops subsequent collection and publishing requests. Already published content can be managed in Instagram. Providers apply their own policies to account and security records.
Current route: Since October 3, 2026, all Itdasy AI text and conversation features are processed through the Google Gemini API, called from a project with active billing, so the Gemini API paid-service terms apply. Google Cloud Vertex AI (Seoul region), described previously, is not currently used.
Data / purpose: Text, photos, conversations, booking/revenue context and responses needed for selected caption, assistant, image-description, voice, recognition and DM features.
Location / retention: Processing is not limited to Korea. Under Google's terms, data may be stored transiently or processed in the US and other countries where Google or its agents maintain facilities. Prompts, context and responses are retained for 55 days to detect policy violations. We do not guarantee zero data retention.
Training / review: Under the paid-service terms, Google does not use prompts or responses to improve its products. Authorized Google staff may review material retained for policy-violation detection.
If you do not accept these terms, turn off AI in the app's AI settings or request AI processing suspension or consent withdrawal at contact@itdasy.com.
Gemini API terms (paid services) · 55-day retention and review
Data / purpose: Photos, edit masks, settings and results for background removal, enhancement or inpainting. Itdasy requests inference, not training or fine-tuning on customer photos. Background-removal photos are sent only after a separate in-app “photo AI processing” consent, and location (GPS) and other capture metadata are removed before sending.
Retention: The documented API default deletes prediction inputs, outputs, files and logs within one hour after completion. Results and caches saved by Itdasy follow Section 3. This is not a one-hour deletion guarantee for all provider account/security records or backups.
Data / purpose: Background-removal photos and results, as the last fallback when Replicate fails and the fal.ai fallback is not used or also fails (daily cap). The provider states EU hosting; the exact processing datacenter country is not established by that statement alone.
Retention / training: The provider states API images are deleted immediately after processing; ordinary uploads within about one hour. Training contribution is a separate optional improvement program. Itdasy's removal API calls do not donate images to that program.
Data / purpose: (1) Background-removal photos and results — only for users who gave the separate in-app photo AI processing consent, the original photo (capture metadata removed) is sent to fal.ai as the fallback when Replicate fails. Without that consent, nothing is sent to fal.ai. Correction: from September 30 to October 16, 2026, original photos could have been sent to fal.ai when Replicate failed, without that separate consent. Our production server records show no member photos were actually sent to fal.ai in that period. (2) Background-description prompt, image dimensions and generated results — the background-generation route does not send the original treatment photo to fal.ai; Itdasy composites the generated background with that photo on its server. Personal information typed in the prompt is transmitted.
Retention: The public DPA's baseline is retention until contract termination unless otherwise agreed. CDN file expiry also depends on account/request settings. Access to verify this account's expiry settings was unavailable; we do not promise automatic deletion after a fixed number of hours or days. We forward deletion/suspension requests and communicate their status.
Training: API terms restrict use of client content to develop or train provider products, with exceptions for models designated as excluded from Enterprise Ready protection. We do not guarantee identical safeguards for every model.
DPA / retention · API / training terms · Expiry settings · support@fal.ai
Transfers occur when a selected AI feature or enabled auto-reply runs, through encrypted server-side HTTPS APIs. Required signup terms and AI choices are separate. AI choices are available through app Home/Settings, with additional notices for photo features. Declining AI does not prevent core customer, booking or revenue management. Where withdrawal is unavailable in-app, email contact@itdasy.com. Previously transmitted data follows provider retention/deletion rules and legal obligations; withdrawal does not instantly erase every external copy.
When the AI assistant or DM replies use customer records, customer names are replaced with pseudonyms and phone numbers and emails are removed. For health-related customer notes (allergies, reactions, medication, pregnancy), only a "health note exists" marker is sent, never the content; the content is shown only inside the app. DM replies can use a supplied name, and free-form text, photos and notes may contain names, faces or health information. We do not claim every AI input is anonymous.
Descriptions of public terms and DPAs do not certify a separately executed enterprise contract, valid consent for every transfer, an account-specific zero-retention approval, or readiness to offer services in every jurisdiction. Contact us before transfer if a specific country or safeguard is required. Clarifying this notice does not establish consent for a new collection or transfer.
itdasy.com is served by Cloudflare, Inc., which may process IP addresses and request information to deliver and secure pages. This marketing site has no registration or payment form and no advertising trackers.
We do not use third-party advertising or cross-site tracking cookies. First-party session tokens, preferences, local drafts and offline cache are used, along with error reporting described in this policy. Clearing OS/browser storage may require login again and permanently remove device-only drafts, settings and offline data. Save needed work first.
The Service uses Google AI, Replicate, remove.bg, fal.ai, and related processors for caption suggestions, assistant drafts, image processing, and other optional features. Provider-specific transfer, retention and training conditions are described in Section 2. These are advisory only and do not produce legal or financial effects without user confirmation. Users may decline feature-specific transfers or request consent withdrawal at contact@itdasy.com. Inappropriate AI output can be reported via the in-app 🚩 button; we review reports and communicate necessary follow-up.
Users may also contact the Korean Personal Information Dispute Mediation Committee (+82-1833-6972, kopico.go.kr) or KISA Privacy Complaint Center (118, privacy.kisa.or.kr).
The Service is not intended for children under 14. If we learn that a child under 14 has registered, we will immediately delete the account and all related data. Registration by children under 14 is not permitted.
In the event of a data breach, affected users will be notified via email and in-app notice within 72 hours, including details of what was leaked, mitigation steps, and contact information for reporting. Reportable incidents include 1,000+ affected individuals, sensitive or unique-identification data, and unlawful external access. Reports are made to the Personal Information Protection Commission/KISA within 72 hours, subject to statutory exceptions and supplementary reporting.
Material changes (new entrustment, expanded collection, longer retention) will be notified at least 30 days before taking effect, and re-consent will be requested where applicable. Other changes will be notified at least 7 days in advance via in-app announcement and email.
Swipe horizontally to read the full table.
| Version | Effective | Changes |
|---|---|---|
| v1.8 | 2026-10-16 | Corrected a disclosure that did not match operations: from 2026-09-30 to 10-16, original background-removal photos could have been sent to fal.ai (US) without consent when Replicate failed (production records: 0 actual transfers). From 10-16 the fal.ai route is used only for users who gave the separate in-app photo AI processing consent; otherwise Replicate → remove.bg (Austria). Billing retention now matches actual handling (store transaction IDs deleted at account deletion; web payment records kept 5 years). Purposes unchanged; no retention period extended. |
| v1.7 | 2026-10-15 | Health-related customer notes are no longer sent to external AI; described the masking applied to customer data sent to AI (pseudonyms, phone and email removed). Collection, purposes and retention are unchanged. |
| v1.6 | 2026-10-14 | Corrected disclosures that did not match operations. AI route corrected from Google Cloud Vertex AI (Seoul) to the Google Gemini API (paid, US and others), in use since 2026-10-03. Disclosed providers already in use: Resend (email), Discord (internal alerts), Sentry (error tracking), Apple, and social sign-in data. Collection purposes and retention periods are unchanged. |
| v1.5 | 2026-10-14 | Added launch-notice email collection on the marketing site (separate consent, kept up to 1 year) and cookie-free visit/button counts; corrected marketing-site hosting to Cloudflare. Processing of app members' data is unchanged. |
| v1.4 | 2026-10-01 | Corrected AI fallback, provider retention/training, fal.ai data scope, operational record retention and breach reporting. Does not establish new collection/transfer consent. |
| v1.3 | 2026-10-01 | Clarified marketing-site access processing, consent and rights-request guidance, on-device data deletion and retention descriptions. No new collection purpose or items |
| v1.2 | 2026-09-15 | Corrected processors, AI consent, deletion status, and security descriptions to match the current system |
| v1.1 | 2026-04-22 | Added GDPR (EU/UK), CCPA/CPRA (California), LGPD (Brazil), APPI (Japan), PIPEDA (Canada), Australia Privacy Act regional notices |
| v1.0 | 2026-04-22 | Initial publication — full PIPA compliance framework |
Swipe horizontally to read the full table.
| Purpose | Legal Basis |
|---|---|
| Account creation, authentication, service delivery | Art. 6(1)(b) — Contract performance |
| Billing (IAP transaction records) | Art. 6(1)(b) Contract; Art. 6(1)(c) Legal obligation (tax) |
| AI processing via Google Gemini (captions, assistant) | Art. 6(1)(a) — Separate AI choice before use; not bundled into required signup terms |
| Cross-border data transfer to US providers | Applicable Chapter V transfer basis and safeguards, assessed for the provider and route; no blanket claim of executed SCCs |
| Security, fraud prevention, error monitoring | Art. 6(1)(f) — Legitimate interest (service integrity) |
| End-customer data entered by salon owners | Processor role under Art. 28 — owner as controller, Y2do as processor |
| Health-related notes about end-customers (e.g. allergies, treatment reactions) | Special category data under Art. 9 — the salon owner must obtain the customer's explicit consent before entering it. Medical-classified content is eligible for scheduled removal after 30 days; linkage and timestamps can remain, and missed classification requires owner deletion or a removal request. |
We respond to all verified requests free of charge within 30 days.
Swipe horizontally to read the full table.
| Category (§1798.140) | Collected? | Source | Purpose | Disclosed to |
|---|---|---|---|---|
| A. Identifiers (name, email, user ID) | Yes | You | Account, service | Processors (Supabase, Google Cloud) |
| B. §1798.80 customer records | Yes | You | Billing, support | Apple/Google (IAP); processors |
| D. Commercial info (purchase history) | Yes | Apple/Google stores | Billing, subscription | Apple, Google |
| F. Internet/network activity (error logs) | Limited | Device | Security/debug | Sentry |
| G. Geolocation | No | — | — | — |
| I. Professional/employment | Yes (shop info) | You | Personalization | Processors |
| K. Inferences (retention risk) | Limited | Your usage | Churn alerts | Not shared |
| L. Sensitive Personal Info — health-related customer notes | May be entered with separate explicit consent | Salons entering customer notes | Treatment precautions and requested note processing | Storage and AI processors as described in Sections 1–2 |
We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide an opt-out in the app.
Exercise rights: email contact@itdasy.com with subject "CCPA Request — [right]". We verify identity by email confirmation and respond within 45 days.
We do not disclose PI to third parties for their direct marketing, so no such disclosure is required.
We do not knowingly collect PI from users under 16 without affirmative consent (CPRA). Users under 14 are prohibited from registering (see Section 8).
You have rights analogous to GDPR — confirmation, access, correction, anonymization, portability, deletion, information on sharing, and revocation of consent. Exercise via contact@itdasy.com. Complaints: Autoridade Nacional de Proteção de Dados (ANPD) — gov.br/anpd.
Where PIPEDA or provincial privacy laws apply, residents may exercise access, correction and consent-withdrawal rights. Complaints: Office of the Privacy Commissioner of Canada — priv.gc.ca.
Where Australian privacy law applies, residents may exercise rights under the Australian Privacy Principles (APPs). Complaints: OAIC — oaic.gov.au.
We use only strictly necessary first-party storage to operate the service (session JWT, preference settings, offline cache). We do not use cross-site tracking cookies, advertising identifiers, or third-party analytics for profiling. Optional device error diagnostics can be managed in the app privacy/diagnostics settings. Declining does not affect core functionality. Server security and operational logs are distinct from optional device diagnostics.