Privacy Policy
Last updated:
Studio Loong ("we") runs Onggi (the "Service"). This policy covers the Onggi apps (macOS, Windows, iOS, Android) and the website onggi.studioloong.com.
Onggi keeps what you put in it on your own device. Every feature works without an account, and then we receive no personal information at all.
1. What stays on your device
Your pieces, "Why did it touch you?" notes, sources, tags, drawers, links, and revisits are stored only on your device. We cannot see them and they are never sent to our servers.
- Google Drive sync (optional): when on, the app uploads to and downloads from the app-only folder in your own Google Drive (appDataFolder), directly, without passing through our servers. The only Drive permission the app asks for is that folder (drive.appdata).
- Keep links: pieces in a link made by an AI travel after the # in the address, which browsers never send to a server.
- Sharing: text and links shared from other apps move into Onggi on the device only.
- The apps contain no usage analytics, behavior tracking, or crash reporting.
2. What we process, why, and for how long
When you sign in (optional), use the AI post office, or visit the website, we process the following.
| When | What | Why | How long |
|---|---|---|---|
| You sign in with Google | Google account ID, email address, plan | Recognize your account and your post office | Until you delete your account |
| On each signed-in device | Device ID (a random value the app makes), device public key | Seal post office pieces so only your devices can open them | Until you sign out on that device or delete your account |
| An AI sends pieces to your post office | Sealed pieces (unreadable to us), time received | Deliver them to your devices | Deleted once a device takes them, and after 30 days at most |
| You connect an AI connector | Connection credentials (tokens) | Make sure an AI can deliver only to your post office | Until you disconnect or they expire |
| You visit the website (with consent) | Pages visited, device and browser details, approximate region, cookie identifiers | Visit statistics (Google Analytics) | Up to 14 months |
| Any request to the Service | IP address, time, request details | Security and troubleshooting (hosting provider logs) | The hosting provider's retention period |
Post office pieces are stored only sealed with your devices' public keys (ECDH P-256, AES-256-GCM). The keys that open them never leave your devices, so we cannot read them.
Legal bases (where the GDPR or similar laws apply): performing the service you asked for (sign-in, post office), your consent (website analytics, personalized ads), and our legitimate interest in keeping the Service secure (access logs).
3. Sharing
We do not sell or share personal information with third parties, except where the law requires it. Even then, post office pieces are sealed and we cannot hand over their content.
4. Service providers and international transfers
These companies process data for us, which moves it outside your country. Transfers happen over the network as you use the Service; retention is as in section 2.
| Provider (country) | Data | Purpose | Contact |
|---|---|---|---|
| Cloudflare, Inc. (United States and others) | Account info, device public keys, sealed pieces, access logs | Running the server and the website | privacy@cloudflare.com |
| Google LLC (United States and others) | Sign-in, website visits (with consent), advertising ID (free Android app) | Google sign-in, website statistics, ads | Google Privacy Policy |
To avoid these transfers, don't sign in and decline the website's analytics cookies; Onggi's core features keep working. Google Drive sync stores data in your own Google account under Google's terms.
5. Ads and promo cards
- The free Android app shows Google AdMob ads. Google may process device information such as the advertising ID for ads; where the law requires, the app asks for consent first. You can reset or delete the advertising ID in Android settings.
- The installed apps show Onggi promo cards in the feed. On devices set to Korean, some of these spots show a Coupang Partners product area provided by Coupang. Tapping it opens Coupang, whose privacy policy then applies. We earn a commission from Coupang on purchases made through it.
- Ads and promo cards never read or write your pieces.
7. Deletion
Personal information is deleted without delay, irrecoverably, once its retention period ends or its purpose is met. When you ask us to delete your account, we delete your account info, device public keys, and any pieces still waiting in your post office.
8. Your rights
- You can ask to access, correct, delete, or restrict the processing of your personal information, and to receive a copy of it, at any time. Write to support.onggi@studioloong.com and we will act without delay.
- Pieces on your device can be exported or deleted from the app settings at any time. Export is always free.
- Signing out removes that device's registration from our server. Onggi's records on Drive can be erased with "Erase Onggi's records from Drive" in the app settings.
- You can remove Onggi's access in your Google Account under third-party connections.
- You may also complain to your local data protection authority.
9. Children's privacy
The Service is not directed to children under 14 (or the minimum age in your country), and we do not knowingly collect their personal information without a guardian's consent.
10. Security
- We take as little as possible; your pieces and notes are never kept on our servers.
- Post office pieces are sealed with per-device keys and are unreadable on the server.
- All traffic is encrypted with HTTPS.
- Server secrets and admin access are limited to us.
11. Contact
For any question, complaint, or request about your personal information:
- Privacy contact: Studio Loong privacy team
- Email: support.onggi@studioloong.com
12. Changes
If this policy changes, we will post the new version and its effective date on this page. This policy is effective from the date above. The terms of use are in the Terms of Service.