MIRI Hair AI
Privacy Policy
This policy explains which personal data MIRI Hair AI processes, why, and when it is deleted.
1. Controller
Gyugwang Lee (the Operator) processes personal data while providing MIRI Hair AI and protects it under applicable law.
2. Items, purposes, and retention
This information is processed only as needed to perform the service contract and user requests. Actual transaction records are kept separately where the law requires it.
| Item | Purpose | Current retention |
|---|---|---|
| Social provider, provider ID, email and display name if provided, nickname | Login, account maintenance, linking data after a device change | While the Service is used and for 6 months after a withdrawal request |
| App-generated device UUID, hash, and auth token | Recover a device account, keep auth, prevent duplicate welcome bonuses | Until account deletion or until app/browser data is cleared |
| Original face photo and generated images | AI hairstyle and color synthesis, results, and history | While the Service is used and for 6 months after a withdrawal request |
| Selected styles and colors, job status, points used | Run generation, show progress, refund failed jobs | While the Service is used and for 6 months after a withdrawal request |
| Point ledger and receipt information | Balance management, transaction checks, and support | Separated from the account 6 months after withdrawal, deleted 5 years after creation |
3. How data is collected
- We receive account information you allow from the social login provider.
- We collect photos, nicknames, styles, and colors that you enter or choose.
- The app or browser may store an auth token, a random device UUID, and a login return path.
4. Third parties and processors
The Operator does not sell personal data. Except as required by law, it is not given to independent third parties. The social login provider you choose processes authentication under its own policy. Depending on the AI mode, processing and overseas transfer may occur.
- Google sign-in: Google LLC
- Apple sign-in: Apple Inc.
- Kakao sign-in: Kakao Corp.
- Image generation: the configured AI provider (Google Gemini, Microsoft Foundry FLUX, OpenAI Codex, and others)
- Payments: Google Play, App Store
5. AI processing and overseas transfer
Only when you request image generation are the original face photo and English instruction sent over an encrypted network to the selected AI provider. No transfer occurs without a generation request. If you refuse, you can still browse public styles but cannot use that provider's image generation.
6. Deletion
Account use stops immediately after a withdrawal request. Six months later the system deletes account records and original and result images. Actual transaction records are separated from the account identifier and deleted when the legal period ends.
7. Your rights
- You can change your nickname, sign out, or request withdrawal from the My screen.
- Access, correction, deletion, restriction, and objections can be requested through the privacy contact below.
- Some requests may be limited if the law requires retention or if another person's rights could be affected.
8. Children's data
The account service is not directed at children under 13. Processing a photo that includes a minor requires lawful permission from the subject and their legal guardian.
9. Security
In production, data in transit is encrypted, original identifiers used to prevent duplicate welcome bonuses are stored as HMAC-SHA256 hashes, and legally retained transaction records are separated from account data.
10. Privacy contact
- Privacy officer
- 이규광
- Operator
- Gyugwang Lee
- offning.app@gmail.com
11. Changes
If this policy changes, the effective date and main changes are announced in the app and on this website. Material changes to items, purposes, retention, or overseas transfers are made easy to review before they take effect.