Show all 14 sections
1What is collected, and why
- Account ID and guest flag: when you start; for sign-in and access control.
- Email address (optional): when you sign in by email, link a guest account or accept an invitation. You sign in with a 6-digit code.
- Family name, your display name in the family, your role (admin, recorder, reader): when you create or join a family
- The book’s subject (name, relation, living or in memoriam, birth year): when you add a person. This is information about someone else, sometimes someone who has died.
- Consent records (which of original storage, AI processing, family sharing and first-person memoir, how, under which policy version and when): on the consent screens. A family member confirms on the person’s behalf; withdrawals are recorded too.
- Recordings and imported audio files (M4A, MP3, WAV, WebM): to keep the original voice, transcribe it and play it back
- Photos and captions: when you attach a photo to a story
- Typed stories, transcripts, AI drafts, edits, approved text and chapters, whether you let the family polish a draft, and who approved a chapter: when you write, review and approve
- An invitee’s email address and role: when an admin invites a family member
Original recordings and photos sit in private storage; the app gets playback links that expire after 60 seconds. Transfers use HTTPS and stored data is encrypted by the hosting provider, but not end-to-end: the operator can technically access it.
2Service providers and AI
Supabase
Hosts sign-in (including the email with your sign-in code), the database and file storage, and so holds all the server data above.
Soribook’s own server (speech-to-text)
Recordings are transcribed on a server Soribook runs itself (whisper.cpp). Audio is not sent to any other company.
Z.ai (GLM model)
Writes the memoir drafts. For each story it receives the transcript or typed text split into paragraphs, the question and the book subject’s name; when a family member told the story, also that teller’s name and relation and the label “직접 남긴 기록” (their own record) or “…님이 전한 기억” (a memory told by …). It receives no audio, no photos and no email address.
Nothing is transcribed or sent to Z.ai unless that person’s AI processing consent is on; the server checks it again before transcribing and before drafting. You can switch it off in 책 (book) → 동의 설정 보기 (consent settings); new drafts then stop. Without AI consent, recordings and text are still kept.
Drafts are visible only to the person who recorded the story until a family member reviews and approves them. Data is not sold or used for advertising.
How long Z.ai keeps what it receives has not been confirmed yet. That period and the region of the Supabase server will be added to this page as soon as they are confirmed, with a new effective date.
3Who can see what
- A story is visible to the person who left it. The family sees it when its visibility is set to family and the sharing consent allows it; selected members see it when chosen.
- Helpers see a draft only if the recorder allowed the family to polish it.
- Approved chapters in the book are readable by family members.
- There is no public profile, feed or search, so nothing is published outside the family.
- An invitation link is passed on only when you tap share and send it through the iOS share sheet. It works once, for 7 days, and can be revoked.
4Permissions
- Microphone
- Requested only when you tap record. If you decline, you can still upload a file or type.
- Camera
- Used only if you choose to take a photo in the photo picker.
Photos are picked with the system photo picker, so no photo-library permission is requested. No location, contacts, calendar, notifications or tracking permission is requested.
5What is stored on this iPhone
- Your sign-in session, in the iPhone Keychain for this device only (it does not move to iCloud Keychain). After a reinstall, a leftover session is discarded.
- Recordings not yet uploaded, kept in the app’s storage and deleted once the server confirms the upload. Until then they may be included in iPhone or iCloud backups.
- Small app values such as the last opened chapter, saved states and the server’s upload size limit
- Signing out removes the session from this device; deleting your account also wipes pending recordings and app values.
6Retention and deletion
- Server data is kept while your account exists.
- Deleting one story hides it from the family and stops its processing, but the original file and records stay on the server.
- You can delete your account yourself in 설정 (settings) → 계정 삭제 (delete account). It first shows what is deleted and what stays with the family; email accounts get a fresh code, the last admin picks a new admin, and you type “삭제” to confirm.
- Deleting your account removes your stories, original recordings and photos (including backup copies), transcripts, drafts, the chapters built from them, your sign-in data and the account, and signs you out everywhere. A family with no other member is deleted entirely.
- In a family with other members, their original stories stay and chapters quoting your text are taken out of the book. Copies of your text inside other members’ work stay private to that recorder and reviewer; the preview tells you before you delete. Consent records stay with your name removed.
- Files from uploads still in progress are swept again at least 2 hours 15 minutes after deletion, with retries. After that, only a one-way hash of the account ID and the time remain as proof of deletion.
- Text already sent to Z.ai cannot be recalled from the app. Supabase’s regular backups may keep data until they rotate; that period has not been confirmed yet.
- Invitations stop working after 7 days, once used, or when revoked.
7Your rights
You can ask to see, correct, delete or stop the processing of your data by writing to sharepoint889@gmail.com. AI processing consent can be withdrawn in the app.
8What the app does not do
- No location, contacts, health or payment data.
- No advertising identifier or tracking device ID, and no App Tracking Transparency prompt.
- No ads, usage statistics, analytics or crash-reporting tools.
- No audio or photos sent to an AI company.
- No in-app purchases.
9Scope
This policy covers the iPhone app and the web version that invited family members open from an invitation link; both use the same server and the same data. Soribook is available in Korean only. Being available in several countries’ App Stores does not mean each country’s legal requirements have been reviewed.
10Diagnostics
Apple passes diagnostic information such as crash reports to the developer only if you turned on “Share With App Developers” in iPhone Settings → Privacy & Security → Analytics & Improvements. Apple runs this feature and you can turn it off at any time. Soribook itself sends no diagnostic data.
11If you email us
Settings → 의견 보내기 (send feedback) in the app opens a new mail draft in your mail app. The draft includes the app version, the iOS version and the device model, and these reach the developer only if you choose to send the mail. When you write to sharepoint889@gmail.com, your address and message are stored in the developer’s Gmail inbox. They are used only to reply to you, are not shared with anyone, and are deleted on request.
12Children
Soribook is a family record app for adults (parents and their adult children) and is not directed at children. The app does not check ages. If you learn that a child under 14 has been added without a legal guardian’s consent, please write to sharepoint889@gmail.com.
13Changes to this policy
If this policy changes, this page is updated and the effective date above changes with it. If an update changes how the app handles information, this page is updated before that update is released.
Effective: 3 October 2026
14Contact
- Publisher
- 애플페어 (Applepair)