Privacy Policy

Effective June 3, 2026 · Last updated June 26, 2026 · 한국어

withu (the "App") values your privacy and complies with applicable privacy laws. This policy explains what information the App collects, why, and how it is protected.

---

1. Information We Collect

The App collects the following only when you explicitly grant permission or provide it yourself.

Item	Details	Source
Health data	Steps, active minutes, active calories, sleep, workouts, heart rate	Apple HealthKit
Location	Approximate current location (for weather lookup)	iOS CoreLocation
Photos	Reference images you attach / composite photos you take with the camera	iOS Photos
User input	AI character prompts, character name & description, time settings	Entered by you
Focus state	Whether iOS Sleep Focus is active	INFocusStatusCenter
Account info	Apple user identifier, email (if you choose to share it)	Sign in with Apple
Usage info	Free / candy balance, character generation history, in-app purchase transaction identifiers	Generated by app usage

The App does not collect additional identifying information such as your name or phone number.

2. How We Use It

• Health data: changing your character's state to match your activity (walking, sleeping, etc.)
• Location: fetching current weather via the Open-Meteo API (character background layer)
• Photos: compositing with your character / enhancing AI generation with a reference image
• User input: generating AI character images via the OpenAI API, storing in-app settings
• Focus state: automatically switching your character to sleeping when Sleep Focus is on
• Account info: sign-in identification, guaranteeing the one-time free creation (preventing reinstall abuse)
• Usage info: deducting and managing balances, verifying in-app purchases and preventing duplicate crediting

3. Storage and Retention

Data is stored in two places.

• On your device (most data): Health, location, photos, character images, and app settings are stored only on your device (iOS App Group container) and are never sent to our servers. Deleting the app permanently removes them.
• On our server (account & usage info): To provide sign-in and purchases, account info (Apple user identifier, email) and usage info (balances, generation history, purchase transaction identifiers) are stored on our backend (Cloudflare Workers · D1, hosted in the United States). Deleting your account inside the app removes all of this from the server.

The App does not store sensitive data such as health, location, or photos on its servers.

4. Third-Party Services

Data is transmitted to external services only in the following cases, limited to what is needed to provide the service.

Service	Data	When
OpenAI (gpt-image)	AI prompt + reference image (if attached)	When you tap "generate"
Open-Meteo	Approximate latitude/longitude	When fetching weather
Our backend (Cloudflare)	Account identifier, generation requests, purchase receipts	On sign-in, generation, purchase
Apple (App Store · Sign in with Apple)	Sign-in authentication, in-app purchase processing	On sign-in and purchase
Apple Health / Apple Watch	Standard HealthKit · WatchConnectivity channels	Standard iOS features under your permission

OpenAI, Open-Meteo, and Apple are governed by their own privacy policies. The App does not send identifying information such as your name or email to OpenAI or Open-Meteo. The App does not use your data for advertising or tracking, and never shares it with data brokers.

5. Your Rights

• Deny / revoke permissions: iOS Settings → withu → toggle each permission at any time
• Delete your account: In-app Settings → Account → "Delete Account" immediately removes your account and usage records from the server, plus on-device data (irreversible)
• Delete on-device data: Deleting the app permanently removes all on-device data
• Delete individual gallery items: From the character gallery inside the app

6. Security

• All external API and server calls are encrypted with HTTPS.
• Server access is authenticated with sign-in tokens; only you can access your account information.
• The server stores only the minimum needed for purchases and account management — never health, location, or photos.
• On-device data is protected by standard iOS security.

7. Contact

• Data controller: withu operator
• Email: ysy1398@gmail.com

8. Change History

Version	Date	Changes
1.0	2026-06-03	Initial version
1.1	2026-06-26	Server-side storage of account & usage info for sign-in/purchases; account deletion right

← withu legal documents