MinuPrivacy Policy
WONDERMOVE Inc. ("we") operates the Minu app and minu.page (the "Service") and follows the laws of the places our users live, including the Korean Personal Information Protection Act, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA. This policy explains what personal information the Service handles, why, and how.
At a glance
- Meeting content (transcripts, translations, AI notes) is visible only to the person who created the meeting. Others see it only if you create a share link or explicitly allow support access.
- We do not store audio recordings. Audio is used only to make live captions; what remains is text.
- We do not use meeting content for advertising or to train AI, and we do not sell personal information.
- When you delete your account, we delete your account details and all your meetings right away.
1. Information we process and why
| Category | Information | Purpose |
|---|---|---|
| Account | Email address, password (stored hashed; we cannot read it), name (optional), app language, the account identifier and email from Sign in with Apple or Google (including Apple private relay addresses), email verification status | Sign-up, sign-in, identity checks, answering support requests, service messages (verification codes, plan-ending notices) |
| Meeting content | Meeting title, meeting details you enter (topic, terms), transcripts and translations, speaker labels and names you give them, AI notes, presets | Live captions and interpreting, writing notes, keeping and exporting the transcript |
| Audio | Audio while recording (streamed live, not stored) | Live transcription and translation |
| Device and usage | App-generated device identifier, OS and app version, push notification token, app integrity key identifier, last IP address used by the sign-in token, server request logs (IP address, time, result — never meeting content), recording time and AI notes usage | Keeping you signed in, sending notifications, security and abuse prevention, plan limits, troubleshooting |
| Billing | Subscription product, status and period, store, transaction identifiers (we never receive card details) | Applying your plan, handling billing questions, records required by law |
| Share viewers | A temporary viewer identifier and IP address of people following a share link (no account; for rate limits) | Limiting concurrent viewers, preventing abuse |
If you speak into someone else's meeting as a remote participant, your words become part of that meeting's record, which its creator controls.
Legal bases (GDPR): account, meeting and billing processing is necessary to perform our contract with you (Art. 6(1)(b)); security and abuse prevention rely on our legitimate interests (Art. 6(1)(f)); records required by law rely on legal obligations (Art. 6(1)(c)). Before recording, the app asks you to confirm that attendees have been informed.
2. Retention and deletion
- Meeting content: deleted automatically after your plan's retention period (Free 30 days, Pro 1 year, Pro Plus 3 years). If you cancel a paid subscription, meetings created before the end of the paid period are deleted when that period ends. Meetings you delete are permanently removed after 30 days.
- Account: when you delete your account we immediately delete your email, name, password and language, along with your meetings, devices and sign-in data.
- Records kept by law: under Korean law we keep contract and payment records for 5 years, consumer complaint records for 3 years and access logs for 3 months, identified only by an internal ID without name or email.
- Other records: server logs 30 days; sign-in tokens 7 days after they expire (30 days); verification codes 7 days after they expire.
- Deletion removes the data from our databases so it cannot be restored.
3. Service providers and international transfers
We use the providers below to run the Service. Some process data outside your country. Each processes data only for the purpose we contracted.
| Provider (country) | Service | Information | Kept for |
|---|---|---|---|
| Amazon Web Services, Inc. (servers in Seoul, Korea) | Servers, database, email delivery | Everything in section 1 | Periods in section 2 |
| Soniox, Inc. (USA) | Live speech recognition and translation | Audio while recording, meeting details | Not stored (processed live) |
| OpenRouter, Inc. (USA) with inference providers DeepInfra, Inc., Together Computer, Inc. and Fireworks AI, Inc. (USA) | Writing AI notes | Meeting text (transcripts and translations) | Only while processing; requests are routed only to providers that do not store prompts or train on them |
| RevenueCat, Inc. (USA) | Subscription management | Internal user ID, subscription and transaction data | Contract term and legal retention |
| Apple Inc. and Google LLC (USA) | Sign-in, in-app purchases, push delivery | Sign-in identifiers, payment data (handled by the store), push tokens and notification text | Their policies |
| 650 Industries, Inc. (Expo, USA) | Push notification relay | Push tokens, notification text (for example "AI notes are ready" and the meeting title) | Briefly, for delivery |
| Functional Software, Inc. (Sentry, USA), if enabled | Error reporting | Error details with meeting text, email, share codes and tokens removed | Sentry retention setting |
| Cloudflare, Inc. (USA) | Hosting minu.page | Website access logs (such as IP address) | Cloudflare's policy |
Transfers happen over the network when you use the Service (recording, notes, purchases, notifications). For users in the EU and UK we rely on the European Commission's Standard Contractual Clauses or other safeguards required by law. You can stop using the Service and delete your account if you do not want your data transferred, but the core features need these providers.
4. Disclosure
- We do not sell or rent personal information, and we do not show targeted ads.
- Meeting content is visible only to you, except: (1) when you create a share link or QR code (anyone with the link can see captions and notes while the link is open); (2) when you allow support access in the app (up to 72 hours, every view is logged); (3) when required by law, such as a court order.
5. Your rights
You can access, correct or delete your personal information, or ask us to stop processing it, at any time. In the app you can change your name, delete meetings, export notes and transcripts (PDF, email) and delete your account. For anything else, contact us below. We reply within 10 days (within one month under the GDPR).
- EU and UK: you have the rights of access, rectification, erasure, restriction, objection and data portability, and you can complain to your local data protection authority.
- California and other US states: you have the right to know the categories, sources and purposes of the information we collect and to request deletion or correction. We do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
- Korea: you can report privacy infringements to the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr).
6. Children
The Service is not directed to children under 14 (under 13 in the US; the age set by each EU country). We do not knowingly collect their information and will delete it if we learn we have.
7. Security
- All connections are encrypted (HTTPS/TLS), and databases and storage are encrypted at rest.
- Passwords are stored in a form that cannot be reversed; the operator console requires two-factor authentication and locks after failed sign-ins.
- Operators cannot see meeting content unless you allow it, and every allowed view is logged.
- Server logs never contain meeting content, and access is limited to people who need it.
8. Cookies and similar technologies
minu.page uses no cookies and no advertising or analytics trackers. The shared caption page stores a temporary viewer value and display settings (text size, theme) in your browser so that reopening it keeps your seat. You can clear them in your browser settings.
9. Contact
- Privacy officer: [to be confirmed: privacy officer name and title]
- Email: support@minu.page
- Company: WONDERMOVE Inc. · 4F, 7-21, Gangnam-daero 27-gil, Seocho-gu, Seoul, Republic of Korea (06752)
- EU representative (GDPR Art. 27): [to be confirmed: EU representative]
10. Changes
We announce changes in the app and on this page 7 days before they take effect (30 days for changes that reduce your rights).