Privacy Policy

1. Scope and operator

This policy applies to the Monifren website and macOS and Windows apps provided by 조영연. The information actually processed may vary depending on the app features and how you access the service.

Check the app for available features and whether new custom orders are being accepted. This website does not provide account registration, photo uploads, order intake, or payments.

2. Information we process and why

We do not collect system-wide keyboard input, screen contents, contacts, or precise location to provide the app’s basic features. We do not use advertising tracking SDKs or separate user behavior analytics SDKs in the app. The website includes Cloudflare’s performance measurement script, which sends performance metrics such as page loading times to Cloudflare. This measurement is separate from collecting pointer movements or petting gesture paths within the app.

Diagnostic information is included in support materials only when you choose to copy or send it. We restrict diagnostic information so that it does not include raw pointer paths, full receipt data, login tokens, or device identifiers. Please do not send passwords, complete payment card numbers, or other people’s personal information in your inquiries.

3. Differences between macOS and Windows

macOS

The app’s basic reactions work without Accessibility, Input Monitoring, or Screen Recording permissions. Apple handles purchases, purchase restoration, and distribution through the App Store. Monifren uses the purchase results and verification information needed to provide its features. We do not receive your Apple account password or complete payment card number.

Windows

On Windows, pointer reactions and on-screen placement are also processed on your device. To restore your selected monitor and placement settings, we store monitor identification information (the display device identifier provided by Windows) in the app’s settings file on your device. This value is used to restore monitor selection and placement; it is not sent to a server or included in general diagnostic information. You can change your selected monitor in the app’s settings. Deleting local app data also removes the stored identifier. Versions that support purchases and purchase restoration through the Microsoft Store use Microsoft’s purchase verification information. We do not receive your Microsoft account password or complete payment card number.

Account, payment, download, and diagnostic information processed directly by a store is subject to the Apple Privacy Policy or the Microsoft Privacy Statement. This policy does not replace the store’s own policies for that processing.

4. Optional custom Fren orders

Using free or Standard Frens is separate from having a custom order account. If you do not use account or order features, you do not need to submit order photos or requests.

Custom-order Monifren accounts use Sign in with Apple on macOS and Microsoft sign-in on Windows. We process account-linking identifiers and session information, and do not receive login passwords. Orders involve 1–5 photos, a name, distinguishing features and requests, a required contact email and optional phone number, the agreed policy version and consent record, order and purchase verification records, previews, and completed content.

Photos and production materials are processed in private storage, with access restricted to the authenticated account holder and authorized operators. The app shows processing information and consent in the selected language before ordering; photo submission requires confirmed consent.

We make a completed set from 1–5 photos, a name, and distinguishing features through manual work in a local environment. A contact email is required; a phone number is optional. Estimated production time is about 3 business days and may be longer if additional information or production work is needed.

Production takes place in the operator’s local environment. Customer photos and production materials are not sent to external AI services. Photos are uploaded to private Cloudflare order storage to accept orders and transfer production materials.

5. Retention and deletion

• Device settings and downloaded content: Stored in the app’s storage on your device. You can use in-app reset and deletion features or your operating system’s methods for deleting app data. Removing only the app executable may leave some local data behind.
• Website language preference: The first-party monifren_locale cookie stores your manually selected language code (ko, en, or ja) for up to one year. You can change the preference using the language selector in the header or remove it by clearing the cookie in your browser.
• Basic purchase verification: Purchase proof is used to verify entitlements, and its full contents are not recorded in general diagnostic logs. Each store retains transaction records under its own policies.
• Support materials: Used for as long as needed to handle your inquiry and deleted when that purpose has been fulfilled and the materials are no longer needed. If retention is required by law, we distinguish the relevant information, legal grounds, and retention period.
• Order photo originals:Server originals become eligible for cleanup 30 days after delivery, refund, or entitlement revocation. For archived unpaid drafts, the 30-day period starts from the later of archiving or the last photo upload. Active orders, payment verification, and uploads are excluded. Deletion has a minimum one-hour grace period and retries after failures, so completion may be delayed. Local production copies are cleaned up separately; server deletion does not guarantee local deletion. The same period does not apply uniformly to previews, completed sets, or transaction records.
• Local production materials: Local production copies are managed separately from the server. Originals and intermediate files managed by Studio become eligible for cleanup 30 days after delivery or refund. Cleanup may wait until the next connection if Studio is closed or offline. The operator must also clean up separately created local copies. Server cleanup does not mean that every production copy has been deleted.
• Previews, completed sets, and order records: Previews and completed sets are retained while the account and order remain available for order review, revisions, delivery, and re-download. Contact details are processed as needed for order handling and support. Minimum records needed for transactions, disputes, refunds, or legal retention are kept separately from photos and are not all deleted under the 30-day photo rule.

When you request deletion of an order account, we end sessions and access to private content, then unlink the account and remove associated photos and materials. Cleanup tasks that fail due to network errors or other issues are retried. The minimum records needed to verify transaction status are kept separately from account data, so deleting your account does not immediately delete all transaction records.

Electronic files are processed for deletion, and the use of legally retained information for other purposes is restricted. Failed deletions are retried. We do not state that all copies were immediately deleted before cleanup completion is confirmed.

6. Service providers and overseas processing

We use the following providers as needed to deliver the service. We do not sell personal information or provide it to third parties for targeted advertising. Any disclosure to a third party that requires separate consent or a legal basis is handled on that basis.

These providers operate global services, so connection information may be processed outside the Republic of Korea. Order photos are transferred through encrypted connections to private Cloudflare storage when uploaded for order intake and transfer of production materials. The current order bucket reports an Asia-Pacific (APAC) location; this does not mean a fixed country. Hosting providers process and retain data under the relevant service agreements and policies. Actual transfer countries, legal grounds, and other required notices must be finalized before public order intake; updating this notice does not open ordering. Contact the address below to ask about transfers or request refusal or suspension of processing. Refusing processing required for an order prevents custom production, but free and Standard Frens do not require order photos.

This website has no member accounts, input forms, or first-party analytics cookies. The language preference cookie described above is used to remember your language choice. Cloudflare’s performance measurement script operates regardless of whether cookies are present. Details are available in Cloudflare’s data collection documentation. Hosting providers may process connection information or cookies needed for service delivery and security. You can restrict or delete cookies in your browser settings, although doing so may limit some hosting features.

7. Your rights and how to contact us

Under applicable law, you may request access to, correction or deletion of your personal information, suspension of processing, or withdrawal of consent. We may ask for the minimum information needed to verify your identity. If a legal restriction prevents us from fulfilling a request, we will explain why.

If you use the optional account features, you can use the app’s account deletion feature or contact us below. Optional features such as pointer reactions and launch at login can be changed in the app’s settings.

For advice on privacy violations or dispute mediation, you can contact Korea’s Privacy Infringement Report Center or the Personal Information Dispute Mediation Committee.

8. Children’s personal information

The website does not currently accept registrations or materials from visitors, including children. We do not offer an ordering service that intentionally collects personal information from children under 14. If we learn that a child’s information has been submitted, we take the necessary steps to protect and delete it.

9. Safeguards and policy changes

We apply safeguards appropriate to the service, including encryption in transit, account-specific access controls, private content storage, and protection of sessions and authentication information. If our personal information processing changes, we will update this page and its effective date. Changes requiring separate notice or consent will follow the relevant procedures.

Version 1.1.3 · Created September 10, 2026 · Updated October 1, 2026 · Effective October 1, 2026