초안: 변호사 검토 필요
이 문서는 Corner 변호사를 위해 작성한 초안으로, 출시 전에 변호사가 검토하고 다시 작성해요. 아직 확정된 내용은 없어요. “For the lawyer”로 표시된 메모는 변호사만 답할 수 있는 질문이에요.
이 페이지는 당분간 영어로만 볼 수 있어요.
This policy says what Corner collects about you, why, who sees it and how long it's kept. Corner is built so that fans never see each other, and these rules are enforced in Corner's database, not only in the app. [For the lawyer: Corner's legal name and address, as the company responsible for this data.]
What Corner collects
- Your email address, to sign you in with a one-time code and, unless you turn them off, to send you notification emails when no phone of yours gets Corner's notifications.
- Your nickname, your language and your date of birth, from which Corner works out whether you're under 18 (a minor), and when you agreed to the Terms of Service and Community Guidelines.
- What you do in chats: your replies (with the language each is in and, if you let Corner translate them, its translation), your reactions and poll votes, and when you last opened each chat, for the unread counts.
- Reports you send, any warnings or bans from the Corner team, and whether an athlete blocked you from replying.
- Your subscriptions: which athletes, where you pay (the App Store, Google Play or the web), and their status and dates.
- Payment records: amounts, currency, tax, the store's or card fee, and refunds, and for web payments the country your card is from. Corner never sees or stores your card number.
- A private ID under which RevenueCat keeps your App Store and Google Play purchases. It's random, only you and Corner's server can read it, and it says nothing about who you are.
- Your notification settings and, for each phone that gets Corner's notifications, its notification address (a push token) and whether it's an iPhone or an Android phone.
- Short technical logs that Corner's hosting and database services keep, such as the IP address and time of each request, to keep Corner running and secure. [For the lawyer: how long these services keep their logs on Corner's plans.]
- When something goes wrong in the app or on Corner's server, a report of the problem: what went wrong, where in Corner's code, the screen it happened on, the app's version and your phone's system (iPhone or Android, and its version). It never says who you are: Corner takes email addresses and account IDs out of it, and adds no nickname, message or IP address.
- If you're an athlete: your profile (name, photo, bio, chat background and welcome message), everything you post, and your stats and monthly statements.
Why Corner uses it
- To run your account and your chats: to sign you in, show you the chats you pay for, and take your replies to the athlete.
- To take payments, keep anyone from paying twice for one athlete, keep the records that tax and accounting law require, and work out athletes' monthly statements.
- To translate athletes' messages, and your replies if you let Corner, and to send the notifications you choose.
- To keep Corner safe: the age check, the reply filter (stricter for fans under 18), reports, warnings and bans, and limits on how fast anyone can reply or ask for sign-in codes.
- To find and fix problems in the app and on Corner's server.
- [For the lawyer: the legal basis for each use, for example the contract, a legal obligation or legitimate interests.]
Who sees what
- Other fans never see your replies, your nickname or who you are.
- Athletes see your replies to their own chat, never to anyone else's.
- With each reply, the athlete sees your nickname, the language you wrote in, its translation if you let Corner translate your replies, and an ID for your account (not your email), so they can answer it, hide it or block you.
- When an athlete answers your reply, every fan of that chat sees its words quoted with the answer, never your name or nickname.
- Your nickname is private: only you, the athletes you reply to and the Corner team see it.
- Athletes see counts, such as subscribers and poll results, never who reacted or voted. They never see your email, your date of birth or your payments.
- The Corner team sees what it needs to run Corner and keep it safe: accounts, subscriptions, payments, reports and replies. Its tools run only on Corner's server, and every change it makes is logged.
Services that work for Corner
Corner uses these companies to run the app. Each gets only what it needs for its part.
- Supabase: Corner's database, sign-in and file storage, where Corner's records about you are kept.
- Vercel: hosts Corner's website and the server the app talks to.
- Stripe, with Stripe Tax: web payments. Stripe gets your email, your Corner account ID, your card and billing address (to work out US sales tax) and what you buy.
- Apple and Google: purchases in the app, which you make under the App Store's or Google Play's own terms. Corner learns what you bought, its price, tax and the store's fee, never your card.
- RevenueCat: keeps track of App Store and Google Play subscriptions for Corner. It knows you only by your private ID, never by your email or name.
- Google Cloud Translation: the words of athletes' messages (with their poll options) and, only for fans who let Corner translate their replies, the words of those replies, also where an athlete's answer quotes one, to translate them. It gets the words only, never who wrote them.
- Expo, with Apple's and Google's push services (Apple Push Notification service and Firebase Cloud Messaging): phone notifications. They get your phone's push token and each notification: the athlete's name, the start of the message and a link to the chat.
- Resend: sends sign-in codes and notification emails. It gets your email address and each email.
- Sentry: tells the Corner team about problems in the app and on Corner's server. It gets the reports of problems described above, never your email, nickname, messages or IP address: phones send their reports to Corner's server, which passes them on.
- [For the lawyer: each company's data processing terms, where it keeps data (for example in the US), and the safeguards for data sent from the EU and the UK, and from other countries with rules on sending data abroad, such as South Korea, Japan and Brazil.]
Translation
Athletes' messages are translated automatically. Fans read them in the language they pick in Settings, with “See original” to read what the athlete wrote.
Fans' replies are translated only if the fan lets Corner: sign-up asks, with Allow or Not now, and Translate my replies in Settings changes it at any time. Then athletes read them in their own language, marked with the language each was written in, and can read the original. While it's off, Corner never sends that fan's replies, or the quotes of them in athletes' answers, to Google: athletes read them as written, and so do fans when an athlete answers one. Translations made while it was on are kept.
Notifications
- On your phone: when an athlete you subscribe to posts, your phone can show the athlete's name and the start of the message, also on the lock screen. Turn this off with New messages in the app's Settings, or in your phone's settings.
- By email: only when no phone of yours gets Corner's notifications and you haven't opened that chat for a day, and at most one a day. These emails are on until you turn them off, with Email in Settings or with the link at the bottom of any of them. [For the lawyer: whether these emails may be on by default (opt-out) where fans live, for example in the EU and the UK.]
- Signing out on a phone stops its notifications. Corner remembers at most 10 phones for each account, and forgets a phone once it no longer takes Corner's notifications.
How long it's kept
Your account and everything in it are kept until your account is deleted. [For the lawyer: whether accounts nobody uses are deleted after a while.]
Some records are short-lived: Expo's answer about each notification is kept for about a day, Corner's list of messages and replies waiting to be translated or notified for about a week, the limits on how fast someone can reply or sign in for a day, and reports of problems (Sentry) for 30 days. [For the lawyer: how long the services above keep their own copies, for example Resend's record of each email sent.]
Every night, Corner makes an encrypted copy of its database and its files, to put them back after an accident, and keeps each copy for 14 days. So something deleted, an account too, is gone from every copy within 14 days. [For the lawyer: whether backups need saying anywhere else, such as on the page on deleting an account.]
Deleted with your account
- Your email and your sign-in.
- Your profile: nickname, language, date of birth, notification and translation settings, and when you agreed to the Terms of Service.
- The phones that get your notifications, and any notification still waiting to be sent to you.
- Your replies, reactions and poll votes, and any warnings from the Corner team.
- Your subscriptions, and your customer records at Stripe (card payments) and RevenueCat (App Store and Google Play purchases).
Kept after you delete your account
- Replies an athlete answered in front of everyone stay quoted in that answer, with no name.
- Reports you sent stay, without your account, so the Corner team can finish looking into them.
- Corner's record of payments and refunds, without your account, for as long as tax and accounting law requires.
- A log of what happened to the account, by its ID only, with no email or nickname.
Deleting your account
Fans can delete their account at any time: in the app, open Settings and tap Delete account, or use the “Delete your account” page of Corner's website, after signing in there with an email code.
Stripe and Google Play subscriptions stop, and nothing is refunded; an App Store subscription keeps billing until you cancel it in your iPhone's settings.
Athlete and Corner team accounts are closed by the Corner team. To close one, email support@cornerhq.app.
Your choices and rights
- Change your nickname and language, choose whether Corner translates your replies, and turn notifications on or off, in the app's Settings.
- For a copy of your data, or any other request about it, email support@cornerhq.app. [For the lawyer: the rights people have where they live, for example to access, correct, export or object, and how Corner answers requests.]
Children and teens
- Corner is for people aged 13 and older, and 14 and older in South Korea: sign-up asks for your date of birth and refuses anyone younger.
- To tell whether someone is signing up in South Korea, Corner looks at their phone's region and the country their internet connection comes from, when they sign up, and keeps neither.
- If sign-up refuses someone for their age, the account their email code made is deleted at once, and their phone remembers only that it refused someone that day, so they can't simply go back and enter another date of birth until the next day.
- Fans aged 13 to 17 are marked as minors, and Corner's filter holds more of their replies for the Corner team to check, such as ones sharing a way to contact them outside Corner.
- If you think a child under 13 (under 14 in South Korea) has an account, email support@cornerhq.app. [For the lawyer: what Corner must do then, and what US state age laws and other countries' rules require for teens.]
On your device
- The website uses cookies only to keep you signed in. The app keeps your sign-in in your phone's secure storage.
- Corner shows no ads, has no advertising or analytics trackers, and doesn't sell your data. [For the lawyer: confirm these as promises. Sentry's reports of problems (above) say nothing of what people do in the app.]
- The app asks to show notifications, and for the microphone and your photos only when an athlete records a voice note or adds a photo or video. It never asks for your location or your contacts.
Changes to this policy
If this policy changes, the new version is posted here. [For the lawyer: how people are told, and which changes need their consent again.]
Contact
Questions about your privacy? Email support@cornerhq.app. [For the lawyer: a data protection contact, and the representatives Corner must name in the EU and the UK (a yearly paid service), once they're appointed.]