Document status: Draft for review. This policy will be finalized by qualified legal counsel before the service launches. Placeholders marked [TBD] must be completed.
Cloze Inc. (μ£Όμνμ¬ ν΄λ‘μ¦) is the data controller for personal information collected through the Cloze app and this website.
| Item | Details |
|---|---|
| Company | Cloze Inc. (μ£Όμνμ¬ ν΄λ‘μ¦) |
| Representative | Hyunkyu Lee |
| Address | 47 Gangnam-daero 112-gil, Gangnam-gu, Seoul, Republic of Korea (Zip: 06121) |
| Privacy email | privacy@getcloze.com |
| DPO (EU/UK) | dpo@getcloze.com |
From registered users (senders):
From recipients (non-users):
Recipient phone numbers are automatically and permanently deleted 7 days after the confession expires. We have no way to reverse-engineer your number from the hash we store.
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and service provision | Art. 6(1)(b) β contract performance |
| Age verification | Art. 6(1)(c) β legal obligation |
| Security and fraud prevention | Art. 6(1)(f) β legitimate interest |
| Service analytics and improvement | Art. 6(1)(f) β legitimate interest |
| Marketing communications | Art. 6(1)(a) β consent (opt-in only) |
| Data | Retention period |
|---|---|
| Account data (email, DOB) | Deleted within 30 days of account deletion |
| Recipient phone number (hashed) | Auto-deleted 7 days after confession expiry |
| Message content | Auto-deleted 7 days after confession expiry |
| In-app purchase records | 5 years (legal obligation) |
| Terms acceptance logs | 5 years (legal evidence) |
| Opt-out records | Permanently retained (to prevent re-sending) |
| Processor | Purpose | Country |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure | USA (global) |
| Twilio Inc. | SMS delivery | USA |
| Google LLC (Firebase) | Analytics, crash reporting | USA |
| Apple Inc. / Google LLC | In-app payments | USA |
| NICE / KCB | Identity verification (Korea only) | Korea |
We do not sell your personal data. We only share data with third parties as described above or when required by law.
Your data may be transferred to the United States and other countries for processing. We apply appropriate safeguards:
| Right | How to exercise |
|---|---|
| Access | App β Settings β My Data, or email privacy@getcloze.com |
| Rectification | App β Profile, or email us |
| Erasure ("right to be forgotten") | App β Settings β Delete Account, or email us |
| Data portability (GDPR/LGPD) | Email privacy@getcloze.com |
| Object to processing | Email privacy@getcloze.com |
| Withdraw consent (marketing) | App β Settings β Notifications, or unsubscribe link in emails |
| Non-users (recipients): opt-out & deletion | getcloze.com/about-this-message |
We respond to all requests within 30 days (GDPR: 1 month). No fees charged for reasonable requests.
Cloze is strictly for users aged 18 and over (19 in Korea, 20 in Thailand). We do not knowingly collect data from minors. If we discover a minor has registered, we immediately delete the account and all associated data.
This website may use essential and analytics cookies. EU/EEA visitors will be presented with a cookie consent banner before any non-essential cookies are set.
EU/EEA & UK: You may lodge a complaint with your local Data Protection Authority. DPO: dpo@getcloze.com
Korea: Privacy Officer reachable at privacy@getcloze.com. Supervisory authority: Personal Information Protection Commission (PIPC).
Brazil: DPO: dpo@getcloze.com. Supervisory authority: ANPD.
Australia: Complaints may be lodged with the OAIC at oaic.gov.au.
We will notify you of significant changes at least 30 days in advance via in-app notice and email. Continued use of the service after the effective date constitutes acceptance.
| Purpose | Contact |
|---|---|
| General privacy inquiries | privacy@getcloze.com |
| EU/UK DPO | dpo@getcloze.com |
| Recipient opt-out / data deletion | getcloze.com/about-this-message |
| General support | getcloze.com/support |