← Back to home

Privacy Policy

Last updated 2026-10-21

This is a draft describing what the product actually collects today. It has not been reviewed by counsel and needs legal review before launch. The Korean version is the operative text.

1. What we collect

  • Account: name, email, optional phone and business name; the identifier your provider returns if you use social sign-in.
  • Work records: uploaded photos and videos with their capture time, location (GPS, when permitted or from the EXIF of an uploaded file), file checksum and notes.
  • Customer details you enter: name and contact.
  • Signatures: the image a customer draws on the share page, with its timestamp and IP address.
  • Diagnostics: logs used to investigate errors.

2. Why we use it

  • Storing work records and serving customer share links
  • Producing the work confirmation report and collecting e-signatures
  • Checking subscription state and applying plan limits
  • Investigating faults and improving the service

3. Location

Location is used only to record where a photo was taken, and only when you grant the permission. Declining it does not affect capture or sharing; the photo is simply stored without coordinates. However, when you upload an existing photo file (for example from the web dashboard), location metadata embedded in the file (EXIF GPS) is read, independently of the device location permission, and is collected and stored as part of the work record.

4. Retention

  • Work records are kept while the account is active.
  • We delete data without undue delay when you request deletion or close the account.
  • Information we must retain by law is stored separately for the required period.

5. Sharing and processors

  • We do not sell or share personal data with third parties without consent.
  • Payments: the app stores (Apple, Google) and RevenueCat
  • Database and file storage: Supabase
  • Web hosting: Vercel
  • Error reporting: Sentry
  • Authentication: Google, Apple, Kakao where social sign-in is used
  • AI photo analysis: Anthropic, PBC (USA), via the Claude API (see section 10)

6. What a share link exposes

A share link shows that project's photos, capture details, job information and your business name. You can require an access code and set an expiry date.

7. Your rights

You may request access, correction, deletion or restriction of your personal data at any time through the settings screen in the app or by email to app@mint-soft.com.

8. How we protect it

  • Encryption in transit (HTTPS)
  • Auth tokens held in the device secure store
  • Authorization checks on photo access and access codes on share links

9. Privacy officer and contact

  • Data controller: MintSoft (민트소프트), Seoul, Republic of Korea
  • Privacy officer: MintSoft (app@mint-soft.com)
  • Privacy questions and access, correction or deletion requests: app@mint-soft.com

10. AI photo analysis (cross-border transfer)

  • Purpose: only when you tap an analyze button, the site photos you select are analyzed to provide findings such as defects and changes. Nothing is sent to the AI unless you request it.
  • Items: the photo images you select (originals or thumbnails, with embedded metadata such as location and device information removed); as context, the project title, address, description and status, photo memos, phases (before/during/after) and capture times, pair titles, previously generated analysis summaries when drafting a customer message or blog post (findings hidden from customers are excluded), and the app language
  • Recipient: Anthropic, PBC (USA), provider of the Claude API
  • Destination country: United States
  • When and how: sent over the network in encrypted form at the moment you request an analysis.
  • Retention: kept for the period set by Anthropic's commercial API data retention policy; under its commercial terms Anthropic does not use API inputs to train its models.
  • Right to refuse: you can decline the transfer by not using the AI analysis feature. Consent is requested before first use, and declining does not limit any other feature.
  • Withdrawing consent: you can withdraw consent at any time in Settings > Withdraw AI analysis consent. After that, analyses cannot run until you give consent again; information already sent before withdrawal is not affected.
  • Operator and contact: MintSoft (app@mint-soft.com)

11. International users and data transfers

  • We operate from Seoul, Republic of Korea, and serve users worldwide.
  • Your data is processed and stored on servers run by our providers, which may be located outside your country. Currently the database and files are held with Supabase (US East, us-east-1) and the web app is hosted by Vercel (US East); we access them from the Republic of Korea.
  • Subscription status is handled by RevenueCat, payments by Apple and Google, and crash reports by Sentry.
  • AI analysis is sent to Anthropic, PBC in the United States only after you consent in the app (see section 10).
  • For transfers of EEA and UK data we rely on safeguards recognized by law, such as standard contractual clauses, where applicable.

12. EEA and UK users (GDPR)

  • Controller: MintSoft (민트소프트), Seoul, Republic of Korea; app@mint-soft.com; +82 010 2163 1513
  • Legal bases: contract performance (providing the service); consent (AI analysis and location); legitimate interests (security, abuse prevention and crash diagnostics); legal obligation
  • Your rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent (without affecting earlier processing), and lodging a complaint with a supervisory authority in your country of residence, workplace or place of the alleged infringement
  • To exercise them: email app@mint-soft.com or use the settings in the app. You can withdraw consent in Settings > Withdraw AI analysis consent.
  • Transfer safeguards: see section 11
  • Retention: see section 4

13. US state residents (California CCPA/CPRA and similar laws)

  • Categories collected: identifiers (name, email, IP address); commercial information (subscription and purchase history); geolocation (GPS in photos); photos, signatures and other user content; diagnostics (error logs)
  • Purposes: as described in sections 1 and 2, namely providing the service, verifying subscriptions, security, and fixing and improving the service
  • We do not sell personal information and do not share it for cross-context behavioral advertising.
  • Your rights: to know, to delete and to correct. We do not discriminate against you for exercising them.
  • How to request: email app@mint-soft.com or use Settings > Delete account in the app. An authorized agent may submit a request on your behalf once we verify your written authorization.

14. Children

The service is not directed to children under 16 (under 14 in Korea), and we do not knowingly collect their personal data. If you believe a child has provided data, tell us at app@mint-soft.com and we will delete it without delay.