Effective Date:2025-11-01 Services:EmOcean Vibe & EmOcean AI (the “Company”, the “Service”)
General Principles
We protect your personal data and comply with GDPR, CCPA/CPRA, Korea PIPA, Japan APPI, and China PIPL/DSL/CSLwhere applicable. This Policy explains what we collect, why, how long we keep it, how we protect it, and your rights.
Information We Collect
Required:nickname/name, age band, gender, email, phone (where applicable), login records, IP/device data. Service Data:EmOcean Vibe responses, emotional profiles/results, usage logs and patterns. Payment (paid services):payment method, billing address, payment identifiers (stored by PSPs). Optional:information you voluntarily provide (events/surveys, etc.).
Purpose of Use
Provide/operate the Service, deliver profiles and analytics, personalized AI coaching, payments/refunds, support, security & quality improvement, statistics and research using de-identified/anonymous data.
Data Retention
Account data:erased without undue delay upon deletion request (unless legal retention applies). Payments:up to 5 years under e-commerce, accounting, and tax laws. Service data:may be retained long-term after de-identification/anonymizationfor R&D.
Sharing & Processors
No selling of personal data. We may use vetted processors for: payments (e.g., Stripe/PayPal), cloud/storage/logging (AWS/GCP), and legal requests. All processors are bound by DPAs and appropriate safeguards.
Security Measures
Encryption in transit/at rest, RBAC/ABAC access control, least privilege, hashing, de-id/pseudonymization, regular security reviews/pen-tests, logging/monitoring, incident response.
Your Rights
Access, correction, deletion, restriction/objection, withdrawal of consent, account deletion. GDPR:data portability, objection to automated decisions, explanation rights. CCPA/CPRA:right to know/delete/correct, limit sensitive data, Do Not Sell/Share. Contact via Account or Support.
Children’s Privacy
Children under 14 (KR) or 16 (EU) require parental consent and may not use the Service otherwise.
Cookies & Tracking
We use cookies for experience, analytics, and personalization. You may disable cookies in your browser; some features may not function properly.
International Transfers
Data may be processed outside your country. We use SCCs, supplementary measures, TIAs, and notice/consent as required to ensure adequate protection.
DPO & Contact
DPO: Ines KH Kim· Email: official@emoceanai.org· Support portal on our website.
Updates
We may update this Policy; material changes are announced 7–30 days in advance. Non-medical notice:This Service is not medical/diagnostic. Enterprise reports:k-anonymizedaggregates only (n≥10); no raw personal responses.