YoriPrep Privacy Policy

Article 1. Controller, Scope, and Audience

UBERION is the operator of YoriPrep. The representative is WONSEOK JANG. The business registration number is 214-73-68656, and the official support and privacy contact is manager@uberion.org. This document does not state an unverified address or phone number as fact.

This policy applies to YoriPrep mobile app use, website policy routes, support requests, billing support, account deletion requests, privacy requests, AI/OCR features, analytics, advertising, and enterprise inquiry handling.

YoriPrep is intended for users who are at least 19 years old, business operators, employees of a business, or authorized work users. Uberion does not knowingly collect personal information from children under 14. If Uberion learns that such data was collected, Uberion will delete it without delay unless legal retention is required.

Article 2. Categories of Personal and Operational Data Collected

YoriPrep may collect account, login, profile, email, phone, SMS, KakaoTalk-related contact details, billing status, subscription entitlement, refund-routing, support, device, push-token, advertising identifier, analytics-event, notification-preference, and security data.

YoriPrep may collect store name, store address, menus, recipes, prep records, raw materials, ingredients, inventory, vendors, orders, sales, purchase records, operating notes, photos, original images, OCR inputs, OCR outputs, chat messages, prompts, and AI responses.

YoriPrep may collect staff names, staff contact details, schedules, task activity, wage inputs, employment-contract workflow data, and any other staff information entered by an operator. Review-account and test-store data may be created for platform review and service QA.

Article 3. Data Collected and Legal Notice Scope

Uberion processes the personal information listed in this policy only within the scope necessary for the stated purposes. Optional items are processed only when the user uses the relevant feature or gives a separate consent.

Advertising marketing communications may be sent by email, SMS, KakaoTalk, push, or similar channels only when legally permitted and when user consent or another lawful basis has been obtained where required. Advertising marketing consent, advertising choices, and withdrawal records may be stored so Uberion can prove and honor the current preference. Service, account, security, billing, legally required, and user-configured operational notices may still be sent as service notices.

Uberion does not use a user store name, trade name, logo, store address, or use case in promotional materials, customer lists, press materials, or sales materials without a separate opt-in consent that identifies the scope, media, and period of use.

Uberion may process chat content to provide AI/OCR features, support, security, and error improvement. AI research/model improvement is handled as a separate non-public quality-improvement opt-in consent.

Interviews, case studies, sales material, press, website publication, public examples, or public AI response examples require separate case-by-case or public-use consent unless applicable law permits otherwise.

The store-promotion consent, advertising marketing consent, and AI research/improvement consent are separated from publication consent. Optional consents are separated by purpose and do not bundle non-public research with external publication. Refusal or withdrawal does not restrict subscription purchase, account use, billing notices, security notices, legally required notices, required service notices, or basic paid-service use. The effect is limited to stopping new use for the optional purpose that was refused or withdrawn.

Article 4. Third-Party Processing, Sharing, and International Transfer

Production AI and OCR-related processing uses OpenAI, L.L.C. in the United States. Prompts, photos, OCR text, recipes, prep records, raw materials, ingredients, sales records, store notes, staff context, and chat messages may be transmitted when needed for the requested function.

Uberion operates on the premise that OpenAI API/business inputs and outputs are not used to train OpenAI models by default unless Uberion opts in. OpenAI security, abuse monitoring, legal compliance, and limited retention may still apply under provider terms.

Google Analytics is used for measurement. Apple processes purchase, subscription, refund, platform account, tax, and App Store billing information. Advertising networks, including Google AdMob and other enabled providers, may process ad identifiers and ad-delivery data.

On YoriPrep blog pages, Google and third-party advertising partners may use cookies, IP addresses, device identifiers, prior visits to this site or other sites, and ad interaction data to serve, personalize, measure, secure, and limit advertising. Depending on the user choice and region, Google may serve personalized or non-personalized ads.

Users can manage personalized advertising through Google Ads Settings, browser or device controls, and the Privacy & cookie settings link in the site footer. Where required, Google Privacy & messaging provides the certified consent message and records the consent choice before eligible advertising processing.

This policy does not name a hosting, database, storage, monitoring, email, SMS, KakaoTalk, customer-support, payment-support, or security provider unless that active relationship and the relevant processing facts have been verified for publication.

Entrusted-processing and international-transfer disclosures identify the recipient, country, transferred items, purpose, transfer method, retention period, transfer timing, and refusal consequence in the Korean Privacy Policy table. Refusal effects are limited to the function handled by the relevant recipient: required AI/OCR processing can limit AI/OCR features, platform billing processing can limit platform purchases or receipt recovery, hosting or database processing can limit account and service operation, marketing providers affect advertising messages only, and AdMob or advertising networks affect rewarded, personalized, or ad-based functions only.

Article 5. Retention, Storage, and Deletion

Account profile data is retained until account deletion or purpose completion. Store operation data, stored AI/chat records, staff data, and saved images are retained while the account is active unless the user deletes them or requests deletion.

After account deletion or a verified deletion request, operational access is blocked within 30 days, production database deletion is generally completed within 90 days, and backup deletion follows backup rotation up to 180 days.

Payment, subscription, refund, dispute, advertising, support, security-log, and marketing-consent records may be retained for legal or evidentiary periods, including 5 years for contract/payment records, 3 years for consumer complaints/disputes, 6 months for advertising records, 1 year for security logs, and 3 years for withdrawn marketing-consent evidence where applicable.

Article 6. Account Deletion and Data Deletion

Users may request immediate deletion through the homepage or available service request path and may initiate deletion through in-app Settings or support flows where available. Staff members may request deletion through the same route.

Deletion covers account records, workspace personal data, stored photos, OCR records, chat records, AI records, staff personal data, support identity data, device tokens, and ad or analytics identifiers where technically and legally possible.

Temporary deactivation, access restriction, or payment failure is not account deletion. Data retained for legitimate legal, tax, billing, security, fraud-prevention, dispute, or unresolved support reasons will be limited to the retention purpose.

Article 7. Privacy Rights, Choices, and No Standalone Export Product

Users and staff members may request access, correction, review, deletion, processing restriction, objection, and other rights available under applicable law through the homepage or support route. Uberion may verify requester identity before acting.

This Korea-first public copy supports requests through the published request path. Korean access requests are answered within legally required periods, including notice of availability, method, refusal reason, or extension reason within 10 days after identity or authority verification where Korean law applies.

Other privacy rights, including correction, deletion, restriction, objection, consent withdrawal, and advertising choices, are processed or answered within legally required periods. Account deletion, complex workspace or staff-authority checks, operational database deletion, and backup deletion may follow the separate 30-day, 90-day, and 180-day account deletion model.

YoriPrep does not provide a standalone export function in the app or website. Available access requests are handled through the request process, and export-like delivery may be limited by security, confidentiality, third-party rights, or technical constraints.

Users may control certain push, ad personalization, analytics, platform, and device choices through app settings, device settings, platform settings, or provider interfaces where available.

Article 8. Staff Data and Workplace Notice

Operators who enter employee, contractor, or staff information must provide legally required notices, collect required consents where needed, and maintain a lawful basis for entering that information into YoriPrep.

Staff data may be processed for scheduling, task tracking, store operations, employment-contract workflows, support, AI/OCR context, audit, security, and deletion handling, but it is not treated as public promotional content.

YoriPrep AI does not make automatic legal or HR decisions about staff. Staffing, work evaluation, wages, termination, or discipline must be reviewed and decided by the operator or another authorized person.

Staff members may request access, correction, deletion, or review through the same public request path. Uberion may coordinate with the operator when the request concerns workspace records controlled by the operator.

Article 9. Security, Children, and Updates

Uberion uses reasonable administrative, technical, and organizational safeguards appropriate for a launch-stage service, including access limitation, database controls, provider controls, and deletion procedures. No service can guarantee absolute security.

YoriPrep features may use artificial intelligence and OCR technology. Results generated, summarized, extracted, recommended, or analyzed by AI or OCR are displayed as AI-generated, AI-assisted, OCR-extracted, or equivalent user-understandable labels, and users must review them before using them for business operations, pricing, staff operations, or food-safety decisions.

This policy may be updated as registration, contact channels, processors, ad networks, analytics configuration, AI providers, or launch regions change. General changes are noticed 7 days before effect where practicable, and materially adverse changes are noticed 30 days before effect unless urgent security, legal, or platform-policy reasons require later notice.