Unforget

This is a short English summary. The Korean version governs. If the two differ, the Korean version applies.

Unforget Privacy Policy

Effective date: October 20, 2026

Sadana (Oneurui Jeom) runs Unforget and handles your personal information under Korea's Personal Information Protection Act (PIPA).

  1. What we collect.
    • Guests: a random guest ID.
    • Email magic link (optional): your email address. Unforget offers only the email magic link and guest mode. There is no password login and no social login (Google, Apple, etc.).
    • Everyone: the decks and cards (text) you create or import, your study and review history (used to schedule reviews), your study settings (daily limits, reminder time, time zone, language), and the study pets and streaks you have in the app (if you use pets or friends).
    • If you use friends: your friend list and the display name you choose to show friends.
    • If you allow notifications: your push notification token (Expo push token).
    • Automatically: IP address, device/app information (user agent), access times and usage records (server logs).
    • This version does not accept or store photos, images, audio or other files.
    • We use no analytics, no ads and no crash reporting, and we don't track you across other companies' apps or websites.
    • This version has no paid features and collects no payment data. If paid features are added later, Apple (App Store) or Google (Google Play) will process payments as merchant of record; we never receive your card details, and we will update this policy before collecting anything new (such as subscription status).
  2. Why. Sign-in (including magic-link emails), storing your decks and cards and loading them on your devices, scheduling reviews and showing your stats, sending the reminders you choose, running the friends feature, service emails, support, security and abuse prevention, and aggregate statistics that don't identify you.
  3. How long. Account data and your content: until you delete your account, then deleted without delay. Study and review history: until you delete your account. Friend list and display name: until you remove the friend or delete your account. Push tokens: until you turn off notifications, log out or delete your account. Guest data: until the guest account is deleted (you can delete it in Settings); guest data unused for more than 1 year may be deleted. Server logs and sign-in session records: server logs up to 30 days; sign-in session records until you log out, the session expires (at most 1 year) or you delete your account, whichever comes first. Support records: 1 year after the request is resolved.
  4. Sharing. We don't give your information to third parties, except where the law requires it.
  5. Processors and overseas transfer. We use these providers. Your data is transferred over the network while you use the Service, and kept until you delete your account or the contract ends unless noted.
    • Fly.io, Inc. (US company; server region Tokyo, Japan (nrt)): API hosting. All data above. Contact: fly.io/legal/privacy-policy.
    • Supabase, Inc. (Japan (Tokyo, AWS ap-northeast-1); US company): Postgres database. Account data, decks and cards, study history, friend lists, push tokens, session records. Contact: supabase.com/privacy.
    • Sand Dune Mail Ltd (SMTP2GO, New Zealand company; sending servers in New Zealand and the US; our email delivery provider): service email. Email address and email content. Kept as long as needed to provide the service, per SMTP2GO's retention policy (until the contract ends). Contact: smtp2go.com/privacy.
    • 650 Industries, Inc. (Expo, US): push notifications. Push token and notification content, sent when a notification goes out. Kept as long as needed to deliver the notification (per Expo's retention policy). Contact: expo.dev/privacy.
    • Vercel Inc. (US): hosting of this website (unforget.sadana.app). Visitor IP address and access logs. Contact: vercel.com/legal/privacy-policy.
    • These transfers are needed to provide the Service, so if you refuse them you can't use it. Staying a guest without linking an email avoids the transfer to the email provider. Turning off notifications avoids the transfer to Expo.
  6. Your rights. You can ask to see, correct or delete your data, stop processing, or withdraw consent. Delete your account in the app at Settings tab → Delete account (at the bottom) (guests too); deletion is immediate and can't be undone. For anything else, email hello@sadana.app; we reply within 10 days.
  7. Children under 14. We don't accept sign-ups from children under 14. If we learn that we hold a child's personal information, we delete it without delay.
  8. Security. Access to personal data is kept to a minimum. All traffic is encrypted in transit (HTTPS/TLS). Database and server access is limited to the minimum needed to operate. Sign-in data is kept in the device's secure storage (iOS Keychain).
  9. Cookies and local storage. The app keeps your sign-in in the device's secure storage (iOS Keychain) and the data it needs (offline answers, settings) on your device. This website uses no cookies. No ad or tracking cookies or identifiers.
  10. Privacy officer. Head of Sadana (also the privacy officer), Head, hello@sadana.app.
  11. Where to get help (Korea). Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), Supreme Prosecutors' Office (www.spo.go.kr, 1301), Korean National Police Agency (ecrm.police.go.kr, 182).
  12. Changes. We announce changes at least 7 days ahead, and 30 days ahead for important ones.