Privacy Policy

Owl Letter - Gentle Weather (formerly Malgeum) | Last updated: July 23, 2026 | Effective: July 23, 2026

한국어 버전 →

1. Overview

Supervillain Labs Inc. (“we”, “the Company”) operates Owl Letter - Gentle Weather, formerly Malgeum (“the App”). The App provides weather-based action guidance, alerts, widgets, invitations and connections, Owl Notes, optional AI features, advertising, and subscriptions. This policy explains how information is collected, used, transmitted, retained, and deleted. If the Korean and English versions conflict, the Korean version prevails.

2. Information We Process

2.1 Information you enter or create

No email, phone-number, or real-name login is required. Firebase automatically creates an anonymous account and UID for server-backed features.

2.2 Location

• Your current latitude, longitude, and place name are used for weather and air-quality requests to OpenWeatherMap and Open-Meteo. For Korean AirKorea enrichment, the proxy receives a place or station name rather than latitude and longitude.
• When an anonymous UID is active and location permission lets the App obtain your current location, the App may update the Owl Letter backend with that latitude, longitude, and place name at launch regardless of whether individual notification toggles are on or off. This supports server messages, account recovery where a credential remains on the device, and the foundation for server weather alerts.
• Location permission is optional and manual city search remains available. Revoking permission stops future current-location updates, but a location already stored on the backend may remain until account deletion.
• Your saved-place list is stored locally on your device.

2.3 Information sent to the Owl Letter backend

2.4 Information stored on your device

App settings, saved places, weather cache, diary, recent chat history, personality, game and engagement records, notification settings, recommendation feedback, profile date of birth, the accepted Owl Note rules version, Owl Note read cache and last-seen timestamps, and local copies of letters successfully published to POST BOX are stored locally through the App's storage. Up to 50 letter copies remain on the device and can be deleted individually from the letter box. Deleting a local copy does not automatically withdraw the server-backed POST BOX post. A server-issued random single-use recovery token is kept in Android Keystore-encrypted storage or iOS Keychain and is treated as an account credential. Android removes this token when the App is uninstalled, so recovery after reinstall is not guaranteed; on iOS, recovery is possible only where the operating system and device state retain the token. Recommendation feedback is limited by count to the most recent 90 entries, not automatically purged exactly 90 days after creation. Profile information may be synchronized to the backend when you send an Owl Note, and some selected context leaves the device when you request an AI, invitation, or Owl Note feature as described here, so these categories are not always exclusively local.

2.5 Owl Notes and information visible to other users

• A note to a new person is delivered through a queue using pseudonymous IDs. We do not disclose your real name, email address, phone number, or precise location to the recipient. Anything you type into the note itself may be visible to the recipient, so do not include personal information or contact details.
• When you accept the current disclosure and choose Let the letter fly in the weather-based letter composer, the letter body of up to 160 characters, server-calculated age range, gender you made public, and app-calculated weather personality may be shown without your nickname in multiple users' Cloud Mailbox. A gender set to Private is not shown. Your exact date of birth, nickname, photo, bio, and personality insights are not provided on the Cloud Mailbox card. Publication may continue until matching, expiry, or withdrawal, and your own Cloud Mailbox separately identifies your public letter while it is waiting for a response. Letters published under an older disclosure and regular stranger notes do not include these author details.
• You must be at least 16 to write an anonymous note to a new person. Your exact date of birth is used to determine eligibility and calculate an age range; only the age range, not the date of birth, is shown to another user. You must accept the current version of the zero-tolerance user-content rules before writing.
• People who are not already connected may exchange the initial notes and use only preset reactions supplied by the App. Free-text messaging is available only between people who have formed a mutual connection by accepting an Owl friend request or invitation.
• While a real-user match is pending, the App may provide a post-office notice or a clearly labeled AI Postmaster response. It is not a reply from another user, and real matching continues separately.
• We may apply pre-posting prohibited-word filters, close an exchange and prevent rematching after a report, and restrict sending based on repeated reports within a defined period. Report and related records are used for safety operations and dispute handling.
• We cannot technically retrieve content that another user has already seen, copied, or recorded separately.

2.6 Information processed by the AI proxy

When you request an AI answer, diary interpretation, personality result, or letter draft, or explicitly request an AI Postmaster response for an Owl Note that is still waiting for a match, the Company's AI proxy and its connected model provider process:

• an App-generated device ID and an anonymous user ID used for subscription validation;
• your current question and recent conversation, current weather, place name, nickname, health preferences, and settings context;
• when requested by an AI tool, commute and alert settings, connection nicknames and schedules, and pending invite codes;
• letter sender and recipient names, unsaid words, shared memory, tone, and the current weather and place name when you choose to include them; and
• personality-quiz signals and the weather description supplied with the request.
• the Owl Note text and language setting used for an AI Postmaster response. The App does not add precise location or contact details as separate context.

Owl Letter does not store the recipient email address that you type directly into your device's mail composer. AI output can be inaccurate and should be reviewed before use.

2.7 External and Company-operated services

OpenWeatherMap · Open-Meteo · Firebase · RevenueCat · Sentry · Anthropic · AppLovin · Google Ads

3. Advertising and Consent

Free-tier users may see AppLovin MAX banner ads. Google AdMob and other disclosed partners may provide demand through mediation. Providers may process advertising identifiers, IP address, device, language and country information, consent signals, impressions, and clicks for ad delivery, measurement, and fraud prevention.

• In the EEA, UK, Switzerland, and other applicable regions, Google UMP presents privacy choices. The App initializes advertising only within the request scope allowed by a confirmed status, passes a negative personalized-ad signal when personalization consent is absent, and requests no ads if consent status cannot be established.
• On iOS, the App resolves applicable UMP choices first and requests App Tracking Transparency permission before IDFA use only when personalized advertising is allowed.
• When a U.S. state privacy choice is required, the App conservatively sends AppLovin MAX a do-not-sell-or-share signal.
• Where required, open Settings → Advertising privacy choices to review or withdraw your selection.
• Premium subscribers see no in-app ads.

4. Purposes and Legal Bases

We use the information above for weather and air-quality requests, action guidance, widgets and alerts, anonymous-account operation and account recovery where a credential remains available, invitations and connections, Owl Note delivery, reporting, blocking and enforcement, optional AI generation, subscriptions and advertising, campaign settlement, product analytics, error diagnosis, security, and fraud prevention. Where applicable, processing relies on providing features you request, your consent for optional permissions or personalized advertising, our legitimate interests in security and service reliability, and compliance with legal obligations.

5. Retention and Deletion

• Local data remains until you remove it or uninstall the App. Weather cache becomes invalid after ten minutes and may later be replaced. Recommendation feedback is limited to 90 entries.
• Anonymous account, location, push, invitation, connection, and server-message data remains on the Owl Letter backend while the account is active. Uninstalling alone does not delete server data.
• An Owl Note waiting for a match expires 24 hours after creation. A POST BOX public letter is removed from the listing when its public state ends. Public letters, notes, preset reactions, connection messages, reports, and block records may remain on the server after a user dismisses an item or closes a connection for safety operations, prevention of rematching, and dispute handling. Account and data deletion removes records associated with the anonymous account, subject to the minimum legal, security, and dispute exceptions below.
• Choosing Settings → Delete account and data deletes the Firebase anonymous account, associated Owl Letter backend user, recovery-verification data, public letters, Owl Notes, invitations, connections, server messages and device-linked records, and local App data including the recovery token.
• After deletion, a content-free local deletion marker stores only remote-deletion/device-cleanup status, a random operation generation, and a random deletion receipt used to confirm server completion. It prevents automatic anonymous-account recreation and resumes interrupted cleanup; it contains no profile or activity content. After cleanup completes on a later launch, new non-account settings and weather cache selected by the user may be stored again.
• For idempotent deletion confirmation and to prevent a deleted anonymous account from being reactivated, the backend retains an irreversible, server-keyed HMAC deletion fingerprint and deletion timestamp for as long as that protection is needed. This record contains no raw UID, profile, or activity content. Only if Firebase account deletion temporarily fails may the raw Firebase UID remain in a retry list for up to 30 days; the raw UID and identity links are cleared immediately after success or at expiry. The HMAC record is not used for personalization.
• Store subscriptions must be canceled separately through Apple or Google. Information already processed by payment, advertising, analytics, AI, or error-service providers is retained and deleted under their policies and our applicable agreements.
• The Company-operated subscription-validation API may retain transaction, product, platform and subscription-status records, together with a pseudonymous user link, for as long as necessary to provide and restore subscriptions, process refunds, meet accounting or dispute requirements, and prevent fraud. Deleting an App account does not delete a store transaction ledger or minimum payment records that must be retained by law.
• We ordinarily delete associated records, but may retain the minimum information strictly required for law, accounting, disputes, security, or fraud prevention for the applicable statutory or necessary period. Such information is not used for personalization.

6. Sharing and International Processing

We do not sell personal information. We transmit information to processors only as needed to provide the services described above. These providers may process information outside your country and apply their own policies and applicable transfer safeguards.

7. Children's Privacy

• You must be at least 14 years old to use the App. Anonymous Owl Notes exchanged with new people are separately limited to users who are at least 16. A user under 16 may continue using other App features that are otherwise available to them.
• If we determine through an age check, a report from a user or guardian, or another reliable means that a user is under 14, we will restrict access and promptly delete the child's account and associated personal information, except for the minimum information we must retain by law.
• A user or guardian who believes that information from a child under 14 has been processed may contact us at the email address below to request deletion.

8. Your Rights and Choices

• Use Settings to delete the account and data or revisit advertising privacy choices.
• Use system settings to revoke location, notifications, microphone, speech-recognition, or tracking permission.
• Contact us to request access, correction, erasure, restriction, portability, or objection where applicable. EEA and UK users may also complain to their local supervisory authority.

9. Security

Company-operated APIs and weather requests use HTTPS. Advertising SDK web or media creative may be processed under those providers' security policies and narrowly scoped iOS transport exceptions. Server account changes, deletion, and recovery require Firebase authentication and an authorized ownership check such as a server-issued single-use random recovery token. A hashed hardware identifier alone is not accepted as recovery authentication. No transmission or storage method is completely secure.

10. Changes

We will announce material changes through an app update, in-app notice, or store listing. Changes apply from the stated effective date unless law requires a longer notice period.

11. Contact

Support · Terms of Service · Account and data deletion · 한국어