Effective date: 2026-08-22
[Collected at sign-in] The Service collects the following through Google OAuth login: - Email address - Name - Profile picture There is no separate sign-up process or password entry. [Settlement Guide Interactive Calculators — No Collection & 100% Local Browser Computation] Information entered into our settlement calculators (such as household size, income, child birth date, or immigration status for minimum wage, sick leave, CARE/FERA, Medi-Cal, security deposit, or school age calculators) is processed entirely locally within your client browser and is NEVER transmitted to or stored on our servers. [Generated automatically while the Service is used] The following is generated and collected whether or not you are signed in: - Server access logs: IP address, requested path, time of access, referring page, browser and operating system - Visit analytics: pages viewed, time of visit, referring source, screen size, approximate region - Interaction records: a reconstruction of on-screen activity such as clicks and scrolling - Technical details when an error occurs: error message, the path on which it occurred - Advertising impressions and clicks (where the advertising cookies in Article 6 are used) Server access logs are written by the web server for operation and security, so they are recorded even if you refuse cookies. Everything else is collected through the cookies and analytics tools in Article 6 and may be refused by the methods described there. [Collected when you write to us] If you send us an enquiry by email, we collect your address, the content of the message, and anything you send with it. [Smart Tip Calculator & AI Receipt Scanning Tool] - Receipt Images & AI Processing (All Users): Receipt image data is processed ephemerally in memory (RAM) solely for structured financial extraction via Google Gemini Vision AI and is immediately discarded (Zero-Retention). Images are never stored on server disks or databases. User data and images are never used for AI model training. Credit card numbers, signatures, and personal names are strictly filtered and never collected. - Logged-in Receipt Settlement History Service (Upon User Save): Only when an authenticated user explicitly clicks [Save to My History], the recognized merchant/restaurant name, settlement date & time, subtotal, tax, tip amount, total payment, split count, and user-provided notes are securely stored in their personal account to provide the Personal Vault Settlement Calendar & Expense History Tracking service. Users can view, individually delete, or permanently erase all records at any time upon account deletion. [Smart Unit Converter AI Photo Recognition Tool] - Photos & AI Processing (All Users): Photos you capture or upload are processed ephemerally in memory (RAM) solely to recognise the numbers and units shown and calculate their converted values via Google Gemini Vision AI, and are immediately discarded (Zero-Retention). Photos are never stored on server disks or databases, and are never used for AI model training. The recognised and converted result is composited onto the photo and shown only in your browser; it is not separately saved to your account.
[Member information] - Identifying members and maintaining the login session - Granting feature access permissions (role) within the Service - Preventing fraudulent use [Automatically collected information, per Article 1] - Operating and securing the Service and responding to abuse (server access logs) - Analysing how the Service is used and improving its screens - Diagnosing and fixing errors in the Service - Serving advertising and measuring its performance (limited to the advertising cookies in Article 6) [Enquiries] - Reading and answering your message [Smart Tip & Receipt Settlement History (Logged-in Members)] - Providing personal expense tracking, bill split history, and settlement calendar management using merchant name, settlement date, amount breakdown, and user notes [Legal bases — visitors in the EEA and the UK] - Member information: performance of the user agreement (GDPR Article 6(1)(b)) - Automatically collected data used for analytics and advertising: your consent (GDPR Article 6(1)(a)) - Server access logs, error tracking and answering enquiries: the legitimate interest of running the Service safely and replying to you (GDPR Article 6(1)(f))
Member information is retained until the account is deleted, and is permanently deleted from the operational database immediately upon request via the "Delete account" feature in the Service. Disaster recovery database backup archives (AWS S3), which are securely encrypted and maintained solely for incident recovery and data continuity, are automatically and permanently purged after the 30-day backup retention cycle, and are never used for any other purpose. No information is subject to a separate retention obligation under applicable law. Server access logs rotate within a fixed size limit; once the limit is reached, the oldest entries are deleted automatically. Enquiry emails are kept for as long as handling the enquiry requires, and destroyed no later than two years after the reply. Other automatically collected information is gathered whether or not you have an account, so deleting an account does not remove it; it is retained and destroyed according to the policies of each provider listed in Article 4. If you do not want it collected, you may refuse by the methods in Article 6.
The Service does not sell users' personal information. Apart from the delegated processing and the advertising described below, it is not provided to third parties for their own purposes. Processing is delegated to the following providers to the extent needed to operate the Service, and they may not use the information beyond the work delegated to them. - Amazon Web Services, Inc. — hosting the server and database - Google LLC — Artificial Intelligence (AI) receipt text and financial extraction (Google Gemini API) - Google LLC — Artificial Intelligence (AI) recognition of numbers and units in photos (Google Gemini API) - Google LLC — visit analytics (Google Analytics) - Microsoft Corporation — interaction analytics (Microsoft Clarity) - Functional Software, Inc. — error tracking (Sentry) Separately, login is performed through Google account authentication, so Google's own privacy policy also applies during login. Information collected through the advertising cookies in Article 6 is additionally processed by Google for its own purposes of serving advertising and measuring its performance. All of the above are located outside Korea; the specifics of that transfer are set out in Article 5.
The Service transfers and stores personal information overseas as follows, for stable server operation, AI receipt scanning, AI unit recognition, usage analysis and advertising: [1] Server and database hosting - Recipient: Amazon Web Services, Inc. - Destination country: United States (Oregon) - Timing and method of transfer: Transmitted and stored electronically over the network from sign-up through the end of the Service usage period - Items transferred: Email address, name, profile picture - Recipient's purpose of use: Hosting the server and database (cloud infrastructure) - Retention and use period: Until account deletion or termination of the hosting arrangement [2] Artificial Intelligence (AI) receipt scanning - Recipient: Google LLC (Google Gemini API) - Destination country: United States - Timing and method of transfer: Transmitted electronically over the network when a user requests receipt analysis - Items transferred: Receipt image data (processed ephemerally in RAM and immediately destroyed) - Recipient's purpose of use: Automatic optical character recognition and financial field structuring - Retention and use period: Destroyed immediately upon completion (Zero-Retention, no AI model training) [3] Artificial Intelligence (AI) unit recognition in photos - Recipient: Google LLC (Google Gemini API) - Destination country: United States - Timing and method of transfer: Transmitted electronically over the network when a user requests photo analysis - Items transferred: Photo image data (processed ephemerally in RAM and immediately destroyed) - Recipient's purpose of use: Automatic recognition of numbers and units in photos and calculating converted values - Retention and use period: Destroyed immediately upon completion (Zero-Retention, no AI model training) [4] Visitor analytics - Recipients: Google LLC (Google Analytics), Microsoft Corporation (Microsoft Clarity) - Destination country: United States - Timing and method of transfer: Transmitted electronically over the network while the Service is used - Items transferred: The automatically collected information in Article 1 (visit history, device and browser information, interaction records) - Recipients' purpose of use: Analysing visit statistics and improving the interface - Retention and use period: According to each provider's retention policy [5] Error tracking - Recipient: Functional Software, Inc. (Sentry) - Destination country: United States - Timing and method of transfer: Transmitted electronically when an error occurs - Items transferred: Technical details such as the error message and the path on which it occurred (configured not to send identifying data such as IP addresses) - Recipient's purpose of use: Diagnosing and fixing Service errors - Retention and use period: According to the provider's retention policy [6] Advertising - Recipient: Google LLC (Google AdSense) - Destination country: United States - Timing and method of transfer: Transmitted electronically over the network when advertising is served - Items transferred: Device and browser information collected through advertising cookies, and advertising impressions and clicks - Recipient's purpose of use: Serving advertising and measuring its performance - Retention and use period: According to the provider's retention policy Depending on the recipient, these transfers rely on safeguards recognised by applicable law, such as the EU-U.S. Data Privacy Framework or standard contractual clauses. If you do not wish your information to be transferred overseas, [2], [3], [4], [5] and [6] may be refused by not using those features or by the methods in Article 6. [1] is essential to providing the Service and cannot be refused while using it. Enquiries regarding these overseas transfers may be directed to downct21@gmail.com.
The Service uses cookies and similar technologies as follows: - Essential cookies: the session cookie that keeps you signed in. Refusing it prevents use of login-dependent features. - Analytics cookies: used by Google Analytics and Microsoft Clarity to collect visit statistics and interaction records. - Advertising cookies: may be used by Google AdSense to serve advertising and measure its performance. How to refuse - Visitors in regions where prior consent is required (the European Economic Area, the United Kingdom and Switzerland) are asked through a consent banner; analytics and advertising cookies are not installed without consent. - Elsewhere, cookies can be refused through your browser's cookie settings. Google Analytics can also be blocked with Google's opt-out add-on (tools.google.com/dlpage/gaoptout), and personalised advertising can be turned off separately at Google Ads Settings (adssettings.google.com). - California residents may also refuse the advertising cookies at any time via the "Do Not Sell or Share My Personal Information" link in the footer, or automatically by enabling your browser's Global Privacy Control (GPC) signal. - Refusing analytics and advertising cookies does not affect core features such as recipe search. This Service does not respond to browser "Do Not Track" signals, as no common industry standard has been adopted for interpreting them.
Users may request access to, correction of, deletion of, or suspension of processing of their personal information at any time via the "Delete account" feature in the Service, or by contacting the address below. Account deletion requests are processed immediately and cannot be recovered. Visitors in the EEA and the UK may also exercise the following rights. - Portability: to receive the personal information you provided in a machine-readable format - Objection: to object to processing based on legitimate interests - Withdrawal of consent: to withdraw consent at any time where processing rests on it, without affecting processing carried out beforehand California residents may also exercise the following rights under the CCPA/CPRA, using the same "Delete account" feature or contact address described above. - Right to know what personal information has been collected, used, or disclosed - Right to delete personal information - Right to correct inaccurate personal information - Right to opt out of the sale or sharing of personal information (see Article 6, or the "Do Not Sell or Share My Personal Information" link in the footer) - Right to limit the use of sensitive personal information — not applicable, as the Service does not collect sensitive personal information as defined under the CCPA - Right not to be discriminated against for exercising any of these rights An authorized agent may submit a request on your behalf with proof of authorization; the Service verifies requests using your authenticated Google account session.
Once the retention period has elapsed or the processing purpose has been achieved, information stored in electronic file form is deleted using technical methods that make recovery impossible. Encrypted disaster recovery backup data is automatically and permanently purged upon the expiration of the 30-day retention cycle.
The Service is designed to never store passwords (Google OAuth only), minimizing exposure risk, and applies role-based access restrictions and session expiration management.
Contact: Vantage operator (Hyeon Seok Chae) Email: downct21@gmail.com
For consultation regarding personal information infringement, users may contact the Personal Information Protection Commission (privacy.go.kr) or other relevant authorities. Visitors in the EEA and the UK may lodge a complaint with the data protection authority of the country in which they reside.
The Service is not directed to children and does not knowingly collect personal information from children under the minimum legal age of digital consent in their jurisdiction. If you are below the applicable legal age, please do not sign up for the Service. If we become aware that personal information of such a child has been collected, we delete it without undue delay. Enquiries: downct21@gmail.com.
The Service makes no automated decisions that produce legal effects concerning you or similarly significantly affect you. Recipe ranking follows the ingredients you enter and a published calculation rule; it does not profile individuals. Artificial Intelligence (Google Gemini Vision) used in receipt scanning and in the unit converter's photo recognition operates strictly as a text/number extraction utility and a unit recognition utility, respectively; it never uses your personal information for AI model training. Where the advertising cookies in Article 6 are used, advertising providers may apply their own profiling technologies under their own policies.
This policy may be revised due to changes in law or the Service; the effective date will be updated and announced within the Service upon any revision.