Privacy Policy

Version 2026-10-22. This summary is for convenience only; the Korean text is the official version and governs.

• Who we are. TOOEASY Inc. (투이지 주식회사) runs Alphabebe ("Bebe"), an AI companion made mainly for young children (ages 0–5). A parent or guardian creates the account and the child uses the service inside it. Contact: contact@alphabebe.ai.
• What we collect. Guardian: email, UI language, consent record (items, version, time of consent and withdrawal, IP address). Child: name, birth date, language; optionally gender, interests, what the child calls Bebe. Allergens are health data, collected only with a separate, optional consent; without it there is no allergy field, memory notes that mention allergies are filtered out (what was said stays in the chat history), and recipes do not leave allergens out. Withdrawing it in Parent space → Settings → Privacy erases stored allergens at once. Chat text in child and parent mode and Bebe's replies; generated storybooks, story videos, recipes, games, songs and brick toys with their files and metadata; memory notes about the child; stars, levels, streaks, stickers and safety flags; the hearts ledger (hearts received, used and returned, where, by which child and when, what is left in each batch and until when) and when a plan suggestion was shown or closed; for buyers, the plan, subscription status and period, heart packs bought, order numbers, amounts, currency, refunds and Polar's customer number (we never receive card numbers, which you enter directly on Polar's checkout); daily usage counters, access and error logs; sessions, push subscription endpoints and notification settings; whitelisted analytics events without chat text; and what you write to us when you contact support.
• Invitations. When a family joins through another family's invite link we record the link between the two accounts, and when the invited family finishes its first story both get gift hearts; the inviting guardian sees only how many families joined and were rewarded, never who. A shared story's "meet Bebe" button carries the sharing family's invite code. The record goes when either account is erased.
• Testimonials. A guardian may send a short testimonial from the parent space with an introduction of their choosing (for example "mum of a 34-month-old"). We read it to improve the service and, only if they agreed, show it on the introduction page without names; they can take it down any time in settings, and it is kept until then or until the account is erased.
• Visit counts. For the introduction page, shared-story pages, sign-up and first setup we count only how many times each step happened per day, with no cookie, account or IP address kept, so nobody can be identified.
• Share links. If a guardian makes a share link for a storybook or story video, anyone holding the link can see it (words, pictures and voice, including a child's name if the story uses it), never the child's profile. Links end after 30 days, can be turned off any time in the parent space, are kept out of search, and we count only how often a link is opened.
• Voice. Microphone audio is streamed for transcription and is never stored by us. Only the transcript text and the seconds used are kept.
• Why. Sign-in, guardian consent, age-appropriate conversation and memory, voice, content generation, the parent space (daily summary, safety flags, memory, export), optional push notifications, usage caps, hearts and paid products (granting, spending and returning hearts, showing the balance and history, refilling them on payment, deciding when to suggest the plan; payments, cancellations, refunds and billing questions), error analysis, support, improving the service and developing new features, statistics, and, if you opted in to advertising email, Bebe's letters to you (they mention your child's name and how they have used Bebe) and service news, confirmed every two years and stopped free at any time from any mail or the settings. Within the limits of the Personal Information Protection Act we may also use data for purposes reasonably related to the original one (Art. 15(3), 17(4)) and use pseudonymised data for statistics, scientific research including quality, safety and technology development, and archiving (Art. 28-2). We do not sell personal data and do not target advertising at children.
• Children under 14. The guardian creates the account and, on the consent screen, agrees to the Terms, to the collection and use of personal data and, as legal guardian, to processing their child's data (Personal Information Protection Act, Art. 22-2); the health-information consent is a separate, optional box (Art. 23). We then email the guardian a record of what they agreed to. Today the guardian is confirmed by email verification (magic link) and that confirmation email; the method may be changed or extended in line with the law and regulators' guidance. A plain-language notice for children is provided.
• Retention and deletion. Data is kept until the account or child profile is deleted. Deleting the account starts a 30-day grace period (signing in again restores it); after that, content files, sessions and database rows are permanently erased. Logs are kept up to 90 days; records the law requires (paid-plan contract, withdrawal and payment records for 5 years, complaint and dispute records for 3 years, kept apart from a deleted account), and the email address and reason of an account restricted or terminated for a breach (up to one year), are kept longer. Encrypted backups may hold erased data for up to 21 more days. A sign-up that never consents is erased at once if you choose "Leave without agreeing", or automatically after 30 days without sign-in or use. Step-by-step instructions are in Deleting your data.
• What we cannot delete ourselves. Each child has a delegated account on Junis, our AI agent platform, which keeps a daily memory log that the Bebe service cannot delete. When we erase a child we ask the Junis team (contact@junis.ai) to erase that account, and you can ask directly too.
• Processors and transfers abroad. Microsoft Azure (Korea Central; Front Door edge servers worldwide): hosting, database, storage, and sign-in, consent, getting-started and operator notice emails and Bebe's letters (to parents who agreed to advertising email) through Azure Communication Services. TOOEASY's Junis platform (Korea, USA): conversation and content generation. OpenAI (USA): speech-to-text, text-to-speech, the parent summary and, via Junis, text (song lyrics included) and game generation. Replicate (USA): image, video and music models via Junis (a song's request carries no child's name; some models run on their makers' servers, such as Google, Pruna AI and MiniMax). Resend (USA): sign-in and consent confirmation emails. Sentry (USA): error reports with chat text and names removed. Google Analytics 4 (USA): usage statistics without child identifiers. Google Gmail (USA): the company's operator mailbox, which receives sign-up and sign-in notices (the guardian's email address, time, browser) and support mail. ImprovMX (USA): forwards mail sent to contact@alphabebe.ai to that mailbox. Polar Software, Inc. (USA): merchant of record for the paid plan (payments, receipts, tax, refunds, the billing portal); it receives the guardian's email, our guardian ID, UI language and the IP address of the device that starts a payment, processes the payment details you enter on its checkout under its own privacy policy, and pays through Stripe, Inc. (USA). Nothing goes to Polar unless you start a payment. Transfers happen over encrypted connections whenever the service is used. Processors may change; this policy is updated when they do. Personal data is given to third parties only with consent or where the law provides, and in a merger or business transfer we give the notice the law requires.
• Your rights. View, export (Parent space → Settings → "Account" → "Export {name}'s data", one child at a time), correct, delete content, memories, allergies, a child profile or the whole account. Withdraw the health-information consent in Parent space → Settings → Privacy at any time; withdraw the required consents by deleting the account or emailing us. We answer within 10 days.
• Cookies. Four today, all needed for the service: ab_session keeps you signed in (a random token set by our server; HttpOnly, Secure, SameSite=Lax; up to 30 days, deleted when you log out) and NEXT_LOCALE remembers the language you picked (only ko or en, set by the website when you choose a language other than your browser's; SameSite=Lax; a session cookie that goes when the browser closes) and ab_app opens the app instead of the introduction page in a browser that has used it (only the value 1, nothing that identifies you; set when you walk into the app or are seen signed in; SameSite=Lax; one year, deleted when you log out) and ab_invite carries an invite link's 8-character code to the consent step (set when you open an invite link; SameSite=Lax; 30 days, deleted once you consent). A nickname tried in the introduction page's sample book stays in this browser's storage for up to a day only to pre-fill your child's name at sign-up; it is never sent to us and is removed when you add your child. No advertising or third-party tracking cookies today; this list is updated if that changes. Google Analytics 4 runs only in consent-denied mode, so it sets no cookies and stores nothing in your browser; Google signals and ad personalization are off.
• AI. Bebe is an AI, not a person, and says so (AI Basic Act, Art. 31): on the home at the day's first conversation and, with a reminder to take a break, every three hours of continuing use. AI-generated content is labelled "AI가 만든 콘텐츠" (made by AI). Companion chatbots may not be suitable for some minors; Bebe is made for young children to use with a grown-up nearby. We do not currently use children's conversations or content to train AI models; if that changes we will follow the procedures the law requires and tell you in advance.
• Self-harm and suicide protocol. Bebe's safety guidance keeps it from encouraging or explaining self-harm or suicide and steers a child to a grown-up nearby. On top of that, what a child or a parent writes or says to Bebe is checked by an automated moderation model; when it speaks of suicide or self-harm, the conversation screen at once shows crisis lines (US: call or text 988, the Suicide & Crisis Lifeline; Korea: 109) and emergency numbers, and in child mode the moment is also kept for the parent under "Worth a look". We count how often the notice is shown, without identifying anyone. Sexual content is kept out by the same guidance and checked again by the same review.
• For parents in the United States (COPPA). This part gives the notice the Children's Online Privacy Protection Rule (16 CFR Part 312) asks for about children under 13.
  • Operator. TOOEASY Inc. is the only operator collecting or keeping children's personal information through Bebe (Junis is ours too): 319 Sujeong-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea; contact@alphabebe.ai.
  • What we collect from children and how we use it. What a child says or types to Bebe (speech is turned into text; the audio is not kept by us), Bebe's replies, what Bebe makes for them, notes Bebe remembers, stars and stickers, and safety flags; the name, birth date and preferences come from the parent. We use it to talk with the child at the right age and language, remember what they like, make what they ask for, keep the service safe and working, and show the parent their child's day. A child cannot make personal information public; only a parent can make a share link.
  • Disclosure. We do not sell children's personal information, use it for advertising or give it to anyone to train AI. The companies listed under processors (hosting, AI and speech processing, email, error reports, payments) handle it only to run Bebe for us, under contracts or terms that require them to protect it, and do not use it for anything else. If we ever wanted to disclose it for another purpose, we would ask the parent separately first, and saying no would not stop the child from using Bebe.
  • Persistent identifiers. The sign-in cookie (ab_session) keeps the parent signed in, and a push subscription delivers notifications the parent turned on. Neither is used for behavioural advertising or to build a profile of anyone. Google Analytics runs without cookies.
  • Children's voices. Audio is used only to turn speech into text and is not stored by us; OpenAI, which does the transcription, may keep it for up to 30 days for abuse monitoring and then deletes it.
  • Data retention policy. We collect each kind of child data for the purposes above and keep it only while it serves them: the profile, conversations, memory notes, creations and safety flags for as long as the family uses Bebe, because Bebe needs them to continue the conversation and the parent to review it; allergies until the health consent is withdrawn; voice audio not at all. Deleting a child or the account erases it all for good after 30 days (encrypted backups up to 21 days later); logs go after 90 days and AI-engine call records after 30. An account nobody has used for 12 months gets an email; if it is still unused 30 days later it is deleted the same way (an account with a live subscription or unspent bought hearts is kept while those last). Children's personal information is never kept indefinitely.
  • Information security program. We keep a written information security program, coordinated by our privacy officer (Junmin Park, contact@alphabebe.ai). At least once a year we assess internal and external risks to children's information, test and monitor our safeguards (access limited to the family's own account, encryption in transit and at rest, encrypted backups, short-lived file links, secrets in a key vault, least-privilege access, error reports scrubbed of chat text and names) and update the program. We pick processors able to protect the information and get their written assurance that they will.
  • Parents' rights. A parent can review their child's information in the parent space, export it, have it deleted, and stop any further collection or use by deleting the child or the account, at any time; see Deleting your data, or write to contact@alphabebe.ai.
  • Consent. Nothing is collected from a child before the parent's consent. The parent confirms their email address, reads the notice and agrees on the consent screen, and we email a record of the consent, which says it can be revoked. If a parent does not agree, the email address is deleted at once on "Leave without agreeing", otherwise after 30 days.
• Complaints. Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) and the KISA Privacy Infringement Report Center (118, privacy.kisa.or.kr).