Cookhae is committed to complying with applicable privacy laws and app store policies — including Korea PIPA, US COPPA / CCPA / CPRA, Japan APPI, Taiwan PDPA, Australia Privacy Act 1988 (APPs), New Zealand Privacy Act 2020, Hong Kong PDPO (Cap. 486), Canada PIPEDA (and Quebec Law 25, BC/Alberta PIPA), Switzerland revFADP, and EU/EEA GDPR where applicable, alongside the policies of the app stores where Cookhae is distributed.
1. Data Controller & Privacy Officer
- Business name: Round (라운드) — Sole proprietorship registered in the Republic of Korea
- Korean business registration number: 426-53-01094
- Company website: https://www.team-round.com
- Representative / Privacy Officer: Heejae Byun (변희재) — team.cookhae@gmail.com
- Service brand: Cookhae (쿡해)
- Requests to access, delete, restrict processing, or withdraw consent: same address.
- Designated to satisfy Korean PIPA Articles 30 & 31, Japan APPI, Taiwan PDPA, Canada Quebec Law 25, and Switzerland revFADP requirements for a Personal Information Officer / Data Protection Contact.
2. Information We Collect
- Account: Firebase anonymous user ID; in the future, email or social-login identifier when you link an account.
- User input: video URLs, search queries, external recommendation queries, recipe notes, review text and rating selections (3-point scales for ingredient access / difficulty / make-again intent, optional), automatically detected language code of the review text (e.g., ko/en/ja/zh — detected on-device, only the result is stored), reports.
- Recipe data: video title, description, captions/subtitle text, ingredients, steps, timeline, image URLs, source link, uploader name, and other public metadata.
- Usage: saved recipes, cooked status, planner, shopping checklist, recommendation clicks, AI variant/substitution requests, language, country/timezone, app version.
- Payment & rewards: coin balance, coin spend/grant ledger, rewarded-ad grants, app store transaction identifiers if paid purchases are introduced later, refund/error records.
- Device & diagnostics: device model, OS version, crash logs, IP address, network request logs.
- Advertising identifiers: Android Advertising ID, iOS IDFA, etc., based on your consent and OS settings.
3. Purpose
Account identification, data sync, security, abuse prevention, recipe extraction, save/search/recommendation, planner & shopping, AI variants/substitution/external candidates, coin grant/spend, rewarded-ad processing, payment verification, refunds and dispute handling, error analysis, customer support, abuse reports, copyright takedown, and (with your separate optional consent) personalized recommendations based on your taste signals.
4. AI Processing
Cookhae transmits the following to AI systems including Google Generative AI / Gemini for recipe extraction and recommendation: video URLs, public metadata, captions/subtitle text, and your requested variant/substitution/recommendation prompts. Do not submit sensitive personal information or anyone else's private data.
Separately, when you write a review, Cookhae uses Google ML Kit Language Identification (on-device processing) to detect the language of your review text. The text itself is not sent off-device; only the detected language code (e.g., ko, en, ja, zh) is stored alongside the review. If detection confidence is low, no language code is stored.
When you tap the [Translate] button on another user's foreign-language review, Cookhae uses Google ML Kit Translation (on-device processing) to translate it for you. The translation also runs entirely on your device; review text is not sent to any external server. The first time you translate between a given language pair, the corresponding translation model (~30 MB) is downloaded to your device.
Allergy and sensitive dietary information (e.g., nut allergy, shellfish allergy) are stored only in on-device SharedPreferences and are NOT transmitted to our servers. Ingredient matching (the red warning highlight) runs entirely on your device, so the service operator (Cookhae / Round) does not know which allergens you have configured.
5. Sub-processors and Third-party Services
We may use Google Cloud, Firebase, Google Generative AI / Gemini, Google Mobile Ads / AdMob, YouTube oEmbed, each platform's public pages, and metadata/thumbnail extraction services for public posts to operate the service. If paid purchases are introduced later, we may use app store payment processing services. Sub-processors only receive data necessary for their processing purpose. We do not sell your personal information.
6. Retention and Deletion
Account and service data are kept until account deletion or your deletion request. Public-URL-derived recipes in the global cache may remain in de-identified form after account deletion to prevent duplicate extraction and preserve service quality. Payment, coin, refund and dispute records may be retained for the period required by applicable law (typically up to 5 years under Korean e-commerce and tax law). Reports, customer support and copyright takedown records may be retained for a reasonable period (typically up to 3 years) for dispute response and operational safety. Recommendation behavior logs (views, saves, cooked status, search history etc.) are deleted immediately when you turn off the [Personalization / Tracking] toggle; even while the toggle is on, raw logs are periodically anonymized / aggregated and are not retained beyond a reasonable period.
7. Ads and Tracking
Rewarded ads and ad measurement use the AdMob SDK. AdMob may process IP-based approximate location (country/city level) and advertising identifiers to serve ads, cap frequency, prevent fraud, and measure ad performance. This app does NOT collect GPS or precise location. The "Country I live in" preference you set in app settings is used only for ingredient substitution recommendations and is not used for ad targeting. On Android, you may reset your Advertising ID or limit ad personalization in OS settings. Enabling "Do Not Sell or Share My Personal Information" in app settings switches AdMob to non-personalized ads (npa=1).
8. Children (COPPA Compliance)
Cookhae is for users 18 years of age or older (19+ for Korean residents) and is not intended for minors. For users in the United States, in compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a minor, we will delete it promptly after reasonable verification.
9. International Transfers
Information may be processed on servers outside your country (United States, Europe, Asia), including via Firebase, Google Cloud, Gemini, and AdMob. If paid purchases are introduced later, app store payment processing may also involve international processing. Consent to this international transfer is collected as a separate item (Data Collection, Use & AI Processing Consent) in the onboarding flow at sign-up.
10. California Residents (CCPA / CPRA)
California residents have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:
(a) Right to know the categories of personal information we collect, use, and share.
(b) Right to receive a copy of personal information we hold about you.
(c) Right to request deletion.
(d) Right to request correction of inaccurate information.
(e) Right to opt out of the "sale" or "sharing" of your personal information ("Do Not Sell or Share My Personal Information").
(f) Right to non-discrimination for exercising your rights.
We do not sell personal information for monetary consideration. However, sharing of advertising identifiers with ad partners (AdMob) for advertising measurement may qualify as "sharing" under CCPA. To exercise these rights: team.cookhae@gmail.com, or disable ad personalization in app settings or your OS-level advertising settings.
11. Other Markets / Regional Rights
- 🇦🇺 Australia: We strive to comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs). Australian residents have rights to access, correct, and delete their personal information, and may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
- 🇳🇿 New Zealand: We strive to comply with the Privacy Act 2020 and the Information Privacy Principles (IPPs). New Zealand residents have rights of access and correction, and may complain to the Office of the Privacy Commissioner.
- 🇭🇰 Hong Kong: We strive to comply with the Personal Data (Privacy) Ordinance — PDPO (Cap. 486) — and the six Data Protection Principles (DPPs). Hong Kong residents have access and correction rights and may lodge a complaint with the Privacy Commissioner for Personal Data (PCPD).
- 🇨🇦 Canada (excluding Quebec): We strive to comply with PIPEDA (Personal Information Protection and Electronic Documents Act) and provincial equivalents (Alberta PIPA, BC PIPA). Canadian residents have rights of access, correction and deletion, and may complain to the Office of the Privacy Commissioner of Canada (OPC).
- 🇨🇭 Switzerland: residents have rights of access, correction, deletion and objection under the revised Federal Act on Data Protection (revFADP).
- 🇪🇺/EEA: where GDPR applies, you have the rights set out in Articles 15–22 (access, rectification, erasure, restriction, portability, and objection — including objection to automated decision-making).
- All rights and complaints: team.cookhae@gmail.com.
12. Changes
We will announce changes via the app or website. Material changes will be announced at least 30 days before they take effect where reasonably possible.
Effective date: May 4, 2026
Change log:
- 2026-05-04 — Added Section 11 (other-market rights for AU/NZ/HK/CA non-Quebec/CH/EU). Section 4: clarified ML Kit Translation runs on-device. Account-deletion doc: clarified that toggling "personalization / tracking" off automatically deletes server-side behavior signals (no email request needed).
- 2026-04-28 — Section 7 (Advertising): clarified AdMob processes IP-based approximate location for ad serving; clarified that the user-set "Country I live in" preference is used only for ingredient substitution recommendations, not ad targeting.