Privacy Policy

주식회사 클라이원트 ("the Company") takes the privacy of Bloom Mixer users seriously and complies with the Korean Personal Information Protection Act and the Network Act.

1. What we collect

• Account: email, name, and profile photo from Google sign-in
• Profile (optional): mobile number, company/affiliation, role, LinkedIn URL, one-line intro, dinner preferences
• Applications: name, phone (from your profile), and your application answers (motivation, intro line, per-dinner preference choices)
• Post-dinner survey (optional): 5-point ratings and free-text answers. Free text is read only by the organizers; only aggregate statistics may be used to improve or promote the service.
• Payments: approval records (method, amount, time). Sensitive card data is handled by the payment provider and never stored on our servers. The provider's masked approval response is kept up to 180 days for dispute handling.
• Mobile app (if installed): a device registration token used to send notifications, the platform (iOS/Android), and the app version. We collect no advertising identifier and access nothing else on the device, including location, contacts and photos. Turning notifications off stops the token being used.
• Table chat and 1:1 chat (if used): user, device and room identifiers on the chat server (Matrix) we operate, room membership state, block/report records, message timestamps, and message bodies. Messages in table rooms and 1:1 chats are stored unencrypted on our chat server and can be read only by the members of that room. Our operator account sits in table rooms to post system notices (arrivals, delays) and reads a room's recent messages only when a report has been filed about it. Conversations from the period before early September 2026, when chat was end-to-end encrypted, remain ciphertext we cannot read.
• Sign in with Apple (optional): your Apple account identifier, name and email. If you choose Apple's Hide My Email, we receive only the relay address Apple creates and write to that address alone. The sign-in refresh token Apple issues is stored encrypted, and when you delete your account we ask Apple to revoke it before removing it.
• Email sign-up and sign-in (optional): your email address, name (optional) and password. Sign-up completes only after you open the link in the confirmation mail; the password is stored only as an irreversible hash and is deleted with the account.

2. Why we use it

Processing applications, composing and announcing tables, payments and refunds, support, and service improvement. With your marketing consent, we also send news about upcoming dinners.

• Mobile number: urgent day-of updates (venue or group changes)
• Company / role / LinkedIn: organizer reference while matching (e.g. keeping same-company people at different tables). Never shown to your tablemates.
• One-line intro: shown to your tablemates as your introduction
• Preferences: input to the table-matching algorithm
• Device token: app notifications about changes at your own table on the day (someone late or unable to come) and about your applications and payments or new chats. Chat text and sender names are never included. The token is never used for marketing pushes.
• Chat data: checking participation eligibility, connecting table rooms and 1:1 rooms, delivering and storing messages, handling blocks and reports, and (on the web) one unread-summary email a day

3. How long we keep it

• Day-of seating data (display name, intro, guide link): anonymized within 30 days after the dinner
• Application contact details and answers: destroyed within 180 days after the dinner
• Survey free text: kept for organizer review; identifying links destroyed once the improvement purpose is served
• Masked payment approval responses: destroyed within 180 days
• Profile fields: destroyed 1 year after your last login; you can erase them anytime from My page
• Contract and withdrawal records: 5 years (E-Commerce Act)
• Payment and supply records: 5 years (E-Commerce Act)
• Consumer complaint and dispute records: 3 years (E-Commerce Act)
• Device tokens: destroyed when you uninstall the app, sign out, or turn notifications off, and removed at once when delivery keeps failing
• Chat: device links are removed when you sign out, revoke the device, or delete the account. Rooms and their history are kept while the history is provided to participants (rooms never close). On account deletion your chat account is deactivated and leaves every room; messages you sent stay visible to the people who were in the room at the time but are hidden from anyone joining later.
• On marketing-consent withdrawal, related data is destroyed without delay

4. Processors and disclosure

We do not share personal data with third parties, with one inherent exception: your display name and one-line intro are shown to the participants seated at your table through the day-of guide, and this data is anonymized within 30 days after the dinner. We entrust the following processing to providers:

• Payments: PortOne / Toss Payments
• Cloud infrastructure: Amazon Web Services (Seoul region)
• Sign-in and email: Google
• App notifications: Google (Firebase Cloud Messaging)
• App sign-in (optional): Apple

International transfer

During Google sign-in, your account information (email, name, profile) may be transferred to and processed by Google LLC (USA) for authentication, for as long as the sign-in service is provided. Cloud infrastructure (AWS) runs in the Seoul region.

If you enable app notifications, your device token is transferred to Google LLC (USA, Firebase Cloud Messaging) to deliver them, for as long as you receive them. If you use Sign in with Apple, your account identifier is processed by Apple Inc. (USA). You can avoid both by turning notifications off and signing in with Google; the rest of the service works the same.

(Added 2026-09-30) When you use the app's AI features (finding meetups by sentence, the Mixer table's shared-interest lines), your job function, years of experience, interests and what you wrote in an application are sent to OpenRouter, Inc. (USA) and the AI model providers it connects to, and processed there. Your name, contact details, photo, company and title are never sent. The purpose is recommending meetups and writing those lines; we do not keep what is sent. If you do not use the sentence search, nothing is transferred; if you do not want the shared-interest lines, tell the team and they are turned off for that session. The rest of the service works the same.

5. Your rights

You may access, correct, delete, or suspend processing of your personal data at any time, directly under My page > Profile (including Erase my info), or by writing to [email protected]. Payment and contract records kept under the E-Commerce Act (5 years) are excluded from deletion.

Deleting your account is under My page > Profile > Delete my account entirely, the same screen in the app. Deleting removes your email, name, photo, phone, affiliation, survey free text, sign-in link and device tokens, and you can no longer sign in. The payment amounts and application times the law requires us to keep remain, but nothing remains that says whose they were.

6. Privacy officer

금승도 ([email protected])

7. Security measures

Encryption in transit (HTTPS), least-privilege access, and no storage of card data.

This is a courtesy translation. If it differs from the Korean text, the Korean text governs.

Effective: 2026-09-05. Changes are announced in the service.