Privacy Policy
Effective date: August 16, 2026 · Last updated: August 9, 2026
Ysware (“we”, “us”) operates the mobile application Gometo (the “Service”). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.
1. Data we collect
| Category | Items | Source |
|---|---|---|
| Account | Email, name, profile image, Google account identifier | Provided through Google Sign-In with your consent |
| Service usage | Menu images, OCR results, order history, exchange-rate settings | Captured via camera or photo library at your request |
| Device & logs | Device model, OS version, app version, build number, error logs | Collected automatically when running the app or sending feedback |
| Advertising identifiers | Android Advertising ID (AAID), iOS Advertising Identifier (IDFA), ad impression and click events, approximate location derived from IP address (country / city level) | Collected automatically by the ads SDK when ads are shown to free users (see section 6) |
Payment data is processed by Apple App Store / Google Play. We do not collect or store your card details.
2. How we use data
- Authenticate you and prevent abuse
- Provide core features: menu OCR, translation, order history
- Verify Pro plan entitlements and track usage limits
- Respond to support requests and improve the Service (including error analysis)
- Serve ads to free users and measure ad performance (see section 6)
- Comply with applicable law and resolve disputes
3. Retention
| Data | Period | Basis |
|---|---|---|
| Account data | Until account deletion | Operational |
| Menu images & OCR results | Up to 90 days after analysis | Re-analysis and debugging |
| Payment & contract records | 5 years | Korean e-commerce law |
| Access logs | 3 months | Korean Communications Privacy Act |
| Advertising identifiers | Not stored on our servers | Processed by the ad provider (Google) under its own policies |
4. Sharing with third parties
We do not sell or share personal data with third parties except with your consent or as required by law.
However, when ads are shown to free users, advertising identifiers and related signals are sent to our ad provider, which processes them under its own policies. See section 6 (Advertising and advertising identifiers).
5. Service providers
We rely on the following providers to operate the Service:
| Provider | Purpose | Region |
|---|---|---|
| Google LLC | Sign-in, on-device OCR (ML Kit) | United States |
| Oracle Cloud Infrastructure (OCI) | Application server hosting, menu image storage | South Korea (Seoul region) |
| Supabase, Inc. | Managed PostgreSQL database | Japan (Tokyo region) |
| Apple Inc., Google LLC | In-app purchases (App Store / Google Play Billing) | United States |
| Google LLC (Google AdMob) | Ad serving and ad performance measurement | United States |
6. Advertising and advertising identifiers
We show ads to users on the free plan. Ads are delivered through Google AdMob, an advertising platform operated by Google LLC.
| Item | Details |
|---|---|
| Data processed | Advertising identifiers (AAID / IDFA), ad impression and click events, approximate location derived from IP address (country / city level), device and app information |
| Purpose | Ad delivery, ad performance measurement, frequency capping, and fraud prevention |
| Processor | Google LLC (United States) |
| Our retention | We do not store advertising identifiers on our servers. |
Opting out of personalized ads
You can opt out of personalized (interest-based) ads at any time. Ads will still appear, but they will no longer be tailored to your interests.
- Android: Settings > Google > Ads > “Delete advertising ID”
- iOS: Decline the tracking prompt shown on first launch, or turn the app off under Settings > Privacy & Security > Tracking
- Google Ad Settings: adssettings.google.com
If you are in the European Economic Area, the United Kingdom, or another region with applicable data protection rules, we request your consent for ad personalization through Google’s User Messaging Platform (UMP).
While you are on a paid (Pro) plan, no ads are shown and no advertising identifiers are collected.
For details on how Google processes data for advertising, see the Google Privacy Policy and How Google uses information from sites or apps that use our services.
7. International transfers
Personal data may be transferred to and processed in Japan (Tokyo), the United States, or other jurisdictions where our service providers and ad provider operate. We apply appropriate safeguards as required by applicable law.
8. Your rights
You may at any time access, correct, delete, restrict processing of, or withdraw consent for the use of your personal data.
- Account deletion: You can delete your account directly from [Settings] > [Account] > [Delete account] in the app. Your account information and related service-usage data are deleted immediately upon withdrawal, except where retention is required by law.
- Other requests (access, correction, restriction): Email contact@ys-ware.com and we will respond promptly after verifying your identity.
9. Security
- TLS for data in transit and encryption for data at rest
- Least-privilege access controls and audit logging
- Incident response procedures for malware and intrusions
10. Children
The Service is intended for users aged 14 and over. We do not knowingly collect data from children under 14.
11. Contact
Controller: Ysware, represented by Yeonah Na
Email: contact@ys-ware.com
Address: 150-29 Gongse-ro, B01-K137, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea
12. Changes
We may update this Privacy Policy from time to time. Material changes will be announced in-app or on this page at least 7 days before they take effect.