policy
Terru - Couple Challenge Privacy Policy
ghostdiary (유령일기) ("we") explains here how we handle personal information when you use the Terru - Couple Challenge app (the "app"), in line with Korea's Personal Information Protection Act and other applicable laws. For our website, see our company privacy policy. This English text is a translation; if it differs from the Korean version, the Korean version prevails.
At a glance
- Account: yes (see "Information we process and why")
- Ads: the app shows Google AdMob ads. Personalised ads appear only if you consent.
1. Information we process and why
Account and service information
- Sign in with Apple: the email address and name Apple shares (this may be a private relay address, depending on your Apple settings)
- Anonymous sign-in: a randomly generated account identifier (no email or name)
- Content you create: diary entries, promises, schedules (D-day), goals, missions, answers to daily questions, and photos and videos you upload
- Partner pairing: the link between the two paired accounts
- Safety: reports and blocks
- Service operation: usage records and device information (OS version, device model, app version)
You can delete your account in the app's settings or by emailing us. When you delete your account or unpair, the shared content is deleted without delay. Records of consumer complaints and disputes are kept for 3 years as required by Korean consumer protection law.
We process only the information below and use it only for the purposes listed.
- Account and data storage: account information, content you create, pairing, report and block records, usage records — sign-in, database and file storage, and running the service
- Photo and video storage: photos and videos you upload — storing and delivering photos and videos
- Sign in with Apple: Apple account authentication data — Sign in with Apple
- Ads: advertising ID (Android advertising ID, iOS IDFA), IP address, device information (OS, model, language), ad views and clicks — showing ads and measuring ad performance, and personalised ads if you consent
- Ad attribution: advertising ID, app install and launch events, device information — measuring whether installs came from ads (ad attribution)
- Email inquiries: your email address and message (kept for 3 years after the inquiry is resolved) — answering your inquiry
The outside services that receive each item, their countries and retention periods are listed under "Service providers and international transfers" below.
2. Service providers and international transfers
Some features are handled by the outside services below, whose servers are outside Korea. Information is sent to them over encrypted internet connections while you use the app.
| Recipient | Country | Information | Purpose | Retention |
|---|---|---|---|---|
| Supabase, Inc. | outside Korea (Supabase data centers) | account information, content you create, pairing, report and block records, usage records | sign-in, database and file storage, and running the service | until the account is deleted |
| Cloudflare, Inc. | Cloudflare data centers in the United States and other countries | photos and videos you upload | storing and delivering photos and videos | until deleted, unpaired or the account is deleted |
| Apple Inc. (Sign in with Apple) | United States | Apple account authentication data | Sign in with Apple | according to Apple's policy |
| Google LLC (Google AdMob) | United States | advertising ID (Android advertising ID, iOS IDFA), IP address, device information (OS, model, language), ad views and clicks | showing ads and measuring ad performance, and personalised ads if you consent | according to Google's policy |
| Meta Platforms, Inc. (Facebook SDK) | United States | advertising ID, app install and launch events, device information | measuring whether installs came from ads (ad attribution) | according to Meta's policy |
If you do not want your information transferred abroad, you can refuse personalised ads (see below), or stop using the app. Blocking transfers the app needs to run, such as ads and analytics, may stop the app from working.
3. Sharing with third parties
We do not share your personal information with third parties, except where the law specifically requires it or investigators request it through legal procedures.
4. Personalised ads and how to opt out
On first launch the app asks whether it may track you for ads (iOS) and, where required (for example in Europe), for consent to personalised ads. If you decline, you see only non-personalised ads. To change this later:
- Android: Settings → Google → Ads → Delete (or reset) advertising ID
- iOS: Settings → Privacy & Security → Tracking → turn off the app
5. Device permissions
The app may ask for the permissions below. All are optional: if you decline, you can still use everything except that feature, and you can change them any time in your device settings.
- Photos: attaches photos you choose
- Camera: attaches photos you take
- Notifications: shows reminders scheduled on your device (not server push)
6. What your partner can see
Terru is an app for two people. While you are paired, the diary entries, promises, schedules, goals, missions, answers, photos and videos you create are visible to your partner. Please get consent before posting someone else's personal information or photos. We may remove content that has been reported or that breaks the law or our rules, or limit its use.
7. Retention and deletion
We delete information without delay once the retention period in the table above ends or its purpose is fulfilled. Electronic files are erased so they cannot be recovered, and paper is shredded or incinerated.
8. Your rights
You (or a legal guardian for children under 14) may ask at any time to see, correct, delete or stop the processing of your personal information. Email contact@rainghost.com and we will act without delay. You may also ask through a representative.
9. Children's information
The app is not directed at children under 14 (under 13 in some countries), and we do not knowingly process their personal information. If we learn that we have, we delete it without delay.
10. Security
We process only the information we need, limit who can access personal information to a minimum, and use encrypted connections when information is sent. Outside services protect information under their own security standards.
11. Privacy officer
Privacy officer: Hayoung Lee (contact@rainghost.com)
Send any questions, complaints or requests about personal information to this address. We will reply and act without delay.
12. Getting help
If you need help with a privacy issue, you can also contact these Korean agencies.
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Supreme Prosecutors' Office: 1301, www.spo.go.kr
- Korean National Police Agency: 182, ecrm.police.go.kr
13. Changes to this policy
This policy applies from October 18, 2026. If it changes, we will post the new version on this page with its effective date.