LATENT

Privacy policy

Identity and friends

The app creates a cryptographic identity on your device and stores your display name, avatar and friends’ public contacts. It does not read your address book or require a phone number. Your recovery key uses secure device storage when available, with a fallback file in app storage when necessary. It is not part of a friend invitation QR. On Android, the identity is also stored in Google Block Store for reinstall recovery with cloud backup disabled. A user-initiated operating-system device-to-device restore may transfer that identity to another device.

Messages and public spaces

Direct and group messages are encrypted in transit. Messages and friend information are stored in an encrypted device database. Game records, avatars and some settings use separate local storage. Echo posts are public: nearby people can read and relay them. Echo masks change daily; blocking a mask blocks future reception from that mask. Arena room announcements include a daily identifier, friend-recognition tag, game type and timestamp and are sent over a public internet channel. Your profile display name is not sent in room announcements. Deleting your copy cannot recall content another person has already saved or copied.

On-device content safety checks

Profile names, public posts and names shown for first contacts are checked with Korean/English phrase rules and a small classifier. This public-text filter does not scan private conversation text. Photos in direct and group conversations are checked on the device before sending and before display. Uncertain or failed checks hold sending and display. Unsupported formats, animations and transparent images are also held. Photos and conversations are not sent to a server or collected for training as part of these checks. Content hashes and decisions are kept in a bounded memory cache while the app runs. Hidden received originals may remain in encrypted device history and can be removed using message deletion. Filters can miss harmful content or restrict harmless content. Report evidence is shared externally only when you separately choose to include and send it.

Purposes, data items and legal bases

Service delivery: Device-generated identity, display name, avatar, friend contacts, conversations and game records are processed as needed for the chat, play and restoration features you request. Device-only data is distinguished from operator-server processing. Necessary service processing relies on Article 15(1)(4) of Korea’s Personal Information Protection Act. Internet connections: When you choose internet relay use, account identifiers, public signature-verification keys, authentication information, inbox addresses, connection IPs and encrypted delivery data support authentication, delivery and troubleshooting. Recovery keys and private/group conversation decryption keys are not supplied to the relay. Support and rights requests: Reply addresses, request scope and minimum necessary evidence support assistance, ownership verification, access, correction and deletion requests. Reports are reviewed only as needed for safety and harm prevention. Processing information about other people requires assessment of Article 15(1)(6), possible impact on their rights and removal of unnecessary material. Optional features: Separate QR SDK diagnostics are described below.

Internet delivery

Internet connections for distant friends are on by default. You can turn them off in the first-run notice before the first connection, and change the choice later in Me. The default relay in Osaka, Japan processes identifier-based accounts, inbox addresses, connection information and encrypted message envelopes. Encryption does not conceal all metadata, such as your connection IP. Nearby devices may also hold and forward envelopes they cannot read. See the disclosures below for international processing details, legal bases, retention and deletion procedures.

International processing and transfers

Overseas entrusted processing and storage for the default relay • Service/provider: Server hosting through Oracle Cloud Infrastructure, supplied by Oracle Corporation and service affiliates. Provider privacy contact: https://www.oracle.com/legal/data-privacy-inquiry-form/ • Server country: Osaka, Japan. This is not a Korea-only storage service. • Data: Account identifiers, public signature-verification keys, authentication information, inbox addresses, connection information and encrypted message/game delivery data. • Timing/method: Encrypted internet connections are used for registration, authentication and delivery while internet connections are enabled. • Purpose/retention: Providing requested distant connections and service reliability. Account, mailbox and log periods are specified in the retention section below. • Basis: Necessary entrusted processing/storage for the requested service, using the disclosure route in Article 28-8(1)(3) of Korea’s Personal Information Protection Act. • Choice/refusal: Disable internet connections in the first-run notice or distant-friend connections in Me. Distant chat and the arena are limited, while nearby features and solo practice remain available. Disabling a connection does not delete an existing server account; use Delete internet account and device data for deletion. Separate external-service processing Google SDK diagnostics/Gmail processing and website-provider visit/security records may use global infrastructure under those services’ public policies. LATENT does not select their country-specific storage locations or apply its relay retention period to their independent records. Cancelling the QR notice does not newly initialize the QR SDK; pasting a contact is an alternative. Email and external links open in your chosen service. Refer to the official provider information below for processing scope and contact options. Google: https://policies.google.com/privacy?hl=en GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement Cloudflare: https://www.cloudflare.com/privacypolicy/

Processors and third-party disclosures

Default relay hosting: Oracle Corporation and service-providing affiliates (Oracle Cloud Infrastructure) supply the server infrastructure. LATENT’s selected server is in Osaka, Japan. Oracle’s handling of service data is distinct from its own system operations and security records. Privacy contact: https://www.oracle.com/legal/data-privacy-inquiry-form/ ; policy: https://www.oracle.com/legal/privacy/services-privacy-policy/ Android QR and restoration: We use ML Kit and Block Store from Google LLC and relevant service affiliates. QR images and decoded contents are processed on the device. Block Store holds identity restoration data with cloud backup requests disabled. Google contact: [email protected] ; policy: https://policies.google.com/privacy?hl=en Support inbox: The operator uses Google Gmail to receive and keep messages and attachments you choose to send. Copies managed by the operator follow the report/support retention period below. Support website: Hosting, delivery and security use GitHub, Inc. (GitHub Pages) and Cloudflare, Inc. Visitor IPs, browser/request information and service security records may be processed. App conversation databases are not uploaded to this website. Contacts and messages you send and public Echo posts reach your selected recipients or nearby participants. Distributed copies cannot be recalled centrally. Private/group conversations are not supplied for advertising sales; any lawful disclosure or separately notified processing follows applicable requirements.

Optional permissions

Bluetooth discovers nearby devices and carries messages. Older Android versions may require location permission for Bluetooth discovery; the app has no GPS collection feature. The camera scans friend and device-transfer QR codes, photo access lets you send selected images, and notifications announce incoming messages. You can revoke permissions in device settings; the related features may then be unavailable.

Diagnostics and tracking

The app does not collect usage statistics and does not use advertising tracking SDKs.

Android QR scanning SDK

QR scanning on Android uses Google ML Kit. Scanning runs on the device, but Google’s SDK may process and transmit device and app information, installation identifiers, performance and error information over HTTPS for diagnostics and usage analytics. See the published privacy policy for SDK details and the operator’s data disclosures.

Retention and disposal

Device data: Conversations, friends and identity remain until the relevant deletion/reset. Reset and account deletion also clear related avatars and game records. Non-identity choices such as language, accepted rules and the passed age threshold may remain. Incomplete received envelopes older than seven days are cleaned during startup/reception. Relay account: Authentication/connection data remains until deletion is processed. Verified owner deletion removes the account, role, registration state and queued mailbox. A minimal replay-prevention marker lasts 20 minutes and is then cleaned on a 60-second maintenance cycle. Offline mailbox: A seven-day expiry applies to disconnected persistent sessions. It is not a seven-day deadline measured from creation of every individual message. New service logs: Seven-day retention with hourly rotation/expiry, normally cleared within eight days. Rate-limit IPs are used only in a 60-second in-memory request window and cleaned every 60 seconds. Legacy test logs: The retention transition was applied on September 15, 2026; default system journals use a 30-day policy and inactive Mosquitto files expire 30 days after last modification. Including existing syslog rotations, pre-transition records are normally cleared within 40 days of transition (by October 25, 2026). Missed cleanup runs resume when the server restarts. Support/reports: Keep only as needed to handle the case, then delete within 30 days of completion. Unnecessary material is removed sooner. Operator-managed mail, attachments, trash and downloaded copies are included. Legally required exceptions identify their basis, scope and end date. Erasure: Electronic records, files, accounts and sessions are deleted or expired. Other users’ devices, exports, operating-system device transfers and providers’ independent records are separate. Uninstalling or deleting an account does not instantly physically erase all external copies. Rights/deletion requests for those records can be directed to the operator or the relevant provider.

Delete device data and make requests

Me → Delete everything removes this device’s messages and previous identity and starts a new identity. Me → Delete internet account and device data deletes the default relay account and queued mailbox, then wipes device data and disables internet connections. Device data is kept if server deletion is not confirmed. Copies on other devices and exported data are not removed. Contact support if you cannot use the app or need deletion of other records. See the published privacy policy for detailed procedures and retention information.

Support and reports

A report contains the subject’s public identifier, a reason and your explanation. Messages and images are included only when selected. Your chosen email or sharing service also processes exported material. Opening a share sheet or exporting a report does not mean the operator received it.

Rights of users and legal representatives

You or an authorized representative can contact support to request access, correction, deletion, restriction of processing or withdrawal of consent. Provide only the minimum details needed to identify the request and verify ownership; never send recovery keys, passwords or private keys. The operator cannot directly access or recall data held only on your device or by another user. If a legal restriction applies, you can request its basis and explanation. In Korea, the Personal Information Infringement Report Center (privacy.kisa.or.kr) and the Personal Information Dispute Mediation Committee (kopico.go.kr) offer assistance.

Security and device protection

The app uses encryption for direct/group message transport and the conversation database, along with secure device storage and app storage. Some information, including avatars, game records and settings, is held in separate local storage. This does not guarantee separate encryption of every file or prevent access by someone who controls your device. Keep device locking and operating-system updates enabled. Default relay connections use TLS and per-account inbox access control. Refer to the operator disclosures for the actual retention and disposal of connection and other operational logs.

Children’s personal information

LATENT is for people aged 14 and over and does not offer registration to users under 14. A birth date entered at first launch is used on the device to check eligibility, then cleared from the input fields. It is not saved in app storage or sent to a server. Only the passed age threshold stays on the device and survives an identity reset. If the check fails, identity creation, restoration and chat connections do not start. Only a retry time is retained to limit repeated attempts; it is removed when the app is reopened after 24 hours. Clearing app data also removes the age receipt. This is a self-declared age check, not verification of identity documents. Unnecessary information about a child under 14 received through support or reports is deleted. Any further necessary processing follows applicable legal requirements.

Privacy officer and contact

Operator: OVJECT (이준영) Privacy and child safety contact: 이준영 Email: [email protected] Send access, correction, deletion, restriction, consent withdrawal or appeal requests to this address. We request only the minimum information needed to verify the data subject or an authorized representative. Do not send recovery keys, passwords or private keys. Results, lawful restrictions/delays and appeal options follow applicable notification deadlines.

Changes to this policy

Changes to data processing will be communicated with their effective date and substance. Publishing a revised notice does not replace any separate consent required by law. 2026-09-25 (1.1): The optional quality record has been removed. Records kept on the device from 1.0 are deleted the first time 1.1 runs.

Google ML Kit — data disclosure

Terms of use

Service age

You must be at least 14 to use LATENT. Enter your birth date accurately. Identity creation and chat connections begin after the age check and acceptance of the usage rules. Registration with parental consent for users under 14 is not offered.

Prohibited conduct

Harassment, hate or discrimination, physical threats, scams, impersonation, exposing private information, sexual exploitation, illegal content and unsolicited advertising are prohibited. Respect other people’s rights and privacy, and their choice to end a conversation or game.

Using Echo

Echo is public to nearby users. Do not post contacts, home addresses, recovery keys or sensitive information. Bypassing public safety filters or changing identities to evade another person’s block is prohibited.

Protect your identity

Anyone with your recovery key can use the same identity. Never share recovery keys or transfer QR codes with others. A friend QR contains a public contact, not your recovery key. Verify friends using a QR code or identity fingerprint.

Connection and storage limits

Delivery depends on distance, Bluetooth availability, operating-system background restrictions and internet conditions. Delivery times and continuous connections are not guaranteed. LATENT does not replace emergency communication services. Keep your own copies of important information.

Reporting and action

Hold a message to report or block its sender. Blocking applies to future reception on this device. Send report details to the support contact to request review or appeal. The operator cannot recall all distributed offline copies. Avoid including unnecessary sensitive information in reports.

Child safety standards

No child sexual abuse or exploitation

Child sexual abuse and exploitation (CSAE), child sexual abuse material (CSAM), text promoting exploitation, grooming, sexual solicitation and exploitation transactions are strictly prohibited. Requesting, promoting, sharing or linking to this content is also prohibited.

How to report

Hold the message to report or block, and contact support. Do not download or forward illegal images or videos. You can report using a description and the subject’s identifier without attaching content. Contact local emergency services if someone is in immediate danger.

Operator response

The operator reviews received reports and takes action required by applicable law within its control. Confirmed child sexual abuse material is reported to the appropriate authorities where legally required, with cooperation on valid requests. The operator cannot recall all distributed copies or completely prevent someone from returning under a new identity. Contact support for a response or appeal.