✦ heywavv

Privacy Policy

Effective: October 2, 2026 (previous version effective September 30, 2026)

This is an English translation provided for convenience. In case of any conflict, the Korean version prevails.

muit (the “Company”) values the personal information of heywavv users and complies with applicable laws, including the Personal Information Protection Act of Korea.

1. Information We Collect

① On sign-up (Kakao/Google social login): email address, nickname, profile photo. On email sign-up: email address.
② Guest trial: no personal information such as an email address is collected; only a temporary account identifier and your access region (see ⑥) are recorded.
③ In the course of the Service: audio files you upload and their processed results, processing history (track names, processing settings, analysis reports), free-resource download records, and pass code usage records.
④ Paid plans: card details (card number, expiry, date of birth, first 2 digits of the PIN) are passed to NICEPAY for payment processing and are not stored by the Company. We keep a billing key for recurring payments and payment records (date, amount, plan, card issuer name, last 4 digits of the card). When a promo code is used, we keep a non-reversible identifier derived from the card number (a cryptographic hash) to prevent the same card from using it twice.
⑤ If you opt in: whether you agreed to receive new resources and updates by email, and when.
⑥ Collected automatically: minimal logs needed to operate the Service (access records, browser information); your access region at upload time (country, region and city, estimated from your IP address); and how you first arrived (campaign name, the site you came from, the first page you opened, and the time of the visit). We do not store the IP address itself.

2. How We Use It

To identify members and provide the Service (analyzing, processing, storing and delivering audio), to provide your processing history (Studio), to manage plans and payments, to prevent duplicate use of promo codes and passes, to measure sign-up sources (which video or channel led you to sign up), to improve the Service, and to respond to inquiries. We send new-resource and update emails only if you opted in. Uploaded audio is processed solely to provide the Service to you and is never used for any other purpose (such as training data).

3. Retention

  • Uploaded original audio: deleted automatically 30 days after upload
  • Processed results (master files): deleted automatically 90 days after processing
  • Account information, processing history and reports, sign-up source, free-resource and pass records: until you delete your account
  • Consent to new-resource and update emails: until you withdraw it or delete your account
  • Contract, withdrawal and payment records (including promo code usage and the card identifier) for 5 years, and consumer complaint and dispute records for 3 years, as required by the Korean E-Commerce Act (kept separately from your account for these periods even after account deletion)

If you ask us to delete your data, we delete it without delay regardless of the periods above, except records we are legally required to keep.

4. Processors and International Transfers

We entrust processing to the companies below, and some of it takes place outside Korea. Transfers happen over the network at the time you use the Service, and each processor destroys the data when the contract ends or the retention period above expires.

  • Supabase Pte. Ltd. (Singapore, privacy@supabase.com) — member and processing-history database and login authentication / items: account information, processing history, payment records, sign-up source, access region
  • Cloudflare, Inc. (US company, Asia-Pacific storage, privacyquestions@cloudflare.com) — storage of audio files and results / items: uploaded audio and results
  • Railway Corporation (United States, privacy@railway.com) — audio analysis and mastering servers / items: uploaded audio, processing settings
  • Vercel Inc. (United States, privacy@vercel.com) — web hosting / items: access records, browser information
  • Plus Five Five, Inc. (Resend, United States, support@resend.com) — login and billing emails / items: email address, email contents
  • Telegram Messenger Inc. (British Virgin Islands, in-app support or edpo.com/telegram-gdpr-data-request) — operator alerts (payments, incidents) / items: partially masked email address, account identifier, payment amount and plan
  • Google LLC (United States) — Google social login / items: login request information
  • Kakao Corp. (Republic of Korea) — Kakao social login
  • NICEPAY Co., Ltd. (Republic of Korea) — payment processing and recurring billing (billing key) management

These transfers are necessary to provide the Service (performance of the contract). If you do not want them, you can ask us to delete your account, in which case you will no longer be able to use the Service. We supervise our processors through data processing agreements.

5. Cookies

We use cookies for the purposes below. We do not use advertising cookies.

  • Staying signed in: essential cookies that keep you logged in
  • Language: remembers your Korean/English choice (1 year)
  • Sign-up source: remembers how you first arrived so it can be recorded when you sign up (30 days)
  • Sign-up handling: short-lived cookies that carry the social-login step and your email choice until sign-up completes (up to 30 minutes)

You can refuse or delete cookies in your browser settings. If you refuse the sign-in cookies, you will not be able to use features that require logging in.

6. Children Under 14

You must be at least 14 years old to sign up for heywavv, and we do not collect personal information of children under 14.

7. Your Rights

You (or your legal representative) may at any time request access to, correction or deletion of, or suspension of processing of your personal information, withdraw consent, or delete your account. You can delete your account right away in Settings (⚙) → Account; for other requests, email us at muit@muit.kr from the address you signed up with; we will act within 10 days after verifying your identity. You can withdraw consent to update emails the same way, and every such email will include instructions for unsubscribing.

8. Destruction

When the retention period expires or the purpose is fulfilled, electronic files are deleted by methods that make recovery impossible, and other records are shredded or incinerated.

9. Security Measures

Audio files are kept in private storage and can be accessed only through short-lived signed URLs after authentication. Personal information is transmitted over encrypted connections (HTTPS), the database restricts access per account, and administrative features are limited to administrator accounts.

10. Privacy Officer

Officer: Kyungmin Jeun (Owner)
Email: muit@muit.kr · Tel: +82 70-4571-4190

11. Remedies

For advice or to report an infringement of personal information, you may contact the following Korean agencies.

  • Personal Information Dispute Mediation Committee: +82 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors’ Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

12. Notice of Changes

If this policy changes, we will announce it on the Service at least 7 days before the effective date.

muit · Owner: Kyungmin Jeun · B1, 52 Bangullae-ro, Mapo-gu, Seoul, Republic of Korea
Business registration no. 770-26-02000 · E-commerce permit no. 2026-Seoul Mapo-0154