Our policy for handling and protecting the personal information of users of the MIMYO service.
1. Personal information we collect
MIMYO (the "Company") collects the following information to provide its service.
- Required: email, password (stored encrypted), language preference
- When matching: procedure concern text submitted by the member, attached photos, body area, budget, stay schedule
- Automatically collected: IP address, device information, cookie (mimyo-locale)
Collection method: directly entered by the member during signup and use, or automatically generated.
2. Purpose of use
- Member identification, login, session maintenance
- Matching the member's concern with Korean clinics and delivering proposals
- Service improvement statistics and customer support
- Compliance with legal obligations (e-commerce act, communications secrecy act, etc.)
3. Retention and use period
- Member information: until the member withdraws (immediately deleted on withdrawal)
- Matching concerns and photos: deleted 6 months after the match is completed (for dispute response)
- Payment and transaction records: retained 5 years per Korean e-commerce act
- Access logs: retained 3 months per the communications secrecy act
4. Disclosure to third parties
We do not disclose personal information to third parties without the member's consent. However, when the member requests a match, the following information is provided to the matched Korean medical institution.
- Items disclosed: concern text, photos, body area, budget, stay schedule (excluding email and contact information)
- Purpose: writing a tailored proposal
- Retention: 6 months after the match is completed
5. Processing outsourcing
We outsource some processing to the following providers to operate the service.
- Infrastructure: Vercel Inc. (hosting), Railway Inc. (servers), Cloudflare R2 (image storage)
- LLM analysis: Anthropic Inc. (automatic concern-text organization — sent after anonymization)
Vendors are contractually prohibited from using the data beyond the stated purpose and are bound to secure handling.
6. Member rights
Members may request access, correction, deletion, or processing suspension of their personal information at any time. Requests may be submitted via My Page or the contact below.
7. Cookies
We use the mimyo-locale cookie (1 year) to maintain the language preference. Users may disable cookies in browser settings, but some service features may be limited.
8. Privacy officer
- Officer: Choi Sung-hwan
- Contact: csh4332@gmail.com
We respond promptly to inquiries.
9. Change history
Any changes to this policy will be announced on this page 7 days before the effective date.