1. Who is responsible
Re:HEY is operated by GENSIGHT, a corporation organized under the laws of the Republic of Korea (Business Registration No. 522-81-03675), with its business address at Unit 401-B132, 24, Gosanhu-ro 95beon-gil, Geomdan-gu, Incheon, Republic of Korea. GENSIGHT is the controller of personal information processed through Re:HEY. Junha Shin serves as both Representative Director and Privacy Officer.
Re:HEY provides everyday pet care support and does not provide veterinary diagnosis, prescriptions, or telemedicine.
2. What we process and how long we keep it
| Category | Examples | Purpose | Default retention |
|---|---|---|---|
| Account | Email address, authentication ID, locale | Sign-in, security, and support | Until account deletion |
| Pet profile | Name, species, breed, age, and environment | Personalized context | Until you delete the profile or your account |
| Conversation | Your prompts, Re:HEY replies, timestamps, and language | AI responses and conversation continuity | While the subscription is active; once it ends, a 90-day read and export grace period, then only the most recent 30 days |
| Confirmed care data | Owner-confirmed records, calendar events, and memories | Continuity across future care conversations | Until you delete the data or your account |
| Images | Selected source photos and generated portraits | Creating the portrait you request | Source photos are removed as soon as reasonably practical and no later than 24 hours after success or failure; generated results remain until deletion |
| Device and billing | App version, push token, store transaction ID, and subscription status | App delivery, notifications, and purchase verification | Until the purpose ends or for the period required by applicable law or the relevant store |
| Logs | Error codes and access or deletion audit records | Reliability, fraud prevention, and security | General logs: 30 days; security, access, and deletion audit records: 12 months or the applicable legal period |
Do not submit human medical information, government-issued identifiers, full payment card details, addresses, or images of other people unless doing so is strictly necessary and lawfully authorized.
3. AI processing and optional improvement consent
Re:HEY may send the minimum conversation context or selected pet photo needed to generate the response or portrait you request. Pet photos are not used to diagnose health conditions or automatically determine breed.
When valid opt-in consent has been obtained, Re:HEY applies screening for personal information, de-identification, access controls, quarantine, and deletion rules before using data for quality improvement. Irreversibly anonymized aggregate data may be retained when it can no longer be linked to an account.
4. Service providers and international transfers
| Provider | Service | Data | Processing and retention safeguards |
|---|---|---|---|
| Vercel Inc. | Delivering app and website pages, running server functions, and handling requests | Connection IP and device information, authentication tokens, chat content, pet profiles, health and care records, schedules, device push tokens, and store transaction identifiers | Server functions run in the Republic of Korea (Seoul), pinned in the application repository. Data is held only while a request is processed and is not stored separately. Operational logs keep only an error code and the route, and Vercel Inc. keeps and administers those logs in the United States. |
| OpenAI, L.L.C. | Generating AI responses in pet-care conversations | Your message and up to 12 recent messages, pet profile fields, and health observation notes. Photos are not sent. | Only the minimum data needed for the requested feature is sent. Re:HEY disables response storage for supported Responses API requests. Image generation is not currently enabled. Provider-side records remain subject to the controls and contract applicable to Re:HEY’s OpenAI account. Re:HEY does not represent that Zero Data Retention or Modified Abuse Monitoring is enabled. |
| Supabase, Inc. | Authentication, database, and private storage | Account identifiers, pet profiles, chat content, health and care records, schedules, consent records, device push tokens, and store transaction identifiers | The project’s primary data region is the Republic of Korea (AWS ap-northeast-2, Seoul). Data is subject to access controls and the deletion rules in this Policy. |
| Apple Inc. and applicable affiliates | iOS distribution, Sign in with Apple, in-app billing, and subscription status checks | Apple sign-in requests, store transaction identifiers, a substitute identifier that links a purchase to your account, and subscription status | Handled under Apple’s applicable terms, privacy policy, and legal requirements. Push delivery is not currently enabled. |
| Google LLC and applicable affiliates | Web font delivery, Google account sign-in, Android distribution, in-app billing, and subscription status checks | Connection IP and device information and the site origin (not the page address) on font and sign-in requests, store transaction identifiers, a substitute identifier that links a purchase to your account, and subscription status | Handled under Google’s applicable terms, privacy policy, and legal requirements. Font files are fetched by your browser directly from Google, including before you sign in. Push delivery is not currently enabled. |
We require service providers that process personal information on our behalf to protect it in accordance with applicable law and our contracts. Processing countries and provider-side retention may vary with provider infrastructure, account-level controls, and the contract applicable to the feature. The production hosting provider for hellorehey.com and for the Re:HEY application at app.hellorehey.com is Vercel Inc. This website is served as static files and runs no serverless functions. The application does run server functions, and their execution region is pinned to Seoul in the application repository. No unverified hosting provider is represented here as processing production traffic.
5. Your choices and rights
You can review, correct, export, or delete your profile, memories, records, calendar events, and notification settings in the app. You can withdraw optional improvement consent and request access, correction, deletion, restriction, or a portable copy where applicable.
If you cannot access the app, follow the web deletion instructions or contact support. We may request only the minimum information reasonably needed to verify account ownership.
6. Account deletion and backups
Account deletion removes the authentication account, pet profiles, conversations, confirmed care data, calendar events, memories, push tokens, and private media. Billing, consent, fraud-prevention, or security records that must or may be retained under applicable law are separated, access-restricted, and kept only for the applicable period.
Restricted disaster-recovery backups may retain residual copies for up to 7 days after deletion. They are not used for ordinary operations or individual account restoration and are permanently removed as the backup cycle expires. If a backup is restored for disaster recovery, the deletion request is reapplied before the restored system is returned to service.
Deleting the Re:HEY app or your Re:HEY account does not necessarily cancel an Apple or Google auto-renewing subscription. Check and manage the store subscription separately.
7. Security and age eligibility
- Per-user access controls, private storage, and least-privilege access
- Encryption in transit and server-only secrets
- EXIF and metadata removal with short source-photo retention
- No conversation content, credentials, or email addresses in ordinary analytics logs
- Audited access and deletion workflows
You must be at least 18 years old to use Re:HEY, or any higher minimum age required by the law of your place of residence. We do not knowingly allow anyone below that age to create or use an account.
8. Regional privacy rights
Republic of Korea
Users in the Republic of Korea may exercise rights available under the Personal Information Protection Act, including rights concerning access, correction, deletion, suspension of processing, and withdrawal of consent. Users may also use applicable public privacy complaint and dispute-resolution channels.
United States
Depending on where you live and whether the applicable law covers Re:HEY, you may have rights to know, access, correct, delete, or receive a portable copy of personal information, and to appeal a denied request. You may also have rights concerning the sale or sharing of personal information and targeted advertising. Re:HEY does not sell personal information for money. We will explain any materially different practice before it begins and provide any choice required by law.
You may use an authorized agent where local law permits. We will verify requests in a proportionate manner and will not discriminate against you for exercising a privacy right.
Japan
Users in Japan may exercise rights available under the Act on the Protection of Personal Information, including requests for notice of purpose, disclosure, correction, cessation or deletion, and cessation of third-party provision where applicable.
9. Contact and changes
Privacy contact
gensightofficial@gmail.com
Privacy Officer: Junha Shin, Representative Director
GENSIGHT
Unit 401-B132, 24, Gosanhu-ro 95beon-gil, Geomdan-gu, Incheon, Republic of Korea
Material changes will be announced before they take effect. When consent is legally required, we will request it separately and keep prior versions accessible.