Privacy Policy

This policy applies to Newey AI (newey.ai, the “Service”), the real-time interpretation caption service provided by the Company. The Company collects only the minimum personal data necessary to provide the Service, and does not use the information it collects for any purpose other than those disclosed.

The Service is currently offered as a free beta and does not collect payment information. The Company does not use advertising tools, and its visit and usage analytics tools (Google Analytics, PostHog) operate only where the user has consented (see Section 8).

However, if you turn on the Audience sharing feature yourself (off by default), that session's caption text is (1) displayed in real time to audience members (third parties) who hold the share link, and (2) temporarily routed through the Company's servers to deliver it. The servers only relay it from memory without storing the caption text, and it is immediately discarded when you turn sharing off or the session ends. You can turn sharing on and off at any time during a session.

Your display settings are kept only in your browser's storage (localStorage) and never leave your device. Your glossary is stored in your browser as well, and a copy is also mirrored to your account so the browser extension and your other devices can read it — this account copy is stored like other account data (not end-to-end encrypted), is replaced whenever you save, and is deleted together with your account. Session caption records, where you choose to save them, are retained in your account and can be accessed from multiple devices (Sections 3 and 5), with an encrypted copy also kept in the browser for immediate display. Private sessions and sessions you do not save are not retained on the servers.

In addition, portions of the transcript text may be sent to the LLM API of Anthropic PBC (United States) in two cases: (1) only where you have activated the Smart Context (AI suggestions) feature yourself — this feature is disabled by default — and (2) where a session record is saved to your account, a short excerpt of the transcript is sent once to generate an automatic session title. In both cases the text is transmitted transiently for that processing only and is not stored by the Company's servers. Only where the Company has configured a fallback provider instead of Anthropic, the Google Gemini API may be used for the same processing.

The items the Company collects and processes on its servers are as follows.

The Company does not collect original audio, payment information, or unique identifiers such as resident registration numbers. Transcription and translation text is not stored on the servers during real-time processing; it is processed only for session records you choose to save (the table above) and for the conditional AI suggestion and Audience sharing features described in Section 2.

• Identifying users and maintaining login state (account information, session cookies)
• Managing free usage limits and preventing abuse (session metadata, usage records)
• Operating the Service, responding to incidents, and improving quality (statistical use of session metadata)
• Improving the Service through visit and usage analytics (behavioral information — only where consented)
• Fulfilling legal obligations and responding to disputes

1. When a user requests deletion of their account or the service agreement is terminated, the Company destroys the personal data it has collected without delay. You can request account deletion at newey.ai@gmail.com (an in-service self-service deletion feature is in preparation).
2. However, information that the Company is required to retain under applicable law is kept for the period prescribed by that law (for example, communication log records for 3 months under the Protection of Communications Secrets Act, and records of contracts and withdrawal of subscription for 5 years under the Act on Consumer Protection in Electronic Commerce, etc. — applicable if the Service becomes paid).
3. Data stored only in your browser (display settings and the local cache of session records) is not held by the Company and can be deleted by you directly in your browser. The glossary's account copy (Section 3) is replaced whenever you save and is destroyed together with your account.
4. Session records you choose to save are retained in your account, and you can delete them individually or all at once, or export them, within the Service. When you delete your account, the saved session records are also destroyed together without delay.

To provide the Service, the Company entrusts the processing of personal data as follows. The Company manages and supervises its processors through contracts and other means so that they do not process personal data for any purpose beyond their assigned tasks.

Apart from the entrustment described above, the Company does not provide personal data to third parties and does not sell personal data. Lawful requests from investigative or other authorities based on applicable law are an exception.

To provide the Service, personal data is transferred abroad as set out below. If you do not wish for your personal data to be transferred abroad, you may stop using the Service and request account deletion; however, in that case the Service cannot be provided.

The Company distinguishes between strictly necessary cookies required to provide the Service (such as login) and optional (analytics) cookies used only with your consent. The Company does not use cookies for advertising or personalized tracking purposes.

1. Necessary and functional cookies are used without separate consent to the extent needed to provide the Service; if you block them in your browser settings, some features such as login will be unavailable.
2. Analytics cookies are set only if you accept them in the consent banner shown on your first visit. If you decline or make no choice, analytics cookies are not set. Even in that case, under Google Consent Mode a cookieless, non-identifying aggregate signal may be sent; this signal is not used to identify individual users.
3. Your consent choice is stored only in your browser (localStorage), and you can change (withdraw) it at any time below.

1. You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time. To exercise these rights, contact newey.ai@gmail.com, and the Company will act without delay (and no later than within the statutory deadline) and inform you of the outcome.
2. Users residing in the European Economic Area (EEA) or the UK (GDPR / UK GDPR): In addition to the rights above, you have the right of access (Art. 15), the right to erasure (Art. 17), the right to data portability (Art. 20), and the right to object to processing (Art. 21), and you have the right to lodge a complaint with the supervisory authority in your place of residence. The legal bases on which the Company processes personal data are performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f), preventing abuse).
3. Users residing in California, USA (CCPA / CPRA): The Company does not sell personal information or share it for targeted advertising purposes. You may request disclosure of the categories collected, as well as deletion and correction, and you will not be discriminated against for exercising your rights.
4. You may exercise your rights through a legal representative or an authorized agent. In that case, the Company may request documentation confirming the lawful representation.

The Service is not directed at children under the age of 14 (or, in regions where the GDPR applies, under the applicable statutory age in that region), and the Company does not knowingly collect children's personal data. If it is confirmed that a child's information has been collected, it will be destroyed without delay.

• Encryption in transit: All of the Service's communications (including audio transmission) are encrypted with TLS.
• Data minimization by design: Real-time audio and the live transcription stream are designed not to be stored on the servers, reducing the risk of exposure; only the session records you choose to save are retained in your account.
• Encryption at rest: The local cache of the glossary and session caption records stored on your device is encrypted with AES-256-GCM. The encryption key is kept in the browser's secure storage in a non-exportable (non-extractable) form and is not transmitted externally. Saved session records are stored on managed database infrastructure, scoped so that no other user can access them; with opt-in end-to-end encryption enabled, the server stores ciphertext only.
• Access control: Secret values, such as database connection credentials, are managed only in the server environment and are not exposed to the client.
• Session security: HttpOnly and Secure attributes are applied to authentication cookies, and the origin of API requests is verified.

For inquiries, complaints, or remedies concerning the processing of personal data, please contact the channel below. The Company will respond and act without delay.

• Data Protection Officer: newey.ai@gmail.com
• Other reporting and counseling on privacy infringement: Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code), Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972)

If the contents of this policy are added to, deleted, or amended, the Company will give notice through in-service announcements starting 7 days before the effective date. However, where there is a material change affecting user rights — such as the addition of collected items or third-party disclosure — the Company will give notice 30 days before the effective date and, where necessary, obtain consent again.

• Notice date: July 10, 2026
• Effective date: July 10, 2026
• Revised July 10, 2026: Following the introduction of a visit analytics tool (Google Analytics, consent-based), Sections 1, 3, 4, 6, 7, and 8 were revised, and the access logs and passkey items were specified.
• Revised July 11, 2026: Following the introduction of the Audience sharing feature (real-time display of captions to third parties and temporary routing through the servers; off by default, user opt-in), Sections 2 and 3 were revised.
• Revised July 11, 2026: Following the introduction of the feature that retains the summary, transcript, and translation text of ended sessions you choose to save in your account (cross-device sync, access by you, and deletion/export), Sections 2, 3, 5, 7, and 11 were revised. Real-time audio and caption streams remain unstored.
• Revised July 11, 2026: Following the parallel introduction of the product usage analytics tool PostHog (consent-based, no cookies, EU-region storage), Sections 1, 3, 6, 7, and 8 were revised.
• Revised July 12, 2026: The AI processor for the Smart Context (AI suggestions) feature was corrected to Anthropic PBC (LLM API; the Google Gemini API applies only under fallback configuration), and automatic session-title generation for saved session records was specified as using the same processor. Sections 2, 6, and 7 were revised.
• Revised July 12, 2026: Sections 2, 3, 5, and 11 were corrected to describe the glossary accurately — a copy is mirrored to your account so the browser extension and your other devices can read it (stored like other account data, not end-to-end encrypted, replaced on each save, and deleted with your account) — and to describe the storage of saved session records accurately (stored on managed database infrastructure, scoped to your account; with opt-in end-to-end encryption, the server stores ciphertext only).

For matters relating to the terms of use of the Service, please see the Terms of Service.