Privacy Policy
Effective: October 30, 2026
Ownpace ("we", "us") runs Nelson: the Mac app, the iPhone app and keyboard, and the heynelson.io website (together, the "Service"). This policy explains what personal data we process, why, where it goes, and how you can control it. It follows the Personal Information Protection Act of Korea. If the Korean version and this English translation differ, the Korean version prevails.
At a glance
- We collect only what an account needs: your email and the identifier from the sign-in service you use.
- The keyboard sends text to our server only when you tap Polish (다듬기), and only the text in that field. It never reads, stores, or sends anything else you type.
- AI requests go through OpenRouter and only to inference providers that keep no copy of the request (Zero Data Retention).
- We never use your text or voice to train AI models, and we never give it to anyone else for training.
- Voice is turned into text and then discarded. We do not store recordings.
- We show no ads, and we never sell your data or share it for advertising.
- You can delete your account at any time in the iPhone app under Settings → Delete account. Deleting it removes everything stored with it.
1. What we process, why, and for how long
We process only the data each purpose needs. If a purpose changes, we ask for your consent again.
| Purpose | Data | Kept for |
|---|---|---|
| Creating your account and signing in | [Required] email, Apple or Google account identifier / [Optional] name, if the sign-in service provides it | Until you delete your account |
| Polishing, translating, looking up expressions, asking Nelson | The text you send, your tone and native-language settings | Discarded right after the request is answered, unless it becomes an expression card or grammar report below |
| Voice input (Mac app) | What you say | Discarded right after it is turned into text |
| Expression cards and grammar reports | The original text and revised text a card or report was made from, its explanation, and when it was made | Until you delete it or your account |
| Tones and per-app settings | Your tone example text, the default tone for each app | Until you delete it or your account |
| Support messages and reply notifications | Your messages, app version, device model, OS version, push notification token | Until you delete your account |
| Usage limits and abuse prevention | Account identifier, number and time of requests | Up to 31 days |
| Product analytics | Pseudonymous account identifier, which features you use, app version, device model, OS version (never the text you write) | Up to 1 year |
| Crash and error reports | Error details and where they happened, app version, device model, OS version (any text you wrote is removed before sending) | Up to 90 days |
| Paid plans (when offered) | Subscription status and period, the payment provider's customer and transaction identifiers (we never receive card details) | Until you delete your account, or as long as the law requires |
Records the law requires us to keep are stored separately for that period: contract, withdrawal, payment, and delivery records for 5 years and consumer complaint records for 3 years (Act on Consumer Protection in Electronic Commerce), and access logs for 3 months (Protection of Communications Secrets Act).
About the keyboard and the share menu
The iPhone keyboard sends only the text in the current field, and only at the moment you tap Polish. Nothing else you type while using it is read, stored, or sent. In password fields iOS switches to the system keyboard automatically. "Allow Full Access" is used only to send those requests to our server.
"Ask Nelson" (Nelson에게 물어보기) in the share menu, for lookups and translation, handles only the text you select and share. The Mac app likewise handles only the text you select when you ask it to, by shortcut or menu.
2. Sharing with third parties
We do not provide your personal data to third parties, except with your separate consent, where the law specifically requires it, or where there is an urgent risk to someone's life, body, or property.
3. Service providers
We use the following providers to run the Service. Our agreements limit them to the work below, require technical and organizational safeguards, and restrict further subcontracting.
| Provider | What they do for us |
|---|---|
| Supabase, Inc. | Sign-in and account data storage |
| Vercel Inc. | Running our servers |
| OpenRouter, Inc. | Routing AI requests, configured to send them only to providers that keep no copy (Zero Data Retention) |
| Inference providers reached through OpenRouter | Running the AI models for polishing, translation, explanations, and speech recognition (no copy kept) |
| Upstash, Inc. | Counting requests for usage limits |
| PostHog, Inc. | Product analytics |
| Functional Software, Inc. (Sentry) | Crash and error reports |
| Apple Inc. | Sign in with Apple, push notifications for support replies |
| Google LLC | Google sign-in |
| Cloudflare, Inc. | Delivering the website and app updates, forwarding support email |
| Polar Software, Inc. | Web payments as merchant of record (when paid plans are offered) |
Purchases made in the App Store are handled by Apple under Apple's privacy policy.
4. International transfers
To provide the Service we transfer data outside Korea as listed below, over encrypted connections (TLS), while you use the Service. If you do not want this, you can stop using the Service and delete your account.
| Recipient (contact) | Country | Data | Purpose | Kept for |
|---|---|---|---|---|
| Supabase, Inc. (privacy@supabase.com) | USA | Email, account identifier, expression cards, grammar reports, settings, support messages | Sign-in and storage | Until you delete your account |
| Vercel Inc. (privacy@vercel.com) | USA | Text and voice you send, account identifier | Running our servers | Discarded after the request (access logs, without content, up to 3 months) |
| OpenRouter, Inc. (privacy@openrouter.ai) | USA | Text and voice you send | Routing AI requests | Not stored |
| Inference providers reached through OpenRouter | USA and other countries | Text and voice you send | Running AI models | Not stored (Zero Data Retention) |
| Upstash, Inc. (support@upstash.com) | USA | Account identifier, request counts | Usage limits | Up to 31 days |
| PostHog, Inc. (privacy@posthog.com) | USA | Pseudonymous identifier, feature usage, device details | Product analytics | Up to 1 year |
| Functional Software, Inc. (privacy@sentry.io) | USA | Error details, device details | Error reports | Up to 90 days |
| Apple Inc. (apple.com/legal/privacy) | USA | Apple account identifier, push token | Sign-in, notifications | Until you delete your account |
| Google LLC (googlekrsupport@google.com) | USA | Google account identifier, email | Sign-in | Until you delete your account |
| Cloudflare, Inc. (privacyquestions@cloudflare.com) | USA | Support email | Email forwarding | Discarded after forwarding |
| Polar Software, Inc. (privacy@polar.sh) | USA | Email, payment details | Payments | As long as the law requires |
5. Deletion
When a retention period ends or its purpose is met, we delete the data without delay, in a way that cannot be recovered. When you delete your account, your account and its expression cards, grammar reports, settings, and support messages are deleted immediately. Analytics and error records expire on their own after the periods above.
6. Your rights
You can ask at any time to see, correct, delete, or stop the processing of your personal data, and you can withdraw consent.
- Delete your account: in the iPhone app under Settings → Delete account. If you use only the Mac app, email support@heynelson.io and we will do it for you.
- Expression cards and grammar reports: delete them one by one in the app.
- Anything else: email support@heynelson.io. We act within 10 days and tell you the result.
You may also act through a representative with a power of attorney. Some requests may be limited where the law requires.
7. Children
The Service is for people aged 14 and over. We do not accept sign-ups from children under 14, and we delete such data as soon as we learn of it.
8. Cookies and tracking
The heynelson.io website uses no cookies and no visitor analytics. The apps store a pseudonymous identifier on your device for the analytics and error reports in section 1. The apps do not collect the advertising identifier (IDFA) and do not track you across other companies' apps or websites.
9. How we protect your data
- All connections are encrypted (TLS).
- The database lets each account reach only its own data.
- Sign-in credentials are kept in the device keychain.
- Text you write is removed from error reports and analytics before they are sent.
- Access to personal data is limited to the company's representative.
10. Privacy officer
| Privacy officer | Dongsub Shin (Representative) |
| Contact | support@heynelson.io |
For privacy complaints in Korea you can also contact the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) or the Personal Information Infringement Report Center (118, privacy.kisa.or.kr).
11. Changes
We announce changes on the website and in the apps 7 days before they take effect (30 days for changes that are less favorable to you). Earlier versions are listed in the change history below.
Operator
- Business name: Ownpace (온페이스)
- Representative: Dongsub Shin
- Business registration number: 860-11-02857
- Email: support@heynelson.io
Change history
- October 30, 2026: first version