Gisto Privacy Policy
Effective date: June 24, 2026 · Operator: LGTM
LGTM ("we", "us") provides the mobile application "Gisto" (the "Service"). This Privacy Policy explains what personal information we process, why, with whom we share it, and your rights. We comply with Korea's Personal Information Protection Act (PIPA) and, where applicable, U.S. state privacy laws and the GDPR. This Policy was drafted in English; any translated version is for convenience only and the English version controls in case of conflict.
1. Information we process
a. Account information (at sign-up / authentication)
- Required: user id, email address.
- If you use Sign in with Apple, your email may be a private relay address (
@privaterelay.appleid.com). - Optional: display name, preferred language.
b. Content you save and information derived from it
- The saved URL and canonical URL.
- Extracted article metadata (title, author, published date, thumbnail URL, publisher/site name).
- Extracted article body text — used transiently to generate the summary; not stored on our servers.
- AI-generated summaries (short, long, and card-by-card breakdown).
- AI-classified topic category; detected/target language.
- Read / archive / favorite state and timestamps.
- AI token-usage and cost figures.
c. Automatically generated information
- Service usage records, access logs, and error logs (for operations and security).
- Subscription and purchase status (via RevenueCat and the App Store) — we do not receive your card or payment details.
We use a product-analytics SDK (Mixpanel) to record in-app usage events (for example: screens viewed, links saved and read, and subscription state) tied to your pseudonymous account id, to understand and improve the Service. We do not use advertising or cross-context behavioral-tracking SDKs, and we do not send your email or name to the analytics provider. Push notifications (FCM) are not yet implemented; we will update this policy if introduced.
2. Purposes of processing
- Account identification, authentication, and management.
- Extracting article text from links you save and providing AI summary cards (core function).
- Topic classification and personal library management (favorites, archive).
- Enforcing the daily save quota (15/day) and computing usage/cost.
- Managing subscriptions, the free trial, and entitlements (via RevenueCat and the App Store).
- Operating, maintaining, and securing the Service; preventing abuse; responding to inquiries.
3. Retention period
| Category | Retention |
|---|---|
| Account information and saved content | Until account deletion or withdrawal of consent (then destroyed without undue delay). |
| Free-trial abuse-prevention record (a one-way hash of your sign-in identifier — no readable identifier, no saved content) | Retained after account deletion, on our legitimate interest in preventing repeated free-trial sign-ups by the same account. |
| Access / error logs | Until account deletion or consent withdrawal (or longer where required by law) from collection. |
| Data subject to a legal retention obligation | For the period required by applicable law. |
4. Sub-processors / sharing
We engage the following parties to process personal information on our behalf and supervise their compliance:
| Party | Function | Items | Country |
|---|---|---|---|
| Supabase | Authentication, database hosting/storage (BaaS, cloud infrastructure) | Account info, summaries & metadata (article body not stored) | United States |
| Jina AI (r.jina.ai, Jina Reader) | Extracting article body text from the saved URL | The saved URL | Outside Korea |
| W&B Inference (Weights & Biases / CoreWeave; hosts the DeepSeek V4 Flash model) | AI summarization (current default model) | Extracted article text, request metadata | United States |
| Google (Generative Language API / Gemini) | Weekly pricing-sync job and video-content fallback summarization | Extracted article text, request metadata | USA / Global |
| RevenueCat | Subscription management and purchase/receipt validation | App user id, purchase & subscription status, device identifiers | United States |
| Mixpanel | Product usage analytics (measuring and improving the Service) | Pseudonymous account id, in-app usage events, device/app info | United States |
Sign-in is performed via Apple (Sign in with Apple) and Google, which process data under their own privacy policies.
5. International transfers
| Recipient (contact) | Country | When / how transferred | Items | Purpose | Retention by recipient |
|---|---|---|---|---|---|
| W&B Inference (Weights & Biases) https://wandb.ai/site/privacy |
United States | At the time you request a summary, via HTTPS API call | Extracted article text and request metadata | AI summarization | Transient processing for summarization; per the provider's policy (not separately stored by us) |
| Google LLC https://policies.google.com |
USA / Global | At the time of fallback summarization or pricing-sync, via HTTPS API call | Extracted article text and request metadata | AI summarization and operations (pricing sync) | Transient processing for summarization; per Google's policy (not separately stored by us) |
| Supabase https://supabase.com/privacy |
United States | On save/sync, via HTTPS | Account info, summaries & metadata (article body not stored) | Data storage and hosting | Until account deletion or withdrawal of consent |
| RevenueCat https://www.revenuecat.com/privacy |
United States | At purchase / subscription events, via HTTPS API call | App user id, purchase & subscription status, device identifiers | Subscription management and purchase/receipt validation | For the subscription term; per RevenueCat's policy |
| Mixpanel https://mixpanel.com/legal/privacy-policy |
United States | As you use the app, via HTTPS API call | Pseudonymous account id, in-app usage events, device/app info | Product usage analytics | Per Mixpanel's policy / our configured retention |
How to refuse, and the effect: You may refuse consent to international transfer. Because article extraction and AI summarization are core features, refusing means you will not be able to use those features and parts of the Service may be unavailable.
The destination country (United States) may not be covered by an adequacy mechanism recognized for Korean or EU data protection purposes. For EU/EEA users, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses) where required; we recommend reviewing whether you wish to proceed.
6. Your rights and how to exercise them
You may at any time:
- Access your personal information.
- Request correction of inaccurate data.
- Request deletion (account and saved content).
- Request restriction of processing.
- Withdraw consent (as easily as it was given).
- (EU/EEA) Request data portability and object to processing.
Exercise these via in-app controls (e.g., account deletion) or by contacting gist.admin@lgtm.co.kr. We respond within the timeframes required by law.
Legal bases (EU/EEA/UK): we process your data to provide the Service (performance of a contract), to operate and secure it (legitimate interests), and on your consent for the international transfer described in Section 5. You may withdraw consent at any time, and you have the right to lodge a complaint with your local data-protection authority.
7. Destruction of personal information
- Process: Once the retention period elapses or the purpose is achieved, we select and destroy the data. Data required to be kept by law is separated and stored apart.
- Method: Electronic files are permanently deleted by irrecoverable means.
8. Security measures
- Least-privilege access and access control.
- Encryption in transit (HTTPS to all external providers).
- Per-user data isolation (e.g., database row-level security) where applicable.
- Access logging and review.
9. About AI processing
Summaries are generated automatically by AI (large language models) and may be inaccurate, incomplete, or misleading. Do not rely on a summary for important decisions; read the original source. Video links (YouTube, Instagram, TikTok, etc.) are not processed.
10. Children
The Service is not directed to, and we do not knowingly collect personal information from, children under 14 (Korea) or under 13 (United States, per COPPA). If we learn we have collected such data, we delete it without undue delay. (EU/EEA: where a higher digital-consent age applies, that age governs consent-based processing.)
11. Privacy officer and contact
- Personal Information Protection Officer (CPO): LGTM Privacy Officer (gist.admin@lgtm.co.kr)
- Contact (email): gist.admin@lgtm.co.kr
For complaints about personal-information handling in Korea, you may also contact the Personal Information Dispute Mediation Committee (kopico.go.kr) or KISA (privacy.kisa.or.kr, 118).
12. US residents (California and other states)
If you live in the United States, you may have rights under your state's privacy law (for example, California's CCPA/CPRA), which can include the right to know and access, delete, and correct your personal information, and the right not to be discriminated against for exercising them.
- We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.
- We use a product-analytics SDK (Mixpanel) to measure in-app usage and improve the Service, but no advertising or cross-context behavioral-tracking SDKs.
- The categories of personal information we process and the purposes are described in Sections 1 and 2; our sub-processors and the countries involved are listed in Sections 4 and 5.
- Because we do not sell or share your information and do not run targeted advertising, the opt-out-of-sale/sharing right and Global Privacy Control (GPC) signals do not apply; your other rights above still do.
- We do not knowingly sell or share the personal information of consumers under 16.
- We do not collect sensitive personal information (e.g., government IDs, precise geolocation, financial-account details) beyond your account email, and we do not use it to infer characteristics about you.
- We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
- To exercise your rights, use in-app account deletion or contact gist.admin@lgtm.co.kr. We respond within 45 days (extendable as the law allows) and will not discriminate against you for exercising them. You may use an authorized agent, and we may need to verify your request. If we deny a request, you may appeal by replying to our response or contacting the same address.
13. Changes to this policy
We may revise this policy as laws or the Service change. We will announce changes and the new effective date in-app or on this page.