Privacy policy

At a glance

1234asdf saves the articles you read, turns them into organized knowledge and helps you find them again. This policy covers the 1234asdf app (the Android app and the web version at app.1234asdf.com) and the official site (1234asdf.com). Operator: 주식회사 바닐라. Effective date: 2026-11-13.

• We only collect what the service needs. We never use it for ads, and we collect only the usage statistics and app screen recordings we need to improve the service, without your name or email.
• What you save and write is yours. You can export it or delete it whenever you like.
• We only let companies we need to run the service handle your data, and we list where that happens below.

What we collect, and why

• Account — your email address and sign-in history. Our sign-in service (Clerk) stores these; the 1234asdf server keeps only an account ID. Why: to sign you in and link what you save to your account.
• Saved articles and files — the links, titles and text you share, photos and PDF files you upload (including information stored in the file, such as when and where a photo was taken), the notes you write, and the key sentences and sources organized from them. Why: to turn them into knowledge and find them again, and to store and show your files.
• Device — an ID for the Android app installation, the device type and the app version. Why: to allow saving from that device and to stop allowing it when you sign out. The web version does not register devices.
• Server logs — technical records like the request path, result and time. We don't log article text or passwords. Why: security and fixing problems.

If you sign in with Google, your Google account's email, name and profile picture are passed to our sign-in service. We never ask for access to your mail or Drive.

Please don't save sensitive things like national ID numbers, passwords or health information. Save other people's personal information only if you're allowed to.

AI organizing

When AI organizing is on, the text, title and notes of a saved article are sent to the OpenAI and Anthropic APIs to pull out key sentences and sources, and photos and PDFs you upload may be sent to the Anthropic API to read their text and content. Data sent through these APIs isn't used to train AI. Each company generally deletes it within 30 days under its own policy. You can turn it off any time in “My information → AI usage”; once it's off, no new articles or files are sent. AI results never overwrite the original text or your notes.

Connecting AI apps (MCP)

If you add the 1234asdf connection (MCP, address mcp.1234asdf.com) to an AI app such as Claude yourself, then sign in with your 1234asdf account and allow it, we send the information below from the connected account to the company that runs that AI app whenever the app asks for it. Nothing is sent unless you connect, and a connected AI app cannot edit or delete your 1234asdf knowledge.

• What we send — knowledge titles, the organized sentences with their type and status, short evidence quotes for each sentence (up to 280 characters each) and passages the knowledge keeps word for word from the original, the notes you wrote on that knowledge, short passages that match a search, the names and purposes of your spaces, original addresses, the web-version addresses that open the knowledge and spaces, the date and time it was saved, and knowledge and space IDs.
• What we don't send — sensitive spaces and the knowledge in them, knowledge in the Trash, full original text, the photo and PDF files themselves, and other people's notes.
• Who receives it — the company that runs the AI app is not one of the companies we outsource processing to, and it handles what it receives under its own privacy policy. If that company is outside Korea, the information is sent to that country (for example, Claude is run by Anthropic PBC in the United States). Sign-in for the connection is handled by our sign-in service (Clerk), and your account ID and the basic profile information the AI app asks for may be passed to that app.
• Disconnecting — you can disconnect any time in that AI app's settings. We can't take back information that has already been sent.
• Records — for each request, the connection server records the AI app's identifier, your account ID, the name of the feature used, the time and how long it took, whether it worked and any error code, and the IDs of the knowledge and spaces it returned (up to 10). It doesn't record search terms or the content sent. We use these records for security and fixing problems, and delete them under the security and operations logs rule in “How long we keep things” below.

Usage statistics

To see whether the Android app and the site work well, we collect usage statistics. They aren't about who saved or read what; they are numbers that show which screens and features are used and how well they work. The web version collects no usage statistics or app screen recordings.

• What we collect — the screens you open and the features you use, roughly how much of a page on the website you read (ranges of scroll depth and time spent), whether saving and searching worked and a rough range for the number of results, roughly how many days since you signed up and how many spaces you have, when you used it, the app version, language and device type, and how you found the app (only campaign names 1234asdf set in advance).
• What we don't collect — your name, email, the addresses, titles or text of what you save, your notes, search terms or your IP address.
• No one can tell who you are — in the app we use an unrecognizable number instead of your name or email, so the company that receives the statistics can't tell who you are from these records. On the site we use a new number every time you open a tab, so no one can tell who you are.
• App screen recordings — to check that the app works well and to find screens that are hard to use, we record how app screens are laid out and where you tap (session replay). All text, images and anything you type are hidden in the recording, and the whole screen is hidden while screens change or the keyboard or a panel moves. Screens are recorded at only a tenth of their original resolution, and device logs and network traffic are not recorded. The official site and the web version are not recorded.

The statistics and app screen recordings go through the 1234asdf server and are processed by PostHog, Inc., an analytics tool company (United States; contact: privacy@posthog.com). The data is stored in Germany (Frankfurt) and may be processed in the United States, the United Kingdom, Germany and France for operations and support. It is sent over an encrypted connection (HTTPS) while you use the app or the site, and used only for statistics to improve the service, to check that the app works well and find screens that are hard to use, and to see how people found the app. How long we keep it is under “How long we keep things” below.

If you don't want the statistics, tell us at help@1234asdf.com. After confirming it is you, we stop the statistics and app screen recordings for that account so nothing more is sent to PostHog, and delete its records so far. Stopping the statistics doesn't affect anything else: sign-in, saving and search keep working as before. Site visit statistics can't tell who anyone is, so there are no personal records to delete.

Cookies and device storage

The app and the official site use no advertising cookies. The sign-in screen (Clerk) uses a cookie to keep you signed in. For usage statistics, the site briefly stores a number in your browser that is used only in the tab you have open, and it disappears when you close the tab. The web version also stores in your browser a copy of the settings of the sign-in service (Clerk), your display language, and the IDs and processing status of articles saved in that browser (the latest 20 per account) and of Continue organizing requests. It does not store the addresses, text or notes of saved articles in the browser.

The site's Google Play links carry a tag showing which page and campaign you came from. When you tap one, the tag is passed to Google Play. It contains nothing that identifies a person or a device.

Who handles your data, and where

To run the service, we rely on the companies below. Some of this happens outside Korea (outsourced processing and storage under Article 28-8(1)3 of the Korean Personal Information Protection Act, which we disclose through this policy). Each company gets only what its job needs.

• Clerk, Inc. (United States) — sign-in and accounts. Email address, sign-in history and IP address. Contact: privacy@clerk.dev
• Neon (Databricks, Inc., a US company; database in Singapore) — storing saved articles, knowledge and notes. Contact: privacy@neon.tech
• Render Services, Inc. (a US company; servers in Singapore) — running the servers, storing original article files and serving the site and the web version. Contact: privacy@render.com
• Google Cloud (stored in Seoul, Korea) — backups for recovering from outages, and storage of the photos and PDF files you upload.
• OpenAI OpCo, LLC (United States) — only when AI organizing is on: saved articles and notes. Contact: privacy@openai.com
• Anthropic PBC (United States) — only when AI organizing is on: saved articles and notes, and photos and PDFs you upload. Contact: privacy@anthropic.com
• Google Workspace (Google Asia Pacific Pte. Ltd.) — handling support email. The sender's email address and message.
• PostHog, Inc. (a US company; data stored in Germany) — processing usage statistics and app screen recordings: usage records without your name or email, and app screen recordings with text and images hidden. Details are under “Usage statistics” above. Contact: privacy@posthog.com

If any of these companies change, we update this policy. If you don't want your data handled outside Korea, tell us at help@1234asdf.com. Keep in mind that declining what the service needs to work, like sign-in and storage, means you can't use the service. To decline only AI organizing, just turn it off in the app; if you decline only usage statistics, you can keep using the service as before.

How long we keep things

• Saved articles, files and notes — kept while you use your account, and deleted when you delete them or close your account. Deleted copies in file storage may remain for up to 7 days after deletion.
• Backups — outage-recovery backups are deleted automatically 7 days after they are made, so something you deleted can stay in a backup for up to 7 more days.
• Deletion records — so that restoring a backup can't bring deleted data back, we keep the fact that it was deleted (just an ID and a time) for 30 days.
• Security and operations logs — records of what was done and when, with no content, are deleted after 90 days to at most 3 years, depending on the type.
• Sign-in account — deleted from the sign-in service when you close your account.
• Usage statistics — app records are kept until you close your account, and deleted when you close it or ask us to stop. App screen recordings are deleted automatically 30 days after they are made, or earlier if you close your account or ask us to stop. Even if you delete a saved article, the statistic that you opened it (with no content) remains and is deleted under these rules.

Once the time is up, we delete the data so it can't be recovered. Records the law requires us to keep are stored separately, and only for that period.

Export, delete, close your account

• Export — in the app, “Settings → Export to a file” gives you your data as JSON or Markdown files.
• Delete data — in the app, move articles to the Trash one at a time; within 30 days you can restore them or delete them permanently. To delete your whole knowledge library, email help@1234asdf.com from the address you signed up with; after confirming it is you, we delete it and email you when it is done.
• Close your account — email help@1234asdf.com from the address you signed up with, with the subject “Account closure request”. After confirming it is you, we delete your account and data and send you a confirmation email.
• Stop usage statistics — tell us at help@1234asdf.com; after confirming it is you, we stop the statistics for that account and delete its records so far.

Requests to access, correct or delete your data, or to pause processing, go to the same address. We handle requests within 10 days of receipt, or tell you the reason and the schedule if it takes longer.

How we keep it safe

• Traffic between the app and the server is encrypted (HTTPS).
• Only your account can read your data, and operator access is limited by role.
• We store only digital fingerprints (hashes) of passwords and sign-in sessions, never the original values.
• Backups live in private storage, and whenever we restore one, deletion records are applied first.
• Usage statistics send only items the 1234asdf server has defined in advance, and never pass on your IP address. App screen recordings are made on your device with text, images and anything you type already hidden, and are sent through the 1234asdf server.

Who to contact

Privacy officer: 이수용. Contact: help@1234asdf.com.

If you need help with a privacy violation, you can also reach these organizations. For privacy violation reports and advice: Korea's privacy reporting center, 118. For dispute mediation: Personal Information Dispute Mediation Committee, 1833-6972. For investigative advice: prosecutors, 1301, or police, 182.

When this policy changes

We post changes and their effective date on this page at least 7 days ahead (30 days for changes that are unfavorable or important). Earlier versions are available on request.