Service: naro

Last updated: August 18, 2026

Effective date: August 18, 2026

Version: 2.2

100 SPACE operates naro and processes personal data as described below.

Controller: 100 SPACE, represented by Mun-Young Kang

Business registration number: 238-76-00575

Contact: [email protected]

1. Data we process and why

• Journal and conversation data: entries, questions, messages, AI replies,

  timestamps, categories, emotions and keywords for journaling, search and

  conversation continuity. Data is stored on the device and may sync through

  the user's Apple CloudKit account.

• Search and memory data: summaries, searchable context, embeddings,

  topics, dates and memories for relevant-record retrieval and personalised

  conversations. Local vector files may contain context text and metadata.

• Managed-AI request data: the current conversation and limited relevant

  prior conversations, journal excerpts, summaries, memories and reflection

  metadata needed for chat, comments, analysis, embeddings and memory

  extraction. Through the authenticated NARO API, free text-AI requests are

  sent to Cloudflare Workers AI, while Plus text-AI and embedding requests are

  sent to OpenAI.

• Authentication, security and subscription data: Firebase identifiers and

  tokens, an Apple-linked identifier, hashed UID quota keys, StoreKit

  transactions, product ID, app account token and subscription status for

  authentication, abuse prevention, recovery, entitlement and cost limits.

• Optional analytics: app version, locale, feature and session events,

  usage buckets and counts. Firebase Analytics is off by default and is enabled

  only after the user opts in. Raw journal text, AI replies, API keys and

  authentication tokens are not deliberately added to analytics events.

• Configuration data: technical app/device information required by Firebase

  Remote Config to deliver app configuration and maintain reliability.

2. Legal bases and user choices

We process local journaling, sync, requested features and subscription

validation to perform our contract with the user. Managed AI and optional

analytics are based on the user's explicit in-app consent. Authentication,