HOGY Privacy Policy

1. Who we are

HOGY (hogy.cloud) is a home management service operated by ZERONE INC. (주식회사 제로원), a company registered in the Republic of Korea. This policy applies to all users, including users in the United States.

• Company: ZERONE INC.
• Address: 22, Aegibong-ro 44beon-gil, Haseong-myeon, Gimpo-si, Gyeonggi-do, Republic of Korea
• Contact: info@hogy.cloud

We do not sell your personal information, and we do not use it for targeted advertising.

2. Information we collect

We collect only what the service needs.

• Photos are analyzed and not stored by default. Only receipt photos you choose to save go to your own Google Drive.
• Vault: Documents you upload in "Vault" are saved only in the "HOGY 보관함" folder of your own Google Drive. Files go straight from your device (browser) to your Google Drive; they do not pass through or get stored on our servers, and they are never sent to AI. File names and folder names are not kept on our servers (database, storage, or logs); the list is read from your Google Drive each time you open it. We request only the narrowest permission Google offers (drive.file, which lets us handle only the folders and files we created) and cannot see the rest of your Drive. The only thing our servers keep is a "Google Drive connected / not connected" flag.
• We do not collect payment card numbers, bank account details, or Social Security numbers.
• Income and closing notes are stored only on your device (browser). We do not send them to or store them on our servers, and we do not collect them. Calculations such as money left and savings rate happen only on your device. Only when you tap "Ask AI" on the Closing screen, the summary numbers needed for that question (totals, money left, savings rate, monthly trend, and similar — excluding income names, store names, and notes) are sent temporarily to the AI service, and we do not store them (you are asked to confirm the first time). Only the household admin can see the Closing screen. They can be lost if you change devices or clear browser data, and you are responsible for keeping any income backup file you download. The spending numbers in Closing are calculated from receipt records already in your expense log.

3. How we use it

We use your information only to run and improve HOGY.

1. Create your account and let household members share it (up to 5 member accounts per household by default; contact us if you need more. Profiles for children or people without an account do not count toward this limit)
2. Read receipts and keep your spending records
3. Track your pantry: quantities, expiration dates, items running low
4. Suggest meals and recipes based on what is in your home and your household
5. Show seasonal dishes for the region you chose
6. Fix errors, keep the service secure, prevent misuse
7. Improve the service using statistics that do not identify you
8. Answer your questions and send service notices
9. Look up information about a product you ask about (finding use and care information in public sources and giving it to you)

Product library. Product facts read from the photos you add (brand, product name, manufacturer or seller, country of origin, ingredients, directions, warnings, and storage printed on the package) are not personal information. We store them in a "product library," not linked to any household or user, to help other users who add the same product. We do not store the photo itself or your household information (purchase date, price, date opened, expiry date, amount left, or location) in the library. Company and model names that cannot be found in the HOGY product library may be stored in a form that does not identify you. We may look up information about a product you ask about in public sources and keep it in the library.

Credit rewards. When you add a product that is new to the library, we give you the credits we set and keep a record of granting and using them. We use these records only to grant, use, expire, or revoke credits and to prevent misuse.

4. Health information

We collect and use health information only if you give separate consent, and you can use HOGY fully without it. Details are in our separate Consumer Health Data Privacy Policy, linked on our homepage.

• What: for each household member, food allergies (including allergy notes), conditions (including condition notes), medications, pregnancy or breastfeeding, dietary style (such as vegetarian) and diet notes, lifestyle habits, and health notes, and supplement names and daily check-offs and exercise minutes (age 14 and over only; visible only to the member themself and the household admin).
• Why: to suggest suitable meals and filter out allergens
• Before you consent: even if health information was entered earlier, we do not use it for suggestions, AI, or calculations, and our server leaves it out.
• We do not collect medical records such as visit records, test results, or blood pressure readings. We also do not collect height or weight.
• You can consent or withdraw consent in Settings → Health information. You can also turn it on from the locked screen in the household profile.
• If you withdraw consent, the health information you entered and the health cards, health box results, and meal suggestions from today onward that were made with it, your supplement and exercise records, and items you added to Space under "Medicine & health", are deleted right away.
• When we send data to AI for analysis, we remove member nicknames, also remove names written in free-text notes, and send only the needed condition.
• HOGY meal suggestions are for reference only and are not medical advice.

5. Who we share it with, and international transfer

We do not sell or rent your personal information. Our servers are in the United States. We share information only with the service providers below, who process it for us under contract, and we ask for your consent to this transfer when you sign up.

Sign-in. If you sign in with Google or Apple, that company (Google LLC or Apple Inc.) verifies your identity under its own privacy policy, and we receive only your name, email address, and profile photo. If you sign in with email and password, we receive your email address. Your password is stored only by Google Firebase, encrypted and hashed, and we cannot see it. The verification and password-reset emails are sent through Google Firebase. To delete your account and data, see How to delete your data at hogy.cloud/data-deletion.

• How and when: each time you use the Service, over an encrypted connection.
• Saying no: you can decline this transfer, but because our servers are in the United States, you will not be able to use the Service.
• Usage statistics: you can stop sending to Google Analytics at any time by turning off "Send usage statistics" in Settings > Data. The Service keeps working when it is off.
• Receipt photos and Vault documents you save to a Google Drive you connected yourself are stored under your own account. Vault files go straight from your device to Google Drive and do not pass through our servers. You can remove HOGY's Drive access any time under "Third-party apps" in your Google Account settings; doing so does not delete the files in your Drive.
• Members of the same household can see that household's receipts, pantry, meals, and each member's meal and nutrition records. This happens because you created or joined the household; it is not a sale or disclosure to a third party.
• Product facts in the product library are not personal information, so adding them is not a disclosure to a third party.
• When we look up product information, we do not give manufacturers, sellers or others any information that identifies you (your name, contact details, place or time of purchase, or the receipt itself).
• We may disclose information when required by law.
• Our company is in Korea and our servers are in the United States, so your information is processed in both countries.

6. AI disclosure

HOGY uses generative AI to read receipts and photos, guess dishes and ingredients from table photos, and create meal suggestions. Our AI providers are Anthropic, PBC and OpenAI, L.L.C. (both in the United States). Depending on the feature, cost, and speed, one of them handles a request (for receipts, the other may read it again if a check fails). Both receive only the data listed in Section 5. Documents in "Vault" are never sent to either.

• We label AI results on the screen where they appear, and the Home screen has one notice at the bottom. In the app you will see messages such as "Made by AI," "Read by AI. Please fix anything that's off," "Amounts estimated by AI. You can change them," and "Suggestions and recipe cards on Home are made by AI. Use them as a guide."
• When you tap "Ask AI" on a statistics screen, the summary numbers shown on that screen (amounts and item names) and the question you type are sent to the AI service. Original receipts, photos, and addresses are not sent. On the Closing screen we send only summary numbers without income names, store names, or notes, we ask you to confirm the first time, and we do not store the question, summary, or answer on our servers.
• AI can be wrong. Values you correct always take priority.
• Counting, dates, and allergy filtering are done by fixed rules in our code, not by AI.
• We do not train AI models on your information.

7. Children

HOGY accounts are not for anyone under 14. We ask you to confirm you are 14 or older when you sign up, and we do not knowingly collect information directly from children under 13.

• Information about a child is processed as information entered directly by the user who is the child's parent or guardian.
• A child's profile does not include a name. It holds only:
  • a nickname (for example, "Son" or "Daughter")
  • an age (stored as a birth year)
  • an exact birth year and birthday (month and day) — optional, entered only if the parent or guardian chooses to. Leaving it blank has no effect on using the Service, and it can be changed or deleted at any time. It is used only to place a birth at the right time in the family timeline view.
  • allergies (health information, so only after the separate consent in Section 4)
• Under Section 5.5 of our Terms of Service, the user who adds a household member's information is responsible for making sure that person (or their parent or guardian) knows and agrees.
• Parents can view, change, or delete a child's profile at any time.
• A child's information can be seen only by members of the same household.
• If you believe a child under 13 gave us information directly, contact info@hogy.cloud and we will delete it.

8. Retention, security, location, and cookies

Retention. We delete information when it is no longer needed.

Closing your account (Profile → "Invite family" → "Delete account," at the bottom)

• If you are the only person left in the household: all of the household's records (receipts, stock, meals, profiles, settings, and more) are deleted right away.
• If other members remain: the household's records stay. Your account, the invitation emails you sent, and your consent records are deleted. The health information in your profile is deleted and your profile is unlinked from your account (your nickname and age stay as part of the household's records). If you were the owner, ownership passes to the member who joined earliest.
• Receipt photos and Vault documents you saved to Google Drive are in your own Drive, so the app cannot delete them. They stay in your Drive.
• You confirm your identity once before deletion, using the sign-in method you used to sign up (Google or Apple, or your password if you signed up with email). Deleted information cannot be restored.

Security. Only members of a household can access its data. All connections are encrypted (HTTPS), and stored data is encrypted by our cloud provider. Admin access is limited.

Location. We do not collect device location (GPS). Seasonal suggestions use only the region you choose.

Cookies and Do Not Track. We use cookies and browser storage only to keep you signed in and remember screen settings. We do not use advertising or cross-site tracking cookies. Because we do not track you across sites, our service works the same whether or not your browser sends a Do Not Track signal.

9. Your rights

You can do the following at any time:

1. See your information in the app, or ask us for a copy
2. Correct it in the app
3. Delete items, or delete everything with "Delete account" at the bottom of your profile (see Section 8)
4. Withdraw consent for health information in Settings → Health information (see Section 4)
5. Ask how an AI suggestion was made

Send requests to info@hogy.cloud. We reply within 10 days and will not treat you differently for using your rights.

California residents. We do not sell or share your personal information for cross-context behavioral advertising. You may ask what categories of information we collect (Section 2), why (Section 3), and who receives it (Section 5), and you may ask us to delete it.

10. Contact, changes, and effective date

• Privacy officer: Mihyun Kim, Privacy Team Lead
• Email: info@hogy.cloud
• Phone: 1588-9451
• Mail: ZERONE INC., 22, Aegibong-ro 44beon-gil, Haseong-myeon, Gimpo-si, Gyeonggi-do, Republic of Korea

If we change this policy, we will post a notice in the app at least 7 days before it takes effect, or 30 days before for important changes that affect your rights. If we add a new AI provider, a new service provider, or a new international transfer, we will update this policy and show you the sign-up consent screen again to ask for your consent.

Effective date: November 6, 2026