Privacy Policy

Information you provide directly

When you use Gyojic, you may provide information such as your name, email address, account credentials, taste and preference selections, feedback, saved items, interests, interactions with recommendations and information you choose to share with Gyojic.

You may also provide contextual information to help Gyojic make more relevant suggestions, such as things you would like to do, places you are interested in, people you are planning with, or occasions you are arranging.

Information about how you use Gyojic

We may collect information about how you interact with Gyojic, including items you view, open, save, dismiss or choose; Scenes you enter; searches or requests you make; and other actions used to understand which parts of your World are useful to you.

We may also collect ordinary technical information needed to operate and secure the service, such as device type, browser type, IP address, approximate location derived from technical information, timestamps and diagnostic logs.

Information from services you choose to connect

Gyojic may allow you to optionally connect third-party services, such as YouTube or TikTok.

If you connect a service, we only access information covered by the permissions you explicitly authorise.

For example, if you choose to connect TikTok through TikTok’s Data Portability API, Gyojic may receive authorised TikTok Activity data. Our intended use is limited to relevant signals such as watch history, search history and sharing activity in order to identify broad interests and improve your personal Gyojic World.

TikTok’s Activity export may contain additional information that Gyojic does not need for personalisation. We do not intend to use unrelated information such as device/login history, purchases, advertising interests or off-TikTok activity for taste personalisation.

We do not request or use TikTok Direct Messages for this purpose.

Connected services are optional. You can use Gyojic without connecting them.

We use personal information to provide and operate Gyojic; create and maintain your account; build and refine your personal taste and preference model; personalise your World, Today’s Edit, Explore recommendations and other Gyojic experiences; remember items you save or interact with; improve the relevance and quality of the service; process data you explicitly choose to import from connected services; provide support; protect Gyojic against fraud, abuse and security threats; and comply with legal obligations.

Information imported from connected services is treated as evidence about your interests, not a definitive statement about who you are.

Gyojic is not designed to use connected-service activity to infer sensitive personal attributes such as your health, religion, political beliefs, sexual orientation or other special-category characteristics.

We do not use imported connected-service data, including TikTok portability data, to train a shared or general-purpose AI model. It is only ever used to shape your own personal Gyojic World.

Where UK data-protection law applies, we rely on different lawful bases depending on what we are doing.

We process information needed to create your account and provide the Gyojic service because it is necessary to perform our contract with you.

Where you voluntarily connect an external service such as TikTok, we ask for your permission before importing and using that source data for personalisation. You may withdraw that permission by disconnecting the service.

We may rely on our legitimate interests where necessary to operate, secure and improve Gyojic, provided those interests do not override your rights.

We may also process information where necessary to comply with a legal obligation.

Where consent is legally required for cookies or similar technologies, we will ask for it before using them.

Gyojic may analyse authorised activity to identify broad preference signals.

For example, repeated engagement with technology-history content might provide evidence of an interest in retro technology, while repeated engagement with architectural content might strengthen an architecture-related preference.

We do not assume that one interaction represents a permanent preference.

Connected-service signals may be combined with information you provide during Gyojic’s Taste Bootstrap and with later interactions inside Gyojic.

These signals may influence which content, places, ideas and experiences are ranked or selected for your personal World.

Gyojic uses automated systems to help rank and select material that may be relevant to you.

This personalisation is intended to influence recommendations and editorial composition inside Gyojic. It is not intended to make decisions that produce legal or similarly significant effects about you.

You can influence Gyojic’s understanding through your choices and interactions, and connected services can be disconnected.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Account and preference information may be retained while your Gyojic account remains active.

For connected-service imports, Gyojic is built to minimise storage of unnecessary raw source data: a downloaded activity archive is processed in the moment it is received and the raw archive itself is never stored. Only the normalised preference evidence extracted from it (described in section 4) is kept.

That normalised preference evidence may remain associated with your account until you disconnect that source, request its deletion, or delete your account, subject to information we are legally required to retain.

Security and diagnostic logs are kept for 90 days.

We use trusted service providers to operate Gyojic: Google Cloud for hosting, our database and Google Places data; and Resend for transactional email (account verification, password resets and similar account messages).

These providers process information only as necessary to provide services to us and are subject to appropriate contractual and security obligations.

We do not currently use any third-party analytics or advertising services. Any product analytics we run is first-party, kept deliberately anonymous, and does not include your name, email address or free text.

Where you choose to connect a third-party service, information is also exchanged with that service as necessary to complete authentication and authorised data transfers.

We do not sell your personal information to advertisers.

We may disclose information where required by law or where reasonably necessary to protect Gyojic, our users or others from fraud, security threats or unlawful activity.

Our hosting and database infrastructure runs on Google Cloud in the United States. Some of our other technology providers may also process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we rely on appropriate safeguards recognised under UK data-protection law, such as the UK’s International Data Transfer Addendum to the EU Standard Contractual Clauses, or a provider’s participation in an approved adequacy or data-bridge framework, as applicable to that provider.

Gyojic may use cookies or similar technologies that are strictly necessary for functions such as authentication, account security and maintaining sessions.

If we use non-essential analytics, advertising or similar technologies that require consent, we will ask for permission before using them.

You can manage applicable choices through the cookie controls made available on the website.

You can disconnect supported external services from Gyojic settings.

Disconnecting prevents Gyojic from making new authorised imports from that connection.

Where supported, you may also ask us to delete information and preference evidence derived from that connected source.

Disconnecting Gyojic does not delete information held independently by the third-party service itself.

Depending on the law that applies to you, you may have rights including access to personal information we hold about you, correction of inaccurate information, deletion, restriction of processing, objection to certain processing, portability of information and withdrawal of consent.

To make a request, contact carmen@gyojic.com.

We may need to verify your identity before completing a request.

If you are in the UK and believe your data-protection rights have been infringed, you also have the right to complain to the Information Commissioner’s Office (ICO).

We use reasonable technical and organisational measures designed to protect personal information.

Connected-service credentials and tokens are encrypted and stored server-side and are not exposed to other Gyojic users.

No internet service can guarantee absolute security, but we work to reduce foreseeable risks and review our safeguards as Gyojic develops.

Gyojic is intended for users aged 16 and above.

If we learn that we have collected personal information from someone who is not eligible to use Gyojic, we may delete that information and close the relevant account.

Gyojic frequently helps users discover content, businesses, places and services operated by third parties.

Those third parties have their own privacy practices. This Privacy Policy applies to Gyojic and does not control how an external website, app or business handles your information after you choose to interact with it.

We may update this Privacy Policy as Gyojic develops.

If a change materially affects how we use personal information, we will provide appropriate notice before the new use begins where required.

For privacy questions or requests:

• Gyojic
• Operated by Carmen Jija Ann Gyoh
• Email: carmen@gyojic.com
• Website: https://passport.gyojic.com