Privacy policy

1. Scope

Bandal handles and stores information differently depending on the feature. This page distinguishes handling in the website, desktop app, iPad app, and Sync subscription.

Operator: 주식회사 크런치맬로 (Krunchmallow Co., Ltd.)

Business registration number (South Korea): 766-87-03618

2. Website and demo

• On My subscription, you can sign in to your existing Bandal account with Google or Kakao. The sign-in session and pending checkout request are held in the current tab’s session storage and removed on sign-out. Signing in does not charge you.
• Your light or dark appearance preference is saved in this browser’s local storage.
• Notes and workspace state created in the homepage demo are also stored in this browser. You can remove them by clearing its site data.
• AI replies in the demo are scripted examples. The demo does not send requests to an AI provider or sign in to a Bandal account.
• Website and installer requests provide hosting and distribution services with connection information such as an IP address and browser information needed to serve the request.

3. Desktop app and connected features

• Material in your selected course folders and local notes are stored on your computer. Optional cloud synchronization adds the Sync handling described below.
• Prompts and selected material you send to AI are processed through the provider you connect, such as Claude Code, Codex, or Gemini CLI. Bandal’s server does not proxy those requests.
• Sign-in, account features, the official community, and feedback submission use connected servers. Account features process your account ID, nickname, and avatar settings, along with an email address and profile-photo URL when supplied by your sign-in provider.
• Sending feedback transmits your message and feedback category to the server. The option to include app information is selected by default; when selected, it also sends the app version, operating system, and theme. Clearing the option excludes that app information. If you send feedback while signed in, your account ID is also recorded regardless of the app-information option.
• The in-app browser, connected mail, model downloads, and app updates communicate with their respective external services. Review those services’ privacy policies as well.

Information handled by the official community

Posts, comments, reactions, reports, and contest answers are stored in Supabase with account identifiers. Posts and comments are shown with your nickname to other signed-in app users. Reports are used for moderation. The contest website shows only published campaign information and dates; it does not expose submissions.

A copy of each submission at the deadline is retained for judging, along with award and development-review status. Do not include personal information such as phone or bank account numbers in posts. Contact hi@bandal.io for access, correction, deletion, or account-closure requests.

Deleting your account in the app removes its association with posts, comments, and judging copies; the nickname becomes “Deleted account.” The text and judging copies remain, while reactions, reports, and user-specific request records are deleted. Contact hi@bandal.io if personal information you wrote in the text needs to be removed.

4. iPad app

• PDFs, notes, handwriting, whiteboards, and recordings are stored on the iPad. External folders opened through the Files app or document picker are read and written only within the access you grant.
• iPad app 1.0 does not collect personal information. It offers no accounts, sign-in, synchronization, or official community; nothing is sent to Bandal’s servers and all data stays on the iPad. When those features become available, the Sync handling below applies.
• Recording uses the microphone you allow to capture lectures, and transcripts are generated by an on-device speech model. Audio and transcripts are not sent to a server.
• If you allow calendar access, the app reads Apple Calendar events and adds assignment events created in Bandal. This happens only on the iPad.
• AI features are optional. The OpenAI, Anthropic, or Google API key you obtain and enter yourself is stored in the iPad Keychain, and your prompts, attached images, and material you choose to let the AI read are sent from the iPad directly to the provider you select. The app asks for your consent before the first request to each provider and sends nothing without it; you can withdraw consent at any time in Settings › AI Engine. Krunchmallow and Bandal’s servers do not relay, receive, or store these requests; the provider’s privacy policy, terms, and pricing apply to what is sent.
• The in-app browser communicates directly with the websites you visit. Saved logins and downloads stay on the iPad, and Bandal does not collect your browsing history.
• The iPad app does not collect usage analytics, advertising identifiers, or crash reports.

5. Information handled by Bandal Sync

Sync handles the account identifiers needed to connect your devices, PDFs, notes and annotations selected for synchronization, file identifiers, change history, and information needed for conflict recovery. Supabase is used for account authentication and cloud storage.

The Supabase project used for account authentication and sync storage is configured in the Seoul region (ap-northeast-2). This setting does not mean that all processing or support by external providers takes place only in South Korea.

Sign-in sessions, AI API keys, and browser cookies are excluded from synchronized content. Secrets that you write into a note yourself may still be part of its contents, so review the files you choose to synchronize.

Sync material is retained to provide the account’s service and recovery and is not automatically deleted on a recurring schedule solely because a subscription expires. Previous material may remain on the server for recovery after an item is deleted in the app. Request account closure or server-data deletion at hi@bandal.io; support processes requests after verifying ownership. Also review each provider’s privacy policy for their processing and international transfers.

6. Subscription payment handling

Sync web payments are provided through Paddle. Paddle processes information needed for payment, billing, tax, and fraud prevention. Bandal receives the Paddle customer, transaction and subscription identifiers linked to your account, payment and refund status, and access period to provide access and respond to enquiries. Bandal does not store full payment-method details such as card numbers. For signed-in billing customers, the linked Paddle customer identifier is passed to Paddle Retain for payment-recovery notifications.

Supabase privacy policy · Paddle privacy policy

7. Access, deletion, and questions

You can remove browser-demo content and preferences through your browser’s site-data controls. Manage local files on your computer in their folders. Deleting a local file is separate from deleting account information held on a server.

For access, correction, or deletion requests: hi@bandal.io

Support options

8. Processors and international transfers

• Supabase: account authentication, profile, official community and sync storage (Seoul region; support operations may take place abroad)
• Apple, Google, Kakao: sign-in providers
• Paddle: web subscription payments (UK/US)
• OpenAI, Anthropic, Google: AI requests, only when you choose the provider and enter your own key

These providers process information under their own privacy policies, and some are located outside South Korea. Bandal shares information only to the extent needed to provide the service.

9. Retention and disposal

Account information and sync material are kept while the account exists and are deleted without undue delay when you delete the account in the app or request deletion by email. Under the Korean Act on Consumer Protection in Electronic Commerce, payment and refund records are kept for 5 years and consumer complaint records for 3 years before disposal. Electronic files are deleted in a way that cannot be recovered.

10. Privacy officer

Privacy officer: CEO, Krunchmallow Co., Ltd. · hi@bandal.io

You may request access to, correction or deletion of, or suspension of processing of your personal information at any time; requests are handled within 10 days after identity verification. In South Korea you may also contact the Personal Information Infringement Report Center (118) or the Personal Information Dispute Mediation Committee (1833-6972).

When this policy changes, the date and content on this page are updated.