Terms of Service

Article 1. Purpose and scope

These Terms set out the conditions for using the website, personal journal app, and account and sync services (the “Service”) provided by the operator of the official Miroven service (the “Operator”), and the rights and obligations of the Operator and users.

They apply to the official Service provided directly by the Operator. Services installed and operated separately by third parties are subject to those operators’ terms. Rights to use, copy, modify, and distribute the publicly available software are governed by its applicable software licenses.

Article 2. Definitions

• A “user” is anyone using the Service, including someone using the app on a device without an account.
• “Records” are data created or added by a user, including journal entries, photos, and profiles.
• A “vault” is storage on a device for records and information needed for encryption.
• “Sync” is the exchange of encrypted records through a server between devices connected to an account.
• A “recovery code” is secret information used to recover a vault or open it on another device. It is different from an email verification code and an app lock PIN.

Article 3. Availability and changes to these Terms

The Operator posts these Terms on the website and in the app so users can easily review and save them, and explains important provisions clearly before a contract is formed. A service contract is formed when a user agrees to these Terms and the Operator accepts the application to use the Service. Merely browsing the website does not create an account service contract.

Changes, their reasons, and their effective date will be announced at least 7 days in advance. Important changes or changes unfavorable to users will be announced at least 30 days in advance and communicated individually through registered email or in-app notifications. Longer notice periods or separate procedures required by law will be followed.

If the Operator announces or notifies changes to these Terms stating that a user’s failure to express objection or continued use of the Service by the effective date will be deemed agreement, and the user continues to use the Service without expressing objection, the user is deemed to have agreed to the revised Terms. Users who do not agree to the revised Terms may stop using the Service and delete their accounts.

Article 4. Service features and eligibility

The website provides product information, public content, and help. The app supports creating, editing, and searching records, attaching photos, encrypted on-device storage, locking, and encrypted file backup and recovery. Sign-in and encrypted sync are optional in environments that support accounts and server connections.

On-device journaling is available without an account. Sync requires a supported email address, identity verification, a network connection, and compatible app and server versions. Supported environments, eligible email addresses, and storage and file size limits are described in the app or service information.

Plan, subscription, and usage limit information displayed in the account screen comes from the server. A plan label alone does not initiate payment. The Operator may convert parts or all of the free services or features into paid services based on operational policies. If paid services are offered, the Operator will separately disclose prices, billing intervals, automatic renewal, included features, and withdrawal, cancellation, and refund terms before payment, and obtain necessary consent.

Account and sync services are available only to users aged 18 or older. Account registrations from users under 18 are not accepted. No separate date-of-birth collection or age verification process is operated. If the Operator learns that an account user is under 18, processing will stop and the account and related personal information will be deleted under the Privacy Policy. Contracts requiring a legal representative’s consent are subject to applicable legal rules on consent and cancellation.

Article 5. Accounts and authentication information

Users must verify and manage their accounts with email addresses they are authorized to use. They must not misuse anyone else’s account or authentication information. The Operator may request identity verification to the extent needed to deliver verification codes or recover an account.

Users must protect access to their email account, verification codes, recovery code, PIN, and unlocked devices. If misuse is suspected, take available protective steps such as ending sessions and notify the Operator. Do not send recovery codes, PINs, encryption keys, or plaintext personal records when requesting support.

Signing out and deleting an account are different. Signing out ends an authentication session; it does not delete records stored on the device.

Article 6. Encryption and recovery of records

The app encrypts records and photos on the device before storing them locally or sending them to the sync server. During normal app and API operation, plaintext records and photos, PINs, recovery codes, and vault keys capable of decryption are not sent to the server. The server may process information needed to operate the Service, such as email addresses, access and modification times, data identifiers, and encrypted data sizes.

Account sign-in and vault unlocking are separate. Email verification alone cannot decrypt a vault. A recovery code is required to open an existing vault on another device. The Operator does not know users’ recovery codes and cannot retrieve them or arbitrarily decrypt encrypted records.

Keep encrypted backups and recovery codes safely and separately in case of device loss, cleared browser storage, or a lost recovery code. Sync does not replace an independent backup; deletions and changes may propagate to other devices. PIN locking and encryption do not prevent every risk, including access to an unlocked device, malware, or a modified app.

This explanation helps users understand storage and recovery. The Operator bears no liability for damages resulting from device loss, cleared storage, lost recovery codes, sync errors, or unauthorized third-party access. See Security and Help for details.

Article 7. User rights and responsibilities

Copyright and other rights in records belong to users or the lawful rights holders. Users must use materials they are authorized to include. The Operator processes records only to the extent necessary to store, transmit, back up, and delete ciphertext to provide the Service, and these Terms grant no ownership of records or rights to use them for advertising, sale, or AI training. However, technical tracking and diagnostic tools may be used solely on the official website (miroven.mksdr.bid) for error diagnosis, stability, and service improvement.

Users must not:

• Access another person’s account without authorization or bypass authentication or access controls.
• Disrupt the Service or other users through malware, excessive requests, or similar actions.
• Use the Service to violate the law or infringe others’ privacy, copyright, or other rights.
• Collect, use, or disclose others’ records or secrets without permission.

Activities permitted by applicable law and publicly available software licenses remain permitted. Use will not be restricted for reporting security vulnerabilities under the Operator’s reporting procedures or exercising legitimate rights.

Article 8. Operator obligations and privacy

The Operator takes reasonable security measures for reliable service and protection of user information. Upon learning of an outage or security issue, the Operator investigates and takes steps needed for recovery and damage mitigation. Legitimate inquiries and complaints are reviewed; reasons and progress are communicated if handling is delayed.

The Privacy Policy explains the information processed, purposes, retention and deletion periods, external providers, and how to exercise rights. Agreement to these Terms does not authorize personal information processing that requires separate consent.

Article 9. Sync and service changes or interruptions

Sync may be delayed or limited by network conditions, device storage, server limits, or version differences. Editing the same record on multiple devices may require conflict resolution. Users can check storage and sync status in the app and follow the instructions to choose which content to preserve when conflicts occur.

The Operator may change or temporarily suspend parts of the Service for maintenance, security response, outage recovery, or improvements. Predictable interruptions will be announced in advance with reasons, scope, and expected duration. In emergencies, notice will follow without delay.

Changes with significant effects, such as removing important features or reducing limits, will generally be announced 30 days in advance, with opportunities for necessary backup or export. If urgent security or legal reasons prevent advance notice, reasons and follow-up measures will be explained afterward. Existing records will not be arbitrarily deleted solely because of exceeded limits or temporary sync failures.

Article 10. Restrictions and objections

The Operator may limit requests, end sessions, or restrict accounts to the extent necessary for violations of law or these Terms, account misuse, or specific service security risks. Measures will take the severity and repetition into account, with advance notice and an opportunity to correct the issue where possible.

Action may precede notice if urgent protection is needed or notice is legally restricted. To the extent permitted, the Operator will promptly explain the reason, scope, duration, and objection procedure. Users may object through the contact address. The Operator will review objections, communicate the outcome, and lift restrictions once the reasons are resolved.

A restriction does not itself waive users’ rights in their records or constitute consent to deletion. However, the Operator undertakes no obligation to provide opportunities for backup or export upon restriction of use.

Article 11. Ending use and deleting data

Users may stop using the Service at any time and request account deletion in the app. Deletion requires fresh email verification for the account and a deletion confirmation procedure. Back up any needed records as an encrypted file before requesting deletion.

When the server accepts a deletion request, all login sessions for the account end and server data deletion begins. Completion may take time; progress can be checked with the app’s deletion status feature. The Privacy Policy details information subject to legal retention duties and how server backups are handled and retained.

Account deletion also removes the vault linked to that account and API on the current device. Vaults linked to other accounts and unlinked local vaults are excluded. Local records on other devices and exported backups must be deleted separately. Resetting a local vault alone does not delete a server account or server data.

If the Operator ends the entire Service, the reasons, schedule, effects, and backup and export methods will generally be announced at least 30 days in advance, with individual notice to account users. If advance notice is unavoidably impossible, reasons and available measures will be communicated without delay. Paid use will be settled or refunded under applicable contract terms and law.

Article 12. Intellectual property

Rights in the software, website content, trademarks, and designs belong to the Operator or their respective rights holders. Rights in user records are governed by Article 7. Software and third-party components are subject to their disclosed licenses; these Terms do not restrict rights under those licenses. Website editorial content and brand materials are subject to separately stated usage conditions and applicable law.

Article 13. Disclaimer and limitation of liability

The Operator bears no liability whatsoever for any damages incurred by users in connection with the use of the Service. The Operator disclaims all liability for damages, including those arising from intentional misconduct or gross negligence of the Operator or persons assisting performance, service outages, natural disasters, storage deletion, data loss, lost authentication information, or unauthorized access and hacking by third parties.

The Service is provided on an “AS-IS” and “AS-AVAILABLE” basis. The Operator does not warrant that the Service will be error-free, uninterrupted, complete, or fit for a particular purpose. Users assume all risks and liabilities arising from their use of the Service.

Article 14. Governing law and disputes

These Terms are interpreted under the laws of the Republic of Korea, without excluding protections under mandatory provisions applicable to users. The parties will discuss disputes in good faith. If litigation is necessary, a claim may be brought before the competent court determined by applicable law, including the Civil Procedure Act.

Article 15. Operator information and contact

Miroven is operated personally by Choi Seung-woo (최승우) without business registration. Choi Seung-woo is both the Operator and the person responsible for personal information protection. Send questions about these Terms, objections to restrictions, account deletion requests, and privacy rights requests to miroven@mksdr.bid. Include the type of inquiry and relevant account email. Do not send PINs, recovery codes, encryption keys, or plaintext records. The Operator will reply with the outcome after the minimum necessary identity verification.

Supplementary provision

These Terms take effect on October 25, 2026. Subsequent changes will display an effective date and a summary of changes, and previous versions and their periods of application will remain available.