Privacy Policy

Effective date: October 18, 2026

This policy covers the Yakumi extension for Chrome, the translation server it talks to, and the website at yakumi.app.

1. Who we are

Yakumi is operated by QuestLoom, a sole proprietorship in the Republic of Korea represented by Woojeon Jang. Full business details are at the bottom of this page. In this policy "we" means that operator.

2. What we collect and why

What	Why	How long we keep it
The image you choose to translate (cut into pieces by the extension), and the translation	To translate that page and show the result on top of it.	Not stored on our servers. The pieces go through our server to our translation provider and the result goes back to your browser. The provider (Google) logs requests for a limited time to detect misuse — see section 5.
A fingerprint of that image — a one-way code (SHA-256) that can't be turned back into the image	To know when you translate the same page again, so your first 2 fresh re-translations are free.	7 days after you last translated that page.
A random install ID, made by the extension when you install it	To count your 20 free pages before you sign in — used for nothing else. It isn't linked to your name or email unless you sign in, but we still treat it as personal data.	12 months after its last use.
A one-way code made from your network address and browser type	Only to stop reinstalling from resetting the 20 free pages — used for nothing else. We never store your network address itself. Because we hold the key that makes this code, we treat it as personal data (pseudonymised).	6 months after its last use.
Your email address, if you sign in. With Google, also your Google account ID (we ask Google only for your email address — not your name, photo or contacts)	To keep your free monthly pages and anything you buy with your account, on every device.	Until you ask us to delete your account.
A sign-in link record, if you sign in by email: your email address, a one-way code of the link, and the times it was sent and used	To check that the link you open is the one we sent. A link works once, for 15 minutes.	24 hours.
Page counts — how many pages you used per month and per hour, and your plan or Page pass balance	To show your remaining pages, apply the hourly limit, and use your pages in the right order.	Monthly and plan counts while your account exists; hourly counts for 2 days.
Purchase records from our payment provider: what you bought, when, and its subscription or transaction ID	To give you the pages you paid for, and for tax and refunds.	As long as tax law requires (7 years in Korea). We never see or store your card details.

3. What stays in your browser

These are kept by the extension on your own computer. We can't see them, and removing the extension deletes them.

Your translations, for 7 days — so re-opening a page is free.
Your chosen language and the sites where you turned Yakumi off.
Your install ID and, if you signed in, a sign-in token that expires after 30 days.

4. What we don't collect

The pages you visit. The extension doesn't send us the address of the page you're reading or your browsing history. When an image's own website refuses to send the image without it, the extension tells that website which site you're on — the same thing your browser already does when it shows you the image.
No advertising, no analytics trackers, no selling or sharing your data for marketing.
Fonts and the extension's code come from Yakumi itself, not from a third party.

Yakumi will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

5. Services that process data for us

Provider (contact)	What they do	Data involved	Where
Cloudflare, Inc. (privacyquestions@cloudflare.com)	Runs our translation server, database and website, and sends sign-in emails	Everything in section 2 except card details, plus standard request data needed to deliver the service	United States and Cloudflare's global network
Google LLC — Gemini API (Google privacy contact form)	Reads and translates the image pieces	The image pieces	United States
Google LLC — Google Sign-In (same contact)	Confirms your Google account when you choose "Continue with Google"	Your email address and Google account ID	United States
Paddle.com Market Limited, or Paddle.com Inc. for buyers in the United States (privacy@paddle.com)	Sells plans and Page passes as merchant of record, and handles payment, tax and refunds	Your email address, payment details and billing country (collected by Paddle directly)	United Kingdom (Paddle.com Market Limited) · United States (Paddle.com Inc.)

Google's terms for the paid Gemini API say Google does not use these images or the translations to improve its products, and logs requests only for a limited time to detect misuse.

6. Transfers outside Korea

The providers in section 5 are based outside Korea, so your data is transferred to them when you use Yakumi:

What and when: the image pieces each time you press Translate (or Auto mode translates a page); your email address when you sign in; payment details when you buy.
How: over an encrypted connection (HTTPS), at that moment.
Why and how long: for the purpose and periods in sections 2 and 5.
How to refuse, and what happens: don't translate, sign in or buy, or remove the extension. Without the transfer to Google, Yakumi can't translate; without signing in, you keep only the 20 free pages; without Paddle, you can't buy a plan.

7. Your choices and rights

You can ask to see, correct or delete your data, or to stop us from using it, at any time. You can delete your account yourself from the Yakumi menu (Delete account).
You can use the first 20 pages without signing in, and sign out at any time from the extension menu.
You can turn Yakumi off for any site from the extension menu.

Send requests to privacy@yakumi.app. We reply within 10 days.

8. Deleting data

When a retention period ends or you ask us to delete your data, we delete it from our database so it cannot be restored. Purchase records that tax law requires us to keep are kept separately until that period ends, and used only for that purpose.

9. Keeping data safe

All traffic between the extension, the website and our server uses HTTPS.
Only the operator can access the server and database, using accounts protected by two-step sign-in.
Translation API keys are kept on the server and never sent to your browser.
Sign-in links and network codes are stored only as one-way codes.

10. Children

Yakumi is for people aged 18 and over. It is not intended for anyone under 18, and we don't knowingly collect their data. If you believe a child has signed in, contact us and we'll delete the account.

11. Privacy contact

Privacy team: privacy@yakumi.app

12. Changes

If we change this policy we will update the date above. If a change affects how we use your account data, we will tell you by email before it takes effect.