Policies
Opt-out and privacy requests
- Service
- Human.ai (휴먼ai)
- Effective date
- 16 November 2026
Human.ai reads only content that a person hands over about their own account. There is no function that analyses someone from a username alone, so there is nothing you need to register in advance to stay out of it.
This page explains how that works, how to tell 크레이빙(CRAVING) (the “operator”) if you believe someone else submitted your content, and how to exercise your rights over your personal information. On this page, the “Instagram report” is Instagram feed reading.
Draft pending legal review
This document is a draft that a lawyer has not yet reviewed, and it is not final. Bracketed text with a dashed outline marks information the operator still has to supply, and each “Review note” is guidance for the reviewer.
At a glance
- Nobody's account is looked up by username, and posts are not collected automatically.
- Submitted material and finished reports are not stored on the operator's server.
- You can export and delete the data stored on your own device yourself, in Settings.
- If you believe someone else submitted your content, write to contact@craving.win.
1.What Human.ai reads
- The Instagram report covers only the account of the person using it.
- It uses only material that person hands over: screenshots or photos they pick, their own “Export your information” file downloaded from Instagram and read on their device, or, where offered and on the web only, an Instagram Login connection to their own professional account.
- There is no function for entering a username to look someone else up. An Instagram Login connection, too, can read only the account of the person who signed in and approved it.
- The operator does not collect Instagram posts automatically (scrape) and does not buy scraped data.
- Submitting another person's account or posts is prohibited by the Terms of Service.
2.What happens to submitted material
- The person submitting material must pass the adult check and, each time a reading starts, confirm that the material is from their own account. Submitted material (downscaled images and captions) is sent, after that person has consented, through the operator's server to the AI service provider (Anthropic, PBC, United States).
- The operator's server processes it in memory only and does not store it. The finished report is returned to the device of the person who submitted the material, and the operator keeps no copy.
- The report is designed not to infer anything about other people who appear in photos. It is also designed not to infer sensitive matters such as health or mental-health conditions, sexual orientation, race or ethnicity, religion or political views.
Because of this design, the operator holds no list of analysed accounts, no posts and no reports. No record that would show afterwards what material was submitted remains on the operator's server either. What remains is the ordinary access log, such as the time of access and the IP address, and processing records that hold no request content (the processing step, the outcome, the time taken and counts).
The AI service provider, acting as the operator's processor, may however hold what it received for the following period: Deleted within 30 days of receipt or generation. Inputs and outputs flagged as a Usage Policy violation may be kept for up to 2 years, and safety classification scores for up to 7 years.
3.If you believe someone else submitted your content
If you believe your posts, or information about you, were submitted to Human.ai without your consent, please tell the operator.
Where to write
- Privacy officer
송현섭 (대표자) (contact@craving.win, 010-9027-0729)
What helps to include
- Which posts you believe were submitted, and roughly when
- What led you to believe it (for example, a report someone showed you)
- An address where you can be answered
Please do not send sensitive material such as a copy of your ID or an account password when you first write. If your identity needs to be checked, the operator will reply with the least intrusive way to do it.
What the operator does
- Within 3 days of receiving your message, the operator tells you, as far as it is able to establish, where the information came from and why it was processed, and that you have the right to ask for processing to be suspended or to withdraw consent.
- If the operator holds the information, it deletes it or suspends processing at your request without delay and tells you the result.
- If a user is found to have submitted another person's content, the operator may restrict their use of the service under the Terms of Service.
What the operator cannot do
Because the operator does not keep submitted material or reports, it cannot delete or recall a report that is already stored on someone else's device. If a report has been posted online and is causing you harm, please also use the reporting procedure of the service where it was posted.
Review note
The research brief recommended a block list that takes a username, verifies control of the account and refuses later submissions for it, plus a 24-hour takedown commitment. The service has no such function today, so this page does not promise one. Whether the present level of response is enough needs review. Whether the operator can ask the AI service provider to delete a specific item it received must also be checked against the contract.
4.How to exercise rights over your own information
You may ask for access to your personal information, for its correction or deletion, or for processing to be suspended, and you may withdraw consent. How you do it depends on where the information is.
Information on your device: you can do it yourself
Answers and reports stored on your device
- Access
Open your reports in the library. “Export my data” in Settings gives you your stored reports and the answers of tests in progress as a single file.
- Deletion
“Delete everything on this device” in Settings removes every report and test in progress, your adult confirmation and consent, and your settings in one step. Uninstalling the app or clearing this site's data in your browser has the same effect. What is handled a little differently at that point (such as the post categories kept temporarily on your device when an Instagram report is made) is set out under “What is stored only on your device” in the Privacy Policy.
- Correction
The operator does not hold the answers and reports on your device, so it cannot correct them. You can take a test again to produce a new report.
- Suspension and withdrawing consent
Withdraw your consent to AI interpretation in Settings. It takes effect at once and nothing is sent after that. AI interpretation you already received stays in your reports on the device and is removed when you delete the report.
Information the operator processes: you can ask
What the operator processes is access logs, processing records of AI requests that hold no request content, the rate-limit counter, and the content of enquiries you send. There are no reports or answers on the server.
Send your request by email to contact@craving.win. Because there are no accounts, a request about access logs may need information that lets the record be found (for example the time of access and the IP address used).
| Request | What the operator does | Time limit |
|---|---|---|
| Notice of where information came from | Tells you the source, the purpose of processing, and that you have the right to ask for suspension or to withdraw consent | Within 3 days |
| Access | Checks whether it holds information and lets you see it | Within 10 days |
| Correction or deletion | Takes the necessary steps and tells you the result | Without delay |
| Suspension of processing | Suspends processing and tells you the result | Suspended without delay; result within 10 days |
You may also make a request through an agent, who must provide a document showing their authority.
Retention and use of content passed to the AI service provider: Deleted within 30 days of receipt or generation. Inputs and outputs flagged as a Usage Policy violation may be kept for up to 2 years, and safety classification scores for up to 7 years.
5.Find out more
The full account of how personal information is processed is in the Privacy Policy.
Nothing in this page changed on 16 November 2026; only its effective date moved with the other documents. Previous version: the version in force from 1 November 2026
If you disagree with how the operator handled a request, or need a remedy for an infringement of your rights, you can apply for advice or dispute mediation to the bodies listed under “Where to seek a remedy” in the Privacy Policy.
Other policies