Both user data and prompts were forwarded from the AI app to a company in Beijing, according to South Korea's data protection authority.