Privacy Policy

Article 1 (Personal Information We Process)

We do not require you to create an account. We only collect the minimum amount of information that is generated during your use of the service, as necessary to operate and improve the app.

1. Information Automatically Collected During Use

For core functionality, stable operation, and performance improvement, the following information may be automatically generated and collected when you use the service:

Masked IP address; in-app purchase and subscription information (purchased items, purchase amount, purchase date and time, receipt ID); app lifecycle events (launch, close, crash logs); mobile device information (type, model, OS version, app version, device identifiers, language and country, etc.); and service usage records (access logs, visit timestamps, etc.).

2. Information Not Collected & On-Device Processing

To protect your privacy, the following information is not collected by us and is processed only on your device:

• No server-side collection of location data: We do not store any location information on our servers. The app provides features such as showing your current coordinates and address, and optionally adding location information to photos, but your location data is processed only on your device and is not transmitted to our servers.
• Camera/Photo library access: When you take or save photos through the service, we may access your camera or photo library solely to provide the requested functionality. We do not copy your photos or upload them to our servers.

3. Collection Without Consent Where Required by Law

Where applicable law requires us to collect or retain certain information, we may do so without your separate consent. If we need to collect additional personal information under relevant laws, we will take necessary steps such as providing notice and, where required, obtaining additional consent.

Article 2 (Purposes of Processing Personal Information)

We process personal information only for the purposes described below. We will not use your personal information for any other purposes unless we obtain your consent or such use is permitted by law.

Our services are intended for users aged 14 and above. If we become aware that we have collected personal information from a child under 14 years old, we will delete that information without undue delay.

1. Providing the Service and Ensuring Stable Operation

• Providing paid content and services; processing in-app purchases and subscriptions; handling billing, payment, and refunds.
• Diagnosing errors and ensuring service stability using app lifecycle events (including crash logs) and device information.

2. Service Quality Improvement and Analytics

• Analyzing visits and usage patterns using masked IP addresses, service usage logs, and similar information; improving service quality and developing new features through aggregated statistics.

We do not use or share your personal information for purposes other than those expressly stated above, unless permitted or required by law.

Article 3 (Processing and Retention Period)

We retain and process personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable laws.

Specific processing and retention periods are as follows:

• Purpose: Service usage analysis and performance improvement
• Items: masked IP address, app lifecycle events, device information, service usage logs, payment information, etc.
• Retention period: 14 months

Retention Required by Law

We retain certain information for the periods required by applicable laws and will not use such information for purposes other than legal compliance.

Article 4 (Provision of Personal Information to Third Parties)

We only provide personal information to third parties within the scope of the purposes described in this Privacy Policy and when permitted by applicable laws or with your consent.

• We may provide personal information to relevant authorities without your consent where required by law, such as for investigations or in emergencies involving disasters, infectious diseases, imminent risks to life or physical safety, or serious property damage.

Article 5 (Outsourcing of Personal Information Processing)

To provide our services effectively, we outsource certain tasks to third-party service providers as follows:

Article 6 (International Transfers of Personal Information)

To provide our services and improve user experience, your personal information may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction (for example, the United States).

If you do not agree to the international transfer of your personal information, you may not be able to use paid or certain core features of the service.

Article 7 (Your Rights and How to Exercise Them)

1. You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time, subject to applicable laws.

2. You can exercise these rights by contacting us via email or other written methods. We will respond without undue delay in accordance with applicable laws.

3. You may exercise your rights through a legal representative or an authorized agent. Where required by law, we may ask for documentation proving such authorization.

4. In certain circumstances, your right to access or request suspension of processing may be restricted by law.

5. Where another law expressly requires the retention of certain information, we may not be able to delete such information upon your request.

6. When you make a request to exercise your rights, we may take reasonable steps to verify your identity or authority before responding.

Article 8 (Destruction of Personal Information)

We destroy personal information without undue delay when it is no longer necessary for the purposes for which it was collected, when the retention period has expired, or when we are no longer required by law to retain it.

If we must continue to retain personal information under other applicable laws, we will store such information separately from other data (for example, in a separate database or table).

The procedures and methods for destruction are as follows:

1. Destruction Procedure

• We select personal information for destruction, and it is destroyed after approval by the person responsible for personal information protection.

2. Destruction Methods

• Electronic files are permanently deleted using technical methods that prevent recovery.
• Paper documents are shredded or incinerated so that they cannot be reconstructed.

Article 9 (Security Measures for Personal Information)

We take the following measures to ensure the security of personal information:

1. Administrative Measures

• Establishing and implementing internal management plans

2. Technical Measures

• Managing access rights to systems that process personal information, implementing access controls, encryption of certain data, and installation of security programs

3. Physical Measures

Controlling physical access to facilities where personal information is stored, as appropriate.

Article 10 (Automatic Collection Technologies and Opt-Out)

We use automatic collection technologies provided by third parties, such as Google Analytics (analytics service) and RevenueCat (payment management service), to provide and operate the service.

The handling of information collected by these services is governed by their respective privacy policies. You may disable or restrict their data collection features using the methods they provide.

Names, policies, and technical details of these services may change over time according to the service providers' own operations.

1. Google Analytics

Overview: A web and app analytics service provided by Google that tracks and reports traffic and usage.

Service policy: https://support.google.com/analytics/answer/6004245?hl=en

Opt-out: https://support.google.com/analytics/answer/9019185?hl=en

2. RevenueCat

Overview: A service that manages in-app purchases and subscription status for apps distributed through Google Play.

Service policy: https://www.revenuecat.com/privacy/

Important: This technology processes information that is essential to perform the contract for paid services (such as verifying your subscription status). If you refuse this data processing, you will not be able to use paid features and may need to uninstall the app.

Article 11 (Contact for Personal Information Inquiries)

We designate the following person as the contact responsible for personal information management and for handling complaints and inquiries related to personal information.

Personal Information Contact

• Name: Handicraft
• Role: Representative
• Email: sugongeop907@naver.com

If you have any questions, complaints, or requests regarding this Privacy Policy or our handling of personal information, you may contact us using the email address above. We will respond without undue delay.

If you reside in Korea, you may also seek assistance from the following organizations:

• Privacy Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors' Office Cyber Investigation (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (ecrm.cyber.go.kr / 182)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)

Article 12 (Additional Information for Users in the EU/EEA and UK)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the following additional information applies to how we process your personal data under the General Data Protection Regulation (GDPR) and similar laws:

1. Legal Bases for Processing

We process your personal data on one or more of the following legal bases:

• Performance of a contract: To provide the app and its features (including paid services and subscriptions) and to take steps at your request prior to entering into a contract.
• Legitimate interests: To improve our services, maintain security and stability, prevent fraud, and understand how users interact with the app, in a way that does not override your fundamental rights and freedoms.
• Legal obligations: To comply with accounting, tax, and other legal requirements.
• Consent: Where required by law (for example, certain analytics or marketing practices), we will ask for your consent and rely on it as the legal basis. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

2. Additional Rights Under GDPR

In addition to the rights described above, users in the EU/EEA and UK generally have the following rights, subject to conditions and exceptions under applicable law:

• Right of access to your personal data
• Right to rectification (correction) of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability (to receive your data in a structured, commonly used, and machine-readable format where technically feasible)
• Right to object to processing based on our legitimate interests, including profiling based on those interests
• Where processing is based on consent, the right to withdraw consent at any time

To exercise these rights, please contact us at sugongeop907@naver.com. We may ask you to provide information to confirm your identity before responding to your request.

3. Complaints to Supervisory Authorities

You also have the right to lodge a complaint with the data protection authority in the country where you live, where you work, or where you consider that your rights have been infringed.

Article 13 (Changes to This Privacy Policy)

Date of notice: 29 October 2025

Effective date: 5 November 2025

We may update this Privacy Policy from time to time. If we make material changes (for example, changes to the types of personal information we collect or how we use it), we will provide advance notice in the app or on our website, and where required, we may seek your renewed consent.