peakpic Privacy Policy
Notice of change: from October 30, 2026 this policy adds paid subscriptions (Peakpic Pro), the free usage limit and the iOS app's Meta ad measurement (sections 1.f and 1.g, 2, 3, 4, 5 and 6). Until then the policy effective October 15, 2026 applies.
The peakpic team (the "Team") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and processes users' personal information as set out below. 1. Items of personal information collected, and how a. Account creation and operation (collected automatically) - Device identifier (derived from ANDROID_ID), service use records (connection date and time) b. When a social account is linked (Kakao, Google) - Kakao: Kakao account identifier, nickname - Google: Google account identifier, name c. App usage statistics for improving the service (collected automatically) - Screen transitions and feature-use events (for example, whether a mirroring connection succeeded, number of shots taken), app version, device model, OS version - Photos, video and the camera view are not included in any form - Collecting these items is optional. You can turn it off at any time under My page > Usage data; once off, collection and transmission stop. Refusing places no restriction whatsoever on your use of the service - Website visit analytics: visits to the peakpic.app website (the landing page) are measured with the same tool (PostHog): page views, referrer, browser and device type. No photos or typed content are included d. How it is collected: a guest account is created automatically when the app first runs; information is provided by the relevant social service where the user has agreed to link it; app usage statistics are generated automatically in the course of using the app Important: the following is never collected or stored on our servers. - Photos you take (stored only on your device) - Live video during mirroring (sent directly between devices as a rule; where the network requires a relay server, that server only forwards and does not store) - Camera video used for pose recognition (all AI analysis runs on the device) Exception: Fill together - Fill together lets several people fill one cell each through a link, so the cell photos (JPEG) you upload to that session, the finished animated GIF and the custom frame's element images are stored on the Team's server (AWS Seoul region). - They are kept for at most 7 days from the session's creation and deleted automatically after that. The user who created the session can delete it in the app before then. - These photos are visible only to participants who know the session link and are not used for any other purpose. Exception: Send frame - When you send a custom frame as a link, its image (a PNG with transparent photo windows, plus the element images placed in it) is parked in peakpic.app storage (Cloudflare) where only someone with the link can fetch it. It is deleted automatically after 60 days. e. App error diagnostics (collected automatically) - Error records (stack traces) when the app crashes, app version, device model, OS version. Photos, video and the camera view are not included. f. Paid subscriptions (Peakpic Pro) and the free usage limit - Subscription transaction information: the store's purchase identifier (the Google Play purchase token or the App Store original transaction ID) and the latest order or transaction number, the product and plan, the subscription's start and expiry times and status, and whether it renews automatically. Payment methods and card details are handled by Google or Apple; the Team never receives them. - To apply the free usage limit: the number of photo strips saved each day and the identifiers of the saved strips (no photos are included) - How it is collected: when you subscribe, the purchase the store passes to the app is checked with Google or Apple and recorded; later renewals, cancellations and refunds are checked again when the store notifies the Team's server. The strip count is recorded when a strip is first saved. g. Ad measurement (iOS app; behavioural information; collected automatically; you may refuse) - To count whether the app was installed after seeing an Instagram or Facebook ad, Meta's SDK collects the following and sends it to Meta. - Items: app install and launch records, Peakpic Pro subscription purchase records (product, amount, currency), device information such as the device model, OS version and app version, and the advertising identifier (IDFA — only if you allow it under iOS's "Allow apps to request to track") - Photos, video, poses and the contents of shooting or mirroring sessions are not included. - How it is collected: sent automatically by the Meta SDK when the app is opened and when a purchase is made 2. Purposes of processing - Creating and identifying accounts, and providing the service (managing the connection session between devices) - Preventing abuse of the service - Confirming paid subscriptions and providing their benefits (including on your other devices signed in to the same account), and applying the free usage limit - Ad measurement: counting installs and subscriptions that came from ads, and optimising ads (iOS app; nothing is sent if you refuse) - Improving features and quality through statistical analysis of service use - Sending service-related notifications (where you have agreed to receive them) 3. Retention and use period - Account information: destroyed without delay when the account is deleted - Photos, GIF and frame elements of a Fill together session: at most 7 days from the session's creation, or when the user deletes the session - Frame images behind Send frame links: 60 days from the link's creation - Subscription transaction information: kept while needed to confirm the subscription; when the account is deleted, it is anonymised and no longer linked to you - Daily photo strip counts: destroyed 30 days after they are recorded - Ad measurement information: not stored on the Team's servers; Meta keeps it for the period its data policy sets - Where retention is required by applicable law, kept for the period that law prescribes (for example, three months for connection records under the Protection of Communications Secrets Act) 4. Provision to third parties The Team does not provide users' personal information to third parties, except in the following cases. - Where there is a lawful request on a statutory basis - Ad measurement (iOS app): unless you refuse, the items in 1.g above are provided to Meta Platforms, Inc. (United States). Purpose: counting installs and subscriptions that came from ads, and optimising ads. Country: United States. When and how: sent over the network when the app is opened and when a purchase is made. Retention: per Meta's data policy. You can refuse by turning off Settings > Terms and policies > Ad measurement in the app (nothing is sent from the next launch), and refusing does not restrict any feature. 5. Entrustment of processing and transfer abroad - Amazon Web Services (Seoul region, Republic of Korea): server infrastructure — stored domestically - Google LLC (Firebase Crashlytics): app error diagnostics — may be transferred abroad, including to the United States. Items transferred: the error records, app version and device information in 1.e above, and an app instance identifier. Retention: 90 days. Under the Personal Information Protection Act you may refuse the transfer abroad. - Kakao Corp.: social login (only where you choose to link it) - Google LLC: social login (only where you choose to link it) — may be transferred abroad, including to the United States - Google LLC (Google Play): only for users who subscribe through Google Play, the purchase token is looked up with the Google Play Developer API to confirm the subscription — transferred abroad, including to the United States. Item transferred: the purchase token - Apple Inc. (App Store): only for users who subscribe through the App Store, the transaction ID is looked up with the App Store Server API to confirm the subscription — transferred abroad, including to the United States. Item transferred: the transaction ID - Cloudflare, Inc. (United States and edge locations worldwide): running the peakpic.app website and holding frame images behind Send frame links (60 days) — transferred abroad. Items transferred: the frame images you send - PostHog, Inc. (United States): analysis of app usage statistics and of visits to the peakpic.app website — transferred abroad. Items transferred: the app usage events and device information in 1.c above and website visit records (photos, video and the camera view not included). Retention: per the processor's policy, destroyed once the purpose is achieved. Nothing is sent to this processor if you have turned collection off under My page > Usage data. 6. Your rights and how to exercise them You may exercise the following rights at any time. - Request access to, correction of, deletion of, or suspension of processing of your personal information: use Contact us on the My page screen, or delete your account - Delete your account: My page > Delete account (your account information on the server is destroyed; photos stored on your device remain yours to manage) - Refuse collection of app usage statistics: My page > Usage data (once off, collection and transmission stop, and your use of the service is not restricted) - Withdraw app permissions (camera, microphone, notifications): device Settings > Apps > peakpic > Permissions - Delete a Fill together session: the user who created it, from the app's Fill together screen - Refuse ad measurement (iOS app): Settings > Terms and policies > Ad measurement. To refuse only the advertising identifier, choose not to allow tracking when the app first asks, or turn it off under the device's Settings > Privacy & Security > Tracking 7. Destruction of personal information Personal information whose retention period has passed, or whose purpose of processing has been achieved, is destroyed without delay by a method that makes recovery impossible. 8. Measures to secure personal information - Encryption in transit (TLS); authentication tokens stored encrypted on the device (Android Keystore) - A design that keeps photos and video off our servers (Fill together session photos are the exception, and are deleted automatically when they expire), minimising the risk of leakage 9. Personal information protection officer - Name: 류승래, 이상협, 진동현 - Contact: asmjjya@gmail.com Reports of and consultations about infringement of personal information may be directed to the Korea Internet & Security Agency's Privacy Infringement Report Centre (privacy.kisa.or.kr, 118 with no area code). 10. Changes to this policy Where the contents of this policy change, notice will be given in the app from seven days before the change takes effect. Announced: October 23, 2026 Effective date: October 30, 2026 (adds subscription transaction information, the daily photo strip count for the free usage limit, and the iOS app's Meta ad measurement) Previous effective date: October 15, 2026 (see the previous policy)