peakpic Privacy Policy
This is the previous policy, in effect from October 15 to October 29, 2026. See the current policy
The peakpic team (the "Team") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and processes users' personal information as set out below. 1. Items of personal information collected, and how a. Account creation and operation (collected automatically) - Device identifier (derived from ANDROID_ID), service use records (connection date and time) b. When a social account is linked (Kakao, Google) - Kakao: Kakao account identifier, nickname - Google: Google account identifier, name c. App usage statistics for improving the service (collected automatically) - Screen transitions and feature-use events (for example, whether a mirroring connection succeeded, number of shots taken), app version, device model, OS version - Photos, video and the camera view are not included in any form - Collecting these items is optional. You can turn it off at any time under My page > Usage data; once off, collection and transmission stop. Refusing places no restriction whatsoever on your use of the service - Website visit analytics: visits to the peakpic.app website (the landing page) are measured with the same tool (PostHog): page views, referrer, browser and device type. No photos or typed content are included d. How it is collected: a guest account is created automatically when the app first runs; information is provided by the relevant social service where the user has agreed to link it; app usage statistics are generated automatically in the course of using the app Important: the following is never collected or stored on our servers. - Photos you take (stored only on your device) - Live video during mirroring (sent directly between devices as a rule; where the network requires a relay server, that server only forwards and does not store) - Camera video used for pose recognition (all AI analysis runs on the device) Exception: Fill together - Fill together lets several people fill one cell each through a link, so the cell photos (JPEG) you upload to that session, the finished animated GIF and the custom frame's element images are stored on the Team's server (AWS Seoul region). - They are kept for at most 7 days from the session's creation and deleted automatically after that. The user who created the session can delete it in the app before then. - These photos are visible only to participants who know the session link and are not used for any other purpose. Exception: Send frame - When you send a custom frame as a link, its image (a PNG with transparent photo windows, plus the element images placed in it) is parked in peakpic.app storage (Cloudflare) where only someone with the link can fetch it. It is deleted automatically after 60 days. e. App error diagnostics (collected automatically) - Error records (stack traces) when the app crashes, app version, device model, OS version. Photos, video and the camera view are not included. 2. Purposes of processing - Creating and identifying accounts, and providing the service (managing the connection session between devices) - Preventing abuse of the service - Improving features and quality through statistical analysis of service use - Sending service-related notifications (where you have agreed to receive them) 3. Retention and use period - Account information: destroyed without delay when the account is deleted - Photos, GIF and frame elements of a Fill together session: at most 7 days from the session's creation, or when the user deletes the session - Frame images behind Send frame links: 60 days from the link's creation - Where retention is required by applicable law, kept for the period that law prescribes (for example, three months for connection records under the Protection of Communications Secrets Act) 4. Provision to third parties The Team does not provide users' personal information to third parties, except where there is a lawful request on a statutory basis. 5. Entrustment of processing and transfer abroad - Amazon Web Services (Seoul region, Republic of Korea): server infrastructure — stored domestically - Google LLC (Firebase Crashlytics): app error diagnostics — may be transferred abroad, including to the United States. Items transferred: the error records, app version and device information in 1.e above, and an app instance identifier. Retention: 90 days. Under the Personal Information Protection Act you may refuse the transfer abroad. - Kakao Corp.: social login (only where you choose to link it) - Google LLC: social login (only where you choose to link it) — may be transferred abroad, including to the United States - Cloudflare, Inc. (United States and edge locations worldwide): running the peakpic.app website and holding frame images behind Send frame links (60 days) — transferred abroad. Items transferred: the frame images you send - PostHog, Inc. (United States): analysis of app usage statistics and of visits to the peakpic.app website — transferred abroad. Items transferred: the app usage events and device information in 1.c above and website visit records (photos, video and the camera view not included). Retention: per the processor's policy, destroyed once the purpose is achieved. Nothing is sent to this processor if you have turned collection off under My page > Usage data. 6. Your rights and how to exercise them You may exercise the following rights at any time. - Request access to, correction of, deletion of, or suspension of processing of your personal information: use Contact us on the My page screen, or delete your account - Delete your account: My page > Delete account (your account information on the server is destroyed; photos stored on your device remain yours to manage) - Refuse collection of app usage statistics: My page > Usage data (once off, collection and transmission stop, and your use of the service is not restricted) - Withdraw app permissions (camera, microphone, notifications): device Settings > Apps > peakpic > Permissions - Delete a Fill together session: the user who created it, from the app's Fill together screen 7. Destruction of personal information Personal information whose retention period has passed, or whose purpose of processing has been achieved, is destroyed without delay by a method that makes recovery impossible. 8. Measures to secure personal information - Encryption in transit (TLS); authentication tokens stored encrypted on the device (Android Keystore) - A design that keeps photos and video off our servers (Fill together session photos are the exception, and are deleted automatically when they expire), minimising the risk of leakage 9. Personal information protection officer - Name: 류승래, 이상협, 진동현 - Contact: asmjjya@gmail.com Reports of and consultations about infringement of personal information may be directed to the Korea Internet & Security Agency's Privacy Infringement Report Centre (privacy.kisa.or.kr, 118 with no area code). 10. Changes to this policy Where the contents of this policy change, notice will be given in the app from seven days before the change takes effect. Effective date: October 15, 2026