Privacy Policy
Last Updated: 2026-07-17
Article 1 (Data We Collect)
Data Provided by Users
| Data | Purpose | Retention Period |
|---|---|---|
| Authentication information (Apple / Google account ID) | Login | Until account deletion |
| Nickname (display name) | Shown to chat partners and when sending or receiving cards | Until account deletion |
| Plaza display name | Shown as the author in the Plaza (visible to other users) | Until account deletion |
| Profile image / group icon | Display in profiles and chats | Until account deletion |
| Chat messages (text) | Service provision | Until the room is deleted |
| Chat images | Service provision | Up to 30 days (auto-deleted) |
| Cards (message content, recipients, etc.) | Sending and receiving cards | Retained in the recipient’s history (may remain even after account deletion) |
| AI illustration generation settings (input content) | Generation of AI illustrations | Until account deletion (deleted upon withdrawal) |
| Generated AI illustrations | Card creation and the community illustrations gallery | Held by the operations team. Illustrations published to the community illustrations gallery remain available to other users even after withdrawal |
| Custom stamp images | Use in chats | Until account deletion |
| Plaza posts and comments (text / images) | Provision of the Plaza feature (visible to other users) | Until deleted (may remain even after account deletion) |
| Inquiry content | Customer support | 90 days after account deletion (see below) |
| Report content (reason / supplementary text) | Investigation of misuse | 1 year after resolution |
Data Collected Automatically
| Data | Purpose | Retention Period |
|---|---|---|
| Device language | Push notification language | Until account deletion |
| Device identifier for push notifications | Sending push notifications | Until account deletion |
| App version / OS version | Bug investigation | Linked to inquiries |
| Usage data (including user ID and IP address) | Service improvement | Subject to the retention policies of third-party services in Article 5 |
| Error information (including user ID) | Bug detection and fixing | Subject to the retention policies of third-party services in Article 5 |
| Billing information (purchase and subscription status) | Provision of billing and subscriptions | Until account deletion |
| Image safety analysis results | Detection of inappropriate content | Deleted together with the image |
Article 2 (Purpose of Data Use)
We use the collected data only for the following purposes:
- Provision and maintenance of the Service (chat functionality, sending and receiving cards, the Plaza, AI illustration generation, push notifications)
- Provision of billing and subscriptions
- Responding to inquiries
- Investigation and prevention of misuse (handling reports, determining violations of the Terms of Service)
- Service improvement and analysis
- Compliance with applicable laws
Article 3 (Processing by AI)
- Uploaded images are subject to automated safety assessment using machine learning. The assessment is performed on servers managed by us, and only the assessment results are stored
- Text sent in the Plaza, in comments, or in chats may be subject to automated assessment of inappropriate expressions by AI (OpenAI moderation)
- The AI illustration generation feature sends the entered prompt (text) to OpenAI in order to generate an image. Generated images pass through a filter designed to prevent inappropriate content
- When a report is filed, AI may be used for an initial assessment of whether the content violates the Terms of Service
- AI assessments are supplementary; final decisions on actions are made by the operations team
Article 4 (Data Access in Case of Reports)
For the purpose of investigating misuse, the operations team may access the content of a reported chat or Plaza post (text and images). Access is limited to the purpose of handling reports and will not be conducted for any other purpose.
Article 5 (External Transmission / Third-Party Services)
To the extent necessary for providing the Service, information is transmitted from the user’s device or our servers to the following third-party services:
| Service | Provider | Data Transmitted | Purpose |
|---|---|---|---|
| Firebase Authentication | Authentication information | User authentication | |
| Cloud Firestore | User data, chat, card, and Plaza data | Data storage | |
| Firebase Cloud Messaging | Device tokens | Push notifications | |
| Cloudflare R2 | Cloudflare, Inc. | Image files | Image storage and delivery |
| OpenAI | OpenAI, L.L.C. | AI illustration generation input prompts, moderation-target text | AI illustration generation, text safety assessment |
| Mixpanel | Mixpanel, Inc. | Usage data (including user ID and IP address) | Service improvement |
| Sentry | Functional Software, Inc. | Error information (including user ID) | Bug detection |
| RevenueCat | RevenueCat, Inc. | Billing information (including user ID) | Subscription processing |
| Stripe | Stripe, Inc. | Billing information | Web-based payment processing |
Please refer to the official websites of each provider for their respective privacy policies.
Article 6 (Data Retention and Deletion)
Automatic Deletion
- Chat images are automatically deleted up to 30 days after being sent (text messages are retained for as long as the room exists)
- Cards expire once they pass the expiration date set for each card
- Rooms are deleted once all participants have left and the room is empty
Account Deletion
- When a user deletes their account, the account immediately becomes unavailable, and user data such as authentication information, profile, AI illustration generation settings, and custom stamps is deleted within 30 days
- However, the following may be retained even after account deletion, due to their impact on other users or for reasons of service operation:
- Cards sent to other users (they remain in the recipient’s history)
- Content posted to the Plaza
- Generated AI illustrations (held by the operations team; illustrations published to the community illustrations gallery remain available to other users even after withdrawal)
- Inquiry content is disassociated from the user (anonymized) upon account deletion and automatically deleted after 90 days
Suspension (BAN)
- Accounts that violate the Terms of Service may be suspended
- Data of suspended accounts is retained for up to 1 year before deletion
Analytics Logs
- We retain operation logs for the purposes of service improvement and investigation of misuse
- Operation logs are retained for up to 1 year even after a room or account is deleted
- Retained data includes user IDs, but is used only for the purposes stated above
Article 7 (User Rights)
Users may exercise the following rights. Please contact us through the inquiry feature.
- Right of Access: The right to request disclosure of your data
- Right to Erasure: The right to request deletion of your data (account deletion removes most of your data. As described in Article 6, some data—such as cards sent to other users, Plaza posts, and generated AI illustrations—may be retained)
- Right to Rectification: The right to request correction of your data
Article 8 (Additional Provisions for EU Users — GDPR)
The following additionally applies to users located in the EU/EEA:
- Legal Basis for Processing: Performance of a contract for service provision, and legitimate interests for the prevention of misuse
- Data Portability: The right to request your data in a structured, machine-readable format
- Right to Object: The right to object to processing based on legitimate interests
- Right to Lodge a Complaint: The right to lodge a complaint with a data protection supervisory authority
Article 9 (Children’s Privacy)
This Service is intended for users aged 13 and over. We do not knowingly collect data from anyone under the age of 13. If we become aware that data from a person under 13 has been collected, we will promptly delete it.
Article 10 (Changes to This Privacy Policy)
- If we make changes to this policy, we will notify users within the app
- In the case of significant changes, we may request renewed consent
Article 11 (Contact Us)
For inquiries regarding the handling of personal information, please contact us at the following email address.
Email: [email protected]