Privacy policy

Last updated: August 22, 2026

1. Data we collect

Account: email, social IDs, display name. Usage: pattern/paper content, covers, timestamps. Payments: billing identifiers processed by Korea PortOne and partner PGs (we do not store full card numbers). Contact: name, email, message.

2. Purpose

Auth, syncing works, plan/trial/subscription management, payments, support, abuse prevention, and legal compliance.

3. Retention

Kept while your account is active or as required by law (including payment records).

4. Disclosure to third parties

We do not provide personal data to third parties, except where Korean privacy law requires or permits it. Using Korea PortOne for payment integration is processing on our behalf (entrustment), not a third-party sale or disclosure.

5. Entrusted processors

To provide payment and related services, we entrust personal-data processing as follows (Personal Information Protection Act Art. 26). Processor: Korea PortOne (코리아포트원) Work entrusted: Payment integration services Processor: Supabase, Inc. Work entrusted: Authentication, database, and file storage Processors may use data only for the entrusted purpose. We supervise them so data is handled securely.

6. International transfer

Data may be processed outside Korea via cloud providers with appropriate safeguards.

7. Your rights

You may request access, correction, deletion, or restriction via Contact, subject to legal retention duties.

8. Destruction

When no longer needed, data is deleted or anonymized using reasonable means.

9. Children

The Service is not directed to children under 14. We delete such data if discovered.

10. Contact

For privacy questions, use Contact in the Service. Policy updates will be posted in the Service.