Privacy Policy

At a glance

• We collect your name and email from your chosen social login provider (Google, Kakao, Naver, Apple).
• We store this information in our database to create and manage your account.
• Images you upload are stored in a private storage bucket and are not publicly accessible.
• We use RevenueCat to manage in-app purchases and subscriptions; we do not receive your full payment card details.
• Your data is hosted in the Republic of Korea.
• We do not sell your personal data.
• We only use data for the purposes disclosed in this Policy and required to operate the Services.

What we collect

• Account identifiers: name and email address obtained from your social login provider (Google, Kakao, Naver, Apple). We may also receive the provider user ID.
• User content: images you choose to upload. These are stored in a private bucket and used only to provide features you request.
• Purchase information: product identifiers, subscription status, transaction receipts, and related metadata necessary to validate purchases and manage access. Processing is facilitated by RevenueCat. We do not collect or store full payment card numbers.
• Technical data: basic logs needed to secure and operate the Service (e.g., timestamps, device/browser type). We do not collect precise location or contact lists.

How we use your data

• Create and manage your account and authenticate your sign-in.
• Provide core functionality, including storing and processing your uploaded images.
• Process purchases and manage subscription access via RevenueCat.
• Maintain security, prevent fraud, and ensure acceptable use.
• Comply with legal obligations and enforce our Terms.
• Communicate about important service updates and changes to this Policy.

Payments and subscriptions (RevenueCat)

We use RevenueCat to handle in-app purchases and subscriptions. RevenueCat processes purchase receipts and subscription status to grant or revoke access to paid features. RevenueCat may receive device identifiers and purchase-related data from the app stores (e.g., Apple App Store, Google Play). We do not receive your full payment card details from the app stores or RevenueCat.

Data storage and security

Personal data (name, email) is stored in our database with access controls. Uploaded images are stored in a private object storage bucket with restricted access. We apply reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure.

Hosting location

Our primary hosting location for personal data and user-uploaded images is the Republic of Korea. Backups or specific service providers may operate in other regions where necessary to provide the Services.

Data retention

We retain your personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and data at any time (see Your Rights & Controls).

Sharing and disclosure

• Service providers: We may share data with vendors who help us operate the Services (e.g., hosting, storage, authentication). They are bound by obligations to use the data only on our behalf and consistent with this Policy.
• Legal compliance and protection: We may disclose information if required by law or to protect the rights, property, or safety of users, the public, or our company.
• No sale of personal data: We do not sell your personal information.

International transfers

Your data is primarily stored in the Republic of Korea. If we transfer your information across borders, we will do so in accordance with applicable data protection laws and implement appropriate safeguards where required.

Your rights & controls

• Access, correction, and deletion of your personal data.
• Portability of your data where applicable.
• Withdrawal of consent where processing is based on consent.
• You can request account deletion by contacting us (see Contact Us). We will delete or de-identify your data unless we are legally required to retain certain records.

Children

Our Services are not directed to children under the age of 13 (or as defined by local law). We do not knowingly collect personal information from children.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version and revise the "Last updated" date. Significant changes will be communicated through the Services or by other appropriate means.

Contact us

If you have questions, want to exercise your rights, or wish to request account deletion, contact us at: jhchoe@anabolife.com.