Privacy Policy

Piclog (the "Service") respects your privacy and complies with applicable privacy laws. This Privacy Policy explains what information we collect, why we collect it, how long we retain it, and your rights regarding your data.

1. Information We Collect

Source	Data Collected	Method
Google Sign-In	Email, name, profile photo URL	Auto-collected via Google OAuth consent
Diary Writing	Entry title, text content, date, attached photos	Entered and uploaded by user
App Settings	App lock, week start day, notification settings	Stored locally on device (not sent to server)
Device Permissions	Camera, photo library, Face ID / Touch ID	Accessed only with user permission

Biometric data (Face ID / Touch ID) is processed exclusively within Apple's Secure Enclave and is never transmitted to or stored on our servers.

2. Purpose of Collection

User identification and account management
Storing, syncing, and retrieving diary entries and photos
Providing security features such as app lock
Local push notifications (processed on-device, not sent to external servers)
Service improvement and error response

3. Retention Period

211726

Data	Retention	Notes
Account info (email, name, profile photo)	Deleted immediately upon account deletion
Diary entries and photos	Deleted immediately upon account deletion	Processed immediately upon deletion request
App settings (local)	Deleted when app is uninstalled or reset	Stored locally on device

Data required to be retained by applicable law will be kept for the legally mandated period before deletion.

4. Disclosure to Third Parties

The Service does not share personal information with third parties as a general rule. Exceptions apply in the following cases:

When the user has given prior consent
When required by law or a lawful request from an authority

5. Data Processing Partners

The Service uses the following partners to operate smoothly:

Partner	Purpose	Retention
Supabase, Inc.	Database storage and management, photo file storage	Until contract ends or account is deleted
Google LLC	Social login (OAuth) authentication	Until authentication is complete

Each partner's privacy policy can be found on their respective websites.

6. Your Rights

You may exercise the following rights at any time:

Access: Review how your personal data is processed
Correction: Request correction of inaccurate data
Deletion: Delete your account and all data via the in-app "Delete Account" feature
Restriction: Request restriction of data processing

To exercise these rights, use the in-app settings menu or contact the Data Protection Officer below.

7. Data Protection Officer

Field	Details
Name	Inseoung Song
Email	inseongsong0512@gmail.com

For privacy-related inquiries, complaints, or assistance, please contact the officer above.

You may also contact your local data protection authority for privacy-related complaints.

8. Changes to This Policy

This policy may be revised in response to changes in law or service policy. Any changes will be announced in advance via the app or this page, and will take effect from the date of the announcement.