Effective: April 18, 2026
Note: This English version is provided for informational purposes only. The Korean version is the legally binding document under the laws of the Republic of Korea.
| Type | Items | Purpose | Retention |
|---|---|---|---|
| Account | Email, profile name (via Google or Kakao) | Identification, service delivery | Deleted on account closure |
| Payment | Transaction ID, amount, payment method | Credit purchase processing, refunds | 5 years after transaction (Korean E-commerce Act) |
| Uploaded content | Treatment photos and image files | AI anonymization processing and result delivery | Stored after generation; deleted on account closure |
| Usage records | Generation history, credit usage | Service usage management | Deleted on closure (transaction records: 5 years) |
| Auto-collected | IP address, browser/device info, access logs | Abuse prevention, service stability | 3 months (Korean Communications Privacy Act) |
We do not collect sensitive personal data unless explicitly provided by the user.
When a member uses the anonymization feature, the uploaded face image and the selected settings (gender, nationality, age range etc.) are sent to an external service for AI processing.
We do not use uploaded images for AI model training.
We entrust the following service providers to operate the service.
| Processor | Task | Location |
|---|---|---|
| Supabase Inc. | Authentication and database hosting | USA |
| Cloudinary Ltd. | Image/video media hosting and CDN delivery | USA / Israel |
| Google LLC (Gemini API) | AI image anonymization processing | USA |
| Google Cloud (Cloud Run) | Backend server hosting | South Korea (asia-northeast3) |
| Vercel Inc. | Frontend web hosting | USA |
| Kakao Corp. | Social login authentication | South Korea |
To deliver the service, personal data may be transferred to the countries listed above. Transfers are protected with HTTPS (TLS) encryption, and we verify processors' security certifications (SOC 2, ISO 27001 etc.).
We do not disclose member personal data externally as a rule. The following are exceptions:
Members can exercise the following rights at any time:
Requests can be submitted in-app or to upbroshi@gmail.com and are processed within 10 days of receipt.
When a member requests account closure, the following applies:
| Data | Action |
|---|---|
| Account info (email, profile) | Immediately deleted |
| Uploaded images and results | Immediately deleted |
| Credit balance and generation history | Immediately deleted |
| Payment / transaction records | Anonymized and retained for 5 years (Korean E-commerce Act) |
Deleted accounts cannot be recovered.
We use cookies for essential purposes such as maintaining login sessions. You can refuse cookie storage in your browser settings, but features such as login may be limited as a result.
This service is not directed to children under 14. If we become aware that personal data of a child under 14 has been collected, we delete it without delay.
When this policy changes, material updates are announced 30 days in advance and minor updates 7 days in advance via in-app notice or email. The "Effective" date at the top always reflects the latest version.
Send privacy-related inquiries, access/correction/deletion requests, and complaints to:
Email: upbroshi@gmail.com
Tel: +82-10-2028-3499
Address: 82-66, Neungdong-ro 32-gil, Gwangjin-gu, Seoul, Republic of Korea
For privacy-violation reports or counseling, you may also contact the Korea Internet & Security Agency Privacy Reporting Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).