Privacy Policy

Zipkku Privacy Policy

Zipkku (the "Service") values your personal data and complies with applicable data protection laws, including the Personal Information Protection Act of Korea. This policy explains what personal data the Service collects, for what purposes, and how it is protected.

1. Personal Data We Collect
- Account: Google account identifier, email address, profile image (collected automatically when you sign in with Google)
- Profile: nickname (entered by you after sign-up)
- Service usage: designs you create (floor plans, 3D layouts), story photos and text, comments, likes, follows, settings (language, units, notifications)
- Device: push notification token (FCM)
- Access logs: IP address, access time, device/browser information (generated automatically for security and error response)
- Payments (for Pro): Google Play purchase token, product, and subscription status. Payment methods such as cards are handled by Google Play and are not stored by the Service.
We do not collect location data, contacts, text/call records, or health/biometric data.

2. Purposes of Collection and Use
- Member identification, sign-in, and account management
- Providing the Service: saving/loading designs, sharing and social features (feed, comments, follows), stories
- Sending push notifications (you can turn them off in settings)
- Responding to customer inquiries and resolving disputes
- Preventing abuse and maintaining service stability and error response (access logs)
- Confirming subscription (Zipkku Pro) payments and providing benefits

3. Retention Period
- Member data is destroyed (anonymized) without delay upon withdrawal. Identifying data such as email, nickname, and profile is removed immediately.
- Access logs (IP, access time, etc.) are kept for 30 days from creation and then deleted automatically.
- Transaction/payment records that must be retained under applicable laws (e.g., e-commerce laws) are stored separately for the statutory period and then destroyed.

4. Third-Party Provision and Processing Delegation
The Service does not sell your personal data or provide it to third parties for advertising. The following processing is delegated to provide the Service:
- Google (Google OAuth, Firebase Cloud Messaging, Google Play Billing): sign-in authentication, push notification delivery, subscription payment processing
- Amazon Web Services (S3, CloudFront): storage and delivery of images, thumbnails, and 3D model files

5. Data Storage Location and Cross-Border Transfer
The Service stores its data on Amazon Web Services servers located in the Seoul region, Republic of Korea. If you use the Service from outside Korea (e.g., Japan or the United States), your personal data is transferred to and stored in the Republic of Korea to provide the Service. Some processing, such as content delivery (CDN), may also occur near your location through the global infrastructure of the processors listed in Section 4 (Google, Amazon Web Services).

6. Content You Make Public
Designs and stories you make public via the sharing feature are visible to other users and may be viewed and saved (copied). You control visibility and can make content private at any time.

7. Your Rights and Account/Data Deletion
- You may request access to, correction of, deletion of, or suspension of processing of your personal data.
- Account deletion: you can withdraw immediately from My Page > Withdraw in the app, and your personal data will be anonymized.
- If you cannot use the app, you can request deletion via My Page > Contact us.
- Content you made public may be preserved and shown as from a "deleted user" after withdrawal, with identifying data removed.

8. Data Security
- All communication is encrypted with HTTPS.
- Authentication tokens stored on your device are encrypted with the device's secure storage (Android Keystore) and excluded from backups.
- Access is minimized and access logs are managed to prevent unauthorized access.

9. Children's Privacy
The Service is not directed at children under 14 and does not knowingly collect personal data from children under 14.

10. Contact
Privacy inquiries and requests are accepted via My Page > Contact us in the app.

This policy is written in Korean, with English and Japanese translations provided. In case of any discrepancy, the Korean text prevails. If this policy changes, we will announce the effective date and the changes within the Service or on this page.