개인정보처리방침
Privacy policy

DearSticker is operated by 트리플디 (Triple D; representative 정혁, business registration no. 121-43-92726). The privacy officer is 정혁 (Jeong Hyeok), reachable at hysein0824@gmail.com. This policy covers the DearSticker app, account service, in-app purchases, gift links and the support and deletion pages.

We process email addresses and account IDs for sign-in, recovery and account access. With Sign in with Apple or Google we receive the email verified by that provider (including Apple private relay addresses), the name you allow to share, and a provider account identifier. Supabase handles password authentication; the app does not store your password. Up to five selected reference photos, generated/edited/exported images, captions, pack names, caption sets and editing settings support creation and the library. For in-app purchases we process store transaction identifiers, products, purchase/refund states and times and a credit ledger to verify payment, grant credits and handle refunds; we never receive card or other payment-method details. Gift sender/recipient names, messages, card designs, recipient accounts and gift events support delivery, claiming and gift-usage analysis. Feature-usage records such as preview creation, paywall views, purchase attempts, pack completion and saves support service improvement and cost management and exclude photos, captions and names. Reports and enquiries support customer service; job states, errors and request identifiers support recovery, deduplication and security. Optional push tokens support completion notifications.

For AI styles, selected reference photos and generation instructions are sent by our server to OpenAI. Generated outputs are stored and may be used for quality checking. AI results and likeness can vary. We do not provide face-based identity verification or person identification. Keep my photo mode removes the background on device and uploads the cutout for account storage. Select only necessary photos and make sure you have permission from the people shown and the guardians of children.

We entrust processing to the following providers; necessary data is transmitted over the network when you use the related feature. OpenAI (United States and other locations): AI image generation and quality checks — reference photos, instructions and outputs. Supabase (Singapore): authentication, database and private file storage — account and service data. Railway (Singapore): API and worker hosting. RevenueCat (United States): in-app purchase verification and purchase records — account identifiers and transaction data. Apple and Google: App Store and Google Play billing, Sign in with Apple/Google and push notifications. Expo: push notification delivery. When a refund or chargeback is requested through the App Store or Google Play, we answer that store, under your agreement to Article 7 of the terms, by giving Apple Inc. (United States) or Google LLC (United States), through RevenueCat, whether the purchase was delivered and used, whether a preview was provided, how long the app has been used, and purchase and refund history (no photos, captions or stickers; kept under each store's policy). Data is kept until the purpose is fulfilled or for the retention periods below; provider backups and logs follow provider policies. Google ML Kit does not upload Android cutout photos to Google but processes device/app information, installation/device identifiers and usage/performance/error data for diagnostics. Reference photos are never sent to payment providers. If you object to international transfers you may request account deletion, which limits use of the service.

Account information is kept while the account is active. References attached to packs and results remain until you delete the reference, pack or account. Unused uploads become eligible for deletion after 24 hours. Gift links normally expire in seven days; gift events are kept for up to 90 days. Claimed gifts can remain in the recipient’s library. Under the Korean Act on Consumer Protection in Electronic Commerce, records of payment and supply are kept for five years and records of consumer complaints or disputes for three years. Account deletion removes the authentication account, personal captions/settings/report text and image files, keeping only legally required records and minimal technical records that prevent duplicate processing or recreation of deleted data.

Request account deletion in My account, on the deletion page below or by email. Access and new work are blocked, then authentication and files are removed, retrying failures. You can also delete only reference photos or packs. Anyone with a gift link can view three previews and the card before signing up; a claiming account can keep the full pack. Reference photos are excluded from gifts. Claimed gifts, messenger copies and files saved on devices are not removed by deleting the sender account.

You may request access, correction, deletion or suspension of processing by emailing the privacy officer; we act without delay and may verify account ownership first. Manage photo, camera and notification permissions in device settings, and you can choose not to use AI creation. We use HTTPS, account-scoped access, private storage, expiring file links and server-side secret handling. The Android sticker keyboard does not collect typed text. We do not sell personal data or use it for advertising targeting, and use no advertising SDK. You can also contact the Korea Internet & Security Agency privacy center (privacy.kisa.or.kr, 118).

DearSticker is intended for adult parents, grandparents and pet guardians and does not accept sign-ups from children under 14. Contact us if photos or child data were processed without authorization. When data, purposes, providers or retention change, we update this page and its effective date, announce material changes in the app or by account contact at least 7 days in advance (30 days for changes unfavorable to users), and obtain consent where required.