PicTu Privacy Policy
Effective date: 2026-10-28
This Privacy Policy explains how Dowon Kim (“we”, “us”, the operator of PicTu) collects, uses and protects your personal information when you use the PicTu app (the “Service”). If you are in Korea, the Korean version of this policy applies.
| Type |
What |
How |
| Required |
Google account email and account identifier, service identifier |
Google sign-in |
| Required |
Nickname, device time zone, app language |
Profile setup, app start |
| Required |
Photos you send, the one-line caption, reactions and short replies |
You enter them while using the app |
| Required |
Device token for notifications |
Automatically on install |
| Optional |
Date you started dating, birthday, notification time |
You enter them in Settings |
| Optional |
Report details (reason, note) and the reported photo or reply |
You enter them when you report |
| Purchases |
Product purchased, purchase identifier (a converted value of the Google Play purchase token), subscription status and expiry date |
Google Play Billing |
| Automatic |
App usage events (screens and features used), crash logs (device model, OS version, error details) |
Automatically while you use the app |
| Automatic |
Advertising ID (Android advertising ID), approximate location (based on IP address) |
Collected by the ad SDK when ads are shown to free users |
- Payment card details are handled by Google Play. We never receive them.
- We do not store photo location data (such as EXIF). The date a photo was taken is checked only on your device and is never sent to our servers.
- Usage events do not include the content of your photos or replies, or your nickname.
- To connect you one-to-one with your partner, deliver the daily question, and exchange and reveal photos and replies
- To show the home screen widget and send notifications (questions, evening reminders, anniversaries)
- To verify and restore your account (new device, reinstall)
- To confirm payments for paid products (Plus subscription, Remove Ads), provide their benefits and process refunds
- To show ads to free users and grant rewards for rewarded ads
- To handle reports, analyze errors and improve the Service (usage statistics)
- Reviewing reported content: When a report is submitted, we review only the reported photo or reply and decide whether to keep or hide it. We never view photos that have not been reported.
Legal bases (EEA, UK and Switzerland)
- Contract: account, partner connection, photo exchange, widget, notifications and paid features are needed to provide the Service you asked for.
- Legitimate interests: crash analysis, usage statistics, security and handling reports.
- Consent: personalized advertising. You can change your choice at any time in the app under Settings > Privacy options.
- Legal obligation: keeping purchase records.
3. How long we keep it
- When you delete your account: your personal information and photos are deleted without delay.
- When you disconnect from your partner: the photos and records you built together are kept for 30 days and then permanently deleted. If the same two people reconnect within 30 days, the records are restored. The app shows the scheduled deletion date.
- Purchase records: kept for 5 years as required by Korean e-commerce law.
- Report records: kept for 1 year after the report is resolved.
- Crash logs: automatically deleted 90 days after collection.
- Usage statistics: automatically deleted 14 months after collection.
We do not sell your personal information and do not provide it to third parties, except as described in Section 5. Your connected partner sees the nickname, photos, replies and reactions you send, and the dating start date and birthday you enter, as part of the Service.
5. Service providers and international transfers
We are based in the Republic of Korea, and your account data and photos are stored on servers in Seoul, Korea. If you use the Service from another country, your information is transferred to and processed in Korea and in the countries listed below.
| Provider |
Purpose |
Data location |
| Google LLC (Firebase Authentication, Firestore, Storage, Functions) |
Sign-in, data and photo storage, server functions |
Republic of Korea (Seoul) |
| Google LLC (Firebase Cloud Messaging, Crashlytics, Analytics) |
Notifications, crash analysis, usage statistics |
Google data centers, including the United States |
| Google LLC (Google Play Billing) |
Payments and subscription management |
Google data centers, including the United States |
| Google LLC (Google AdMob) |
Ads for free users |
Google data centers, including the United States |
- Google provides safeguards for international transfers, including the European Commission’s Standard Contractual Clauses.
- Advertising information is handled under Google’s policies: https://policies.google.com/technologies/partner-sites
- You can reset or delete your advertising ID in your device settings (Settings > Privacy > Ads, or Settings > Google > Ads, depending on your device).
When a retention period ends, we delete the information without delay in a way that cannot be recovered.
7. Your rights
You can ask to access, correct, delete, or download (portability) your personal information, or to restrict or object to its processing, at any time. Where we rely on consent, you can withdraw it at any time.
- Edit nickname, dating start date, birthday, notification time: app > Settings
- Delete your account: app > Settings > Account > Delete account, or the account deletion page
- Change ad consent: app > Settings > Privacy options (shown where required)
- Cancel a subscription: Google Play Store > Payments & subscriptions > Subscriptions
- Any other request: tuatara94@naver.com — we will respond within 30 days.
If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with your local data protection authority.
8. Notice for California and other US state residents
- In the last 12 months we collected the categories listed in Section 1: identifiers (email, account ID, advertising ID, device token), personal content you create (photos, replies), commercial information (purchases), internet or app activity (usage events, crash logs) and approximate location.
- We do not sell personal information for money. When ads are shown to free users, Google AdMob may use your advertising ID and approximate location for personalized ads, which some US state laws treat as “sharing” or “targeted advertising”. You can opt out in the app under Settings > Privacy options (where available), or by deleting your advertising ID in your device settings.
- We do not use sensitive personal information to infer characteristics about you.
- You will not be treated differently for exercising your privacy rights. To make a request, email tuatara94@naver.com from the Google account you use for PicTu so that we can verify it is you.
9. Children
The Service is only for people aged 16 or older (14 or older in Korea). We do not knowingly collect personal information from anyone younger. If you believe a child has provided us information, contact us and we will delete it.
10. Security
Encryption in transit (HTTPS); minimum access (only the two connected people can see their photos, and we review only reported items for the purpose of handling the report); server security rules; payment verification done only on our servers.
- Privacy officer: Dowon Kim
- Email: tuatara94@naver.com
12. Changes to this policy
If this policy changes, we will notify you in the app at least 7 days before the change takes effect.