1. What we take
| What | When | Why |
|---|---|---|
| Apple or Google account identifier, email address | When you sign in | To recognise you as the same person |
| Name, handle, profile photo | Entered by you at sign-up | To show who added what inside an album |
| The photos and videos you upload, and their file size | When you upload | The Service itself |
| Album name, description and dates, membership, comments | While you use the app | To make up the album |
We are equally clear about what we do not take.
- We do not take location. The capture location stored in a photo (EXIF GPS) is removed on your device before upload. The Service neither stores that value nor can see it.
- Using the app does not require your phone number or address. (If you file a rights violation report, the contact details you enter are covered under "Rights violation reports" below.)
- We do not recognise faces. We run no processing that identifies people in photos.
- We do not track you for advertising. We collect no advertising identifier.
If you used "Hide My Email" when signing in with Apple, the address we receive is the relay address Apple created. We never learn your real address.
Rights violation reports
Anyone can use the rights violation report form, with or without a Kins account. When you report, we collect the following, with separate consent on the form.
| What | Why | How long |
|---|---|---|
| Name, company or organization (if any), email, phone (optional) | Receiving and handling the report, and replying with the outcome | Destroyed 1 year after the report is closed (for objections and repeat reports) |
| What you report and your proof (links, an attached file) | Deciding whether there is an infringement | |
| Browser information, and a one-way hash of your IP address | Preventing repeated reports and abuse from the same place in a short time — we do not store your actual IP address |
When we destroy a report's data, we delete everything that identifies the reporter (name, company or organization, email, phone, browser information, IP hash) and the attached file. We keep what was reported and the outcome, so we can judge repeat reports about the same content.
2. Where we keep it
| What | Where | Processor |
|---|---|---|
| Accounts, albums, comments and other records; rights violation reports | Republic of Korea (Seoul) | Supabase Inc. (United States) |
| Photo and video files; files attached to rights violation reports | Asia-Pacific | Cloudflare, Inc. (United States) |
| Photos and videos posted to a public album (never private albums) | United States | OpenAI, L.L.C. (United States) |
Only photos posted to a public album are sent to OpenAI. Because anyone can see such an album, we send a short-lived link to the image and receive only a verdict on whether it contains sexual content, child sexual exploitation, graphic violence or self-harm. We store the verdict (passed or blocked) and nothing else; OpenAI does not retain the image or use it to train their models. Photos in invite-only albums are never sent to OpenAI under any circumstances.
All three companies only store and process the information in order to provide the Service; they do not use it for their own purposes. Because all three are based in the United States, this constitutes a transfer of personal information overseas. The items transferred, the purpose and the retention period are as set out in the table above.
Photo files are not kept at public addresses. Each time a photo is viewed we mint a temporary address that is valid only briefly, and that address is never issued to anyone who is not a member of the album.
3. Who can see it
Every album is one of two kinds, chosen when it is created and fixed from then on.
- Invited only (the default). Photos and the album are visible only to the members of that album.
- Public. The creator chose "Anyone". Any signed-in Kins user can see the album, its photos and comments, and the names, handles and profile photos of its members, and can join it to post. It is also listed under "Explore" in the app. A photo posted to a public album will be seen by people you do not know, so only post what you are happy for strangers to see.
Either way, we do not give or sell your photos to third parties, and we do not use them for marketing. (The content check for public-album photos is the processor described in section 2.)
The person who created an album can remove posts in it, remove members, and lock the album.
Our staff access stored photos and albums only when needed to handle reports, respond to legal requests, or deal with outages and incidents. Even then, we do not give or sell photos to third parties, and we do not use them for marketing or as training data.
4. How long we keep it
- Deleting your account deletes it immediately. You can do this yourself in the app under Settings → Delete account. Doing so also removes the photos you uploaded and the comments you wrote. The account and its records disappear at once, and the photo files in storage are permanently deleted within 24 hours.
- An album with other members still in it remains, and photos uploaded by other people are not deleted.
- Personal information and attached files from rights violation reports are destroyed 1 year after the report is closed (see "Rights violation reports" in section 1).
- If the law requires us to keep a record, we keep it for the period required.
5. Your rights
You can see, correct and delete your information at any time.
- Name, handle, profile photo — Edit profile in the app
- Photos you uploaded — delete them in the app (you cannot delete photos other people uploaded)
- Your whole account — Settings → Delete account in the app
- Anything else — the contact address below
6. Children under 14
The Service does not accept sign-ups from anyone under 14. If we confirm that a user is under 14, we delete the account and the information connected to it.
7. How we protect it
- All communication is encrypted (HTTPS).
- The database applies row-level access control, so a user can reach only the information of albums they are a member of. This limit is enforced on the server, not in the app.
- Photo file names use unguessable random values.
- Administrative keys are never shipped inside the app.
8. If there is a breach
If we learn that personal information has been exposed, we will tell you within 72 hours and report it to the authorities. We will tell you what was exposed, when, what we did about it, and what you can do.
9. If this policy changes
If the content changes we will post notice in the app and on this page at least 7 days before it takes effect. For changes that disadvantage you, we give 30 days' notice.
10. Contact
Send questions about personal information, or requests to see or delete it, to:
hello@joinkins.com
We begin handling requests without delay and reply within a few business days at the latest.
This English text is provided for your convenience. Where it conflicts with the Korean version, the Korean version governs.
