1. Information Collected

The Operator may collect and store the following information for Service provision and improvement:

• Identifiers: Firebase Auth UID, friend codes
• Profile: Display name, avatar image URL, etc. (when entered by user)
• Content: Wish titles, tags, notes, photos (front and back), etc.
• List/Member Information: List type (personal/shared), year, member roles (owner/editor/viewer), member limit (up to 5)
• NextPick Information: Random selection status, next challenge decision information
• Subscription Information: Plan type, active/inactive, validity period, payment store type (App Store, etc.), RevenueCat integration information, billing suspension restrictions (joined lists hidden, only oldest owner list displayed)
• Device/Log Information: Device information, OS, app version, access logs, crash logs, cookies/local storage similar technologies
• Permissions: Access to camera, photo library, etc. (when user permits)

2. Purpose of Use

The Operator uses the collected information for the following purposes:

• Service provision and operation
• User authentication and account management
• Wish list creation and management
• Photo storage and display
• NextPick functionality provision and status management
• Shared list functionality (Premium feature)
• Progress tracking and statistics
• Service improvement and development
• Customer support
• Security and fraud prevention
• Legal compliance

3. Information Sharing

The Operator does not share personal information with third parties except in the following cases:

• When user consent is obtained
• When required by law
• When necessary to protect life, body, or property
• When cooperating with public institutions
• When using external services (Firebase, RevenueCat, etc.)

4. External Service Usage

The Service uses the following external services:

• Firebase: Authentication, database, storage, analytics
• RevenueCat: Subscription management
• Apple App Store: Payment processing

Please refer to each service's privacy policy for information handling.

5. Data Security

The Operator takes appropriate security measures to protect user information:

• Encryption of data transmission
• Access control and authentication
• Regular security updates
• Employee education and training

6. Data Retention & Deletion

1. Automatic Deletion Conditions: If 180 days or more have passed since the User last used the Service, the Operator may delete all or part of the User's information and content without prior notice.
2. Deletion Target Data: The deletion target includes all of the following data:
   • User profile information (display name, avatar image, etc.)
   • Wish lists (titles, tags, notes, photos (front and back), etc.)
   • NextPick information (random selection status, next challenge decision information, etc.)
   • Shared list information (list settings, member information, etc.)
   • Subscription information (plan type, validity period, etc.)
   • Access logs, crash logs, and other technical information
3. No Prior Notice: Data deletion is performed without prior notice to Users.
4. User Responsibility for Backup: Users are responsible for backing up important data themselves.
5. Irreversibility of Deletion: Deleted data cannot be recovered in principle.
6. Legal Retention Obligations: Data required to be retained by law may be retained even after the deletion period.

7. User Rights

Users have the following rights regarding their personal information:

• Right to access their personal information
• Right to correct inaccurate information
• Right to delete personal information
• Right to restrict processing
• Right to data portability
• Right to object to processing

For requests regarding these rights, please contact: app.fumixroom@gmail.com

8. Cookies & Similar Technologies

The Service may use cookies and similar technologies to improve user experience and analyze usage. Users can disable cookies through browser settings, but this may affect Service functionality.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information.

10. International Data Transfers

User information may be transferred to and processed in countries other than the user's country. The Operator ensures appropriate protection measures are in place for such transfers.

11. Policy Changes

The Operator may change this Policy as necessary. Significant changes will be communicated through Service notifications or other appropriate means.

12. Business Transfer

If the Operator changes the Service operation entity through business transfer, company split, etc., user information including personal information will be transferred to the successor.

13. Contact Information

For inquiries regarding this Policy, please contact:

Email: app.fumixroom@gmail.com