개인정보 처리방침

감도가 어떤 정보를, 왜, 얼마나 오래 다루는지 설명합니다.

본문은 법률 검토 전 초안으로 영어로만 제공됩니다.

Core promise

Your photos stay on your device. Original photos are never uploaded to Gamdo servers; rendering happens on-device. On-device location inside your own photos stays on device and is stripped from uploads and, by default, from shares.

What we collect (minimal by design)

• Email — only when a sign-in provider supplies it, or when you join the launch waitlist.
• Device ID and push token — to keep devices and notifications working.
• Purchase status — Gamdo Pro entitlement state, via RevenueCat.
• Pseudonymous product events — aggregate usage, never your photos.

What we never collect

• Your original photos (they never leave the device unless you publish a look's preview).
• Location — the server never receives it.
• Advertising or cross-app tracking data — we do not track you.

Cross-border processing

Service runs on the Cloudflare global network (D1 primary location hint apac), with RevenueCat for subscriptions and Sentry for error reporting. PIPA-compliant notice of overseas transfer will be finalized with counsel.

Retention

• Account data — kept until you delete your account.
• Sync log — 90 days.
• Raw product events — per analytics retention.
• Backups — 90 days.

Your rights

In-app account deletion and data export (self-serve). PIPA/GDPR request handling to be detailed with counsel.

Contact

privacy@gamdo.app (privacy officer designation pending — docs/11 §8).