Privacy
Ppicut is operated by 이상빈 (Sangbin Lee). Contact the operator at dypapa0309@gmail.com about privacy. This notice describes the current app and companion website.
On your device
Ordinary capture, photo selection, editing and object cutouts are processed on your device. Original photos, editable documents, titles and drawings are stored in the app. Feature-use counts stay on your device; no analytics server receives them in the current version. Ppicut does not request location or contacts access. Saving and sharing happen when you choose them.
When you invite a friend
HALF temporarily uploads a reduced-size photo when you choose to send it. The photographer and participant in that room can retrieve it. The server re-encodes uploaded photos. Your other works and gallery are not shared. A copy downloaded and saved by the other person may remain on their device.
CHAOS sends shutter commands, room state and capture counts. It does not send live video or captured photos over WebSocket.
To control access, we process a device- or browser-generated public key, its associated guest identifier, and room participation state. Private keys remain in device Keychain or browser storage. Network delivery involves processing an IP address; the server uses a daily hash and short expiry for abuse limits. Losing your guest key or clearing browser storage can prevent recovery of previous access.
Retention and deletion
- HALF rooms and invitations normally expire after 24 hours; CHAOS rooms after 15 minutes. The API blocks access to expired rooms.
- Closing a room requests deletion of temporary photos. A two-day storage lifecycle rule cleans up remaining photos. Cleanup is asynchronous; physical deletion within exactly 48 hours is not guaranteed.
- Photo download links normally last five minutes. An issued link may continue working after room closure until it expires or the object is deleted.
- Public-key and guest registration records receive a 30-day expiry when created. Database cleanup after expiry is asynchronous. Abuse-limit counters expire after approximately one to two days.
- The current development server retains execution and error logs for seven days; the production deployment configuration retains them for fourteen days. The implementation avoids logging photos, invitation secrets and authentication tokens.
The current development database does not use continuous backups. The production database deployment configuration includes up to 35 days of continuous backups for recovery. Deleted database records may remain in recovery copies until the backup retention period expires. Photo files are not included in these database backups.
Services involved
Collaboration storage and servers use AWS in Seoul, South Korea. CloudFront delivers the companion website through edge locations worldwide. Apple handles product information and payments. The app uses verified transaction information to determine purchase entitlements; it does not receive your payment card number.
Advertising and choices
Ordinary development and release configurations currently disable ads. A separate internal test build requests Google’s official sample ads. Sample ads do not generate advertising revenue, but the Google Mobile Ads and UMP SDKs may still communicate with Google. The app checks the applicable consent requirements and an age category before requesting ads; it does not ask for a full date of birth. You can review these choices under Settings → Ad privacy, including Google’s privacy options when available.
When enabled, the advertising SDK may process IP addresses (including an estimate of general location), device identifiers, diagnostics, performance data and ad interactions for advertising, fraud prevention and analytics. Ppicut requests non-personalized ads and does not send your photos, drawings or artwork titles to the advertising SDK. Non-personalized ads still involve data processing. See Google’s Privacy Policy and its SDK data disclosure. The App Store disclosures and regional consent settings must be reviewed before a public release with ads.
Permissions and requests
You can change camera and photo permissions in iPhone Settings, close a temporary room in the app, and delete works and exported copies separately. Contact the address above with access, deletion or other privacy requests. We will request only the information needed to handle your request; do not send photos or passwords upfront. If you email support, your address and message are processed to reply to you.