Last Updated: October 8, 2026
Pium ("Service") values your privacy and complies with applicable privacy laws, including the Korean Personal Information Protection Act (PIPA) and GDPR principles.
| Data | Collection Method | Purpose |
|---|---|---|
| Name (display name) | Social login | Account identification |
| Email address | Social login | Authentication, notifications |
| Social login identifier (Google UID, etc.) | OAuth 2.0 | Social sign-in |
| Device information (device ID, OS type) | Automatic collection | Security, device fingerprint verification |
| Facial photographs | User upload via app: one front-facing photo and one side photo at approximately 75 degrees per person (up to four photos for a couple). A slight smile is recommended in both photos. | File validation and AI wedding photo generation |
| Appearance/face-type category | Selected directly by the user in the app | AI generation prompt configuration |
| Data | Collection Method | Purpose |
|---|---|---|
| Phone number | Direct input | Customer support |
| Payment records (order ID, payment method type) | Automatic at checkout | Purchase history (card numbers are never stored) |
| FCM push token | Automatic collection | Push notifications |
Facial photographs and appearance/face-type categories are not used for identity authentication, advertising, tracking, or sale.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account information (email, name) | Removed from the normal service upon account deletion. Isolated disaster-recovery backups expire within three months | Service agreement |
| Original facial photographs (Cloudflare R2) | Retained while the account is active. Deleted when the user deletes an individual photo or the account in the app, or when an emailed face-data consent-withdrawal request is processed | User consent |
| User-selected appearance/face-type category | Retained while the account is active or until the user changes it; deleted when the account is deleted | User choice and service delivery |
| Generated images (HD and thumbnails) | Up to 14 days after generation completes, or earlier when the user deletes them or the account | Service agreement and user consent |
| Face-data consent record | Kept to verify consent while the account is active; deleted with the account. IP/device identifiers are removed after no more than three months | Evidence of consent and security |
| Payment records | 5 years | Korean E-Commerce Act |
| Consumer dispute records | Three years after handling ends. Only necessary records are segregated on account deletion and purged on expiry. Ordinary questions and suggestions are deleted with the account | Korean E-Commerce Act |
| Access logs (IP, timestamp) | 3 months | Korean Communications Privacy Act |
| Disaster-recovery database backups | Expire within three months | Service resilience and disaster recovery |
When a facial photograph or account is deleted, the original is removed from the normal service. If a generation job is already running, completion of deletion may wait until that job is canceled or its temporary access expires. Uploaded facial photo files and generated image files are not included in database backups. If deleted account data remains in an isolated disaster-recovery database backup, it is not accessed or restored in normal operations and expires with that backup within three months. Payment records are retained for periods required by applicable law.
If inquiries remain unclassified, we review whether statutory retention is needed before completing account deletion.
The following overseas processing and storage are necessary for account management, photo storage and image generation. We rely on necessary contract-performance outsourcing/storage under Article 28-8 of Korea's Personal Information Protection Act, and consent where applicable. These disclosures cover uploaded photos separately from the Toss login-data notice.
To refuse transfers, do not start photo upload or generation, delete your photos or account in the app, or request processing cessation and consent withdrawal at kue1004@quokkalabs.co.kr. We cannot provide features that require the refused storage or generation. Once processed, we stop future transfers and delete the photos we control. An active job may delay deletion until cancellation or temporary access expiry. Recipient legal/safety obligations and statutory transaction records may continue for their applicable retention periods.
An APAC region does not establish the actual country of the Cloudflare R2 bucket. OpenAI processing countries also require verification of the API project's settings and contract. Verification of these two items is still pending.
The following providers process facial photographs or related data only as needed to deliver the Service:
| Provider | Purpose | Retention |
|---|---|---|
| Railway | Authenticated API request handling and access control for private storage | For the time needed to process service requests and operate the Service |
| Cloudflare R2 | Stores original facial photographs and generated images in private storage that requires authenticated access | Facial photos: under the original-photo rule in Section 3. Generated images: up to 14 days after completion |
| OpenAI OpCo, LLC | Processes reference facial photographs or face crops for generation or editing through the Images API | API data is not used for model training by default. Customer content may remain in default abuse-monitoring logs for up to 30 days, or longer where required for legal or safety reasons |
| FastSpring | Global web payment processing | Legally required period |
| PortOne | Domestic payment processing | Legally required period |
| Google Play Billing | In-app purchases (Android) | Per Google policy |
| Apple App Store | In-app purchases (iOS) | Per Apple policy |
| Firebase (Google) | Push notifications (FCM) | Until token refresh or account deletion |
We do not sell personal data or share it for advertising or behavioral tracking. We disclose data only to the service providers above as needed to operate the Service or when required by law.
We do not publish or use customers' generated images for promotion or advertising. Marketing-message consent is not permission for promotional image use.
You have the following rights regarding your personal data:
You can delete an individual facial photograph or your account directly in the app. Submit face-data consent withdrawal and other access, correction, or restriction requests by email below; we process them within the period required by applicable law.
This service is not directed at children under the age of 14 (or 13 in some jurisdictions). If we become aware that we have collected personal data from a child without appropriate consent, we will delete it immediately.
The web service uses session cookies for authentication. You may disable cookies in your browser settings, but some features may not function properly. We do not use advertising tracking cookies.
We will notify you of material changes to this policy via in-app announcements or email. For significant changes (e.g., changes to biometric data processing), we provide at least 7 days' prior notice.
Privacy Officer
Business name: 쿼카굿즈
Representative: 오승규
Business registration: 494-65-00392
Business address: 서울특별시 구로구 구일로4길 22, 117동 6층 611호 (구로동, 구로주공아파트)
Email: kue1004@quokkalabs.co.kr
Customer support phone: +82-10-2688-5288
E-commerce registration: 신고 면제 (간이과세자)
Company: 쿼카굿즈
Email: kue1004@quokkalabs.co.kr
Response time: Within 10 business days