Privacy Policy

Effective 2026-10-06 · Version 1.0

1. General Provisions

틴트(TINNT) (the "Company") complies with the Personal Information Protection Act of Korea and other applicable laws in providing 콘도라 (Kondora) (the "Service"), and maintains this Policy to keep users' personal information safe. For users outside Korea, the requirements of the laws of their region (such as Japan's Act on the Protection of Personal Information and the GDPR) also apply.

2. Information We Process and Why

The Company processes the following information only to the extent necessary for the purposes stated. • Account (required): email address, Google or Apple sign-in identifier, password for email sign-up (stored encrypted by Firebase Authentication), family name, given name, date of birth, and gender — identifying members and signing in, confirming you are 14 or older, the public profile, and calculating Today's Card, profile cards, and Today's Friend Index • Additional information (optional): time of birth, place of birth (city-level address, latitude, longitude, and time zone), MBTI, blood type, and marital status — calculating Today's Card and profile cards. Marital status is requested when you first enter Hati's Shrine. Except for time of birth, additional information is never shown to other members, and additional information is never sent to an AI service. • Today's Card: the card's date and content (scores, advice, numbers, etc.) are stored on your device and on the server (conversation records and card records) and shown in the Archive. When you receive a card in the app, it is calculated on your device; if you set up automatic delivery, the Company's server calculates and stores the card at the time you chose using the account and additional information above and the settings below, and then sends a push notification. Automatic delivery settings: delivery time, time zones, app language, your name in Latin letters, and character — providing daily personalized content and scheduled delivery • Profile cards and Today's Friend Index: calculated only on the device from your information and your friend's public profile; the Friend Index is not stored on the server. • Conversations: conversations with characters (Hati and Baron) and their times (stored on your device and on the server so they can be restored when you change devices or reinstall the app), and friend chat messages and the times they were sent — providing conversations and restoring them across devices • Friends and safety: friend list and friend requests (including the other member's name), block list (including the other member's name), reports (reason, target, and the text of the reported message), whether and when you consented to AI use, the number of character calls per day (used for the limit of 20 per day), and quest progress and titles — friend features, community safety, and preventing abuse • Beads: balance, history of grants, uses, purchases, and refunds, promotion periods, and, for in-app purchases, the transaction identifier, original transaction identifier, product ID, purchase date, and purchase environment provided by Apple — granting and managing Beads, processing refunds, and preventing duplicate credits and misuse. Payment method information such as card numbers is handled by Apple, and the Company does not receive it. • Notifications: push notification token and device language — sending notifications • Feedback: title and content, attached images (up to 3), the member's email address, device model, iOS and app version and build number, device language, and time zone — responding to inquiries and fixing errors • Usage statistics: screen visits, feature use, app installation identifier, and device and app information collected by Firebase Analytics. Names, email addresses, and conversation content are not included in statistics, and ad personalization is turned off. Profile photo (optional): only if you set a profile photo, a reduced copy (256-pixel JPEG) is stored on the Company's servers (Google Cloud Firestore) and shown to other members as described in section 3; it is replaced when you set a new photo and deleted when you delete your account. The original photo and message drafts in progress are stored only on your device and are not sent to the server. Share images of Today's Card are created on your device and delivered only to the apps or people you choose to share with. The Company does not use information for purposes other than those above.

3. Information Visible to Other Members

For friend search and friend features, your family name, given name, date of birth, gender, and time of birth (if entered) are stored as your public profile and can be viewed by signed-in members who are your friends or who have received your profile QR code or share link. The app shows only the month and day of your date of birth, but the stored value includes the year of birth. Your place of birth, MBTI, blood type, and marital status are not made public. If you set a profile photo, a reduced copy (256-pixel JPEG) is stored on the Company's servers (Google Cloud Firestore) and is visible to other signed-in members in friend lists, friend profiles, chats, and as the sender picture in chat push notifications. Friends can see profile cards calculated on their own device from your public profile (excluding the card that would reveal your birth year) and Today's Friend Index between the two of you. Your email address is not made public. The public profile stores only a one-way converted value (hash) of your email address, and other members can find you only by entering your full email address exactly. Messages in a friend chat are visible to the other person in that chat, and push notifications for new messages show the sender's name, profile photo (if set) and a message preview. If you share Today's Card as an image, an image containing the card's content and your name is delivered to the recipient.

4. AI Character Conversations

To generate replies from characters such as Hati and Baron, each time a member talks to a character or calls Hati in a friend chat, that message, up to the 30 most recent messages in the conversation (in friend chats, including the friend's messages, with senders indicated only by roles such as "caller" and "friend"), and the calling member's given name are sent to Google's generative AI (Gemini API or Google Cloud Vertex AI). Date of birth, gender, additional information, email addresses, and friends' profile information are not sent, and the information sent is processed under Google's terms for the relevant service. By agreeing to the Terms of Service and this Privacy Policy at sign-up, members consent to this transmission, which is necessary to provide the Service (including the overseas transfer described in Section 7), and the Company records whether and when consent was given the first time a member talks to a character or calls Hati. Messages are sent to the AI only when a member talks to a character or calls Hati, so members who do not want this can simply not do so; members can also delete their account at any time. Character calls are limited to 20 per member per day, and the number of calls is recorded by date for this purpose.

5. Retention Period

• Account and profile, public profile, profile photo thumbnail, conversations with characters (including server copies), Today's Cards and automatic delivery settings, friend list and requests, block list, AI consent and call records, quest progress, Bead balance and history, and notification tokens: deleted immediately upon account deletion • Friend chats: kept even after a friend is removed or blocked; when either of the two members deletes their account, the chat room and all of its messages are deleted • Feedback and reports: kept for up to 3 years from receipt (the member identifier and email address are removed immediately upon account deletion) • In-app purchase records (if any): to process refunds and prevent duplicate credits, only the transaction identifier, product ID, number of Beads granted, purchase date, refund status, and pseudonymized values are kept after account deletion, for the period required by applicable laws (5 years for records of payment and supply in electronic commerce under Korean law) • Information that laws require to be preserved is stored separately for the required period

6. Provision to Third Parties

The Company does not provide users' information to third parties, except when a public profile is shown to other members as described in Section 3, when there is a request based on law, or when the user has separately consented.

7. Outsourcing and International Transfers

To provide the Service, the Company entrusts processing to the following companies, and whenever the Service is used, information is transferred over the network to and stored in data centers operated by each company outside Korea (such as in the United States). • Google LLC (United States): Firebase (authentication, database, server functions including scheduled creation of Today's Card, push notifications, Analytics), Google Sign-In, Gemini API and Google Cloud Vertex AI (generating character replies), Google Maps on Android (search terms and map coordinates when choosing your place of birth) / Information transferred: the information in Section 2 (for AI, only the information in Section 4) / Contact: https://support.google.com/policies • Apple Inc. (United States): Sign in with Apple, push notification delivery, map search on iOS (search terms and map coordinates when choosing your place of birth), in-app payments and refunds / Contact: https://www.apple.com/legal/privacy/contact/ The retention period is the same as in Section 5. The overseas transfer is necessary to provide the Service; if you do not want it, you may choose not to use the Service or delete your account (in which case you cannot use the Service).

8. Your Rights

• You can view and edit your information on the profile and Settings screens. • You can delete your place of birth, MBTI, blood type, and marital status at any time in My profile. • You can turn off automatic delivery of Today's Card in the app at any time; this stops scheduled creation on the server and the related notifications. • You can delete your account and information with "Delete account" in Settings (except as set out in Section 5). • You can stop the processing of information by removing friends, blocking, or turning off push notifications. • For any other request (access, suspension of processing, portability, etc.), email support@tinnt.app; we will handle it within 10 days after verifying your identity. We do not collect information from children under 14, and if we learn that such information has been collected, we delete it without delay.

9. Device Permissions

The following permissions are requested only when you use the related feature, and you can use the rest of the Service even if you do not allow them. • Camera: scanning a friend's profile QR code • Location (while using the app): starting the map for choosing your place of birth at your current location (your location is not stored by or sent to the Company) • Photo library (add only): saving your profile QR image • Notifications: alerts such as friend requests and acceptances, new messages, and the arrival of Today's Card Profile photos and feedback images are chosen with the system photo picker, so the app does not request access to your entire photo library.

10. Destruction and Security Measures

Information whose retention period has ended is deleted without delay in a way that cannot be recovered. Server data is encrypted in transit (TLS) and at rest. Security rules restrict member information to the member, friend chats to the two members of the chat, and public profiles to signed-in members, and access to operational data such as feedback and reports is limited to designated operator accounts.

11. Automatic Collection Tools

The Service does not use web cookies. To keep you signed in and to send notifications, an authentication token and a push token are stored on your device, and they are removed when you sign out, delete your account, or delete the app. Usage statistics are as described in Section 2.

12. Privacy Officer

Privacy Officer: 이동욱 Email: support@tinnt.app Phone: 050-6621-0080 If you send privacy-related inquiries or complaints to the contact above, we will respond without delay. For other reports or consultations, you may contact the Korea Internet & Security Agency's Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

13. Changes to This Policy

If this Policy changes, we will give notice in the app starting 7 days before it takes effect; for significant changes, we will give notice 30 days in advance and obtain consent again where necessary. This Policy applies from 2026-10-06.

Operator Information

Company: 틴트(TINNT) Representative: 이동욱 Business registration: 216-18-71861 Mail-order registration: 제2026-서울관악-1225호 Address (Republic of Korea): 서울특별시 관악구 복은4길 31, 301호 (신림동) Phone: 050-6621-0080 Contact: support@tinnt.app