# HitPick Privacy Policy
**Effective date: July 5, 2026**
HitPick ("the Service") values your privacy and complies with applicable data protection laws. This policy explains what information we collect, how we use it, and how we protect it.
> ⚠️ Fill before publishing: operating entity (company/business name) and Data Protection Officer name/contact. Replace the bracketed `[ ]` placeholders with real values.
---
## 1. Information We Collect
**a. Sign-up / Login (Google account)**
- User unique identifier (UID), email address, profile name, profile photo URL
**b. Age verification**
- Date of birth (to verify the user is 14 or older)
- Google Play Age Signals: an age-range signal provided by Google Play in certain countries/regions (supported regions only)
**c. Information created while using the Service**
- Nickname, per-room character names
- Content you create: posts, comments, chat messages, room information (text)
- Likes, list of joined rooms / your posts
- Reports you submit, list of users you block
**d. Notification / device information**
- Device token (FCM registration token) used to deliver push notifications
**e. Automatically collected information**
- Access and usage logs generated while using the Service
The Service **does not provide image or file upload features** and processes text content only.
---
## 2. Purposes of Collection and Use
- User identification, login, and Service provision
- Applying age-based policies such as restricting users under 14
- Providing community features (posts, comments, chat, etc.)
- Sending push notifications
- Handling misuse (reports/blocks) and ensuring Service stability and security
- Responding to inquiries and resolving disputes
---
## 3. Children Under 14
The Service **is not available to users under the age of 14.** If the date of birth provided at sign-up indicates the user is under 14, access is restricted. We do not knowingly collect personal information from children under 14, and any such information found will be deleted without delay.
---
## 4. Retention and Use Period
- In principle, personal information is **deleted without delay upon account withdrawal or once the purpose of collection/use has been achieved.**
- Where retention is required by applicable law, it is kept for the required period.
- Content you created is deleted upon withdrawal; however, some data already shown to other users (e.g., chat messages) may be retained for a limited period for Service operation and dispute handling.
---
## 5. Third-Party Provision and Processing
We do not sell your personal information. To operate the Service, we use the infrastructure of the following providers (data processing):
| Processor | Purpose | Note |
|---|---|---|
| Google LLC (Firebase) | Authentication (login), database, cloud functions, push notifications (FCM), age signals | Data may be stored/processed on overseas servers |
| Turso (libSQL) | Storing content search index (titles, etc.) | Data may be stored/processed on overseas servers |
- These providers process data under their own privacy policies, and data **may be stored/processed outside your country.**
- If you open external links within the Service (YouTube, TikTok, etc.), the privacy policy of that service applies.
---
## 6. Your Rights and How to Exercise Them
You may at any time:
- Request access to or correction of your personal information (nickname and date of birth can be edited in the in-app profile)
- Request deletion of personal information and account withdrawal
- Request suspension of processing and withdraw consent
To exercise these rights, contact us via Section 8. We will act without undue delay.
---
## 7. Security Measures
- Login is handled via Google account authentication; the Service does not store passwords directly.
- Data access is limited to authenticated users, with access permissions managed.
- We operate safeguards such as a profanity filter to address inappropriate content.
---
## 8. Data Protection Officer and Contact
- Data Protection Officer: snacksister
- Contact email: snacksister@gmail.com
- Operating entity: snacksister
Please direct privacy-related inquiries, complaints, or remedy requests to the contact above.
---
## 9. Changes to This Policy
This policy may be revised due to changes in law or the Service. We will announce changes within the Service or through this document.
---
*This document is a draft based on the Service's actual data processing. We recommend filling in the operating entity information and obtaining legal review before publishing.*
