HitPick Privacy policy

# HitPick Privacy Policy **Effective date: July 5, 2026** HitPick ("the Service") values your privacy and complies with applicable data protection laws. This policy explains what information we collect, how we use it, and how we protect it. > ⚠️ Fill before publishing: operating entity (company/business name) and Data Protection Officer name/contact. Replace the bracketed `[ ]` placeholders with real values. --- ## 1. Information We Collect **a. Sign-up / Login (Google account)** - User unique identifier (UID), email address, profile name, profile photo URL **b. Age verification** - Date of birth (to verify the user is 14 or older) - Google Play Age Signals: an age-range signal provided by Google Play in certain countries/regions (supported regions only) **c. Information created while using the Service** - Nickname, per-room character names - Content you create: posts, comments, chat messages, room information (text) - Likes, list of joined rooms / your posts - Reports you submit, list of users you block **d. Notification / device information** - Device token (FCM registration token) used to deliver push notifications **e. Automatically collected information** - Access and usage logs generated while using the Service The Service **does not provide image or file upload features** and processes text content only. --- ## 2. Purposes of Collection and Use - User identification, login, and Service provision - Applying age-based policies such as restricting users under 14 - Providing community features (posts, comments, chat, etc.) - Sending push notifications - Handling misuse (reports/blocks) and ensuring Service stability and security - Responding to inquiries and resolving disputes --- ## 3. Children Under 14 The Service **is not available to users under the age of 14.** If the date of birth provided at sign-up indicates the user is under 14, access is restricted. We do not knowingly collect personal information from children under 14, and any such information found will be deleted without delay. --- ## 4. Retention and Use Period - In principle, personal information is **deleted without delay upon account withdrawal or once the purpose of collection/use has been achieved.** - Where retention is required by applicable law, it is kept for the required period. - Content you created is deleted upon withdrawal; however, some data already shown to other users (e.g., chat messages) may be retained for a limited period for Service operation and dispute handling. --- ## 5. Third-Party Provision and Processing We do not sell your personal information. To operate the Service, we use the infrastructure of the following providers (data processing): | Processor | Purpose | Note | |---|---|---| | Google LLC (Firebase) | Authentication (login), database, cloud functions, push notifications (FCM), age signals | Data may be stored/processed on overseas servers | | Turso (libSQL) | Storing content search index (titles, etc.) | Data may be stored/processed on overseas servers | - These providers process data under their own privacy policies, and data **may be stored/processed outside your country.** - If you open external links within the Service (YouTube, TikTok, etc.), the privacy policy of that service applies. --- ## 6. Your Rights and How to Exercise Them You may at any time: - Request access to or correction of your personal information (nickname and date of birth can be edited in the in-app profile) - Request deletion of personal information and account withdrawal - Request suspension of processing and withdraw consent To exercise these rights, contact us via Section 8. We will act without undue delay. --- ## 7. Security Measures - Login is handled via Google account authentication; the Service does not store passwords directly. - Data access is limited to authenticated users, with access permissions managed. - We operate safeguards such as a profanity filter to address inappropriate content. --- ## 8. Data Protection Officer and Contact - Data Protection Officer: [Name] - Contact email: rodi@bemyfriends.com - Operating entity: [Company / Business name] Please direct privacy-related inquiries, complaints, or remedy requests to the contact above. --- ## 9. Changes to This Policy This policy may be revised due to changes in law or the Service. We will announce changes within the Service or through this document. --- *This document is a draft based on the Service's actual data processing. We recommend filling in the operating entity information and obtaining legal review before publishing.*