Nouvelle Vague Intelligence
1. Purposes of processing personal information
The Operator processes personal information only to the extent necessary for the following purposes:
- Account registration with a Google account; sign-in with a Google account or a handle/email and password; identity verification; and account recovery
- Managing profiles, profile photos and friend relationships, finding friends, and processing friend requests
- Publishing photos selected by users, providing friend feeds, and enabling likes on individual objects and comments
- Service security, prevention of misuse, incident response, and handling inquiries
2. Personal information processed, collection methods, and retention periods
A. Information processed and stored on your device
| Information | Purpose | Retention period |
|---|---|---|
| Photos captured or directly selected by the user, object-recognition results and cropped images, object labels, captions, capture time, and theme | Providing photo-journal features such as CAM, FIELD, and REPORT | Until the user deletes an individual item, uses Delete All Data in the app, or uninstalls the app |
| Local copies of profile and friend information, app settings, and weekly report notification settings | Offline use and preservation of preferences | Until the user uses Delete All Data in the app or uninstalls the app |
Object recognition and mask generation are performed on the device. seesun does not perform facial recognition or biometric analysis intended to identify a person. Photos and analysis results that the user does not save (publish) are not sent to the server.
B. Information processed on the server when sign-in or sharing features are used
| Category | Information processed | How it is collected | Retention period |
|---|---|---|---|
| Account information | Email address; for Google sign-in, the display name and email address associated with the Google account; account password (stored as a one-way hash by the authentication service); internal user identifier; and authentication session information | Collected when the user signs up or signs in with Google, sets a password during sign-up or in Settings, or signs in with a handle/email and password | Until membership withdrawal or completion of an account-deletion request |
| Profile information | Display name, username (@handle), and profile photo if you register one | Entered or uploaded directly by the user or prefilled from Google account information and confirmed by the user | Until membership withdrawal or completion of an account-deletion request |
| Post and social information | Photos published by the user and cropped object images, object labels, captions, themes, capture times, records of friend requests, acceptances and removals, likes on individual objects, and comment text and creation time | Collected when the user actively uses publishing, friend, like, or comment features | Until the user deletes the relevant post, relationship or like, requests comment deletion, or withdraws membership |
| Automatically generated information | Service access logs, including IP address, access time, request records, and device or app network-environment information | Generated automatically when connecting to the server | For the period necessary for security and incident response, then deleted after the log-retention period under the service provider’s applicable plan and policy |
You may decline to provide the information above; however, seesun is an account-based service, so use of the app will be limited in that case.
The server-side information above is necessary to provide the account and friend-sharing services selected by the user. It is processed under Article 15(1)(4) of the Personal Information Protection Act for the conclusion and performance of a contract. The Operator does not collect personal information for marketing or personalized advertising.
Saved frames, object images and labels are synced as described in the server data table above. Object-recognition computation itself takes place on the device. The Operator does not use your photos or posts to train artificial-intelligence models.
3. App permissions
| Permission | Required? | Purpose |
|---|---|---|
| Camera | Optional | Taking photos in the app. If denied, you may still use the system photo picker and other features. |
| Notifications | Optional | Weekly report notifications generated on your device. No external push service or push token is used. Reports remain available in the app if you decline. Disable notifications in the app or device settings. |
| Internet | Required for account sign-in and sync | Sign-in, friend relationships, post uploads, and friend-feed synchronization |
Gallery import uses the Android system photo picker. The app does not request access to your entire photo library and can access only the photos you directly select. The app does not request location, contacts, or microphone permissions.
4. Disclosure of personal information to third parties
As a rule, the Operator does not sell or disclose users’ personal information to third parties. However, when a user publishes a photo, the following information is shared with accepted friends:
| Recipient | Purpose | Information disclosed | Retention and use period |
|---|---|---|---|
| seesun friends whom the user has accepted or who have accepted the user | Providing the friend feed and interaction features | Display name, @handle, profile photo, published photos, object images and labels, captions, themes, capture times, object-specific like information, and comments | Until the friend relationship or relevant post, like, or comment is deleted |
Personal information may be disclosed in accordance with applicable law where a law contains a specific provision or where a law-enforcement or other authority submits a request through lawful procedures. If you publish a photo containing another person, you must take care not to infringe that person’s rights, including by obtaining any required consent.
Photos and captions may reveal sensitive information such as health, religion, or political views. You may choose not to post such content or delete it. The Operator does not infer, extract, or separately use sensitive traits from posts.
5. Outsourcing of personal-information processing
The Operator entrusts the following operations to service providers for the smooth provision of the service:
| Service provider | Entrusted operations |
|---|---|
| Supabase Pte. Ltd. | Member authentication, database services, file storage, real-time synchronization, security logs, and server-infrastructure operation |
| Google LLC | Account selection and sign-in authentication when the user chooses Google sign-in |
Through processing agreements and service configuration, the Operator manages the providers to ensure compliance with applicable legal requirements, including restrictions on processing outside the stated purpose, technical and administrative safeguards, management of subprocessors, and deletion of personal information.
6. Overseas transfer of personal information
When the service is used, personal information is transferred to overseas cloud services as described below. If you do not want an overseas transfer, you may stop using the service: sign out or use Delete All Data in Settings, and request account deletion through the contact information below.
| Recipient | Country / location | Information transferred | Purpose | Timing and method | Retention period |
|---|---|---|---|---|---|
| Supabase Pte. Ltd. privacy@supabase.com | Japan (Tokyo AWS region) | Account, profile, post and social information, and access logs described in Section 2.B | Member authentication, database and file storage, synchronization, and security operations | Transferred through encrypted internet communications (HTTPS) when signing in, publishing, or synchronizing | Until the end of the applicable retention period for each item. After deletion, backup and log copies are automatically deleted when the retention period under the service policy expires. |
| Google LLC Google Privacy Policy | United States and other countries where Google provides services | Google sign-in request information, a one-time nonce, and authentication tokens | Google account sign-in authentication | Transferred through encrypted communications when the user chooses Google sign-in | Until the authentication purpose is fulfilled or for the retention period under Google’s policy |
The legal basis for overseas transfers is Article 28-8(1)(3) of the Personal Information Protection Act. This Privacy Policy discloses the processing delegation and storage necessary to conclude and perform the contract with the user.
Account and friend-sharing features depend on these servers, so you cannot use the service if you refuse the transfer. Uninstalling the app or signing out does not delete your server account. Request complete account deletion using the email procedure in Section 8.
7. Procedures and methods for destroying personal information
- Personal information is destroyed without delay when its retention period expires or its processing purpose is fulfilled.
- Electronic files are deleted so they cannot be recovered or reproduced. If paper documents are retained, they are shredded or incinerated.
- On-device information can be destroyed by deleting individual items, using Delete All Data in Settings, or uninstalling the app.
- Server posts can be deleted individually. Profiles, posts, friend relationships, and similar data can be destroyed by using Delete All Data or requesting account deletion.
- Copies remaining in backups or security logs are isolated, are not used except for recovery and security purposes, and are automatically deleted when the service provider’s retention period expires.
8. Your rights · Account and data deletion
You may request access, correction, deletion, suspension of processing, or withdrawal of consent. You can edit your name, handle and profile photo in Settings and delete posts, likes and friendships. Email the contact below for requests the app cannot handle directly, including comment deletion. Legal guardians may also exercise rights after the necessary verification.
Request account and data deletion without the app
- Email yoon7k3@gmail.com from the address you used to sign up.
- Use “seesun account deletion” as the subject. Include your @handle and state that you want your account and all associated data deleted. Do not send your password.
- After verifying your identity, the Operator deletes your authentication account and related service data, including your profile and photo, posted photos, object images, captions, friendships, likes and comments. Requests are handled within 7 days of confirmation unless there are special circumstances.
Delete specific data while keeping your account
Email the same address with the subject “seesun data deletion”, your @handle, and the posts, photos, comments or other items you want deleted. Your account is kept while the requested data is deleted. You can request deletion without reinstalling or signing in to the app.
Settings → Account → “Erase all data” currently deletes device data and service data on the server. To fully remove the account identifiers held by the authentication service, use the email procedure above. Uninstalling the app alone does not delete server data.
Backup copies and security logs may remain for recovery and security for the retention period under the processor's applicable plan and policy, then are deleted (Sections 2 and 7). Other rights requests are accepted at the same email address and handled within the period required by applicable law.
9. Personal information of children under 14
seesun is not directed to children under 14 and does not knowingly collect personal information from children under 14 without consent from a legal representative. If the Operator learns that such information has been collected, it will verify and delete the information without delay.
10. Security measures for personal information
- Encryption of server communications (HTTPS) and blocking of plaintext communications
- Encryption of authentication sessions and key local settings using the device’s secure storage
- One-way hashing of account passwords (by the authentication service)
- Per-user access controls and least-privilege access for server data and files
- Exclusion of device data from operating-system backups and device-transfer processes
- No advertising, user-tracking, or analytics SDKs
11. Privacy officer and contact information
Send inquiries concerning personal-information processing, the exercise of rights, complaints, or remedies for harm to the contact below.
Privacy officer: Nam Yoonji (nouvelle vague intelligence)
Email: yoon7k3@gmail.com
For advice or reporting concerning other personal-information infringements, you may contact the following Korean authorities:
- Personal Information Infringement Report Center: 118 (no area code) · privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
- Korean National Police Cybercrime Reporting System: 182 (no area code) · ecrm.police.go.kr
12. Changes to this Privacy Policy
This Privacy Policy takes effect on July 31, 2026. If applicable law, the service, or the handling of personal information changes, the Operator will provide notice through the app or a public webpage before the change takes effect. Changes that materially affect users’ rights will be announced separately in an easy-to-understand manner.
Change history
- September 26, 2026: clarified the operator name, comments, profile photos, on-device notifications and deletion requests. These clarifications do not introduce new collection features.
- July 31, 2026: first effective.
Read the v2.0 draft. Its effective date and final changes will be announced separately.