# Blue Photo Privacy Policy

**Version:** 1.0

**Effective date:** September 8, 2026

## 1. About this Policy

| Item | Details |
| --- | --- |
| Service | Blue Photo apps, website, and related online services |
| Service provider and Data Protection Officer (“Operator”) | JooHyung Park (박주형) |
| Based in | Singapore |
| Privacy contact by mail | JooHyung Park (박주형), 6 Hillview Rise, Singapore 667980 |
| Website | https://suwon.bluewings.photo |
| Brand and photo provider | Hong Junki (홍준기) supplies the Blue Photo brand and archive photographs for use in the Service |
| Purpose of this Policy | To explain what information Blue Photo collects, how it is used and shared, and the choices available to users |
| Governing language | This English Privacy Policy is the governing version. The Korean version is a translation for convenience. If they differ, English prevails to the extent permitted by applicable law |

## 2. Information we collect

| Category | Examples |
| --- | --- |
| Account and sign-in | Blue Photo Account ID; Apple or Google sign-in identifier; restricted Firebase email sign-in used only for approved app-review access; sign-in provider; account status; authentication and session information; app platform, version, and installation identifier. Firebase processes the review email and password; Blue Photo receives the resulting identity token and verification result |
| Profile | Display name, selected avatar, contact email, and provider profile information such as name, email, or profile image when made available by Apple or Google |
| Photo activity | Favorites, completed saves, photos successfully viewed in HD, selected Collections, photo identifiers, and related timestamps |
| Search and requests | Search terms, requested pages, Collections, photo identifiers, and catalog revision are processed to return the requested results. Search query strings are excluded from Blue Photo application logs |
| Premium | Store, product, purchase token or transaction reference, subscription status, renewal or expiry status, and verification timestamps. Blue Photo does not receive full card or bank-account details |
| Notifications | iOS remote notification permission and preferences, installation information, app version, locale, time zone, and protected Apple Push Notification service token. Android notification permission and preference and Windows operations-notification preference remain on the relevant device |
| Technical information | IP address, request time and identifier, request method and path without the query string, response status, error code, and security events |
| Advertising information | Google Mobile Ads may process IP address, approximate location, device or advertising identifiers, ad and app interactions, diagnostics, and consent choices |
| Support | Information included in a question, privacy request, or support message |
| On-device data | Theme and notification settings, recent searches in current app memory, catalog and image caches, protected session credentials, and account-scoped photo preferences or pending history may be stored on the device |
| Archive photos and metadata | Archive photos supplied by Hong Junki (홍준기), identifiable people appearing in them, names, credits, and event metadata are processed for publication, Search, and curation. Private administrator records may also contain original EXIF/IPTC/XMP, GPS, camera or device identifiers, binary metadata, and source paths |
| Not requested from app users | Government identification numbers, health data, biometric identifiers, or precise location |
| Photo library | The app does not read or upload the user's existing photo library. It asks only for permission to save a selected Blue Photo image when the user chooses to do so |

## 3. How we use information

| Purpose | Use |
| --- | --- |
| Provide the Service | Authenticate users, display the photo archive, run Search and Collections, save preferences, and provide Favorites, completed Downloads, and Viewed in HD |
| Manage Accounts | Maintain profiles and sessions, restore access, process sign-out, and handle Account deletion |
| Provide Premium | Verify Apple App Store or Google Play subscriptions and remove ads for an active Premium Account |
| Advertising | Show contextual, non-personalized ads to eligible free users, apply consent choices, limit frequency, report performance, and prevent invalid traffic |
| Notifications | Deliver iOS remote notifications that the user has enabled and maintain device-local notification choices on Android and Windows |
| Safety and reliability | Protect Accounts, detect misuse, troubleshoot errors, maintain backups, and improve Service stability |
| Support and legal compliance | Respond to requests, resolve disputes, enforce the Terms, and comply with lawful obligations |

## 4. Advertising and Premium

| Item | Policy |
| --- | --- |
| Free users | May receive Google AdMob banner or interstitial ads |
| Ad type | Blue Photo requests contextual, non-personalized ads |
| Ad choices | Where available, users can manage choices through Ad Privacy Settings and device advertising settings |
| Premium users | Blue Photo does not request or show ads after active Premium status is confirmed |
| Premium benefit | Ad removal only. Photos, HD, downloads, and all other features are the same for free users |
| Google processing | Google may still use identifiers and technical information for non-personalized ad delivery, frequency capping, aggregated reporting, security, and fraud prevention under Google's own privacy policy |

## 5. When we share information

| Item | Details |
| --- | --- |
| Google Cloud and Firebase | Cloud hosting, database, storage, security, logs, and Apple or Google authentication |
| Apple | Sign in with Apple, App Store subscription verification, refunds, and iOS push notifications |
| Google Play and Google services | Google sign-in, Android subscription verification, refunds, and related platform services |
| Google AdMob and User Messaging Platform | Advertising, privacy choices, reporting, and invalid-traffic prevention |
| OpenAI | Administrator-only assistance with archive photo metadata. This may include an approved display photo and limited photo metadata, but not Blue Photo user Accounts, profiles, Favorites, Downloads, or HD history |
| Kakao/Tistory | Display of Blue Photo notices and notice images |
| Government or regulatory authorities; Service successors | When disclosure is reasonably necessary to comply with law, protect users or the Service, or transfer responsibility for the Service |
| Sale of personal information | Blue Photo does not sell users' personal information |
| Third-party policies | A third-party service may collect information directly and apply its own privacy policy |

## 6. Storage, international processing, and retention

| Item | Policy |
| --- | --- |
| Locations | The Operator is based in Singapore. The main Blue Photo backend is hosted in Google Cloud's Seoul region. Apple, Google, OpenAI, and their service providers may process information in the United States or other countries where they operate |
| Protection during transfer | Blue Photo takes appropriate steps to ensure overseas recipients are bound by legally enforceable obligations to protect personal data to a standard at least comparable to the Singapore PDPA, unless an applicable exception applies |
| General retention | Information is kept only for as long as reasonably needed to provide the Service, protect users, resolve disputes, or meet legal obligations, and is then deleted or anonymised |
| Account deletion | A deletion request starts a 30-day recovery period. After that period, Account information and Account activity are deleted when required external-provider and security steps are complete, except information that must be retained for legal, fraud-prevention, or backup-protection purposes |
| Deletion protection record | After permanent deletion is authorised, Blue Photo retains a non-reversible Account fingerprint and quarantined Identity Platform UID hash for 35 days so a database backup cannot restore a deleted Account |
| Device information | App tokens, settings, and cached images may remain on the device until removed by the app, the user, Account deletion, or the operating system |
| Provider records | Apple, Google, AdMob, OpenAI, and other providers retain information according to their own policies |

## 7. User choices and requests

| Choice | How to use it |
| --- | --- |
| Profile and Favorites | Update profile information or remove Favorites in the app |
| Notifications | Change notification permission in device settings and available preferences in the app |
| Advertising | Use Ad Privacy Settings where shown, device advertising controls, or Premium to remove Blue Photo ads |
| Subscription | Manage cancellation and refunds through the Apple App Store or Google Play. Deleting the app or Blue Photo Account does not cancel a store subscription |
| Access, correction, or deletion | Use available Account settings or write to the Operator at 6 Hillview Rise, Singapore 667980. Subject to legal exceptions, a user may request access to personal data and information about its use or disclosure during the preceding 12 months, correction of an error or omission, or deletion. Identity verification may be required |
| Withdrawal of consent | Contact the Operator or use the relevant app or device setting. Some features may stop working when the information is necessary to provide them |

## 8. Security

| Item | Policy |
| --- | --- |
| Safeguards | Blue Photo uses encrypted connections, protected local credential storage, hashing or encryption of external-service identifiers, limited administrator access, and restricted logs |
| Limits | No internet transmission or storage system can be guaranteed to be completely secure |
| User responsibility | Users should protect their Apple or Google Account and their device and should not send passwords, full authentication tokens, or payment-card numbers in support messages |

## 9. Children, changes, and contact

| Item | Policy |
| --- | --- |
| Children | The Service is not directed to children under 13, who must not create an Account. Users aged 13 or older who cannot consent to the handling of their personal data under applicable law require permission from a parent or legal guardian |
| Changes | Blue Photo may update this Policy and will post the current version on the website or in the app. Material changes will be highlighted where reasonably practicable |
| Data breach notice | If a personal data breach is notifiable under applicable law, Blue Photo will notify the Singapore Personal Data Protection Commission and affected individuals as required |
| Data Protection Officer | JooHyung Park (박주형), 6 Hillview Rise, Singapore 667980 |
| Questions or complaints | Write to the Data Protection Officer at the address above. A user may also contact the Singapore Personal Data Protection Commission where applicable. The Service website is https://suwon.bluewings.photo |