롤리모 개인정보처리방침

ROLIMO is a photo capture and editing app operated by Slow Turtle, represented by Moonjun Choi, in the Republic of Korea. This notice covers the app and related support. No Rolimo login account is required. Other Slow Turtle services have separate notices.

Photos, edits, saved looks and working history are processed on your device. We do not upload photos or their location metadata to analytics servers or use them to train models. Camera and photo permissions enable capture, import and export and can be changed in system settings. Exported or shared photos and operating-system backups are governed by the services you choose.

Analytics is off by default. We start Google Analytics for Firebase only after you confirm you are at least 16 and consent to usage analytics and overseas processing. For product improvement, we collect fixed look IDs, feature surfaces, export outcomes, subscription-screen visits and purchase/restore outcomes. The SDK may also process app launches, sessions and engagement, app version, operating system, device information, language, a randomly generated app-instance identifier and applicable automatic purchase events. Google may infer broad country or regional information from network addresses. We do not include names, email addresses, photos, personal look names, file paths or payment tokens in analytics events.

We do not use IDFA, Android advertising ID, iOS IDFV, ad personalization, Google signals or user-provided data features. We do not send an account-based User-ID, sell personal information or share it for cross-context behavioral advertising. The analytics installation identifier may be personal data; we do not describe it as fully anonymous.

Our analytics processor is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and its applicable subprocessors. After consent, the analytics categories described above are transmitted over encrypted connections during app use for statistics and product improvement. Processing may occur in the United States and other countries where Google publishes processing facilities; storage exclusively in Korea is not guaranteed. See the linked Google processor and location information for current details and privacy contacts. Refusing overseas processing keeps analytics off without limiting capture, editing or subscription features. Applicable Google processing terms and lawful transfer mechanisms, such as standard contractual clauses where required, govern such processing.

GA4 user-level and event-level retention is set to two months, with reset on new activity disabled. This setting does not cover all aggregated standard reports; aggregate statistics may remain longer. Turning off usage sharing in settings stops future collection and resets the local analytics identifier. It does not immediately delete previously transmitted data. Provider deletion processing and backups may involve additional processing periods. Consent choices, notice version and choice time are stored locally. Local photos and work remain until you delete them; trash and external backups require separate management.

Payments, subscription management and restoration within the same store use Apple or Google accounts and policies. Rolimo does not directly receive card details. When you contact us, your email address and provided content are used to respond and resolve your request. Our support handling policy is to delete correspondence within 90 days of resolution, except records required for legal obligations or disputes for the necessary period. Please do not initially send sensitive photos or identity documents. Email providers process communications under their service terms.

Analytics relies on optional consent. Support is processed to fulfill your request, for legitimate customer-support purposes or to meet applicable legal obligations. Depending on applicable law, you may request access, a copy, correction, deletion, restriction, portability, withdrawal of consent or objection, without discrimination. Contact the email below; we respond within applicable statutory deadlines and request only the minimum information needed to verify the request. Without an account, we may be unable to identify particular analytics records; we will explain limitations and available options. You may complain to your local supervisory authority or Korea’s Personal Information Protection Commission. Withdrawal does not affect lawful processing before withdrawal.

We do not seek analytics consent from users under 16. We do not collect dates of birth or offer a parental-consent flow; users under 16 must keep analytics off. We use access restrictions, encrypted transmission and data minimization, but cannot guarantee absolute security. Material changes to purposes or categories are announced in the app or on this page, with renewed consent where required.

In builds with subscriptions enabled, opening Plus or requesting a purchase or restoration connects to RevenueCat, Inc. in the United States. It processes a random App User ID, store transaction identifiers, receipts or purchase tokens, product, amount, currency, purchase/renewal/expiration/refund status, app/OS versions and network connection information for subscription fulfillment. We do not send names, emails, advertising identifiers or photos as customer attributes. The random identifier is not fully anonymous. Processing is necessary for purchase validation, entitlements, restoration and fraud prevention, separately from optional Google analytics consent.

The categories above are transmitted over encrypted connections when subscription services are requested and processed by RevenueCat and its disclosed subprocessors in the United States and other disclosed locations. Contact: compliance@revenuecat.com. This outsourced processing supports contract fulfillment. Entitlement records are retained while needed for active subscriptions and restoration; when no longer needed or on a valid deletion request, we request deletion except records required by law or to defend claims. Apple/Google retain their own transaction records separately. Deletion does not cancel billing and restoring purchases may recreate necessary records. If you do not want subscription processing, use free features without connecting Plus, purchasing or restoring. EEA/UK transfers require applicable processing contracts and lawful safeguards such as standard contractual clauses; provider documents below explain locations and safeguards.

Where applicable, EEA/UK/Swiss rights include access, correction, erasure, restriction, portability, objection and complaints to supervisory authorities. Applicable US state rights may include disclosure of categories, sources, purposes and recipients, deletion, correction, opt-outs, appeals and authorized-agent requests. We do not sell data, share it for targeted advertising or make automated decisions with legal or similarly significant effects. We respect applicable rights under Brazil’s LGPD, Japan’s APPI, Korea’s PIPA and other local laws. We do not discriminate for rights requests, respond within statutory deadlines and explain extensions, refusals and available appeals.