Privacy Policy

Information we process

• The name you enter, the profile photo you choose, and room names
• Photos and videos you shoot or pick from your photo library
• Content information the features need, such as template, title, and capture time
• An automatically created anonymous account ID and room member IDs
• A hash of your IP address and attempt counts, to prevent invite-code abuse
• When you report: your account ID, the reported member's ID, the reason and details you write, and the location of the room snapshot

We do not collect contacts, precise location, or advertising identifiers.

How we use it

Names, profiles, and account and room IDs are used to set up rooms, invite friends, and sync. Photos, videos, and content information are used to shoot, combine, save, and show shared rooms. IP hashes and attempt counts are used only to stop random guessing and abuse of short invite codes. Photos and videos are never used for advertising or sold.

Report information is used only to check for violations of the Terms of Use and to take action, such as removing content or restricting users. To review a report, the operator may view the content of the reported room.

Retention and storage location

When you delete your account, your account, profile, and the halves you shot are deleted from active server data and from your current device. If your friend stays in the room, their halves and the room information remain; when the last member leaves, the room's server data and files are deleted. The app can't delete copies your friend saved or shared elsewhere.

Account IDs in invite-attempt records are erased when you delete your account. IP hashes and the remaining attempt records are cleaned up automatically every hour once 24 hours have passed since the last attempt window began. Deleting only the app does not automatically delete your server account or data.

Report records are kept for one year after they are handled and then deleted automatically, to prevent repeated violations and to handle disputes. They may be kept for that period even if the reporter deletes their account.

Photos are stored as files separate from room data, and only members of the same room can download them.

Content is stored on your device and on servers in the US West region of HANA's dedicated Supabase project. The anonymous account access token is stored in your device's Keychain. Information deleted from the server is removed from the service and active data; retention and deletion of backups and system logs may follow the infrastructure provider's policies.

Sharing, processors, and international transfer

Up to two people who join the same room with an invite code can access its shared content. The operator uses Supabase Pte. Ltd. to provide hosting, authentication, database, file storage, and sync, and the items above are transferred over the network and stored on servers in the US West region while you use the app. Wherever you live, using HANA means your data is processed in the United States. See the Supabase Privacy Policy. Except where required by law, we never sell content to third parties or use it for advertising.

Deletion

Leaving a room removes the room and its media from your device and removes your server membership. If another member remains, the shared content stays in their room; when the last member leaves, the room records and server files are deleted.

Confirming Me → Delete Account in the app deletes your anonymous account, profile, and the halves you shot from the server and your current device. Shared rooms keep only your friend's profile and halves. A technical marker without your name or photos may remain so that deleted halves don't reappear. If deletion fails, the app won't show it as complete and will ask you to retry or contact support.

Server files to be deleted are removed from storage, and related active records are deleted or updated so that only your friend's data remains. Device data is removed from local storage and the Keychain.

Your rights

You can change your name and profile photo and delete your account in the app. To request access, correction, deletion, or restriction of processing of the information we hold, or to make a request as a legal guardian, email us below. We may need to confirm that you own the account, and if the law limits a request we'll explain why. You can also contact us about international storage and processors.

Children and security

HANA is not directed to children, and we do not knowingly collect personal information from children. We protect data with device file protection, the Keychain, and server access controls, but no method of transmission or storage is completely secure.

Contact and changes

Privacy contact and operator: Keumbyul Hwang
Privacy questions: thevislstudio@gmail.com

If this policy changes, we'll update the effective date and let you know in the app or on the support page. The Korean version is the original; if the two differ, the version more favorable to you applies.