Privacy Policy

1) Developer and Contact

Developer: dasihagi Inc.
Privacy Officer: Kihwan Kim (CEO)
Contact: support@dasihagi.com

2) Personal Information We Process

• Account information: email address, unique user identifier, and basic account information provided during sign-in
• User input: story settings, character descriptions, and choices and text entered during play
• Stories and generated content: stories, progress records, and related media content generated or stored while you use the service
• Usage and payment information: usage status, subscription or purchase status, usage limits, and identifying information needed to verify app store payments
• Technical information: error logs, request status, and technical metadata needed to operate the service, such as file type, size, and creation time
• Content report information: when you report generated content, the reported scene, the reason for the report, and the record of receipt

3) Purposes of Processing

• Account creation, sign-in, user identification, and management of access to the service
• Generation of AI-based stories and related content based on your input
• Saving story progress and providing the continue feature
• Purchase and subscription status, usage limits, payment verification, and prevention of fraudulent use
• Error analysis, improvement of service stability, and responding to customer inquiries
• Receipt and legal and safety review of reports about generated content
• Compliance with applicable laws, app store policies, and security requirements

4) AI Processing and External Processing

Dasihagi uses the processors listed below to generate the content you request and to provide the service reliably. Processors process data only on our behalf and under our instructions (this is not a provision of data to third parties), and provide the same level of personal information protection as this policy. In this process, your input, story context, and data needed for generation requests may be transferred to systems outside the Republic of Korea. We do not sell your content.

• AI content generation and relay: OpenRouter, Inc. · Runware Ltd · Replicate, LLC · Features & Labels Inc. (fal) · Cloudflare, Inc. · Google LLC. Data transferred: story settings, progress context, choices and text entered during play, and game screen and character images referenced for generation. We do not collect your photos, and we do not include your account email or identifier in generation requests. Privacy policy of each processor: OpenRouter · Runware · Replicate · fal · Cloudflare · Google Cloud
• Operating infrastructure: Google Cloud Platform (Google LLC) — server operation, databases, and file storage and delivery.
• App store payments: Google Play, Apple App Store — verification of purchases and subscriptions and checking of payment status. Payments are transactions between you and each store; we receive only purchase and subscription status and verification tokens, and we do not receive payment card information.
• Google Firebase Crashlytics (optional): Google LLC — analysis of app crashes and stability issues. Collection is off by default and is turned on only if you explicitly consent (opt in) in the app settings. The data processed are crash stack traces, app and device diagnostic information, and device or installation identifiers. Firebase

Processors may use their own sub-processors in the course of processing; in that case, the processor is responsible for ensuring that the same level of personal information protection described above applies. Whether processors and their sub-processors use the inputs and outputs they receive to improve their own services is governed by each processor's privacy policy.

Error reports recorded directly by the app do not include story or settings content you entered, your email, sign-in information, or payment information. If you consent, native crash information collected automatically by Crashlytics is subject to Google's collection policy. We do not set user identifiers in Crashlytics, and we do not use Firebase Analytics.

5) Retention and Deletion

• Account, books, progress, and per-account usage records: once account deletion is processed, we stop access to the service and remove them as data subject to deletion.
• Content reports: normalized evidence and delivery receipts kept for the legal and safety review of a report are retained for up to 30 days from creation and then deleted. Exceptions may apply to the extent of a legal retention obligation or a valid preservation request.
• Payment verification and undelivered benefits: the minimum records needed for payment verification, prevention of fraudulent use, and restoration of undelivered paid benefits may be retained for up to 30 days after account deletion. Benefits not yet delivered can be restored once, only if you sign up again with the same store account. After this period, eligibility for restoration expires.
• Minimal identifier to prevent re-registration: to prevent a deleted account from being automatically linked to another account, we may retain for up to 30 days a one-way processed minimal identifier, not the original email address or sign-in token.
• Shared and private-scope caches: AI-generated caches that are reused in common across multiple users may be retained independently of account deletion. Derivatives of private materials you provided yourself are unlinked from your account so they can no longer be accessed, and are not automatically relinked to another account after deletion.
• Google Firebase Crashlytics: under Google's standard retention policy, crash reports and related identifiers are retained for 90 days, after which the removal process begins.
• Backups and security and error records: backups, security logs, and error records are retained for a limited period needed for operations and then deleted.

Personal information whose retention period has expired or whose processing purpose has been achieved is destroyed without delay. Electronic files are deleted by a method that makes them unrecoverable, and backups are deleted sequentially according to a set schedule.

In the app, you can delete your account under Settings → Account → Delete account. If you cannot access the app, please use the account deletion information page or support@dasihagi.com. Deleting your Dasihagi account does not automatically cancel a subscription purchased through the App Store or Google Play. You must cancel the subscription separately in the subscription management screen of the store where you paid.

If you opt out of Crashlytics, the app deletes unsent reports and stops future collection and sending. Because we do not set user identifiers in crash reports, we cannot locate and immediately delete, by Dasihagi account, reports that have already been uploaded to Google. Reports already uploaded follow the 90-day external retention and removal process described above.

6) Security Measures

• Encryption in transit (TLS)
• Encryption at rest (applied by default by the cloud provider)
• Restricted access to storage and databases
• Least-privilege service account permissions
• Security checks through error and access logs
• Protection of payment and subscription verification procedures

7) Children's Personal Information

Dasihagi is not directed to children under the age of 13 or under the minimum age set by local law. We do not knowingly collect personal information from children, and if we become aware of such collection, we take the necessary measures.

8) International Transfers

In the course of providing the service, personal information is processed on processors' systems outside the Republic of Korea, as described below. Transfers take place on a per-request basis when you use the relevant feature, over encrypted communications (TLS). The retention and use period lasts until processing of our request is complete, and each processor's retention of operational records is governed by that processor's privacy policy.

• Japan: Google LLC (Google Cloud Platform, Tokyo region) — storage of accounts, stories, progress records, and media files, and operation of the service
• United States: OpenRouter, Inc. · Replicate, LLC · Features & Labels Inc. (fal) · Cloudflare, Inc. (processed on its global edge network) · Google LLC — AI content generation and relay, app store payment and subscription verification (Google Play), and crash analysis (if you consent)
• United Kingdom, European Union, United States: Runware Ltd (UK entity; processing regions in the European Union and the United States) — AI content generation

The data transferred and the purposes are as described in section 4) above, and deletion follows section 5). Each processor's contact information can be found through the privacy policy links in section 4). You may request to refuse international transfers by contacting support@dasihagi.com. However, because the transfers above are essential to the story generation and storage features, if you refuse, we cannot provide those features, and processing stops only through account deletion.

9) Your Rights

Under applicable law, you may request access to, correction of, deletion of, or suspension of processing of your personal information, or deletion of your account. Please send requests to support@dasihagi.com. We may need to verify your identity before processing a request.

10) Remedies for Infringement of Rights

If you need to report or seek advice about an infringement of your personal information, you may contact the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) or the Privacy Infringement Report Center, KISA (118, privacy.kisa.or.kr).

11) Changes to This Policy

This Privacy Policy may be revised due to changes in the service or changes in laws or policies. If there are material changes, we will notify you through an in-app notice or this page.

12) Contact

For privacy inquiries, please contact support@dasihagi.com.