Privacy Policy
1. Information we collect
| What | When | Required? |
|---|---|---|
| Email address, nickname, sign-in method (e.g. Google) | Sign-up and sign-in | Yes |
| Profile photo, bio, interests | Profile setup | Optional |
| Birth year and birthday | K-Saju and zodiac groups | Optional |
| Messages, photos, posts, comments, likes | While using the app | Optional |
| Contacts: phone numbers and email addresses in your device contacts (names, notes etc. are never sent; hashed on our server for matching) | When you agree to Find friends from contacts in the app and allow contacts access | Optional |
| Your own phone number (stored only as a hash) | When you turn on letting friends find you by your number | Optional |
| Country/city estimated from IP, language, device type, push token, sign-in history | Automatically | - |
To improve the service and prevent abuse, we keep records of sign-ins, views and posts for 90 days.
Contacts (optional): only if you agree to Find friends from contacts in the app and allow contacts access, we send the phone numbers and email addresses in your device contacts (up to 3 emails per contact) to the KFANZIP server (kfanzip.com) over an encrypted connection (HTTPS). Names, notes, photos and other contact details are never sent. If you don’t agree, we never read your contacts.
Purpose: only to find your friends who use KFANZIP. Our server immediately turns each number and address into an irreversible value (HMAC-SHA256 hash) for matching, and never stores or logs the original numbers or addresses.
Retention: while Settings › Let friends find me › Contacts is on, we keep only these hashes (up to 10,000) for People you may know and for auto-adding friends from contacts (when an email or number in your contacts matches someone’s verified KFANZIP sign-in email or Kakao-verified number, or you both have each other’s number — now or later — you both become friends; you can turn this off in Settings › Auto-add friends from contacts). Turning the switch off deletes them immediately; deleting your account deletes them along with your other data.
Your phone number (optional): if you register your number so friends can find you, we store only its hash, and delete it when you tap Stop or delete your account. So friends can find you by the email address in their contacts, we also store your verified sign-in email only as a hash (deleted with your account). If you agree to share your phone number when signing in with Kakao, that Kakao-verified number is registered as your number and stored only as a hash (deleted the same way).
We never share or sell contact data or its hashes to other companies, and never use them for advertising (storage uses only the service providers in section 4).
2. How we use it
To run your account and sign-in; provide chats, groups, boards and My ZIP; translate content; send notifications; handle reports and prevent abuse; and improve the service with aggregate statistics.
We never sell your data or use it for advertising.
3. How long we keep it
After you ask to delete your account we keep your data for 7 days, then erase it. Signing in again within 7 days cancels the deletion.
Messages you sent to others stay in their chats with your name and photo removed, so their conversation history isn’t broken.
Report-handling records are kept for up to 1 year for dispute handling, or longer when the law requires.
4. Service providers
| Provider | Purpose |
|---|---|
| Supabase Inc. | Database, file storage, sign-in |
| Vercel Inc. | Web hosting |
| Google LLC | Translation (Cloud Translation), Google Sign-In, push notifications (Firebase Cloud Messaging), web analytics (Google Analytics) |
| Apple Inc. | Sign in with Apple |
| Kakao Corp. | Kakao Login |
| LY Corporation (Japan) | LINE Login |
| DeepL SE (Germany) | Translation (backup) |
| Cloudflare, Inc. | Bot check at email sign-in (Turnstile) |
| Resend | Forwarding 1:1 inquiries to our team by email |
| Anthropic, PBC (USA) | Translating a line when you tap "Translate with Claude". We keep only the translation, not the original chat text or who sent it. |
5. International transfers
Apart from Kakao, these providers are based outside Korea (mainly the US; LINE in Japan, DeepL in Germany). Data each feature needs is sent to their servers over the network when you use it. Our database is hosted in the Seoul region.
If you don’t want your data transferred, you can delete your account, but you won’t be able to use the service.
6. Your rights and account deletion
You can view and edit your information any time (Settings › Profile). To delete your account, tap Delete account at the bottom of the app’s Settings or visit kfanzip.com/space/en/delete-account.
You can also email us to access, correct, delete or stop processing your data. We reply within 10 days.
7. Security
Encrypted connections (HTTPS), least-privilege access, row-level database security, re-processing of uploaded photos, two-factor authentication for admins, and regular backups.
8. Users under 18
KFANZIP is for people 18 and older. If we learn we collected data from someone under 18, we delete it promptly.
9. Privacy officer
박지영 (Park Jiyoung) · contact@trijune.com · 0507-1338-9149
트라이준 (TriJune) · 653-30-01907 · 전북특별자치도 전주시 완산구 화산천변로 50
10. Changes
We’ll announce changes in the app and on the web at least 7 days before they take effect.