Privacy Policy

Last Updated: March 24, 2026

DABOMLAB (the "Company") respects your right to privacy and is committed to complying with the Personal Information Protection Act of the Republic of Korea, as well as global data protection regulations such as GDPR and CCPA.

1. Data We Collect

Social Login Info: Email address, name, profile picture URL, unique identifier (UUID)
Uploaded Data: Facial/body photos uploaded for the simulation service (portrait rights data)
Generated Result Data: AI-generated simulation images (stored for up to 3 days)
System Logs: IP address, browser environment, visit history, payment history

2. Purpose of Use

User identification and providing virtual simulation services
Service management including payment processing and refunds
Preventing fraudulent use, enhancing security, and complying with legal obligations
Statistical analysis for service improvement (anonymized processing)

3. Handling of Photos and Generated Images

The original photos uploaded by users for simulations are used temporarily for AI processing and are permanently destroyed from the system immediately after the result is generated.

AI-generated result images are stored on the server for up to 3 days for gallery viewing purposes and are automatically and permanently deleted thereafter.

The Company does not store users' original facial data on its servers for monitoring purposes, nor does it use such data for AI model training.

4. Retention and Use Period

In principle, the Company destroys personal information without delay once the purpose of collection and use is achieved.

However, the following information is retained for the specified periods:

Generated result images
Period: 3 days (auto-deleted)
Personal info upon account deletion
Reason: Preventing abuse and handling complaints
Period: 30 days
E-commerce records
Reason: Act on Consumer Protection in Electronic Commerce
Period: 5 years
Log records
Reason: Protection of Communications Secrets Act
Period: 3 months

5. Third-Party Data Sharing

The Company uses the following third-party services to operate the Service, sharing only the minimum necessary information:

In-App Purchase (Payment Processing): Transaction processing via in-app purchases
Supabase (Data Storage): Member information and service data storage and management
AWS S3 (Image Storage): Temporary storage of generated images (3 days)
Google OAuth (Authentication): Social login authentication processing

6. Cookies and Analytics

The Company may use cookies to enhance your experience. Cookies store information necessary for service operation, such as login status and language preferences. You can reject cookie storage through your browser settings, but some features may be limited.

7. User Rights (GDPR & CCPA)

Users may exercise the following rights regarding their personal information:

Right to Access: Verify collected personal information and purpose of processing
Right to Rectification: Request correction of inaccurate personal information
Right to Erasure: Request account deletion and permanent destruction of records (via the 'Withdraw' button in Settings)
Right to Data Portability: Request a copy of data (via customer support)

8. Contact

For privacy-related inquiries, please submit your request through the Customer Support menu within the Service.