Privacy Policy of Tenada

This document informs Users about the technologies that help this Application to achieve the purposes described below. Such technologies allow the Owner to access and store information (e.g. by using a Cookie) or use resources (e.g. by running a script) on a User’s device as they interact with this Application.

1. Owner and Data Controller

Tenada Corp.
Address: K-square Magok Tower1 335, 105-7, Magokjungang-ro, Gangseo-gu, Seoul, Republic of Korea
Contact email: contact@tenadacorp.com

2. Types of Data Collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are:

• Face Data (Biometric Data): Facial feature points extracted from uploaded photos to apply AI styles.
• User Content: Photos, images, and videos uploaded by the user for editing or AI generation.
• Usage Data: Application opens, button clicks, session duration, launches, and interaction data.
• Device Information: Operating system (OS), device model, geography/region, language settings.
• Identifiers: Unique device identifiers for advertising (Google Advertiser ID or IDFA), UUID, and Crash Data.

3. Mode and Place of Processing the Data

Methods of processing & Security

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT-enabled tools (including secure cloud servers with encryption in transit and at rest), following organizational procedures and modes strictly related to the purposes indicated.

Place of processing & International Transfer

The Data is processed at the Owner's operating offices (South Korea) and in any other places where the parties involved in the processing are located.

Transfer to the United States: Specifically for the AI generation features, your uploaded photos and Face Data are transferred to and processed on servers located in the United States (Google Cloud Platform). By using the AI features, you explicitly consent to this transfer for the performance of the service.

Retention time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

• Face Data & AI Input Images: Retained for a maximum of 24 hours and then permanently deleted.
• Usage & Analytics Data: Retained for the duration necessary for analytics and service improvement purposes.

4. Detailed Information on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

A. AI Image & Video Generation (Core Service)

This Application uses Artificial Intelligence (AI) to generate stylized images and videos based on user inputs.

• Service Provider: Google Cloud AI / Vertex AI (Google LLC)
• Data Processed: Original User Photos, Face Data (Facial feature points).
• Purpose: To analyze facial structures and apply AI effects to generate new content requested by the User.
• Privacy Note: Data is not used for identification. It is strictly limited to the generation process and deleted within 24 hours.

B. Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

• Service Provider: Google Analytics for Firebase (Google LLC)
• Data Processed: Application opens, Application updates, device information, geography/region, in-app purchases, number of sessions, operating systems, session duration, Usage Data.
• Place of processing: United States.

C. Infrastructure Monitoring

This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance, and troubleshooting can be improved.

• Service Provider: Crashlytics (Google LLC)
• Data Processed: Crash data, device information, UUID.
• Place of processing: United States.

5. The Rights of Users (Global & GDPR)

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following:

• Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data (e.g., via app settings).
• Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
• Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Have their Personal Data deleted. Users have the right to obtain the erasure of their Data from the Owner.
• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document (contact@tenadacorp.com). These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

6. Children's Privacy (COPPA)

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

7. Information for Users in Specific Regions

Information for Users in the United States (CCPA/CPRA, VCDPA, etc.)

This section applies to Users who are residents in the United States. We collect the categories of personal information listed in Section 2 (Types of Data Collected).

• Sale of Personal Data: We do not sell your personal information (such as your photos or Face Data) to third parties for monetary value.
• Sharing of Personal Data: We may share technical identifiers (Device ID, Advertising ID) with analytics providers (like Google) to improve our service and marketing, which may be defined as "sharing" under California law. You have the right to opt-out of such sharing through app settings.
• Your Rights: You have the right to know, access, correct, and delete your personal information. You can exercise these rights by contacting us. We will not discriminate against you for exercising your privacy rights.

Information for Users in Brazil (LGPD)

This section applies to Users in Brazil. We process your personal information based on your consent and for the performance of the contract (Service usage).

• You have the right to confirm the existence of processing, access your data, correct incomplete/inaccurate data, and request anonymization or deletion of unnecessary data.
• Sensitive Data: We process your Face Data (Biometric data) only with your specific consent for the purpose of AI generation.

8. Additional Information

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

개인정보처리방침 (Privacy Policy)

태나다(Tenada)(이하 "회사")는 이용자의 개인정보를 중요시하며, 「개인정보 보호법」 등 관련 법령을 준수하고 있습니다. 회사는 본 방침을 통하여 이용자가 제공하는 개인정보가 어떠한 용도와 방식으로 이용되고 있으며, 개인정보보호를 위해 어떠한 조치가 취해지고 있는지 알려드립니다.

1. 개인정보의 수집 항목 및 목적

회사는 서비스 제공을 위해 필요한 최소한의 개인정보를 수집하고 있습니다.

2. 개인정보의 보유 및 이용 기간

회사는 원칙적으로 개인정보 수집 및 이용 목적이 달성된 후에는 해당 정보를 지체 없이 파기합니다.

• AI 생성을 위한 원본/얼굴 데이터: 생성 완료 및 다운로드 대기 시간(최대 24시간) 경과 후 즉시 파기.
• 서비스 이용 데이터: 서비스 종료 시 또는 법령에 따른 보존 기간까지.

3. 개인정보의 안전성 확보 조치 (암호화)

회사는 이용자의 개인정보를 취급함에 있어 개인정보가 분실, 도난, 유출, 변조 또는 훼손되지 않도록 안전성 확보를 위하여 다음과 같은 기술적/관리적 대책을 강구하고 있습니다.

• 전송 구간 암호화: 앱과 서버 간의 모든 데이터 전송은 SSL/TLS 보안 연결을 통해 암호화되어 전송됩니다.
• 저장 시 암호화: 클라우드 서버에 저장되는 중요 데이터는 암호화되어 저장됩니다.

4. 개인정보의 제3자 제공 및 위탁 (국외 이전)

회사는 원활한 AI 서비스 제공을 위해 다음과 같이 개인정보 처리를 위탁(국외 이전)하고 있습니다.

• 이전받는 자: Google LLC (Google Cloud Platform, Vertex AI) 및 글로벌 AI 기술 파트너
• 이전 국가: 미국 (USA) 등 데이터 센터 소재지
• 이전 항목: 사용자가 업로드한 이미지, 얼굴 특징점 데이터
• 이전 목적: AI 콘텐츠 생성 연산 처리
• 보유 및 이용 기간: 처리 완료 후 24시간 이내 파기

또한, 앱 통계 분석 및 오류 모니터링을 위해 Google Firebase Analytics, Crashlytics를 사용하고 있습니다.

5. 이용자 및 법정대리인의 권리와 행사 방법

이용자는 언제든지 자신의 개인정보 조회, 수정, 삭제를 요청할 수 있으며, 동의 철회를 요청할 수 있습니다.

• 아동의 개인정보보호: 본 서비스는 만 13세(한국 기준 만 14세) 미만 아동을 대상으로 하지 않으며, 해당 연령 미만의 아동 정보를 고의로 수집하지 않습니다.
• 권리 행사 방법: 앱 내 설정 또는 이메일(contact@tenadacorp.com)을 통해 요청
• 회사는 이용자의 요청에 대해 지체 없이 조치하겠습니다.

6. 개인정보 보호책임자 및 연락처

회사는 개인정보 처리에 관한 업무를 총괄해서 책임지고, 개인정보 처리와 관련한 정보주체의 불만처리 및 피해구제 등을 위하여 아래와 같이 개인정보 보호책임자를 지정하고 있습니다.

• 회사명: (주)태나다 (Tenada Corp.)
• 주소: 서울특별시 강서구 마곡중앙로 105-7, K-스퀘어 마곡 타워1 335호
• 이메일: contact@tenadacorp.com

7. 개정 전 고지 의무

본 개인정보처리방침의 내용 추가, 삭제 및 수정이 있을 경우 개정 최소 7일 전에 앱 내 공지사항을 통하여 고지할 것입니다.

공고일자: 2025년 12월 9일
시행일자: 2025년 12월 9일