Pickkk Privacy Policy
v1 · Effective: October 9, 2026
한국어 · English
Pickkk ("the app") picks one person at random from the people in a photo. This policy explains what information the app handles, what it sends outside your device, and what it never sends.
This is a translation of the Korean policy. If the two differ, the Korean version prevails.
1. At a glance
| Information | How it is handled |
|---|---|
| Photos | Processed only on your device. Never sent to or stored on a server |
| Face detection results | Kept only in device memory and gone when you close the app |
| Account information | Not collected. There is no sign-up or login |
| Crash reports | If the app crashes, device information and error details are sent |
| App usage data | How features are used (what you tap, the number of people found, the condition used for a pick, etc.) is sent to Google Analytics. It never includes photos or individual face data |
| Server access logs | When the app talks to the Pickkk server to check for a new version, the IP address and request time are logged for 30 days |
| Advertising | None. The app does not use advertising identifiers |
2. Photos and face information
- Photos you choose or take are processed only on your device.
- Finding faces is done by Google ML Kit on the device. Photos are not sent anywhere.
- Face positions, expression scores and participant information exist only in device memory while you use the app. They are not stored and disappear when you close the app.
- The app does not identify faces or work out who someone is. It only looks at where people are and their expressions.
- Photos and individual face information (face positions, expression scores) are never used in usage data. Usage data only contains values that cannot tell who anyone is, such as the number of people found and the pick condition chosen by the app (4-3).
- When you "Save" a result image, it is saved only to the photos app on your device. When you "Share" it, it goes to the app you choose, and that app's policy applies from then on.
- You are responsible for the portrait rights of other people in the photos you choose, save or share. Please ask the people in the photo before saving or sharing it.
3. Permissions the app asks for
| Permission | Used for |
|---|---|
| Camera | Taking a photo to pick from |
| Read photo library | Choosing a photo to pick from |
| Add photos | Saving the result image to your photos app |
Permissions are requested only when you use the feature that needs them. If you decline, everything else keeps working.
4. Information the app collects and sends
The app does not collect information that directly identifies you, such as your name, contact details or an account. The following information is sent outside the device.
4-1. Crash reporting (Firebase Crashlytics)
- What: error details and where they happened, device model and OS version, app version, a per-install identifier
- Why: to find and fix the causes of crashes and errors
- Retention: up to 90 days under Google's policy
- Scope: photos, face information and pick results are not included
- Processor: Google LLC (Firebase privacy information)
4-2. ML Kit usage statistics
Google ML Kit, which the app uses for face detection, sends the following to Google.
- What: device information (manufacturer, model, OS), app package name and version, a per-install identifier, performance information such as processing time, error codes
- Photos are not included. (Google's disclosure)
4-3. App usage data (Google Analytics for Firebase)
To learn which features are used and where people get stuck, the app sends usage data to Google Analytics. Usage data is not sent to the Pickkk server.
- What
- Usage events: app launches, how a photo was chosen (gallery or camera), the number of people found, the number of participants, excluded people and winners, the pick condition chosen by the app, whether you picked again, shared or saved, links tapped on the "About" screen, and the app language
- Quality information: how long face detection took and whether it failed
- Screens viewed in the app: home, finding faces, choosing participants, picking, result, About, update notice
- A per-install identifier created by Google (a random value), and usage information such as first launch, engagement time and sessions
- App version, OS type and version, device manufacturer and model, language
- Approximate location (country and city level) estimated from the IP address. Google Analytics does not store the IP address itself
- Never collected: photos, face positions and expression scores, result images, names or contact details, advertising identifiers (Android advertising ID, iOS IDFA), precise location. Ad personalization is not used
- Why: improving features, finding errors and pain points, usage statistics, planning new features (including paid features)
- Retention: according to Google Analytics data retention settings (up to 14 months)
- Opting out: this cannot be turned off separately in the app. If you do not want it, you can delete the app. Deleting the app removes the per-install identifier, so earlier data can no longer be linked to that device
- Processor: Google LLC (Google Analytics data collection, Google Privacy Policy)
4-4. Server access logs
The app talks to the Pickkk server to check for a new version (when the app starts and when you open the "About" screen). The server keeps an access log when this happens.
- What: IP address, request time, requested address, information about the requesting app (user agent)
- Why: running the server, tracking errors, preventing abuse
- Retention: deleted automatically after 30 days
- Storage location: Google Cloud Logging
- Opting out: these logs are unavoidable when talking to a server and cannot be turned off separately
5. Sharing with third parties and processors
The app does not sell your personal information. To run the app, the following work is entrusted to the companies below, which process the information only for that purpose.
| Recipient | Work entrusted | Items |
|---|---|---|
| Google LLC | Crash analysis (Firebase Crashlytics) | Items in 4-1 |
| Google LLC | Face detection performance statistics (ML Kit) | Items in 4-2 |
| Google LLC | Usage statistics (Google Analytics for Firebase) | Items in 4-3 |
| Google LLC | Running the server, storing access logs (Google Cloud) | Items in 4-4 |
International transfers
Information that goes through Firebase Crashlytics, ML Kit and Google Analytics, and server access logs (Google Cloud Logging), may be sent to and processed on servers of Google LLC (in the United States and elsewhere). It is sent over the network while you use the app, with the items and retention periods described in section 4. These cannot be turned off separately in the app; if you do not want them, you can delete the app.
6. Deletion
- Information past its retention period is deleted from servers in a way that cannot be recovered.
- Settings stored on the device (the app language you chose) are deleted when you delete the app.
7. Age
The app is intended for adults aged 18 and over. It does not knowingly collect personal information from children under 14, and deletes any such information as soon as it learns of it.
8. Your rights
- The app does not create accounts, so there is no information such as a name or contact details to request deletion of.
- Usage data cannot be turned off separately in the app. Deleting the app removes the per-install identifier, so earlier data can no longer be linked to you.
- For any other request to access, correct, delete or stop processing your information, email us at the address below. We will handle it without delay and let you know the result.
9. Changes to this policy
When the policy changes, we will publish a new version and announce what changed and when it takes effect. Earlier versions remain available in the history below.
| Version | Effective | Changes |
|---|---|---|
| v1 (current) | October 9, 2026 | First version |
10. Contact and privacy officer
- Privacy officer: andnextlab
- Email: support@andnextlab.com
Users in Korea can also contact the following agencies about privacy violations.
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)