Privacy Policy (insquare)
John.k (the "Operator") operates the private photo app insquare (the "Service") and follows applicable privacy law, including Korea’s Personal Information Protection Act.
- Privacy officer: John.k
- Access, deletion, and other requests: ilovejs97@gmail.com
- In-app contact: Profile → Send feedback (Google Form)
1. Information collected
The Service does not offer email-and-password registration. Accounts are created with Google, Apple, or Kakao sign-in.
(1) Account and profile
- Email from the sign-in provider (or a hidden Apple email if you turn that on), display name, and profile photo if provided
- An account number used to tell users apart (Firebase user ID)
- Nickname and profile photo set by the user
(2) User Content
- Photos, captions, and comments posted in rooms
- Room names, invite codes, membership lists, and join times
Photos are saved again on upload. Hidden capture data such as location (EXIF) is not kept.
(3) Device, session, and notifications
- A random device value created per install (not a phone serial or advertising ID), so one account stays signed in on one device
- Model name of the last sign-in device
- A device token and notification types for alerts
- Minimal app and phone type data for troubleshooting
(4) Advertising
- For free use, Google ads may appear under the room list. To show ads, an advertising identifier, network address, approximate device data, and ad taps or views may be processed. On iPhone, denying tracking still lets the app work; personalized ads may be limited.
Not collected: a password created by this app, contacts, precise location, payment data, or information aimed at children under 13.
2. Purposes
- Identifying users, signing in, and keeping a single-device session
- Sharing photos and comments in invite-only rooms (up to four people per room)
- Alerts the user enables (new posts, comments, joins, leaves)
- Abuse prevention, support, reports, and legal compliance
- Ads under the room list for free use
3. Processors and sharing
The Operator does not sell photos or use them in ads. Work is entrusted as follows:
| Processor | Role |
|---|---|
| Google LLC | Google sign-in; accounts, posts, and comments (Firebase Authentication, Firestore, Cloud Functions); push (FCM); ads (AdMob); feedback and reports (Google Forms) |
| Apple Inc. | Sign in with Apple |
| Kakao Corp. | Kakao sign-in |
| Cloudflare, Inc. | Storage and delivery of new photo files (R2 and Worker). A sign-in token is required to download. |
| Cloudinary, Inc. | Storage and delivery of some older photos. Those files may be reachable by URL. |
Photos are shown to members of rooms the user joins. They are not given to others for ads or marketing. They are not disclosed otherwise except as required by law.
The Operator cannot always prevent someone from seeing a shared screen, or a member from saving or capturing a photo on their own device.
4. Advertising
Google ads may appear under the room list. See Google’s Privacy Policy. User photos and comments are not sent for ad personalization.
5. Permissions
The app may request:
- Camera and photos: choosing post and profile images
- Notifications: alerts
- Network: sign-in, uploads, ads
- (iPhone) Tracking: personalized ads. Core features work if denied.
Denying a permission only limits that feature.
6. Retention and account deletion
Partial deletion in the app
Users can delete their own posts and comments in the app. The matching photo file on the server is then removed. Copies already on another member’s device or in a cache may remain for a while.
Leaving a room or having the owner delete it follows the in-app deletion flow for the user’s posts in that room. Other members’ posts remain.
Account deletion
Profile → Delete account removes:
- The sign-in account and profile
- The user’s posts, comments, and photo files
- Sign-in sessions on all devices
Signing in again with the same social account starts a new account.
If deletion is incomplete, email ilovejs97@gmail.com. After identity checks, the request is handled within a reasonable time.
Records may be kept longer only if the law requires it.
7. Children
The Service is not directed at children under 13 and does not knowingly collect their personal information. Accounts of users under 13 are deleted.
8. User rights
Users may request access, correction, deletion, or restriction by email. In the app they can edit a profile, delete Content, and delete the account.
9. Storage outside Korea
Sign-in, photo files, posts, ads, and alerts may be processed on servers outside Korea, only for the purposes above.
10. Security
Connections are encrypted. New photo files cannot be downloaded without sign-in. Internet transmission and storage cannot be guaranteed completely secure.
11. Changes
Material changes are posted on this page with the revision date.
12. Contact
- Privacy officer: John.k
- Email: ilovejs97@gmail.com
This Policy takes effect on August 22, 2026.