ENIKKI Privacy Policy

Effective date: June 18, 2026

NORRI STUDIO ("Company", "we", "us") operates the ENIKKI app ("Service") and handles user personal data with care. This English version is provided for convenience. If there is any conflict between this version and the Korean version, the Korean version will prevail.

Diary entries, drawings, photos, and other content created by users are stored only on the user's device and in the user's own iCloud account. We do not collect or access that content. This Policy explains the limited personal data that may be processed while operating the Service.

1. Personal Data We Process and How We Collect It

We process only the minimum information needed to provide and operate the Service.

  1. User content (not collected by us): Diary entries, drawings, photos, and other user-created content are stored only on the user's device and in the user's own iCloud account. They are not sent to our servers, and we do not access them.
  2. Advertising-related information (collected automatically): The Service displays ads through Google AdMob. In this process, advertising identifiers such as IDFA/advertising ID, device information, approximate location at country or region level, and ad views or interactions may be collected and processed. If ads are removed through a paid subscription, ad-related collection does not occur for advertising purposes.
  3. Usage statistics and diagnostic information (collected automatically): To improve quality, stability, and performance, we may collect non-personally identifying app usage statistics, feature usage events, error reports, and crash diagnostics through Firebase Analytics and Firebase Crashlytics.
  4. Customer inquiries: If a user contacts us by email or another channel, we may process the user's email address and information included in the inquiry.
  5. Payment information: Paid subscriptions are processed through the Apple App Store. We do not collect card numbers or other payment method details. We may verify purchase receipts and transaction identifiers from Apple to confirm subscription status.

2. Purposes of Processing Personal Data

The information we process is used only for the following purposes.

  1. Providing the Service: Providing ENIKKI app features and confirming paid subscription status.
  2. Providing advertising: Displaying and measuring ads through Google AdMob, excluding paid subscribers.
  3. Improving the Service: Improving stability and quality through usage statistics and error diagnostics.
  4. Customer support: Responding to inquiries and sending necessary notices.
  5. Legal compliance: Complying with applicable laws and responding to disputes.

3. Third-Party Provision, Processing Delegation, and International Transfer

We do not provide personal data to third parties without user consent. However, we use tools provided by the following service providers to operate the Service, and some information may be processed by or transferred internationally to those providers.

  1. Google (Google AdMob, Firebase Analytics, Firebase Crashlytics): Advertising, ad performance measurement, app usage analytics, and crash diagnostics. Processed information may include advertising identifiers, device information, usage events, and diagnostic data. For details, see Google's policy (policies.google.com/privacy).
  2. Apple: Subscription payment processing through the App Store and storage of user content through the user's own iCloud account. For details, see Apple's policy (apple.com/legal/privacy).

These providers may operate servers outside the user's country or region.

4. Retention Period

  1. User content: Stored on the user's device and in the user's own iCloud account until the user deletes it from the app or iCloud. We do not store it separately.
  2. Advertising, analytics, and diagnostic information: Retained according to the policies and retention periods of the providers that process the information, such as Google and Firebase.
  3. Customer inquiry information: Retained for the period necessary to respond to the inquiry, comply with applicable laws, and handle disputes, then deleted.
  4. Legally required retention: Retained for the period required by applicable law, where such retention is required.

5. User Rights and How to Exercise Them

  1. Viewing, editing, and deleting content: Diary entries, drawings, and photos can be viewed, edited, and deleted directly in the app. They can also be removed by deleting the app or deleting the content from iCloud.
  2. Opting out of personalized ads: Users can limit ad tracking or reset the advertising identifier in device settings. On iOS, this is handled through Settings > Privacy & Security > Tracking or Apple's App Tracking Transparency controls.
  3. Managing subscriptions: Paid subscriptions can be reviewed and canceled in the device's App Store account settings.
  4. Privacy inquiries and rights requests: Users may contact us at the address below, and we will respond without undue delay.

6. Children's Privacy

The Service is not intended to collect personal data from children under the age of 14. If a child uses the Service, we recommend use under the guidance of a legal guardian, who may exercise rights regarding the child's personal data.

7. Security Measures

We take the following measures to protect the personal data we process.

  1. Data minimization: We process only the minimum information needed to provide the Service and do not store user content on our servers.
  2. Protected transmission: We use encrypted connections where needed for communications with external service providers.
  3. Access control: We limit access to information obtained through customer support and similar channels.
  4. Provider management: We review the privacy policies of external providers used for advertising, analytics, and diagnostics.

8. Privacy Contact

We respond to privacy-related inquiries sincerely and without undue delay.

  1. Privacy contact: contact@norristudio.com

9. Changes to This Privacy Policy

This Policy may be updated due to changes in laws, policies, or the Service. When updated, the effective date and changes will be announced on this page. Significant changes may also be announced in the app in advance.

10. Remedies for Privacy Infringement

For privacy infringement counseling or reporting in Korea, users may contact the following organizations.

  1. Privacy Infringement Report Center (118 / privacy.kisa.or.kr)
  2. Personal Information Dispute Mediation Committee (1833-6972 / www.kopico.go.kr)
  3. Supreme Prosecutors' Office Cyber Investigation Division (1301 / www.spo.go.kr)
  4. Korean National Police Agency Cybercrime Reporting System (182 / ecrm.police.go.kr)