Privacy Policy

This Policy applies to the Dontpaint app and website provided by Dotstory (the “Company”). The Company processes personal information in accordance with Korea’s Personal Information Protection Act and other applicable laws, and publishes this Policy so that users can understand how their information is handled.

1. Personal information we process and purposes

Dontpaint runs on your device without an account, and the Company does not collect your personal information or artwork through the app. The website covered by this Policy may provide visit analytics. The following describes the information the Company may process and the information the app handles only on your device.

1. Inquiries and dispute resolution: If you contact the Company by email or phone, the Company uses your email address or phone number, name if provided, inquiry and attachments, and response history to answer you and resolve disputes.
2. Artwork and app data (processed only on your device): Drawing documents (.drw), imported images, PSD and audio files, custom brush-tip images, timelapse recordings, and app settings such as colors, brushes, and tools are stored in the app’s storage on your device. The Company does not receive or access this information. Even if your artwork contains an identifiable image or information about a person, the app does not send it off your device.
3. Importing, exporting, and sharing files: The app reads only files that you select in the Files app. Exported or shared results go only to the location or app you choose. If you save to a cloud location such as iCloud Drive or send a file to another app through the share sheet, that service’s policy applies to its subsequent handling.
4. Photo library: The app uses iOS “Add Photos” permission only when you save an exported drawing, timelapse, or animation video to Photos. It does not read photos in your library. You can change this permission in your device settings at any time.
5. Clipboard: The app checks whether the clipboard contains an image so it can show a paste option. It reads the image and places it on the canvas only when you choose to paste.
6. Apple Pencil and touch input: Input such as pressure, tilt, and position is used only to create strokes. It is not stored or transmitted separately from the artwork.
7. Diagnostics provided by Apple: If you enable “Share with App Developers” in your device’s analytics settings, Apple may provide the Company with crash reports and app usage statistics that do not identify you. The Company uses them only to fix errors and improve quality. You can turn this setting off in your device settings at any time.
8. App downloads and payments: Apple’s App Store handles app downloads and any applicable payments. The Company does not receive or store your Apple Account information or payment details such as card numbers.
9. Website visit analytics (with consent): Firebase Analytics may collect the URL, title, and referring page of a visit; browser language; browser, device, operating system, and screen-size information; visit and interaction events; and visitor identifiers and session information. Google Analytics may estimate your approximate location from your IP address. Google states that it does not store IP addresses. This information is used to understand and improve use of the website. The analytics SDK is not loaded and analytics information is not sent before you consent.

2. Processing and retention periods

The Company retains personal information only for as long as needed for the purpose for which it was collected. When that purpose ends, the Company destroys the information without delay unless the law requires it to be retained.

• Inquiries: Retained for as long as needed to handle the inquiry and resolve any dispute. Records of consumer complaints and dispute resolution may be retained for three years under Korea’s Act on the Consumer Protection in Electronic Commerce.
• Artwork and settings on your device: The Company does not retain them. They are removed from your device when you delete them in the app or delete the app. Device backups, including iCloud backups, and files you export elsewhere may remain according to your settings and the relevant service’s policy.
• Diagnostics provided by Apple: Retained according to Apple’s retention policy. The Company does not combine them with information that identifies you.
• Website visit analytics: Retained for the period configured for the Google Analytics property. Your consent choice is stored in your browser’s local storage. You can change it with “Cookie settings” at the bottom of the website or by clearing browser storage.

3. Disclosure and processing by service providers

The Company does not sell personal information and does not disclose it to third parties unless required by law or you separately consent. The Company entrusts the following service providers with the work needed to provide its services.

The Company oversees its service providers as required by applicable law and updates this Policy if the entrusted work or a service provider changes.

4. International transfers

Information may be transferred to Google LLC when you send an inquiry email or consent to website analytics.

If you do not want website visit analytics, decline consent or change your choice in “Cookie settings” at the bottom of the website. If you do not want an inquiry email transferred internationally, you can call +82-10-6291-6041 instead. All drawing features in the app remain available regardless of international transfers. You can direct questions or objections about international transfers to the contact in Section 10.

5. Destruction of personal information

The Company destroys personal information without delay when its retention period ends or its purpose has been fulfilled. Electronic files are deleted so they cannot be recovered; paper documents are shredded or incinerated. Information that must be retained by law is stored separately from other information and destroyed when its retention period ends.

6. Your rights and how to exercise them

You may request access to, correction or deletion of, or suspension of processing for your personal information held by the Company, such as inquiry records. Contact the Company using the details in Section 10. After verifying your identity, the Company will respond without delay in accordance with applicable law and let you know the result. If the law requires information to be retained and it cannot be deleted immediately, the Company will explain why and for how long it will be retained. You may also make a request through a representative; in that case, documentation confirming the authorization may be required.

Dontpaint has no user accounts, so there is no separate account-deletion process. The Company does not hold artwork or settings from the app; you can delete them in the app or remove them by deleting the app.

7. Personal information of children under 14

Dontpaint can be used without an account regardless of age, and the Company does not collect children’s personal information through the app. If the Company learns that a child under 14 has sent an inquiry, it will verify consent from the child’s legal representative. If that consent cannot be verified, the Company will promptly destroy any information beyond what is needed to respond.

8. Cookies and usage records

The website loads Firebase Analytics only if you consent to visit analytics. It may then process visited pages, referral sources, language, browser, device and operating-system information, and interaction events. Analytics cookies may be stored to distinguish visits. Analytics scripts do not run before consent. You can change your choice at any time using “Cookie settings” at the bottom of this page. You can also delete analytics cookies and browser storage in your browser settings.

Your analytics consent choice is stored in your browser’s local storage. Firebase Hosting, which serves the website, may process access logs such as the time of access, request path, IP address, and browser information for security and incident response. The app does not use the advertising identifier (IDFA) or app analytics tools, and it does not send artwork or app usage history to company servers.

For information about Google Analytics data processing, see Google Analytics data safeguards.

9. Safeguards

Artwork and settings are stored in the iOS app sandbox, where other apps cannot access them. If you set a passcode on your device, iOS data protection encrypts them. The Company limits access to inquiry emails to the people who need it and regularly reviews reasonable technical and organizational safeguards against loss, theft, leakage, forgery, alteration, or damage.

10. Privacy contact and inquiries

You may contact the following organizations for advice or to report a personal information infringement in Korea.

• Personal Information Infringement Report Center: privacy.kisa.or.kr, 118 (within Korea)
• Personal Information Dispute Mediation Committee: www.kopico.go.kr, +82-1833-6972
• Supreme Prosecutors’ Office: www.spo.go.kr, 1301 (within Korea)
• Korean National Police Agency: ecrm.police.go.kr, 182 (within Korea)

11. Changes to this Policy

If laws, the service, or the information processed changes, the Company will update this Policy and announce its effective date and the changes in the app or on the website. Material changes will be announced before they take effect.

This Policy is effective as of October 22, 2026.