Privacy Policy

1. Personal Information We Collect

nyanQuest (hereinafter "the Service") collects the following personal information in order to provide the Service.

• Social login information: Email address, profile image (when linking a Google account)
• Service usage information: Nickname, style tags, adventure records, experience points
• Payment information: Payment method, amount, date/time (for premium subscriptions, processed via PortOne)

2. Purpose of Using Personal Information

• User identification and service provision
• TRPG party matching and solo quest functionality
• Premium subscription payment processing
• Service improvement and statistical analysis

3. Retention and Destruction of Personal Information

Personal information is destroyed immediately upon account deletion. However, where retention is required by applicable law, data is retained for the designated period.

• E-commerce transaction records: 5 years (E-Commerce Act)
• Login records: 3 months (Protection of Communications Secrets Act)

4. Provision of Personal Information to Third Parties

The Service does not provide personal information to third parties without user consent. However, the minimum necessary information is transmitted in the following cases.

• Payment processing: Payment information is transmitted to PortOne.
• AI story generation: Action/dialogue text entered by users is sent to the Google Gemini API to generate stories. This data is not used for AI model training and is not retained on Google servers after processing the API request.

4-1. AI-Generated Content Notice

Stories, NPC dialogue, and scenario progression in nyanQuest are generated by AI (Google Gemini). AI-generated content is marked with an 'AI-generated' label within the service (in compliance with AI regulations). User input data (character actions, dialogue) is used solely for story generation and is not utilized for AI model retraining or third-party marketing. Generated story data is stored in the user's account and is immediately deleted upon account deletion.

5. Measures to Ensure the Security of Personal Information

• Database encryption and access control (Supabase RLS)
• HTTPS encrypted communication
• Secure authentication via social login

6. User Rights

Users may view, modify, or delete their personal information at any time, and may cease processing of personal information by deleting their account.

7. Cookies and Automatic Data Collection

The Service uses cookies to maintain login sessions. Users may refuse cookies through browser settings; however, some features may be limited.

8. Privacy Officer

• Operator: HundredCore Korea
• Email: osu355@gmail.com

9. Changes to the Privacy Policy

This Privacy Policy may be amended in accordance with changes to applicable laws or service policies. Any changes will be announced through the Service.