Yoinky Privacy Policy

Effective date: 2026-07-15 · Version: 1.0

This page is an English translation provided for convenience. If the two versions differ, the Korean version prevails한국어 원문.

Yoinky is an iOS app that works on your device, with no accounts and no servers of its own. This policy explains what personal information Yoinky processes — the items, purposes, retention, outsourcing, and cross-border transfers — and your rights.

1. Summary

The anonymous identifier is not an account identifier that tells us who you are, but it can link activities from the same installation. So we do not claim complete anonymity — the sections below explain exactly what is processed.

2. Data Controller and Privacy Officer

ItemDetails
Operator / RepresentativeJin Taewoo (진태우), individual developer
Privacy OfficerJin Taewoo (same as the operator)
Contact / rights requests[email protected]

Inquiries and requests to exercise your rights are received at the email address above. A physical address will be added only if a separate legal obligation requires it.

3. Personal Information We Process

In this policy, 'cutout' refers to the sticker feature and 'scrapbook' to the Scrapbook (poster canvas); the event names below (cutout_, scrapbook_) use these internal names.

3.1 Information Processed Only on Your Device (Not Sent Externally)

The following information is processed and stored on your device for app functionality, and is not sent externally to PostHog or anywhere else.

InformationPurposeStorage location
Photos selected in Photos, or photos taken with the cameraSticker creationProcessed on your device; the original is not copied into the app. Only the resulting sticker is kept.
Sticker images and thumbnailsCollection, copying, and Scrapbook editingApp storage. Removed when the sticker or the app is deleted; iOS may clear cached copies earlier.
Capture/creation timestamp and the original photo's asset identifierSorting and linking to the source photoStored on your device. Removed together with the related sticker or the app.
On-device image analysis results (subject and quality score)Sticker creation and display orderStored on your device.
Folder namesOrganizing stickersStored on your device.
Scrapbook text and edit stateScrapbook editing and image generationProcessed in memory while the app is running and cleared when the app closes.
The finished poster imageSaving to PhotosSaved to Photos when you request a save and grant permission.
Copied stickersPasting into other appsWritten to the iOS clipboard by your copy action.

Photos may contain people, so we treat them with particular care; photos and their analysis results are processed only on your device, as described in the table above.

3.2 Product Analytics Information Sent to PostHog

In the release version, which includes product analytics, the following information is sent to PostHog.

CategoryExamplesPurpose
Install/session identifiersThe anonymous identifier PostHog stores on your device, and a session identifierMeasuring repeat use and usage frequency per session
Flow identifiersA random identifier created fresh for each import, edit, or saveLinking the steps of a single processing, editing, or saving flow and preventing duplicates
Usage eventsApp opened, import started, sticker processing completed, sticker used, Scrapbook opened/edit started, save tapped/finishedUnderstanding whether core features are used and where users drop off
Behavioral attributesImport path (camera/Photos), how a sticker is used (copy/Scrapbook), the first edit action, canvas aspect ratioAnalyzing usability feature by feature
CountsNumber of photos selected, number of items/stickers/text elements, save-attempt sequence numberAnalyzing usage frequency (text and image content are not included)
Technical outcomesSuccess, failure, or cancellation; a predefined failure stage; time elapsed for processing, editing, and savingDiagnosing technical failures
App/device informationEvent timestamp, app version/build, production vs. development flag, OS name/version, general device typeIdentifying version-specific issues and separating production from development data
Network/approximate locationThe IP address conveyed to the server when data is sent, and the country derived from that IPThe IP address is a technical byproduct of the connection. PostHog derives only country-level location from it; we have disabled finer location estimation such as city, region, or coordinates. It is used only to understand usage distribution by country, and no other location data is stored

"Time elapsed" means the duration spent processing, editing, or saving — not the actual time you took the photo or saved it. We do not send actual timestamps of those actions. The product analytics events we send are limited to the following 8:

  1. app_opened
  2. import_started
  3. cutout_processing_completed
  4. cutout_used
  5. scrapbook_opened
  6. scrapbook_edit_started
  7. scrapbook_save_tapped
  8. scrapbook_save_finished

This data is used only to understand the scale of app usage, the sticker-creation success rate, actual usage, conversion from editing to saving, and save failures. It is not used for ad targeting or linked to activity in other apps or on the web.

3.3 Information We Do Not Collect

The following information, which users are likely to consider especially sensitive, is designed not to be included in analytics events; text, folder names, images, and similar content are stripped again before anything is sent.

3.4 How Data Is Collected and How to Stop Analytics

Product analytics data is sent over an encrypted (HTTPS) connection through the PostHog SDK at fixed points in app usage. If the connection is interrupted, it is held briefly on your device and sent once the connection is restored.

We do not use broad automatic capture of screens, buttons, or gestures; automatic app-lifecycle capture; session replay; surveys; or error/log collection — only the 8 events above are sent. If you do not want analytics, deleting the app stops any further transmission (the current version does not provide an in-app setting to turn it off).

4. iOS Permissions and ATT

4.1 Permissions We Request

PermissionWhen requestedPurpose
CameraWhen you choose to take a photoCreating a sticker after taking a photo
Photo selection (Photos picker)When you choose to import photosPassing only the photos you select for processing
Add-only photo accessWhen you save a poster to PhotosAdding the finished image to Photos

Photo selection lets you choose exactly which photos to hand over, and the add-only permission is only for adding the result — it does not read everything in Photos.

4.2 Why We Don't Request ATT

ATT is consent for IDFA access or for advertising-purpose tracking that combines data with third-party apps and websites. Yoinky does not access the IDFA, combine data with third-party activity, use ad targeting or performance measurement, share data with data brokers, or build personally identifying profiles, so it does not show an ATT prompt for product analytics alone. Not showing an ATT prompt does not mean no data is sent — what is sent is described in this policy.

5. Outsourcing and Cross-Border Transfers

We use PostHog Cloud for product analytics. PostHog is a processor that stores and processes analytics data under the operator's instructions. This policy discloses this as outsourcing and a cross-border transfer.

ItemDetails
Processor/recipientPostHog, Inc.
Purpose of outsourcingProduct usage analytics
Items transferredThe anonymous identifier, session/flow identifiers, usage events, technical outcomes, app/OS/network information, and approximate country described in section 3.2
Timing/method of transferSent continuously over HTTPS as events occur
Country of storageUnited States (PostHog US region)
Transfer basis/subprocessorsPer PostHog's published subprocessor list (posthog.com/subprocessors); PostHog may process information in the United States and elsewhere to operate and support the service
Retention period12 months from the date of collection
ContractGoverned by the data processing agreement (DPA, posthog.com/dpa) included in PostHog's standard terms

Yoinky does not sell analytics information and does not provide it to advertising businesses.

6. Retention and Deletion

InformationRetention standardDeletion method
Stickers, thumbnails, folders, and other on-device informationUntil you delete them or delete the app (iOS may clear cached copies earlier)The app's delete function, or deleting the app
Scrapbook edit state and textWhile the app is runningCleared from memory when the app closes
Result images saved to PhotosUntil you delete them in PhotosDeleted by you in Photos
Analytics data awaiting transmissionUntil sent, or until it expires under the SDK's queue policyRemoved on transmission or expiration
PostHog analytics events12 months from the date of collectionDeleted after the retention period elapses or upon a deletion request

Where retention is required by law, the relevant information may be stored separately for that period. Deleting the app does not automatically delete images you saved to Photos or moved to another app.

7. Your Rights and How to Exercise Them

Under applicable law, you may request access to, correction of, deletion of, or suspension of processing of your information, or object to its processing.

Because Yoinky does not create accounts, it does not link a name or email address to an analytics identifier. This can make it difficult to confirm that a particular analytics record belongs to the requester; to identify a specific record, you must provide your own analytics identifier. If a record cannot be safely identified, it will instead be deleted once the retention period (12 months) elapses. We will describe the processing timeline and how you'll be notified of the outcome in our reply.

8. Security Measures

Access to the PostHog project is managed by the operator.

9. Remedies for Privacy Violations

If you need consultation, dispute mediation, or remedy for a privacy violation, you may contact the agencies below (for users in the Republic of Korea).

If you disagree with a disposition regarding a request for access, correction, deletion, or suspension of processing, or have suffered harm, you may file an administrative appeal under the Administrative Appeals Act.

10. Advertising and Future Changes

The current version does not include any advertising SDK. If advertising is introduced in the future, we will review the items processed, the purpose, whether ATT is required, and region-specific consent, and reflect the changes only after revising this policy.

11. Changes to This Policy

If the items collected, purposes, processors, countries of cross-border transfer, retention periods, or user rights change, we will update this policy and notify you as described below.

ItemDetails
Notice locationThis policy page (revision history and effective date updated)
Minor changesEffective from the time of posting
Material changesAnnounced on this policy page 7 days before taking effect
Previous versionsAvailable in the repository's change history