Dripbook Privacy Policy

Bublica ("the Company") respects the privacy of its users and is committed to protecting personal information in accordance with applicable laws, including the Korean Personal Information Protection Act (PIPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, share, and protect your information when you use our mobile application Dripbook (Bundle ID: com.bublica.dripbook).

1. Information We Collect

1-1. Automatically Collected (on app install and use)

1-2. User-Provided Information

1-3. Device Permissions (used only with your explicit consent)

Dripbook uses the following iOS permissions, all of which trigger a system permission dialog on first use.

Denying any permission still allows full use of the manual entry flow and other core features. You can change permissions anytime in iOS Settings → Dripbook.

1-4. Automatic Collection via Advertising SDK

The app integrates the following advertising SDK. Some data is collected and processed directly by the third party (Google LLC) on our behalf.

For more detail, see the Google Privacy Policy:
👉 https://policies.google.com/privacy

2. How Long We Keep Your Data

3. Sharing With Third Parties

We share your information only to the extent necessary for the purposes described in §§ 4 and 5, and only with your consent or as required by law.

We do not sell your personal information.

4. Processing on Our Behalf (Sub-processors)

5. International Data Transfers

Because Dripbook integrates Google AdMob, Apple App Store, Anthropic AI, and is hosted on Railway, certain data is transferred outside Korea.

You may refuse international transfers under § 7 below; some features (such as personalized ads) may then be limited.

6. App Tracking Transparency (ATT)

1. Per Apple's App Tracking Transparency framework, Dripbook requests your explicit consent before using the IDFA.
2. You can grant or deny tracking when the system permission prompt appears on first launch.
3. Denying tracking does not affect any core feature; you will only see non-personalized ads.
4. Even when you deny tracking, Apple's SKAdNetwork may still perform privacy-preserving attribution; this uses only anonymized data and cannot identify you individually.
5. You may revoke or grant consent anytime in iOS Settings → Privacy & Security → Tracking.

7. Your Rights

You may exercise the following rights at any time:

1. Access your personal information
2. Request correction or deletion
3. Request restriction of processing
4. Withdraw consent
5. Account deletion (see § 16)
6. Under GDPR (EEA users): Right to data portability, right to lodge a complaint with your supervisory authority
7. Under CCPA (California users): Right to know what we collect, right to delete, right to opt-out of sale (we do not sell personal information)

How to exercise:

• 📧 Email: bublica@naver.com
• 📮 Postal: 48-8 Hotan-gil, Geumnam-myeon, Sejong, Republic of Korea (2nd floor)

8. Data Destruction

When personal data is no longer needed, we destroy it without delay.

• Electronic files: securely deleted (logical + physical destruction)
• Paper documents: shredded or incinerated

9. Security Measures

• Account credentials (email and password) are stored only on the user's device and never transmitted to our servers — server-side compromise cannot expose user passwords
• All traffic encrypted with HTTPS / TLS 1.2+ (including our custom domain dripbook.bublica.com)
• The X-User-Email header used for API user identification is transmitted only within HTTPS-encrypted channels
• Per-account monthly AI scan call limit (30 / month) enforced server-side to block abnormal call patterns
• Least-privilege access controls
• Intrusion detection and prevention
• Regular security patching and vulnerability checks
• Designated Data Protection Officer (see § 12)

10. Automatic Collection Tools and Opt-Out

1. Dripbook uses IDFA, IDFV, and device localStorage for advertising and service improvement.
2. localStorage usage: login session, favorites list (max 10), language setting, "remember me" flag — stored only on your device, never sent to our server.
3. You may block tracking and clear local storage at any time:
   • iOS Settings → Privacy & Security → Tracking → "Allow Apps to Request to Track" OFF
   • iOS Settings → Privacy & Security → Apple Advertising → "Personalized Ads" OFF
   • Delete the app: removes all locally stored data on the device.
4. If you block tracking, you'll see only non-personalized ads.

11. Children's Privacy

1. Dripbook's App Store age rating is 12+. However, in compliance with the Korean Personal Information Protection Act (Article 22-2), we do not collect personal information from children under 14 in Korea without verifiable consent from a legal guardian.
2. During sign-up, the user confirms they are 14 or older. If we discover that an account was created by someone under 14 without legal-guardian consent, we delete the account and all related data immediately.
3. Parents or legal guardians who suspect their child under 14 is using this app may notify us at bublica@naver.com; we will erase the relevant data without delay.
4. Ad content is filtered via Maximum Ad Content Rating to ensure only ads compatible with the 12+ rating are served.

12. Data Protection Officer (DPO)

• Name: Hyunmin Park
• Role: Representative
• Email: bublica@naver.com
• Phone: +82 10-6404-8155

13. Complaints & Remedies (Korea)

14. AI Image Analysis

Dripbook uses Anthropic Claude Sonnet (claude-sonnet-4-6 or successors) for automatic bean bag image recognition.

14-1. Purpose

• To extract roastery, bean name, origin, process method, roast level, and flavor notes from a user-uploaded coffee bean bag image.

14-2. Model & Processor

14-3. Data Flow

1. You take or upload a coffee bean bag photo in-app.
2. Our backend (Dripbook server, Railway hosting) Base64-encodes the image and sends it to the Anthropic API (https://api.anthropic.com/v1/messages).
3. Anthropic's API returns analysis results in JSON.
4. Our server forwards only the JSON results to the app; the original image is never persisted on our servers (passes through memory and is immediately discarded).
5. For monitoring and abuse prevention, only the call metadata (email, timestamp, recognition summary: roastery, bean name, origin, roast level) is recorded in our server logs and retained for up to 30 days (see § 1-1).

14-4. Anthropic Data Policy

• Anthropic does not use API data for model training (default policy).
• Anthropic retains received data for up to 30 days for operational and safety review, then deletes it.
• More: Anthropic Privacy Policy

14-5. Usage Limits

To protect against abuse and runaway costs, AI scan calls are limited to 30 per account per month. The counter resets automatically on the 1st of every month (UTC). The Manual Entry flow is unlimited and unaffected by this cap.

14-6. Your Rights and Cautions

• You may decline to use the AI analysis feature; doing so only restricts that specific feature and does not affect other Dripbook functionality.
• Please do not include identifying information (ID cards, business cards, faces, etc.) in your uploaded images. We are not liable for personal information exposure caused by your own carelessness.

15. Changes to This Policy

1. This Privacy Policy applies from the effective date. We will notify users of any changes at least 7 days before they take effect via in-app notice or this page.
2. For material changes affecting user rights, notice will be given at least 30 days in advance.

16. Account Deletion

1. You may delete your account and associated data at any time.
2. In-app deletion (recommended): Tap [Account → Delete account] in the top-right of the app. The following data is deleted immediately and automatically:
   • Device localStorage: account credentials (email, password), favorites, review & auto-tune data, app preferences
   • Server in-memory monthly AI scan usage counter
3. Server operation logs (email, call timestamps, recognition metadata) are automatically discarded according to our retention policy — up to 30 days from collection (see § 2). No separate manual deletion request is required.
4. Email request (fallback): If you cannot use the app, you may email bublica@naver.com; we will process the request within 7 days.
5. Data legally required to be preserved (e.g. inquiry records for 3 years under the e-Commerce Act) will be held in isolated storage for the prescribed period and then destroyed.

17. Governing Law and Disputes

1. This Privacy Policy is governed by the laws of the Republic of Korea.
2. Any disputes shall be brought in the competent courts of Korea under the Civil Procedure Act.

Appendix

Revision History