Privacy Policy

Effective: August 29, 2026 (amended)

1. Overview

SKIPIKS ("Company") complies with applicable data protection laws including Korea's Personal Information Protection Act.

2. Information We Collect

Type	Items	When
Required	Email, nickname, profile image URL	Google OAuth sign-in
Required	Google account ID (provider_id)	Google OAuth sign-in
Auto	Service usage logs (feed reactions, wishlist, clicks)	During use
Auto	IP, browser, language	During use

3. Purposes

Member identification
Personalized fashion curation
Personalization features (wishlist, reactions)
De-identified statistics for service improvement
Legal compliance (AI Framework Act, E-Commerce Act)

4. Retention Period

1. Member info: Soft-deleted immediately upon account deletion; permanently deleted 30 days after deletion.

2. During the 30-day grace period, signing in with the same Google account restores the account.

3. Data with legal retention obligations is kept for the required period (5 years for e-commerce, 3 months for telecom secrecy).

5. Storage & Security

1. Personal data is stored on Cloudflare D1 (SQLite-based globally distributed database).

2. Cloudflare maintains SOC 2 Type II certification.

3. Transmissions are encrypted via HTTPS/TLS; authentication uses signed JWT tokens.

6. Third-Party Sharing

We do not share personal data with third parties except: (1) with explicit user consent, (2) when legally required.

However, we use Google Analytics 4 for usage statistics. Device, browser, page-view, and event data (swipes, likes, shares) are transmitted to Google LLC. We do not send directly identifying information such as names or email addresses. See "Cookies" below for how to opt out.

7. Processors

Processor	Purpose
Cloudflare, Inc.	Database (D1), hosting (Pages/Workers), AI Gateway
OpenAI, Inc.	AI text translation & image generation (no PII sent)
Google LLC	OAuth 2.0 authentication, usage analytics (Google Analytics 4)

8. User Rights

Access: View your info via My Page
Correction / Deletion: Email contact@skipiks.ai
Processing restriction: Email contact@skipiks.ai
Account deletion: My Page → Delete Account

9. AI-Generated Content Notice

Under Article 31 of Korea's AI Framework Act:

All images are AI-generated; compliance logs retained ≥ 3 years
User-input PII is not used for AI model training
Watermarks include model ID, timestamp, content hash (C2PA-compatible roadmap)

10. Cookies

Name	Purpose	Retention
`sk_locale`	Language preference	1 year
Auth tokens	Session persistence (localStorage, JWT)	Session / refresh cycle
`_ga`	Google Analytics 4 — visitor distinction	2 years
`_ga_<measurement-id>`	Google Analytics 4 — session state	2 years

Opt out: Block cookies in your browser settings, or install Google's Google Analytics Opt-out Browser Add-on. Opting out does not restrict use of the service.

11. Privacy Officer & Contact

Officer: SKIPIKS Privacy Team
Email: contact@skipiks.ai

12. Changes

Any changes will be announced via in-service notice at least 7 days prior to taking effect.

Amendment effective August 29, 2026 (notice given August 22, 2026)

Reason: Introduction of usage analytics (Google Analytics 4)

Third-party sharing: Disclosed that device, browser, page-view, and event data is transmitted to Google LLC.
Processors: Added "usage analytics" to Google LLC's purpose.
Cookies: Added _ga / _ga_<measurement-id> and opt-out instructions.

Analytics begins operating on the effective date, August 29, 2026; no data is collected before then.

SKIPIKS · contact@skipiks.ai

Company	SKIPIKS
Representative	(business registration pending)
Business Reg. No.	(business registration pending)
Mail-order Reg. No.	(business registration pending)
Address	(business registration pending)
Phone	(business registration pending)
Email	contact@skipiks.ai

SKIPIKS is an intermediary for mail-order sales and is not a party to the transactions. Each seller is responsible for orders, payment, delivery and refunds.

Paid placement disclosure: some products are placed by sellers who pay for exposure and clicks.