PicNaru Privacy Policy

Bluemaker (블루메이커, “we”, “us”) makes the Mac app PicNaru. This policy explains how we handle personal information in the PicNaru app and in PicNaru customer support. Bluemaker is a sole proprietorship registered in the Republic of Korea. The ttakdap.com website that hosts this page has its own website privacy policy for things like visit logs and cookies.

We publish this policy in English and Korean (한국어). Both versions describe the same practices.

1. The PicNaru app

PicNaru downloads new photos and videos from an Immich server that you choose and adds them to the Photos library on your Mac.

• Photos and videos go directly from your Immich server to your Mac. PicNaru uses the server address and API key you enter only to connect and sign in to that server. Your connection settings and transfer records stay on your Mac.
• None of this information is sent to us. We don’t run any server that relays or collects your photos. The app contains no advertising or analytics tools, and it doesn’t track you across apps or websites.
• PicNaru asks your server for only three permissions: verify your account (user.read), read photo and video information (asset.read), and download originals (asset.download). It never asks for permission to upload or delete.
• If iCloud Photos is turned on in the Photos app on your Mac, items added to your library sync to iCloud under Apple’s settings and policies. Apple’s Photos app handles that sync, not PicNaru.
• The PicNaru Help page lists what PicNaru stores on your Mac and how to delete it.

Diagnostic information we receive through Apple

• App Store version: If you allow “Share with App Developers” in your Apple device settings, we may receive crash reports and usage statistics that Apple collects.
• TestFlight beta: Apple shares testers’ crash reports with us regardless of that setting.
• What’s included: Reports in Apple’s format, such as device model, macOS version, app version, and technical details at the time of a crash.
• Why: To find and fix errors.
• How long: Apple’s policies govern data in Apple’s developer tools. If we save any of it separately to analyze a problem, we delete it without delay once it’s no longer needed. Records we must keep by law follow section 3.

2. Customer support

When you contact us, we receive the following directly from you. Diagnostic information from Apple is covered in section 1.

• Please don’t send API keys, passwords, or your original photos or videos. We don’t need them to help you.
• We don’t use information from advertising or partnership emails unrelated to PicNaru for these purposes, and we delete it if we don’t need it.
• We don’t sell personal information, share it for cross-context behavioral advertising, or use it to profile you.

3. How long we keep information

• We delete support information without delay once your question is resolved and we no longer need it.
• Records we must keep by law are stored separately for the required period. Under Korea’s Act on the Consumer Protection in Electronic Commerce (Article 6) and its Enforcement Decree (Article 6), we keep records of consumer complaints and disputes for 3 years. We keep only the email address, the complaint or dispute, and how it was resolved, not unnecessary attachments. We don’t keep every email for 3 years; simple how-to questions, for example, are deleted once resolved.
• How we delete: Our privacy officer confirms what to delete. We delete emails in Gmail and then permanently delete them from the trash. We also delete any copies of attachments downloaded to our devices and shred any printouts.
• After we permanently delete an email, it can take some time for Google to remove it from its systems under Google’s data retention policy.

4. Service provider and international transfers

We send, receive, and store support emails with Google’s Gmail. As a result, your personal information may be transferred to, stored in, or processed in countries outside your country and outside Korea, as described below.

1. Legal basis: For support needed to sell PicNaru to you and let you use it, we rely on disclosure in this policy under Article 28-8(1)(iii)(a) of Korea’s Personal Information Protection Act. We don’t apply this basis to every email unrelated to buying or using PicNaru.
2. Information transferred: The information in the table in section 2.
3. Countries where it may be processed: United States, Chile, Uruguay, Ireland, Netherlands, Belgium, Denmark, Finland, Germany, United Kingdom, Taiwan, Japan, and Singapore. These are Google’s published data center locations (checked September 2026), not a confirmed list of where our inbox is stored. Google explains that it may process information on servers outside your country, and the information available to us doesn’t show which of these locations hold our inbox. We’ll update this list if Google’s published locations change.
4. When and how: When you email us or we reply, over the internet.
5. Recipient: Google LLC (privacy contact details are in the Google Privacy Policy).
6. Purpose: Sending, receiving, and storing email.
7. How long: Until we delete it under section 3.
8. How to avoid the transfer: If you don’t want your information transferred, you can choose not to email us. You won’t get email support, but you can still use the app. You can ask us to delete messages you already sent at any time; records we must keep by law are deleted when the required period ends.

Information stored in another country is subject to that country’s laws and may be accessible to its courts, law enforcement, and national security authorities.

We don’t otherwise provide personal information to third parties or ask others to process it for us, except where the law specifically requires it.

5. How we protect information

• Administrative: Only our privacy officer (the owner) can access the support inbox. We delete information without delay when it’s no longer needed.
• Technical: The email account uses two-step verification. Devices used to read support email are locked with a password or biometrics, and the Mac disk is encrypted with FileVault.
• Physical: We don’t sign in to the support account on shared devices.

6. Your rights

• You can ask at any time to access, correct, or delete your personal information, or to stop us from processing it. Where we rely on your consent, you can withdraw it.
• Email us at the address in section 7. We’ll act within 10 days of your request and tell you the result. If we refuse all or part of your request, we’ll tell you why and how to object.
• We’ll confirm that the request comes from you or someone authorized to act for you, asking only for the minimum information needed.
• An authorized agent or legal representative can make a request for you with written authorization.
• The law may limit access or restriction in some cases, or require us to keep certain records before we can delete them.
• Objections: If you disagree with our response, email us your original request and your reasons. Our privacy officer will review it again and reply without delay.
• We don’t hold the connection information and transfer records on your Mac or the originals on your server, and we can’t delete them remotely. The PicNaru Help page explains what you can delete in the app.

Children: PicNaru isn’t directed to children. We don’t knowingly collect personal information from children under 13, or under the minimum age set by the law where you live. If you believe a child has sent us personal information, contact us and we’ll delete it unless the law requires us to keep it (see section 3). A parent or legal guardian can make requests on a child’s behalf; under Korean law, a legal representative exercises the rights of a child under 14.

Do Not Track: The app doesn’t collect personal information automatically or use cookies or similar tracking technologies, so it doesn’t change its behavior in response to Do Not Track signals.

7. Contact and privacy officer

• Privacy officer: Minsoo Shin, Owner, Bluemaker
• Email: [email protected]

Send questions, concerns, or complaints about personal information to this address. We’ll reply without delay.

8. If you have a complaint

We’d like the chance to resolve your concern first. You can also contact the privacy authority where you live:

• United States: Your state attorney general or the Federal Trade Commission (reportfraud.ftc.gov)
• Australia: Office of the Australian Information Commissioner (oaic.gov.au)
• New Zealand: Office of the Privacy Commissioner (privacy.org.nz)
• Singapore: Personal Data Protection Commission (pdpc.gov.sg)
• Republic of Korea: Personal Information Dispute Mediation Committee (kopico.go.kr) or Personal Information Infringement Report Center (privacy.kisa.or.kr)

9. Changes to this policy

• This policy takes effect on September 30, 2026.
• If we change it, we’ll post the change on this page before it takes effect and keep previous versions available.