Privacy Policy
This is a translation; if the texts differ, the Korean version prevails. 한국어 정본
Effective 2026-08-13 · Operated by kinoflare · Contact support@pikfind.com
In short
- Your selfie is used only for that search and is never stored.
- Face search is off by default. An organizer has to turn it on.
- Photos and face data stay inside that one event.
- We never sell them or use them for ads or AI training.
- Ask us to take your photo down and we hide it first, then check.
1. Who is responsible
The organizer or photographer who uploads the photos owns them. PikFind stores them and delivers them to guests on their instructions.
Your account, payments, security records and support messages are handled by PikFind directly.
2. What we receive
If you have an account — your email, the basic profile Google shares if you sign in with Google, sign-in code records, and your events, uploads, payments and support history. We never take a password.
If you are a guest — a temporary marker that remembers you opened the event, connection details stored in a scrambled form so we can count people and block abuse, your device type and language, and what you searched, viewed and saved.
Selfies and raw connection addresses are never used for usage statistics.
3. How finding your photos works
You upload one selfie and we compare it with the event photos right then, and show only your photos. The selfie disappears as soon as the result is shown.
Face data made from event photos is used only to search that event. It is never used to find you in another event, never used for advertising or AI training, and never sold or rented. Delete a photo and its face data goes with it.
An organizer can only turn this on after confirming they have the right to photograph and publish, told guests about it, and hold the consent the law requires. If we ask for proof and do not get it, or the use looks unlawful, we stop the feature.
You can withdraw consent or ask for your photo to be taken down at any time. Once you ask, the photo disappears from search, listings, albums and downloads before we finish checking.
4. Cookies and statistics
We use cookies to keep you signed in, remember that you entered an event, count the same guest as one person for 30 days, and see how you first arrived.
If the operator enables it, Google Analytics also receives public-page visit information. Turning statistics off does not affect finding or saving photos.
5. How long we keep things
Photos and face data are kept for 90 days on a basic event and 365 days on a Pro event, counted from the day the event opens.
Deleted accounts and events can be restored for 7 days. Expired events are erased for good 14 days later.
Guest cookies last 30 days, error and security records up to 90 days, operator action logs 365 days, and statistics that cannot identify a person up to 400 days. Payment records the law requires us to keep are stored separately for the required period.
6. Companies that help us
We share only what each company needs to run the service. Transfers are encrypted and limited by contract. A company we have not enabled receives nothing.
| Company | What it does | What it receives | Where |
|---|---|---|---|
| Cloudflare | 사진 저장·전송과 보안 | 사진 파일, 저장 키, 접속 요청 | 글로벌 네트워크 및 계약된 저장 위치 |
| 선택한 경우 계정 로그인 | 이메일, 공개 프로필 식별자 | 대한민국 외 지역을 포함한 Google 운영 지역 | |
| Resend | 로그인 코드와 서비스 메일 발송 | 이메일 주소, 발송 내용 | 미국 등 서비스 운영 지역 |
| Groble | 국내 결제 확인과 환불 처리 | 주문 식별자, 상품, 결제 상태 | 대한민국 |
| PayPal | 해외 결제와 환불 처리 | 이메일, 주문 식별자, 상품, 결제 상태 | 미국 등 PayPal 운영 지역 |
| Google Analytics | 설정한 경우 공개 페이지 이용 통계 | 페이지 주소, 기기·브라우저 정보, 임의 방문 식별자 | 대한민국 외 Google 운영 지역 |
| PostHog | 설정한 경우 얼굴 처리 워커의 성능·오류 통계 | 처리 시간, 얼굴 수, 오류 유형 | 설정한 PostHog 호스팅 지역 |
7. If you are in the EU or the UK
GDPR and UK GDPR apply to you. We rely on only four grounds:
- Contract — to run your account, store and deliver photos, and take payment
- Consent — for face search and for optional statistics. You can withdraw it at any time.
- Legitimate interests — keeping the service secure, fixing failures, stopping abuse
- Legal obligation — where law requires us to keep payment or tax records
Face data is treated as specially protected information and is processed only with explicit consent.
You may ask for access, a copy, correction, deletion, restriction, objection, or portability. Write to support@pikfind.com. If you are unhappy with the outcome you can complain to the supervisory authority where you live.
Your information may be transferred outside the EU or UK, including to the Republic of Korea. When that happens we use safeguards recognised by law, such as Standard Contractual Clauses.
8. How to ask
Tell us what you want to see, correct or delete at support@pikfind.com. Take-down requests made from an event page reach the same place.
After we confirm who you are, we log the request and its due date and reply within 30 days. If we need longer, we tell you why first.
9. How we protect it, and changes
Each event is kept separate, only the people who need access have it, and transfers are encrypted. Connection addresses are stored scrambled rather than raw, and error records never contain photos or what you typed.
If something important changes we announce it before it takes effect and keep the previous version.