AOi CAM Privacy Policy

ISEKAI Labs Co., Ltd. (株式会社異世界ラボ) (the “Company”) values the personal data of its Users and complies with global data protection standards, including the Personal Data Protection Act (PDPA) of Singapore, the General Data Protection Regulation (GDPR) of the European Union, the Children’s Online Privacy Protection Act (COPPA) of the United States, the California Consumer Privacy Act (CCPA), the Act on the Protection of Personal Information (APPI) of Japan, and the Personal Information Protection Act (PIPA) of the Republic of Korea.

This Privacy Policy provides information regarding the categories of personal data collected, the purposes of collection and use, retention periods, processing methods, and the rights of Users in connection with the “AOi CAM” application (the “App” or the “Service”) provided by the Company.

1. Personal Data Collected and Methods of Collection

1.1 Data Collected

The Company collects only the minimum personal data necessary to provide the Service.

User Content
- Uploaded original images and AI transformation request data
- Images, captions, comments, and other content generated or uploaded by Users through the Post function within the Service (see Article 5 for details)
Automatically Collected Information
- Device information (OS, device model, device identifiers, etc.), app usage logs, access timestamps, error logs, cookies, advertising identifiers (e.g., IDFA, GAID)
Email Address
- Collected when logging in via OAuth (Apple, Google, X (formerly Twitter))
- Used for marketing/CRM purposes only with the User’s explicit consent
Advertising Interaction Data
- Ad impressions and click records, approximate location data, etc.
Other Information
- Information provided in inquiries and feedback submissions
- Additional items collected with User consent when participating in events

1.2 Methods of Collection

Automatically collected upon app installation, launch, or use of features
When Users upload images or submit AI transformation requests
When Users directly upload Posts
When Users log in via OAuth or consent to email collection
Automatically collected through third-party SDKs when ads are displayed
When Users directly provide information through inquiries or event participation

2. Purposes of Use of Personal Data

The personal data collected is used solely for the following purposes:

Service Provision and Operation
- AI image generation, post sharing, delivery of results, and responding to User requests
Service Quality Improvement and Stability
- Error analysis, feature enhancement, and statistical analysis
Email Marketing and Customer Relationship Management (CRM) (with User consent)
- Newsletters, promotional notices, and personalized notifications
Targeted Advertising and Analytics
- Measuring ad performance and providing retargeted advertising
Compliance with Legal Obligations and Exercise of Rights
- Responding to illegal content and complying with applicable laws and regulations
Prohibition on AI Training and Technology Development
- Users’ original images, posts, and generated outputs shall never be used for AI training, technology development, or research purposes.

3. Retention and Use Period of Personal Data

Principle: Personal data is deleted immediately once the purpose of collection has been fulfilled.
Exceptions: Data may be retained for the period required under applicable laws.
AI Original Images: Deleted immediately after generation is completed.
Posts: Retained until deleted by the User or until account termination.
Email Addresses: Retained until the User withdraws consent for marketing.

4. Delegation of Processing and Cross-Border Transfer of Personal Data

For the purposes of service operation, user behavior analysis, and marketing performance measurement, the Company may delegate the processing of certain personal data to the following global service providers, during which personal data may be transferred overseas. In such cases, the Company applies necessary safeguards in accordance with applicable laws, including Japan’s APPI, Korea’s Personal Information Protection Act, Singapore’s PDPA, the EU’s GDPR, and the U.S. CCPA.
- Transferees: Google LLC, Amplitude Inc., Rocket Science Group LLC
- Destination Country: United States
- Data Transferred: Service usage logs, device information, session data, email information, etc.
- Purpose of Transfer: Service improvement, user analytics, and marketing performance measurement
- Safeguards: Encryption during transmission, data minimization, access controls, and execution of data protection agreements
The Company continuously manages and supervises the transferees to ensure that Users’ personal data is not used for purposes beyond those stated above.

5. Protection Policy for AI-Generated Images and Posts

Original Images
- Original images are temporarily transmitted to the server solely for AI processing and are deleted immediately after processing is completed.
- They are not stored and shall never be used for any secondary purposes such as AI training, technology development, or marketing.
AI-Generated Outputs and Posts
- Generated outputs may be temporarily stored to enable download, preview, or sharing as Posts, and are automatically deleted after a certain period.
- Content uploaded by Users as Posts is retained until deleted by the User, and shall never be used for AI training or other secondary purposes.
User Deletion Rights
- Users may request the deletion of generated outputs and Posts through the in-app Customer Support center or by email (cam.support@isekailabs.com), and the Company will promptly process such requests.

6. Provision of Data to Third Parties and Advertising Information

General Principle: Personal data will not be provided to third parties without the User’s explicit consent or a valid legal basis.
Advertising Partners:
- Recipients: Google LLC (AdMob, Firebase), Meta Platforms, Inc. (Facebook Ads), and X Corp. (Twitter), among others
- Data Provided: Advertising ID, device information, usage records
- Purpose: Delivery of personalized advertising and performance measurement
- Retention Period: In accordance with each partner’s privacy policy

7. Use of Cookies and Similar Technologies

Cookies may be used for service analytics and advertising optimization. Users may restrict or delete cookies through their browser settings.

8. External Services and Links

The App, notifications, or emails may contain links to external services (e.g., X (formerly Twitter), Google Play, Apple App Store). The Company is not responsible for the processing of personal data by such external services, and Users are advised to review their respective privacy policies.

9. Measures for the Protection of Personal Data

Technical Measures: SSL encryption, access controls, intrusion prevention systems
Administrative Measures: Principle of least privilege, personal data protection training
Physical Measures: Secure server facilities and restricted access areas

10. User Rights and How to Exercise Them

Users may at any time request access to, correction of, or deletion of their personal data, as well as withdrawal of marketing consent.
Users in the EU (subject to the GDPR) have the following additional rights:
- Right to Data Portability: The right to receive personal data in a structured, commonly used format, and to request the transfer of such data to another service provider.
Contact: cam.support@isekailabs.com

11. Protection of Children’s Personal Data

The Company does not knowingly collect personal data from children under the age of 13. If the Company becomes aware that data has been collected from a child under 13, such data will be promptly deleted.

12. Data Protection Officer

Responsible Officer: Young-Chae Na
Email: cam.support@isekailabs.com

13. Notice and Amendments

Any changes to this Privacy Policy will be notified in advance through in-app notices, pop-ups, or similar means.

Effective Date: September 6, 2025