Privacy Policy
Effective Date: 2026-07-09 Last Updated: 2026-07-09
[Company Legal Name] (“mkup,” “we,” “us,” or “our”) values your privacy and handles your personal information in accordance with the Personal Information Protection Act (“PIPA”) of the Republic of Korea and other applicable laws. This Privacy Policy explains what personal information we collect through the mkup app and mkup.ai (the “Service”), how we use and protect it, and the rights you have.
Please note. In addition to operating the Service, we use the photos, feedback, and other content you provide to develop, train, and improve our artificial-intelligence models and to create derived and synthetic datasets. Sections 2 and 3 describe this. By using the Service, you consent to this use.
1. What We Collect and How
We collect the minimum personal information needed to provide the Service.
| Category | Items | How collected |
|---|---|---|
| Account | Email address, name/nickname, profile image, and the account identifier from your sign-in provider (Google or Apple) | When you sign in |
| Face & makeup photos | Source Photos (photos of a face, including bare/no-makeup faces), Reference Photos (photos of a makeup look), and the Generated Results we produce | When you upload, capture, or generate them |
| Feedback | Ratings, comparisons, preferences, and other feedback you give on Generated Results | When you interact with results |
| Device & usage | Device model, operating system, app version, unique device identifier, IP address, language/region, app logs, and crash/diagnostic data | Automatically, as you use the Service |
On-device processing. Face detection and background separation run on your device. Your Source and Reference Photos are uploaded to our cloud storage so that the makeup image can be generated.
We do not deliberately collect the “unique-identification information” (such as resident-registration numbers) defined under PIPA.
2. Purposes of Use
We use personal information for the following purposes:
- Providing the Service — creating and managing your account, generating makeup try-on results, and providing customer support;
- Operating and securing the Service — preventing abuse and fraud, ensuring safety and stability, and analyzing usage to improve features;
- Developing and improving AI models (important) — using your photos, Generated Results, and Feedback to research, develop, train, fine-tune, evaluate, and improve our current and future machine-learning models, and to create derived, aggregated, and synthetic datasets (for example, paired makeup / no-makeup training data). Feedback may be used with human-feedback and reinforcement-learning methods to improve model quality; and
- Legal compliance — complying with applicable laws and responding to lawful requests.
We will obtain separate consent before using your personal information for any purpose materially different from those above.
3. Retention and Use Period
- Account and personal information: retained until you withdraw your account, after which it is destroyed without delay, except where a law requires longer retention (see below).
- Uploaded photos and Generated Results: retained while your account is active; deleted or de-identified within a reasonable period after you delete them or withdraw your account.
- De-identified, aggregated, and synthetic data, and AI models and model weights derived from your content: because this data no longer identifies you and is embedded in models and datasets that cannot be separated on a per-user basis, it may be retained and used indefinitely, including after account withdrawal.
- Records required by law: where laws such as the Act on Consumer Protection in Electronic Commerce apply (e.g., records of payments or complaints), we retain the relevant records for the period those laws require.
4. Provision to Third Parties
We do not sell your personal information, and we do not provide it to third parties except: (a) with your consent; (b) as required by law or lawful request from an authority; or (c) in a de-identified or aggregated form that does not identify you.
5. Consignment of Processing
To operate the Service, we entrust certain processing to the providers below. Our agreements require them to protect personal information and to process it only as instructed.
| Provider | Purpose |
|---|---|
| Supabase, Inc. | Authentication and database (account data) |
| Cloudflare, Inc. | Cloud storage of photos and Generated Results |
| RunPod, Inc. | GPU inference to generate makeup results |
| Google LLC / Apple Inc. | Sign-in (identity provider) |
6. Overseas Transfer of Personal Information
Some of our processors are located outside the Republic of Korea, so your personal information may be transferred and stored abroad. By using the Service, you consent to the following transfers:
| Recipient & country | Items transferred | Purpose | Retention |
|---|---|---|---|
| Supabase, Inc. (United States) | Account data | Authentication, database | Until account withdrawal |
| Cloudflare, Inc. (United States / global) | Uploaded photos, Generated Results | Cloud storage | Until deletion / withdrawal |
| RunPod, Inc. (United States) | Uploaded photos | GPU inference (makeup generation) | Deleted after processing; not retained for this purpose |
You may refuse the transfer by not using the Service or by withdrawing your account; note that the Service cannot be provided without these transfers.
7. Destruction of Personal Information
When personal information reaches the end of its retention period or its purpose is fulfilled, we destroy it without delay. Electronic files are deleted so they cannot be recovered; any printed materials are shredded or incinerated. As stated in Section 3, de-identified, aggregated, and synthetic data and derived models are not subject to destruction.
8. Your Rights and How to Exercise Them
As a data subject, you (or your legal representative) may at any time:
- request access to your personal information;
- request correction of inaccurate information;
- request deletion or withdrawal of your account;
- request suspension of processing; and
- withdraw consent you previously gave.
To exercise these rights, contact us at support@mkup.ai. We will respond without undue delay and in accordance with PIPA. We may verify your identity before acting. Withdrawing consent or deleting your account may prevent us from providing some or all of the Service.
If your rights are infringed, you may also contact the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Privacy Infringement Report Center (privacy.kisa.or.kr, 118), or the Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).
9. Security Measures
We take administrative, technical, and physical measures to protect personal information, including access control and least-privilege access, encryption of data in transit (and of stored images where appropriate), monitoring and logging, and staff training. Despite our efforts, no method of transmission or storage is perfectly secure.
10. Children
The Service is not intended for children under 14. We do not knowingly collect personal information from children under 14. If we learn that we have done so, we will delete it promptly.
11. Automatically Collected Information
The App may store limited information on your device (such as cache and identifiers) to operate. We do not use third-party advertising cookies. You can clear the App’s local data or uninstall the App to remove locally stored information.
12. Face and Biometric Information
We take special care with face photos. We use them only to generate makeup try-on results and to develop and improve our models as described in this Policy. We do not use face photos to identify or verify the identity of any individual, and we do not generate biometric identifiers for identification purposes. Do not upload photos of other people without their consent.
13. Privacy Officer
We have designated the following person responsible for personal-information protection and for handling your requests and complaints:
- Privacy Officer: [Name / Title]
- Email: support@mkup.ai
14. Changes to This Policy
We may update this Policy to reflect changes in the Service or the law. If we make material changes, we will notify you through the App or by other reasonable means at least 7 days before they take effect (or as the law requires). The “Last Updated” date above shows the current version.
This Policy is also available in Korean (개인정보처리방침). If there is any conflict between the versions, the Korean version prevails for users in the Republic of Korea.