Privacy Policy
Effective: June 12, 2026 (updated June 19, 2026)
Dream Noark LLC ("we," "us," or "our") provides the app "SnapDrop" and related web pages (together, the "Service"). This Privacy Policy (this "Policy") explains how we handle users' information in connection with the Service.
1. How the Service Works and Who Uses It
There are two types of users on the Service:
- Operator users: businesses and performers who take photos at events and similar occasions. They capture photos and videos in the app and issue QR codes.
- Fan users: people who scan a QR code to receive and collect the captured photos, videos, and other media (each, a "SnapDrop").
2. Information We Collect
| Type of information | Details |
|---|---|
| Captured content | Photos and videos captured by operator users (including the short clips taken just before and after the shutter), doodle data, and voice messages. These may include the likeness (face) of subjects such as fan users. |
| Account information | An automatically issued anonymous ID. Optionally, an email address and password you register (passwords are stored in encrypted form). |
| Profile information (optional) | A nickname, icon image, and bio that fan users may optionally set. |
| Usage information | Records of SnapDrops you have received, trading card ownership and trade history, milestone reward status, and report/block records. |
| Purchase information | Purchase history made through the App Store / Google Play (such as transaction IDs). We never collect payment details such as credit card numbers (these are handled by each store). |
| Device information | The notification token required to deliver push notifications, the OS type, and similar technical information. |
3. How We Use Information
- To deliver SnapDrops (providing downloads via QR code).
- To provide Service features such as collections, trading cards, trades, and milestone rewards.
- To process payments, confirm purchases, and prevent fraudulent use.
- To provide the cloud-backup feature (for enrolled users only).
- To deliver push notifications such as "your SnapDrop is ready" alerts.
- To respond to reports, address violations of the Terms of Service, and keep the Service safe.
- To respond to inquiries and to improve the Service and investigate issues.
4. Retention and Deletion
Captured content (on our servers)
- Photos, videos, and audio stored on our servers for delivery are automatically and permanently deleted 5 days after capture.
- SnapDrops received by a fan user are stored on that fan user's own device (they do not remain on our servers).
Cloud backup (Keepsafe pack — optional enrollment)
- For fan users who enroll in the paid cloud-backup feature, the SnapDrops they have received are stored on our servers for the duration of the subscription, based on the user's own consent (enrollment).
- After cancellation, the data remains available for a 90-day grace period and is then automatically and permanently deleted.
Other data
- If you use "Delete account" within the app, your account, profile, trading cards, and other information, along with related media on our servers, are deleted immediately (this cannot be undone).
- If you request deletion through our support channel, we will completely delete the data within 90 days of the request.
5. Portrait Rights and Information for Subjects
Photos are taken by operator users, and operator users are responsible for obtaining consent from the subjects regarding the capture and use of their images (as set out in the Terms of Service). If you would like a SnapDrop in which you appear to be deleted, please contact us using the channel in Section 10. We will promptly delete or otherwise address the data on our servers (note that server-side data is automatically deleted after 5 days in any event).
6. Sharing with Third Parties and Service Providers
Except as required by law, we do not provide the information we collect to third parties. To operate the Service, we engage the following providers to process information on our behalf:
| Provider | Purpose |
|---|---|
| Supabase Inc. | Hosting of the database, file storage, and related infrastructure |
| Apple Inc. / Google LLC | Processing in-app purchase payments |
| Google LLC (Firebase Cloud Messaging) | Delivery of push notifications |
| Resend, Inc. | Delivery of emails for registration, confirmation, password resets, and similar |
Some of these providers' servers may be located outside Japan. We use them only after confirming that each maintains an adequate level of security. The Service does not use any advertising SDKs or behavioral (targeted) advertising.
7. Security Measures
- All communications are encrypted (HTTPS/TLS).
- Captured content is stored in private storage, and downloading requires time-limited, count-limited authorization.
- Access permissions are strictly controlled on the server side, and the system is designed so that you cannot access other users' data.
8. Your Rights
You may request disclosure, correction, suspension of use, or deletion of your personal information. You can delete your account from within the app or by request through our support channel. We also honor deletion requests from subjects who appear in the content.
9. Use by Minors
Minors should use the Service only with the consent of a parent or guardian. Use of paid features requires the consent of a parent or guardian.
10. Contact
For inquiries or deletion requests regarding this Policy or the handling of personal information, please contact us:
Dream Noark LLC
Email: info@dreamnoark.com
11. Changes
We may revise this Policy in response to changes in law or in the Service. If there are material changes, we will notify you within the app or on this page.
12. Face Data and the TrueDepth API
SnapDrop does not collect, use, store, or share face data, and does not use the TrueDepth API to capture or process any face data, facial geometry, or facial-recognition information.
The app includes an optional augmented-reality (AR) feature that lets a user place their own previously collected photos and trading cards onto real-world surfaces such as a desk or wall. This feature uses ARKit world tracking (rear-camera plane detection) only. It does not enable face tracking, does not use the front-facing TrueDepth camera to obtain face data, and processes the camera feed entirely on the device in real time without recording, storing, or transmitting it. Because no face data is collected, none is shared with any third party or retained.