Ten Thousand Lights Privacy Policy

Effective date: November 10, 2026 (previous version: October 13, 2026)

Mitochondria Studio (Dohoon Lee) ("we", "us") operates the Ten Thousand Lights app (the "Service"). This policy explains what we collect, why, and the choices you have.

1. What we collect and why

Category Data Purpose
Account Email address, a unique ID from your sign-in method (Apple, Google, Kakao, Naver or email), your name or nickname Identify your account; back up and restore across devices
Email sign-up Email address and password (stored hashed) Sign-in
What you write Lines, numbers, dates, notes, photos (see section 3), list names Automatic backup, restore on a new device, shared lists
Sharing and gifts Display name, author labels, invite codes, gift messages Shared lists and gifts
Lights+ Whether you have Lights+ and when it expires, an account ID used for purchases Provide paid features and restore purchases
Generated automatically Usage and access logs on our servers Fix problems and prevent abuse
Anonymous usage counts A random ID created per installation; counts of app opens, first line written, notifications opened, shares; device type (iOS/Android); app version Improve the app (return rates, feature use). Never linked to your account and never includes anything you wrote
Error reports When the app hits an error: the error details, device model, OS version, app version Find and fix bugs. Never includes your account or what you wrote
Notifications Your device's push token, notification settings (shared-list alerts, hide text), language Alert you when someone adds a line to a list you share
Public shares A line and its number that you choose to share A page anyone with the link can view. Deleted when you withdraw the share or delete your account
Someone's light A line you turn on "Show to others too" for, its number and language, and your account identifier (kept on the server for moderation only, never shown to other users) Showing the line to other users without your name. Deleted at once when you turn it off, hide or erase the item, or delete your account
Reports and blocks Lines you report, the reason and time, and whose lines you chose to stop seeing Reviewing and hiding inappropriate lines; not showing you lines from people you blocked. Deleted with your account

2. How long we keep it

3. Where photos are stored

4. Sharing with others

We do not sell or share your personal data with third parties. Content you choose to share is visible as follows:

5. Service providers and international transfers

Provider Location Data Purpose
Supabase, Inc. Data hosted in Seoul, South Korea; company based in the USA Account data, your lists and photos Storage, authentication, backup
RevenueCat, Inc. USA Account ID, purchase history Subscription status and purchase restore
Functional Software, Inc. (Sentry) USA Error reports (section 1) Collect and analyze app errors; kept for 90 days
650 Industries, Inc. (Expo) USA Push tokens, notification text Relay push notifications

We receive the account data in section 1 from Apple, Google, Kakao or Naver when you sign in with them. Purchases are processed by Apple (App Store) and Google (Google Play) under their own privacy policies.

6. Your choices and rights

7. Children

The Service is not directed to children under 14 (or the minimum age in your country), and we do not knowingly collect their data. If we learn that we have, we delete it promptly.

8. Security

Encryption in transit (HTTPS), hashed passwords, row-level access control so only you and your list members can reach your data, private photo storage with time-limited links, and least-privilege administrative access.

9. Changes

If this policy changes, we will post the new version in the app or on our website at least 7 days before it takes effect.

10. Contact

Mitochondria Studio (Dohoon Lee) · contact@mtcstudio.net