Privacy policy
Gemnori: Diamond Painting · iOS / Android
Effective date: October 19, 2026
Gemnori works without an account or sign-in. Photo conversion and your works stay on your device; our server is used only to verify Lifetime Pass purchases on Android.
Scope of this policy
Gemnori (Android and iOS) is operated by Ggeomddakji (껌딱지). Gemnori has no accounts or sign-in, and your works are stored on your device. This policy explains on-device processing, optional rewarded ads and verification of Lifetime Pass purchases.
Photos and artwork
Gemnori only uses photos you pick with the system photo picker and does not request access to your whole photo library. Cropping and pattern conversion run only on your device; photos are never sent to a server. Patterns, progress, settings and ad unlocks are stored only on your device.
Finished images are saved as PNGs to your device gallery. Sharing passes the image directly to the app you choose in the system share sheet, under that app's policy. Gemnori does not use location, contacts, camera or microphone.
Backup files
On Android, you can save your works, progress and ad-unlocked patterns to a backup file and restore from a file you choose. The file is stored only where you choose and is never sent to us. Original photos and store passes are not included. Gemnori does not offer automatic cloud backup.
Optional rewarded ads
Ads are only optional rewarded ads you choose to watch, served by Google AdMob (Google LLC). The ad SDK starts when you choose an ad or open Ad privacy choices; Google may then process your IP address (to estimate approximate location), ad interactions, diagnostics and device identifiers such as the App Set ID for ad delivery, measurement and fraud prevention.
Gemnori requests non-personalized ads and does not use the Advertising ID (AAID/IDFA). Where required, consent is requested through Google's User Messaging Platform and can be changed under "Ad privacy choices" in Settings. Ads are not loaded once a Lifetime Pass is verified.
Payments and purchase verification
Payments are handled by Google Play or the App Store; we never receive card details. On Android, to verify a purchase the app sends the purchase token, product ID and a one-time random value over HTTPS to our verification server (Cloudflare Workers), which checks the purchase with the Google Play Developer API and returns only the result.
The server does not store or log purchase tokens or request contents. To limit abuse it uses a salted hash of your IP address for up to 60 seconds. The result is stored encrypted on your device. On iOS, purchases are verified on the device with StoreKit. A pass can be restored only with the store account used to buy it and does not transfer between Android and iOS.
Retention and deletion
We do not keep your works, photos or purchase tokens on any server. Deleting the app deletes works on the device, so save a backup file first if needed. Images saved to your gallery and backup files are managed by you.
Ad-related data is governed by Google's policies and can be managed in your device settings. Support emails are used to answer you and are deleted without delay once resolved, unless the law requires us to keep them longer. Send deletion requests to support@ggeomddakji.com.
Purposes, providers and international processing
We process data to provide app features (purchase verification), serve ads, keep the service secure and answer support requests. Providers: Google LLC (AdMob, User Messaging Platform, Google Play), Apple Inc. (App Store) and Cloudflare, Inc. (hosting of the purchase verification server).
They may process data outside your country under their own policies and transfer safeguards. We never sell your artwork or use your photos to train AI.
Age and changes
Gemnori is for a general audience and is not directed to children; ad requests are configured as not child-directed. Parents or guardians who believe a child's data was processed can contact us. Material changes will be posted on this page.
Data controller & privacy contact
껌딱지 (Ggeomddakji)
Depending on applicable law, you may request access, correction, deletion, restriction or objection. You can withdraw consent at any time without affecting earlier processing, and you may complain to your data protection authority. Store and ad provider accounts and records are managed by those providers.