Privacy Policy

Last updated: May 15, 2026

This Privacy Policy (the "Policy") describes how user information is handled in CHRONICLE OF REBIRTH (the "App"). The developer of the App (the "Operator") will handle user information appropriately in accordance with this Policy.

1. Information We Collect

The App collects the following information.

Item	Collected When	Method
Photos taken with the camera or selected from the photo library	When using the character generation feature	Collected each time at user's action
Generated card data (rarity, attribute, class, stats, skills, etc.)	Upon generation completion	Auto-generated by the App
Anonymous authentication ID (Firebase Authentication)	On first launch	Auto-generated
Device information (OS version, App version, language settings, etc.)	During API communication	Auto-collected

The App does not collect names, addresses, phone numbers, email addresses, credit card information, or location data.

2. Purpose of Use

Generation of character status (cards) by analyzing photos
Storage of generated results and viewing/redisplay by the user
Caching to avoid duplicate processing of identical photos
Bug analysis and quality improvement

3. Disclosure to Third Parties (Transmission to External APIs)

To perform generation processing, the App transmits photos and analysis results to the following third-party services. Communication is conducted via Firebase Cloud Functions managed by the Operator, and API keys for each service are not transmitted from the user's device.

Recipient	Data Sent	Purpose	Each Provider's Privacy Policy
OpenAI, L.L.C. (gpt-4o-mini / gpt-image-2)	Photo image, analysis prompt	Photo analysis (color ratio, composition, subject aura assessment, etc.) / Pixel art image generation	https://openai.com/policies/privacy-policy
Kaleido AI GmbH (remove.bg)	Photo image	Background transparency processing	https://www.remove.bg/privacy
Google LLC (Firebase Authentication / Firestore / Cloud Functions)	Anonymous authentication ID, generated card data, API requests	Authentication, data storage, proxy to external APIs	https://policies.google.com/privacy
Google LLC (AdMob)	Aggregated advertising request data (no personally identifiable information)	Display of banner advertisements and rewarded video advertisements within the App. The IDFA is not used and tracking is not performed (App Tracking Transparency dialog is not shown).	https://policies.google.com/privacy

We do not provide user information to third parties other than those listed above, except in cases of legal disclosure requests or when necessary to protect human life, body, or property.

4. About Photo Handling

The App uses photos solely for the purpose of generating character status and identifying duplicate images.
We do not perform individual identification through facial recognition, nor do we collect facial data for third parties.
Original photos uploaded for analysis are processed only temporarily in the memory of Firebase Cloud Functions, and are NOT stored on the Operator's servers (Firebase Storage / Firestore) after processing completes. The Operator cannot view the original photos afterward.
For analysis services such as OpenAI, data transmitted via API is not used for AI model training in accordance with each provider's policy. Retention periods and usage conditions at each transmission destination follow the policies of each respective provider.
Only the generated pixel art image is stored in a user-specific storage area (Firebase Storage) for display in the user's collection. This area is accessible only when the requester's anonymous authentication ID matches, and the Operator does not browse it individually. Users can delete cards by operating the App.

5. Data Storage and Deletion

Generated card data is stored until the user performs a deletion operation.
Users can delete cards individually through operations within the App.
For requests to delete all account data, please contact us at the address below.

6. Security Measures

Communication with external APIs is encrypted using HTTPS.
External API keys are managed on the server side (Firebase Cloud Functions) and are not included in the App.
Access is controlled through Firebase authentication and access rules to prevent unauthorized access.

7. Children's Use

The App may be used regardless of age, but if used by minors, it shall be used with parental consent.

8. Changes to This Policy

This Policy may be revised in accordance with revisions of laws, addition of features, changes in operation, or other circumstances. In case of significant changes, we will notify users through the App or this page.

9. Contact

For inquiries regarding this Policy or the handling of user information, please contact us at the address below.

Operator: CHRONICLE OF REBIRTH Developer
Contact email: chronicleofrebirth@gmail.com

Established: May 7, 2026