Privacy Policy
OneTheLab (원더랩, "we") takes the privacy of AutoFrame ("the app") users seriously. This policy explains what information the app handles, where it is kept, and what rights you have.
0. Where your data lives
The app never talks to a server operated by us. The only external addresses it contacts are Google sign-in
(accounts.google.com) and the Google Drive API (www.googleapis.com), and your
photos, videos, tags and settings are all recorded in your own Google account.
- We operate no server that collects, receives or retains your data.
- Consequently, when you stop using the app there is no user data held by us to delete.
- Sign-in tokens, Premium status, some app settings and diagnostic logs are kept on your device, and are removed when you sign out or uninstall the app.
1. What the app handles, and why
| Category | Data | Purpose | Where it is stored |
|---|---|---|---|
| Account | Google account identifier, email address, basic profile | Show who is signed in, confirm Drive access | Your device (secure storage) |
| Auth tokens | ID token, refresh token | Keep Drive access without signing in again | Your device (secure storage) |
| Media | Photos and videos you upload | Slideshow playback and preview | Your own Google Drive |
| Frame settings | People and events (name, date), per-photo tags, interval | Age / elapsed-time overlays, slideshow behaviour | A settings file in your Drive, and your device |
| Purchase state | Whether Premium is active (true / false) | Unlock Premium features | Your device (secure storage) |
| Diagnostics | App logs (error messages and similar) | Troubleshooting via the in-app debug screen | Your device (removed when the app is uninstalled) |
All of the above serves app functionality only, and none of it is transmitted to servers operated by us.
2. Google account and Drive scopes
The app requests only the following OAuth 2.0 scopes:
openid,email,profile— to identify and display the signed-in account.https://www.googleapis.com/auth/drive.file— access is limited to files the app itself created or that you uploaded through the app. Other files already in your Drive cannot be read by the app.
Our use of Google user data follows the Limited Use requirements of the Google API Services User Data Policy. Google user data is never used for advertising, never sold to third parties, and is not read by humans.
3. Device permissions
- Internet — required for Google sign-in and Drive communication.
- Battery optimization exemption — optional, so the frame is not stopped during long runs. The app works without it.
- Photo selection — the Android system photo picker is used, so no broad storage permission is requested. Only the items you pick are handed to the app.
4. Third parties
We do not sell or share your information. The following services are involved in normal operation:
- Google LLC — account authentication and Drive storage. This is a relationship between you and Google, governed by Google's policies.
- Google Play billing — handles Premium purchases and subscriptions. Payment details such as card numbers are processed by Google; the app never collects or stores them.
The app bundles no ad network, no behavioural analytics, and no crash-reporting SDK.
5. Retention and deletion
- Tokens, settings and logs on the device are removed when you sign out or uninstall the app.
- Photos and videos in Drive belong to you and remain there after uninstalling. Delete them in Drive if you want them gone.
- Deleting a photo inside the app removes it from Drive permanently, with no recovery.
6. Your rights
- Access, correct, delete — photos and settings can be inspected, edited and deleted directly in the app and in Google Drive.
- Revoke access — remove AutoFrame at any time from Google Account > Third-party apps & services.
- Sign out — signing out of the app deletes the tokens stored on the device.
7. Children
The app is not directed at children under 14 and does not knowingly collect information from them directly. Family photos may include children; uploading those photos and entering tags is done by the account holder, under their own judgement and responsibility.
8. Security
- Auth tokens and purchase state are kept in Android secure storage (Keystore-backed encryption).
- All communication with Google is encrypted over HTTPS.
- Because we never collect, store or view your photos and videos, there is structurally no copy on our side to leak.
9. Changes to this policy
If this policy changes, the updated text and its effective date are posted on this page. Significant changes are also announced with the app update.
10. Contact
Privacy questions: gunug850@gmail.com