Picky Privacy Policy Notice

Picky Co, Ltd. ("Picky") is committed to keeping your personal data safe. This notice describes the personal data we collect, how it's used and shared, and your choices regarding this data. Some of the information collected from users may be personal data, and this notice provides information about your rights regarding your personal data.

This Privacy Policy is incorporated into, and is subject to, the Terms of Service.

By choosing to use our Service You: agree to the collection and use of information in relation to this Privacy Policy. Please do not use the Service if You do not agree to this Privacy Policy.

We may occasionally update this notice. We encourage users to periodically review this notice for the latest information on our privacy practices.

Last modified: September 18, 2025

If you have any questions or concerns about your privacy or anything in this notice, we encourage you to contact us at support@gopicky.com

This notice is aimed to inform you ("You", "User", "Creator") as a user of the Picky, a service available via the link https://www.gopicky.com/(the "Website") and the related application software distributed via application store(s) (the "App"), collectively referred to as the "Service", about collection, usage, sharing of Your information by Picky, Co., Ltd. a company having its registered address at 6 Jong-ro, Gwanghwamun Post Office 5F, Jongno-gu, Seoul, Republic of Korea, collectively "we", "us", "our".

We may collect information that can identify You, such as Your name and email address ("Personal Information"), and other information that does not directly identify You, as listed below.

The following data is collected by or on behalf of Picky:

1. Information provided by you directly

This may include:

• Name
• Email address
• Telephone number
• Address
• Social media profile information
• Payment information
• Gender
• Age or date of birth
• Photographs
• Skin type
• Skin concerns

We may collect and store the abovementioned information when You register and use the Service or provide it to us in some other manner, for example by corresponding with us (by email or chat, for instance) when You report a problem with the Service or when You subscribe to any of our services, or search for a service.

• When you write a review on a cosmetic product, submit content for a campaign, engage in discussions, we may collect and store nicknames, account names, written reviews, photographs, audio/visual records, tagline, and/or any content.

2. Information collected automatically

This may include:

• Usage information: Your user account registration date and time, information about the use of the Service, such as frequency of use, engagement with particular features, which sections of the Service user visits and Your common use patterns, information on engagement with emails and/or notifications.
• Any Service usage information, collected through cookies. For more information about how we use cookies for our Service, please see our Cookie Policy
• Device information that may include information specific to Your device (e.g., OS version, hardware model, unique device identifier, network information); information about Your logging in, use of features, functions, or notifications on the device. We may also collect and use Your Apple Identifier for Advertising (IDFA) and Google Advertising ID (AdID) to recognize Your device and support advertising activities on our Services. These number values are not permanently tied to Your device and, depending on Your operating system, You can reset it through Your device settings.
• Location: IP address, time zone, mobile service provider.

3. Data collected from other sources.

This may include:

• Business partners through which you create or access your Picky account, such as social media services.

Note: Information about a third party

When You provide us with information about a third party, You must have the consent of that third party before providing us with that information. By providing us with information regarding a third party You warrant that You have their permission to provide that information to us.

Provision of Services Based on Your Contractual Relationship With Us

• Enhancing Your user experience on our Service by operating, maintaining, and providing You with all of the content and features of the Services ("maintaining Service functionality purposes");
• Managing Your account and providing You with customer support. We may use Your Personal Information to respond to Your requests for technical support, Service information or to any other communication You initiate ("customer support purposes");
• Communicating with You via push notifications, reminders about our Service, Service updates and relevant to Service information. You can opt out of receiving push notifications by changing the settings on Your device or in Your browser;
• If applicable, developing and providing content and advertising tailored to Your interests on our Service and other third-party services ("marketing purposes");
• Arranging advertising campaigns, analysis of advertising campaigns effectiveness ("marketing purposes") to the extent permitted by the law;
• Identify and authenticate you so that you may use certain Services;
• Enable us to publish Your review information including, but not limited to, Your nickname, account name, written reviews, age, photographs, audio/visual records, tagline, and/or any content;

Use of Information for Further Purpose

• Detecting and resolving any fraud or other illegal or undesirable user behavior;
• Performing research and analysis about Your use of, or interest in, our products, services or content, or products, services or content offered by others ("analytics purposes");
• Taking other legally-required actions.

On other occasions where we ask You for consent, we will use the data for the purpose which we explain at that time. When we rely on consent, You will have the right to withdraw Your consent at any time. To exercise this right, please see the "Your Rights" section below.

For the Website, We may also use your email address to verify whether such email is correct; let you know about important updates to our terms and policies; communicate with you about our Service or our similar products that might be of interest for you. Depending on your jurisdiction, we may also send you other marketing communications, such as on products, product updates, offers, discounts, and provide news and information that we think will be of interest to you either based on your consent or unless you opt out of receiving such emails. All email communications are performed based on Our legitimate interest to the extent allowed under the law.

Picky may be required to share data with our affiliates and partners, at your request or to fulfil our contract with you. We may also share data with our affiliates and partners, for legal reasons or in connection with claims or disputes.

The Service may provide the ability to connect to other websites, devices, apps and other features, which may operate independently from us and may have their own privacy notices or policies, which we strongly suggest you review. To the extent any linked website, device, app or other feature is not owned or controlled by us, we are not responsible for its content, use or privacy practices.

Picky may share the data we collect:

1. With Picky service providers and business partners

Picky provides data to vendors, consultants, marketing partners, and other service providers or business partners. These include:

• Email distribution platforms, such as Brevo. Their privacy policy can be found here.
• Cloud storage providers, such as AWS and Google Cloud. Their privacy policies can be found here and here.
• Web analytics services, such as Google Analytics. Their privacy policy can be found here.
• Marketing services, such as Meta and TikTok. Their privacy policies can be found here and here.
• Payment processors, such as Stripe and Paypal. Picky does not store or collect your payment card details. That information is provided directly to our third party payment processors. Their use of your personal data is governed by their privacy policies, here and here.

2. For legal reasons or in the event of a dispute

Picky may share your personal data if we believe it's required by applicable law, regulation, operating license or agreement, legal process or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.

This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

3. With consent

Picky may share your personal data other than as described in this notice if we notify you and you consent to the sharing.

International Data Transfers

Your use of our Service will involve the transfer, storage, and processing of your personal information within and outside of your country of residence, consistent with this policy. Please note that the data protection and other laws of countries to which your information may be transferred might not be as comprehensive as those in your country.

Your Personal Information belongs to You. You can ask us to provide details about what we've collected, and You can ask us to delete it or to correct any inaccuracies. If permitted by law, we may charge You a small fee for providing You with this ability. You can also ask us to restrict or limit the processing of Your Personal Information, as well as, to provide Your Personal Information for a contract or in a structured, machine readable format, and to share (port) this information to another data controller.

In addition, to the extent permitted under applicable laws, You can object to the processing of Your Personal Information in certain circumstances, such as, in particular, where we are not obligated to process the data to meet a contractual or other legal requirement).

These rights may be limited.

For example, if fulfilling Your request would reveal Personal Information of another person, where such disclosure would infringe the rights of a third party (including our rights) or if You ask us to delete information which we are required by law to maintain or have other compelling legitimate interests in maintaining the information, Your request may be denied.

We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. To make a request concerning Your rights or to make an inquiry, contact us. See the Contact Us section.

If You think that the Personal Information related to You is inaccurate, but You can't rectify it as described above, You may contact us at the email specified in section "Contact Us" below to restrict the processing of such data for the period of time we need to verify the accuracy of the Personal Information, which we will inform You of.

As to the App, You can also stop collection of information by the App by uninstalling the App from Your mobile device. You may use the standard uninstall processes as may be available as part of Your mobile device or via the App marketplace or network.

Picky is committed to the security and integrity and confidentiality of your information. We have implemented technical, administrative and physical security measures that are designed to protect your information from unauthorized access, disclosure, use and modification. We regularly review our security procedures to consider appropriate new technology and methods. However, unfortunately no method of storage on or transmission over the internet is 100% secure, and so we cannot guarantee the absolute security of your personal data.

Picky retains data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the category of user to whom the data relates, the type of data, and the purposes for which we collected the data.

Users may request deletion of their data any time by contacting support@gopicky.com. We may retain data after a deletion request due to legal or regulatory requirements or for the reasons stated in this policy.

We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data for purposes of Picky's legitimate interests or those of other parties, to fulfill our legal obligations, or based on consent.

Picky Services are designed for a general audience and is not directed to children, and we don't knowingly solicit or collect personal data from children under the age of 18. If users are children and we are informed of this, we will take steps to delete that information. If you believe that a child under the age of 18 has given us personal data, please contact us at support@gopicky.com.

The California Consumer Privacy Act (CCPA) allows consumers in California to opt out of certain sharing of their data.

It is important for you to know that Picky does not sell your data. Please see above for further information on what data we collect and how we use it.

We do not track users over time and across apps or websites, and our website therefore does not respond to Do Not Track signals.

California residents may request that Picky:

• Disclose the sources, categories, and specific pieces of personal data we have collected about them, how that information is used including the purpose, and with whom Picky shares it
• Delete their personal data
• Disclose, for any "sales" of personal data under the CCPA, the categories of personal data collected and sold and to what categories of third parties it was sold
• Opt them out of sales of their personal data (if any)
• Provide a copy of their personal data in a readily usable format that allows the information to be transmitted to others
• California residents may not be discriminated against for exercising any of the rights described above.

California residents may exercise these rights by contacting Picky at support@gopicky.com.

If you are a resident of the European Union, Switzerland or the United Kingdom you should be aware that Picky is the controller of your personal data. Under the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) or the UK GDPR, you may have certain additional rights with respect to your personal data, including the following:

• The right of access to your information
• The right to rectify your information if it is incorrect or incomplete
• The right to have your information erased ("right to be forgotten") if certain grounds are met
• The right to withdraw your consent to our processing of your information at any time, if our processing is based on consent
• The right to object to our processing of your information, if our processing is based on legitimate interests
• The right to object to our processing of your information for direct marketing purposes
• The right to receive your information from us in a structured, commonly used and machine-readable format, and the right to transmit your information to another controller without hindrance from us (data portability)

You may contact us at support@gopicky.com to exercise any of the above rights. We may request specific information from you to confirm your identity, and in some circumstances, we may charge a reasonable fee for access to your information.

You should be aware that personal data that you provide to us may be transferred out of the country in which you reside to servers in a country that may not guarantee the same level of protection as the one in which you reside. Nevertheless, we will take all steps reasonably necessary to ensure that your personal data is treated securely in accordance with this privacy policy, and no transfer of your personal data will take place to a third party unless there are adequate controls in place, such as the EU's Standard Contractual Clauses, to protect your personal data.

If you believe that our processing of your information is inconsistent with your data protection rights under the GDPR or UK GDPR, and we have not adequately addressed your concerns, you have the right to lodge a complaint with the data protection supervisory authority of your country

You may request the deletion of their personal data associated with our platform through the following methods:

1. In-App Request: Users can submit a data deletion request via [Profile → Account Information → Delete Account] within the app. Requests made through this method are processed immediately.

2. Email Request: Users may also submit a deletion request via email by contacting support@gopicky.com with the subject line "Account Deletion Request." To verify the request, users must provide the email address or account details associated with their profile. Requests submitted via email will be processed within 15 days. A confirmation notice will be sent upon the successful deletion of the user's data. For further inquiries regarding data deletion, please contact us as specified in the Contact Us section of this Privacy Policy.

We may update our Privacy Policy from time to time. Thus, You are advised to check our Service occasionally to inform Yourself of any changes. We will notify You of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. Your continued use of the Service after changes to the Privacy Policy have been posted will constitute Your acceptance of such changes.

Please submit any questions, concerns or comments You have about this Privacy Policy or any requests concerning Your Personal Information via the following email: support@gopicky.com.