Privacy Policy
Yaomic application and the website www.yaomic.com
This Privacy Policy is prepared by Kana Interactive Co., Ltd. ("the Company" or "we"), which acts as the data controller of personal data, to explain our practices regarding the collection, use, and disclosure of your personal data when you use the Yaomic application (available on iOS and Android), the website www.yaomic.com, as well as other related services (collectively referred to as the "Service" or "Yaomic").
This Policy is prepared in accordance with the Personal Data Protection Act B.E. 2562 (PDPA), the General Data Protection Regulation of the European Union (GDPR), and other applicable personal data protection laws in the countries where we provide the Service.
By using our Service, you are deemed to have read, understood, and acknowledged this Policy. If you do not accept our Policy, please stop using our Service.
Definitions
Personal Data
means any information that can identify an individual, whether directly or indirectly, such as name, email address, IP address, or other identifiers.
Processing
means any operation performed on personal data, whether collecting, recording, storing, updating, using, disclosing, transmitting, transferring, or erasing and destroying.
User Account
means the specific account created to enable a user to access and use the Service, or any part of our Service.
User
means a person who accesses, uses, or registers a User Account to use our Service.
Device
means any device that can be used to access the Service, such as a mobile phone, computer, or tablet.
Cookies
means small data files placed on your device to store usage information, remember settings, perform analytics, or conduct marketing when you access the Service through the website.
1) Information We Collect
1.1 Information You Provide Directly
When you register a User Account through one of the following channels (Google, Apple, Facebook, or email), we may collect the following information:
• Name or Display Name
• Email address
• Profile picture (whether one you set yourself or one provided through a social login account)
1.2 Information Collected Automatically
When you use the Service, we automatically collect information through analytics tools as follows:
• Device information: device model, operating system, version, Device ID
• Usage information: pages visited, content read, duration of use, features used
• Network information: IP address, network type, device language
• Push Notification Token: to send notifications about new content, promotions, or important information
1.3 Information from the Use of Various Features
• Reviews and ratings: review text, ratings, display name
• Comments: text entered, date and time of posting
• Payments: We do not directly collect credit or debit card information, CVV codes, or bank account passwords. Payments are processed through the Apple App Store, Google Play Store, or authorized payment service providers on the website.
1.4 Cookies and Similar Technologies
For the website www.yaomic.com, we use cookies and similar technologies to:
• Strictly Necessary Cookies: to enable the website to function normally
• Analytics Cookies: to understand usage behavior and improve the Service
• Marketing Cookies: to measure campaigns or display promotional content
• Functional Cookies: to remember your settings, such as the selected language
You can manage cookies through your browser settings, but disabling certain types of cookies may cause some parts of the Service to not function normally.
2) Analytics Tools and Third-Party Service Providers
2.1 Firebase Analytics and Google Analytics 4 (GA4)
We use Firebase Analytics and Google Analytics 4, which are services provided by Google LLC, to analyze usage behavior of the application and website. The information collected may include Device ID, IP address, usage events, and related information, which may be processed by Google in accordance with the policies and settings of such services.
See Google's Privacy Policy at https://policies.google.com/privacy
2.2 Social Login Services
We use Social Login services from Google, Apple, and Facebook to allow you to register an account and log in conveniently. The information received from Social Login depends on the privacy settings of your account with those providers.
2.3 Push Notification Services
We use Firebase Cloud Messaging and the systems of Apple or Google, or other systems that operate in a similar manner, to send notifications to your device by storing a Push Notification Token associated with the device. You can turn off notifications through your device settings.
2.4 Payment Services
Some content or services require payment before you can access such content or services (for example, purchasing Coins). For this purpose, we use third-party services for payment processing, including but not limited to the Apple App Store and Google Play Store.
Payments on the website are processed by the payment service provider whose name is displayed before you confirm payment.
We do not store or collect details of your payment card information, CVV codes, or bank account information directly in our system. Such information is handled by our external payment service providers, and the processing of your personal data is subject to the privacy policy of each provider.
3) Purposes and Legal Bases for Processing Data
We process your personal data for the following purposes and legal bases:
(a) Performance of a Contract
• To create and manage User Accounts
• To provide content services (comics, fiction) as you request
• To handle Coins, Reading Tickets, and Membership
• To provide review and comment services
(b) Consent
• To send Push Notifications about new content and promotions
• To send marketing news via email or other channels
• To use analytics cookies on the website
(c) Legitimate Interests
• To analyze and improve the Service through Firebase Analytics and GA4
• To prevent fraud and maintain system security
• To enforce the terms of use
• To monitor, review, moderate, hide, delete, or restrict the visibility of comments, reviews, or user-generated content, as well as to take appropriate measures against the User Accounts involved, when there is reasonable cause that such content or behavior may violate our terms of use, be unlawful, infringe the rights of others, constitute spam, be fraudulent, or may affect the security, reliability, or use of the Service by other users
(d) Legal Obligations
• To comply with tax laws and other relevant laws
• To respond to court orders or competent government authorities
• Furthermore, for users in certain jurisdictions, the use of analytics cookies or certain types of analytics tools may rely on the basis of consent as required by law
4) Sharing and Disclosure of Personal Data
We may share your personal data with the following parties:
• Relevant service providers and technical partners, such as Google, Apple, and Meta/Facebook, which may process the data according to their own roles and in accordance with the privacy policy of each
• Affiliated companies: parent company, subsidiaries, or companies under the same control
• Other users: information you choose to disclose, such as display name, reviews, and comments, will be visible to other users
• Government authorities: when there is a legal obligation or a court order
• Mergers and acquisitions: if the Company enters into a merger or sale of business, personal data may be transferred, and we will notify you in advance
We will not sell your personal data to third parties for the third parties' marketing purposes.
5) International Data Transfers
Because we use Cloud services from Google and other service providers that may have servers located overseas, your personal data may be transferred to countries whose data protection standards differ from those of Thailand.
We will take appropriate measures to ensure that your data is adequately protected as required by the PDPA and GDPR, such as using Standard Contractual Clauses (SCCs) or verifying that the destination has adequate protective measures.
6) Data Retention Period
We retain your personal data according to the following criteria:
• User Account data: for the entire period that you continue to have an account with us, and for a further 90 days after you delete your account
• Transaction and payment data: 5 years from the date of the transaction (in accordance with tax law)
• Usage data (Analytics): no more than 26 months (according to the default setting of Google Analytics)
• Push Notification Token data: until you turn off notifications or delete your account
• Review and comment data: for the entire period that the content remains present in the Service, unless you request its deletion
Once such periods have elapsed, we will delete the data or render it non-identifiable.
The Company may, however, retain some data for as long as necessary for compliance with the law, dispute resolution, investigation of violations, or maintaining system security.
7) Your Rights as a Data Subject
Under the PDPA and GDPR (for users in the EEA), you have the following rights:
• Right of access: to request a copy of the personal data we retain about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your personal data when there is no longer a necessary basis for continued retention
• Right to object: to object to processing of data that relies on the basis of legitimate interests
• Right to restriction of processing: to request restriction of processing in certain cases
• Right to data portability: to receive data in a machine-readable format
• Right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of processing prior to the withdrawal
• Right to lodge a complaint: to file a complaint with the Office of the Personal Data Protection Committee (for users in Thailand) or the regulatory authority in your country
To exercise these rights, please contact us by email at [email protected]. We will respond within 30 days from the date we receive the request.
8) Requesting Deletion of User Account and Data
If you no longer wish to use Yaomic, you have the right to request deletion of your account and personal data at any time, which can be done through two channels:
• In-App Deletion: Go to the menu "Account Settings (Settings)" -> "Security" -> "Delete My Account Data" -> confirm the action by pressing "Delete My Account Data"
• Deletion via email: Send a request to delete your account to [email protected] from the email you used to register the account
Note: When you request deletion of your account, all Coins, Reading Tickets, and purchase history data cannot be recovered.
9) Data Security Measures
We use appropriate technical and organizational measures to protect your personal data, such as:
• Encryption of data during transmission (SSL/TLS)
• Restricting data access to only necessary personnel
• Regular review and auditing of security measures
However, no system can guarantee 100% security. Maintaining the confidentiality of your account is also your responsibility. If you encounter a security issue or discover unauthorized access, please notify us immediately at [email protected].
10) Children's Policy and Age Requirements
Because our Service spans multiple platforms with differing content requirements, the processing of personal data and access to the Service is subject to the following age criteria:
• For iOS users (Apple App Store): Users must be at least 18 years of age. We do not intend and will not permit persons under 18 years of age to use the Service through iOS under any circumstances.
• For Android users (Google Play Store) and the website: Users must be at least 13 years of age to create an account and use the Service.
• Minors: If a user is 13 years of age or older but has not yet reached the age of legal majority under the law, the use of the Service and the provision of personal data must be under the consent and supervision of a parent or lawful guardian.
Collection of Data from Children and Legal Compliance. We do not intend to knowingly collect personal data from children under 13 years of age (or under the minimum age set by local law). If we become aware that we have collected personal data from a child below the required age, or from a minor without parental consent, we will delete such data from our system as soon as possible.
The processing of a minor's personal data shall comply with relevant laws, such as the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, the General Data Protection Regulation of the European Union (GDPR), and the Children's Online Privacy Protection Act (COPPA) of the United States. In cases where the law requires prior parental consent, we will act in accordance with such law.
If a parent or lawful guardian believes that a child has provided us with personal data without consent, please contact us so that we may investigate, suspend the account, and delete such data.
11) Links to External Services
Our Service may contain links to third-party websites or services that are beyond our control. We are not responsible for the privacy practices of third parties. We recommend that you read the privacy policy of external services before using them.
12) Changes to the Privacy Policy
We may update this Policy from time to time to comply with the law and changes in our Service.
• We will notify you through Push Notification, email, or an announcement in the application before the changes take effect.
• The "Last Updated" date will be updated each time a revision is made.
• Continued use of the Service after the changes take effect is deemed acceptance of the new Policy.
13) Contact Channels
If you have any questions, concerns, or wish to exercise rights regarding your personal data, please contact us at Kana Interactive Co., Ltd., 99/119 Soi 22, Chotana Road, Pa Tan Subdistrict, Mueang Chiang Mai District, Chiang Mai 50300, Thailand.
Email: [email protected]