StoryFlick Privacy Policy
Last Updated: December 24, 2025
StoryFlick Privacy Policy (Full Compliant Version for Launch)
This Privacy Policy applies to all StoryFlick services, including the StoryFlick mobile application, official website, software programs, and all related services (collectively referred to as "StoryFlick" or the "Platform"). StoryFlick is operated and provided by KIMO CULTURE CO., LIMITED, a legally registered and operating enterprise incorporated under the laws of Hong Kong, with its registered address at UNIT 18, 8/F, PETER LEUNG INDUSTRIAL BUILDING, 103 WAI YIP STREET, KWUN TONG, KOWLOON, HONG KONG (referred to as "we", "us", or "our").
We attach great importance to the protection of user personal privacy and fully commit to safeguarding and respecting users' legitimate privacy rights. This Privacy Policy elaborates on how we collect, use, share, process, and store your personal information during your use of our services, and clarifies your rights and options regarding the access, correction, and usage of your personal data. This Privacy Policy applies globally, and jurisdiction-specific provisions are set forth in the "Supplemental Terms – Jurisdiction-Specific Provisions" section of this document.
This Privacy Policy only governs data collection and processing activities conducted on our official website and application, and does not apply to the data practices of any third-party websites, applications, or service providers. When you access or use third-party platform services, you may disclose your personal information to third parties whose privacy practices may differ from ours. We recommend that you carefully review the privacy policy of each third party to understand their personal information processing rules.
If you do not agree with any terms of this Privacy Policy, please immediately cease all use of StoryFlick services.
This Privacy Policy is legally binding. Please read it carefully in full before using our Platform.
This Privacy Policy covers the following contents:
1. Types of Information We Collect
2. Methods of Using Your Information
3. Circumstances of Sharing Your Information
4. Storage and Protection of Your Information
5. User Rights and Options
6. Processing Rules for Minors' Information
7. Cross-Border Data Transfer Rules
8. Updates to This Privacy Policy
9. Contact Information
10. Language Validity
11. Governing Law and Dispute Resolution
12. Supplemental Terms – Jurisdiction-Specific Provisions
We collect various types of information generated or actively provided by you during your use of our services in compliance with applicable laws and regulations:
1. Information You Provide During Inquiries and Feedback
When you contact our customer support, you may be required to provide your email address and text, image, video, or other content related to your inquiries. We collect your user ID and problem descriptions to efficiently resolve your issues. Meanwhile, we retain all communication records between you and us, including user feedback, complaints, suggestions, and service requests.
2. Account Registration and Login Information
In regions supporting mobile phone registration and login, if you choose to register or log in to the Platform via mobile phone number, we will collect your mobile phone number and relevant verification code information for account registration, identity verification, login authentication, account security maintenance, and compliance with applicable legal and regulatory requirements.
3. Clipboard Access Information
Our application only accesses text content from your device clipboard in specific scenarios (such as exclusive invitation codes, promotional links, and other formatted content) solely for advertising attribution data analysis. We do not access or collect images, videos, or any other irrelevant clipboard content. Clipboard access permissions are controlled by your device system (iOS/Android), and you may enable or disable this permission at any time via your device settings.
4. Information Automatically Collected During Service Usage
(1) Usage Behavior Information
We automatically collect all interactive behavior data generated on the Platform, including click records, follow actions, search records, saved content, browsing history, and transaction records. Such data is used to analyze your usage preferences and interests to provide personalized content recommendations. We also collect your check-in records, follow lists, push notification activation status, and service usage duration to calculate rewards from incentive activities. Relevant transaction, consumption, and reward records can be displayed on the product page.
(2) Device Information
We collect information about the devices you use to access our services, including unique device identifiers, device and software parameter configurations, system language, referral URLs, IP addresses, browser information, standard web server log data, and advertising identifiers (IDFA) for iOS devices. Such information is used for device identification, service security assurance, and user experience optimization.
(3) Advertising-Related Information
We may only access the list of applications installed on your device with your explicit authorization to provide customized advertising services.
(4) Cookie and Similar Tracking Technology Information
Cookies are small text files stored on user devices that collect standard network logs and user access behavior data. We use Cookies and similar tracking technologies to automatically collect user data for optimizing user experience, delivering targeted content and advertisements, and evaluating advertising performance. We and our partners may use Cookies to promote the Platform on third-party channels. We will obtain your prior authorization before enabling Cookies if required by applicable laws and regulations.
5. Third-Party Account Information
You may register and log in to StoryFlick via third-party social accounts. If you log in through a third-party account, we will obtain your nickname, avatar, email address, exclusive iOS account identifier, and other information from the corresponding platform to create and log in to your StoryFlick account, provide platform services, ensure account security, and prevent potential risks.
6. Information Obtained from Public Channels and Third Parties
We may collect legally compliant public information from official public data sources and social media public content. Meanwhile, we may legally obtain information related to you from third parties, including private messages, complaints, appeals, service applications, and user feedback submitted by others that contain your information, as well as your contact information actively provided by third parties.
We only use the collected personal information for the following legal and compliant purposes:
1. Perform and execute service agreements with users, and provide, operate, and maintain all Platform services;
2. Create and manage your personal account and user profile;
3. Communicate with you regarding service usage, push service notifications, product announcements, and version updates, and respond to your customer consultations and feedback;
4. Send you marketing newsletters and promotional offers via email. You may unsubscribe from marketing messages at any time during or after account registration through our designated channels;
5. Deliver advertisements (including targeted advertising) on the Platform and evaluate the performance of advertising and promotional activities;
6. Support the normal operation of in-platform transactions, consumption, and purchase functions;
7. Push personalized content based on your usage preferences and interests, optimize content display formats, and adapt to your devices for optimal presentation effects;
8. Detect and prevent platform abuse, fraud, spam, malicious operations, and all illegal and irregular behaviors;
9. Monitor and resolve platform security risks and technical faults, ensure account and system security, and improve the overall security and stability of services;
10. Fulfill legal and regulatory obligations, respond to domestic and foreign litigation, investigations, and claims, and handle corporate financing, mergers, acquisitions, restructurings, spin-offs, bankruptcy, asset transfers, and other commercial transactions;
11. Optimize and iterate platform algorithms and core technologies, analyze platform usage data, and continuously upgrade products and services.
To improve content matching accuracy, we adopt automated decision-making technologies (including algorithm analysis and user profiling) to analyze your platform usage records, saved content, search history, and interactive behaviors for personalized content recommendations. Such automated processing is solely for user experience optimization and will not impose any legal or substantial adverse impacts on you.
You may enable or disable the personalized recommendation function in the application settings at any time. After disabling this function, we will no longer push customized content based on your usage behaviors. You may also contact us through the channels specified in this Policy to apply for manual review or inquire about relevant details.
We will not share your personal information with any third parties except as explicitly stipulated in this Privacy Policy. We will share relevant information in accordance with regulations only under the following legal circumstances:
1. Sharing with Your Explicit Consent or Instruction
If you actively share platform content on social platforms, we will disclose necessary information to the corresponding social platforms in accordance with your operation settings.
2. Sharing with Compliant Cooperative Service Providers
Some of our services are jointly provided by cooperative partners. To fulfill the service contents specified in this Policy, we will share necessary personal information with the following partners:
(1) Social Platforms: If you register or log in to the Platform via social accounts, we may share your basic information such as nickname and avatar with the corresponding social platforms;
(2) Technical Service Providers: We entrust third-party institutions to provide data analysis, IT technical support, email delivery, customer service, SMS verification, identity authentication, fraud risk control, security operation and maintenance, and other services. If you use the SMS verification function, we only provide your mobile phone number to designated SMS service providers for sending verification codes. All service providers may only process your data for the purposes specified in this Policy and are required to strictly protect your information security;
(3) Advertising Partners: With your authorization, we may share your device application list with advertising partners for targeted marketing services;
(4) Third-Party SDK Providers: The Platform integrates third-party SDKs for advertising, data analysis, message push, and customer service. Third parties will collect and process relevant information in accordance with their independent privacy policies. We conduct compliance reviews on all cooperative third parties and recommend that you review third-party privacy terms.
3. Information Sharing/Transfer in Commercial Transaction Scenarios
In the event of corporate financing, mergers, acquisitions, restructurings, spin-offs, bankruptcy, asset transfers, or other commercial transactions, we may transfer your personal information to the relevant successor entities. We will promptly announce relevant changes and require new data processors to strictly comply with this Privacy Policy.
4. Disclosure to Public Authorities in Compliance with Laws
To fulfill legal obligations, we will disclose relevant personal information to law enforcement agencies, regulatory authorities, judicial institutions, and other public institutions in accordance with applicable laws, regulations, and legal procedures.
5. Other Legal and Compliant Disclosure Circumstances
(1) Comply with applicable laws, regulations, legal procedures, and regulatory requirements;
(2) Enforce our service terms, various agreements and rules, and investigate potential violations;
(3) Exercise, establish, and safeguard our legitimate rights;
(4) Identify, prevent, and resolve security risks, fraud, and technical faults;
(5) Protect the legitimate rights, property safety, and personal safety of us, users, third parties, and the public within the scope permitted by law.
Currently, the servers storing your StoryFlick-related personal information are located at [To Be Confirmed]. You acknowledge and agree that we may store and transmit your personal information on the aforementioned servers in compliance with applicable laws and regulations. Despite potential differences in data protection standards between the server location and your region of residence, we will adopt strict protective measures to fully safeguard your personal information and prevent data leakage.
As stipulated in this Policy, we may share your personal information with overseas third parties. All cross-border data transmission activities will strictly comply with cross-border data compliance requirements and complete all legal procedures before implementation.
We retain your personal information during the valid period of your account and for the necessary period required to achieve the purposes of data collection. We may also retain relevant data for compliance performance, agreement execution, and dispute resolution. The specific retention period is determined based on information type, processing purpose, and statutory mandatory retention requirements.
Upon the expiration of the retention period, we will delete or anonymize your personal information, unless otherwise mandatory required by applicable laws and regulations. If you wish to cancel your account or terminate our processing of your information, you may apply through the contact channels specified in this Policy.
We protect user personal information through technical and management measures including encrypted transmission, data desensitization, and permission control. Although we have made every effort to ensure data security, no electronic transmission or storage system can achieve absolute security. Therefore, we cannot guarantee the absolute security of your personal information. If you cannot accept the inherent risks of network security, please stop using our Platform services immediately.
We adopt technical means such as encrypted transmission, secure storage, and multi-factor authentication to prevent unauthorized access, disclosure, tampering, and loss of personal information. Meanwhile, we have established an internal information security management system, strictly control employee data access permissions, and conduct regular security training to fully protect user personal information security.
In accordance with applicable data protection laws and regulations, you are entitled to the following legitimate rights:
1. Right to access personal information;
2. Right to correct inaccurate personal information;
3. Right to delete personal information;
4. Right to withdraw consent;
5. Right to unsubscribe from notifications and marketing communications;
6. Right to disable personalized content recommendations;
7. Right to obtain copies of personal data;
8. Right to restrict or object to data processing.
You may exercise the above rights and resolve relevant issues through our designated contact channels. We will verify your identity and respond to your applications within the period stipulated by applicable laws. You may appeal against our processing results in accordance with our notifications. Additionally, you may enjoy supplementary statutory rights in accordance with local laws of your region, as detailed in the supplementary terms of this Policy.
You may independently exercise partial rights directly on the Platform:
1. View personal information: Check your user ID, nickname, and avatar on the "Profile" page;
2. View usage data: Access saved content in "My Collection", browsing history via "Profile - Usage History", and transaction, reward, and consumption records via "Profile - Wallet";
3. Copy personal information: Copy your user ID on the profile page;
4. Delete usage records: Independently delete browsing history and clear saved collection content;
5. Delete account: Delete your account and clear relevant data via "Profile - Settings - Account Deletion";
6. Clear cache: Clear local cached data via "Profile - Settings - Clear Cache";
7. Revoke authorization: Disable all permissions granted to us (such as camera access) in your device system settings.
This Platform is not intended for users under the age of 13 or users who have not reached the minimum legal service age in their respective regions. We do not actively collect personal information from minors below the statutory minimum age. If you have not reached the minimum service age, please do not use our services or submit any personal information to us. If you discover that we have illegally collected minor information, please contact us immediately. We will delete relevant data and terminate the corresponding account upon verification.
If you have reached the minimum service age but are still a minor under applicable laws, you may only use our services with the consent and supervision of your parents or legal guardians. You shall review this Privacy Policy under guardianship and submit personal information only with guardian approval. You and your guardians acknowledge and agree to abide by all terms of this Privacy Policy.
We process your personal information in strict compliance with the data protection laws of your region of residence. The information sharing activities specified in this Policy may involve transferring your personal information to overseas affiliated entities or third parties for the service purposes stipulated herein. Data protection laws and regulations of overseas jurisdictions may differ from those of your residence region. We will adopt sufficient compliance measures such as standard contractual clauses to fully ensure the security of cross-border transferred personal information.
We may revise and update this Privacy Policy from time to time to adapt to legal adjustments, technological iterations, and business development needs. The "Last Updated" date at the top of the Policy will be updated synchronously upon revision. For material changes affecting users' core privacy rights, we will notify users in advance through reasonable means including platform announcements, pop-up windows, in-app notifications, and emails. If user consent is required by applicable laws for policy updates, the revised Policy will take effect only after obtaining your authorization. We recommend that you regularly review this Policy to stay informed of the latest terms.
If you have any questions, comments, complaints, applications, or suggestions regarding this Privacy Policy and privacy-related matters, please contact us through the following channels:
1. In-app channel: Submit feedback via "My Page - Contact Us";
2. Official Email: support@kimo-culture.com
You may consult privacy-related issues, exercise personal data rights, and submit complaints and appeals through the above channels. Jurisdiction-specific contact information is detailed in the supplementary terms of this Policy. Our Data Protection Officer will respond to your privacy inquiries via the above official email.
We will verify your identity upon receiving your application and respond to and process your demands within the statutory period. Such processing does not affect your statutory right to file complaints with local data protection authorities.
This Privacy Policy is originally drafted in English, and all other language versions are translations of the English original. In the event of any inconsistency, conflict, or ambiguity between different language versions, the English original version shall prevail.
Governing Law: The formation, validity, interpretation, and performance of this Privacy Policy and all relevant service rules shall be governed by the laws of Hong Kong Special Administrative Region, without regard to conflict of law rules.
Dispute Resolution: All disputes, controversies, or claims arising out of or in connection with this Privacy Policy (including disputes regarding the existence, validity, or termination of this Policy) shall first be resolved through friendly negotiation. If negotiation fails, all disputes shall be subject to the exclusive jurisdiction of the courts of Hong Kong Special Administrative Region. You irrevocably accept such exclusive judicial jurisdiction and waive all rights to raise jurisdiction objections.
In the event of any conflict between the jurisdiction-specific supplemental terms and the main text of this Privacy Policy, the applicable local supplemental terms shall prevail.
This chapter applies exclusively to residents of the State of California, United States, who are protected by the California Consumer Privacy Act of 2018 (CCPA).
Over the past 12 months, we have collected and disclosed users' personal information in strict accordance with the rules specified in the "Information Collection" and "Information Sharing" chapters of this Policy, solely for the legal purposes stated in the "Information Usage" chapter. We do not use or disclose users' sensitive personal information beyond the statutory scope permitted by the CCPA.
CCPA Personal Information Categories and Source Description
1. Identifiers (email addresses, account names): Provided actively by users and obtained from third-party channels;
2. Commercial information (transaction, consumption, and reward records): Automatically collected by the system;
3. Internet activity information (browsing, click, and search records): Automatically collected by the system;
4. Audio-visual interactive information: Actively provided by users;
5. Sensitive personal information (login credentials): Obtained from third-party channels;
6. User profiling data: Generated and inferred based on collected data.
We do not knowingly collect personal information from users under the age of 16.
Under the CCPA and California Privacy Rights Act (CPRA), "sale" refers to the disclosure of personal information for valuable consideration, and "sharing" refers to the disclosure of personal information for cross-context behavioral advertising. We do not sell any user personal information. We may only share device identifiers and browsing data with advertising partners for targeted advertising purposes. You may disable targeted advertising functions in the application settings. We never sell or share personal information of users under the age of 16.
Statutory Rights of California Users
1. Right to Know: Request inquiries about the categories, sources, purposes, and recipients of personal information we collect;
2. Right to Delete: Request deletion of personal information (excluding statutory exemption circumstances);
3. Right to Correct: Request correction of inaccurate personal information;
4. Right to Opt Out: Opt out of data sharing for targeted advertising;
5. Right to Limit Usage: Restrict the usage and disclosure of sensitive personal information;
6. Right to Non-Discrimination: You will not be subject to any differential treatment or rights discrimination for exercising your privacy rights.
You may exercise the above rights through our designated channels, with a maximum of two Right to Know applications within any 12-month period. We will respond to valid applications within 45 days, with a maximum extension of 90 days for special circumstances. We will verify your identity before processing applications, and may charge a reasonable service fee for repetitive applications without legitimate grounds.
This chapter applies to residents of the European Economic Area (EEA), the United Kingdom, and Switzerland. In the event of any conflict between this chapter and the main text of the Privacy Policy, the terms of this chapter shall prevail.
Data Controller: KIMO CULTURE CO., LIMITED
Registered Address: UNIT 18, 8/F, PETER LEUNG INDUSTRIAL BUILDING, 103 WAI YIP STREET, KWUN TONG, KOWLOON, HONG KONG
Contact Email: support@kimo-culture.com
We process your personal information solely based on the following legal grounds:
1. Your explicit consent;
2. Performance of service contracts with users;
3. Our legitimate commercial interests (including service optimization, marketing promotion, risk control compliance, and compliant operation), provided that such interests do not override users' fundamental privacy rights and interests;
4. Performance of statutory compliance obligations.
Users' Statutory Rights
1. Right of Access: Obtain copies of personal data;
2. Right of Rectification: Correct inaccurate or incomplete personal information;
3. Right to Withdraw Consent: Revoke authorization at any time without affecting the legality of prior data processing;
4. Right of Erasure: Request deletion of personal information under statutory circumstances;
5. Right of Processing Restriction: Restrict data processing under statutory circumstances;
6. Right of Data Portability: Export personal data in a structured, machine-readable format;
7. Right of Objection: Object to data processing based on legitimate interests or direct marketing;
8. Right of Complaint: File complaints with local data protection regulatory authorities.
You may exercise the above rights through our designated channels. We may charge a reasonable service fee for excessive or repetitive applications without legitimate grounds.