Privacy Policy

KDrama Heart is operated by the K-Heart Collective (the “Operator”). The Service is provided through the website kdramaheart.com, the KDrama Heart app for Android, and the KDrama Heart app for iOS. For any privacy-related question, you can contact us through the contact page.

When you create an account, we collect the information you provide to set up and manage your account, including:

• Email address, used for sign-in, account recovery, and verification.
• A username and display name you choose.
• A password, which is stored only as a cryptographic hash and never in plain text.
• Optional profile information, such as an avatar and a custom profile link.

If you sign in with Google, we receive the email address and basic profile details that Google shares with us as part of the authentication process. We do not receive your Google password.

KDrama Heart is a community where you choose what to share and store. Information you create or upload may include:

• Ratings and “hearts” you give to dramas.
• Watch status and wishlist entries for the dramas you are tracking.
• Custom drama collections and “more like this” recommendations you contribute.
• Community posts, comments, drama tags, and poll votes.
• Your favorite-actor selections and avatar room decorations.
• Theme and dashboard customization preferences.
• Messages you send through the contact/suggestion box.

This content is associated with your account and is visible to others according to the sharing and privacy settings you choose. Please do not include personal or sensitive information in public posts that you do not want other members to see.

We use the information we collect to:

• Create and authenticate your account and keep it secure.
• Display your tracking, ratings, collections, and profile.
• Show community content, posts, polls, and leaderboards.
• Process and manage subscriptions, purchases, and entitlements.
• Send the monthly newsletter to subscribers and respond to your messages.
• Recommend dramas and tailor the experience to your activity.
• Detect, prevent, and address fraud, abuse, and security issues.
• Improve, maintain, and develop KDrama Heart.

We do not sell your personal information. Processing is based on your consent, the performance of our contract with you, and our legitimate interests in operating and securing the Service.

KDrama Heart uses Supabase as its authentication, database, and backend infrastructure provider. Your account credentials, profile, and the content you create are stored in the Supabase-hosted database associated with this Service. Authentication (including email/password and Google sign-in) and access to your data are managed through Supabase. Supabase acts as a processor on our behalf, and your data is protected by the access controls and row-level security policies we configure.

Android: Paid subscriptions and any in-app purchases are processed through Google Play Billing. When you make a purchase, Google Play handles the transaction, and we receive a purchase token and related details (such as the product and base plan) so we can verify the purchase and grant the correct entitlement.

iOS: Paid subscriptions and any in-app purchases are processed through Apple’s App Store / In-App Purchase system. When you make a purchase, Apple handles the transaction, and we receive a transaction identifier and related details so we can verify the purchase and grant the correct entitlement.

Web: Where applicable, payments on the website are processed through our existing web payment provider (Stripe). We receive confirmation of the transaction and the information needed to activate your subscription or purchase.

Your payment card and payment credentials are processed entirely by the relevant payment provider — Google Play on Android, Apple’s App Store on iOS, or Stripe on the web. KDrama Heart does not collect, process, or store your full card numbers or other payment credentials. We only receive confirmation of a successful transaction and the information needed to verify the purchase and maintain your entitlement.

KDrama Heart offers two paid subscription tiers — Plus (US $2.99/month) and Legend (US $4.99/month) — which unlock additional features. Subscription records we store include your plan, billing period, status, renewal and expiry dates, and a purchase or subscription identifier provided by the payment provider. These records let us confirm your entitlement and keep your benefits active.

Where available, KDrama Heart uses a virtual currency called Heart Coins for certain in-app purchases such as avatar and room items. When you buy or earn Heart Coins, we store the balance and transaction history linked to your account so the items remain available to you. Heart Coins have no monetary value outside the Service.

To operate and secure the Service, we may collect and process technical and usage information, such as:

• Account activity, such as dramas you rate and actions you take.
• Approximate device and connection information derived from your requests.
• Diagnostic and error information that helps us fix problems.
• Log data needed for security, billing verification, and abuse prevention.

We use this information to provide and improve KDrama Heart, to keep the Service stable, and to protect accounts.

KDrama Heart uses a small number of essential cookies and similar technologies to keep you signed in and remember your preferences. For example, a cookie remembers whether the navigation sidebar is open, and your device storage remembers your selected language and theme. We do not use cookies for cross-site advertising. You can clear cookies or local storage in your device or browser settings, though some features may need to be set up again afterwards.

KDrama Heart does not currently use third-party advertising networks (such as Google AdMob) or third-party analytics services (such as Google Analytics, Meta Pixel, or similar). We use our own internal records of account activity to operate and improve the Service. If we introduce third-party advertising or analytics in the future, we will update this Privacy Policy and, where required, obtain your consent.

We take reasonable measures to protect your information. Access to personal data is restricted through database row-level security policies so that members can access only their own data in most cases, and administrative actions are performed server-side. Passwords are stored only as hashes. Communication with the Service is encrypted in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information using the safeguards available to us.

We keep your information for as long as your account is active, or for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Subscription and billing records may be kept for the period required by applicable tax and accounting law. When your account is deleted, your personal information is removed as described below, except for limited data we may retain where we are legally obliged to do so.

You can delete your account at any time from within the app. Deleting your account permanently removes your profile, ratings, collections, room, and other personal data associated with your account, and this action cannot be undone. Some aggregated or anonymized information may be retained without identifying you. If you need help deleting your account, contact us through the contact page.

If you are in the European Union, the European Economic Area, or Spain, you have rights under the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD). These rights include:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request that we delete your personal data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data.
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent for processing based on consent at any time.

To exercise any of these rights, contact us through the contact page. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) or your local data protection authority.

KDrama Heart is not directed at children under 13 (or the minimum age required to use the Service in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

KDrama Heart relies on the following third-party services to operate:

• Supabase — authentication, database, and backend infrastructure.
• Google Play Billing — Android subscription and in-app purchase processing.
• Apple App Store / In-App Purchase — iOS subscription and in-app purchase processing.
• Google — Google sign-in (when you choose it) and, on Android, Google Play services.
• Stripe — web subscription and payment processing where applicable.

These providers process information subject to their own privacy policies. We share only the information necessary to provide the relevant feature (for example, a purchase token for billing verification).

We may update this Privacy Policy from time to time to reflect changes in the Service or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, if appropriate, notify you within the Service. Your continued use of KDrama Heart after a change takes effect means you accept the revised policy.

If you have any questions about this Privacy Policy or your personal data, you can contact us at:

Contact: contact page
Website: kdramaheart.com