Operator: Global Piggy Inc. · Applies to: the migram app (part of the NodajiFi ecosystem) · Effective date: October 14, 2026 · Last updated: October 6, 2026
This app-scoped policy supplements the ecosystem-wide NodajiFi Privacy Policy. Where the two differ for migram, this page prevails.
Introduction
NodajiFi Labs, a division of Global Piggy Inc. ("we," "us") respects the privacy of users worldwide and honors the standards of the GDPR and CCPA as well as the data-protection laws of your country of residence. Canada's PIPEDA is the baseline framework for this policy.
Core principle — you own your data. We do not record personal data on any blockchain, GEM has no cash value so we collect no financial or payment-related sensitive data, and we do not collect your real name or government-issued ID number.
1. Common account data
| Category | Items | Purpose |
|---|---|---|
| Account / authentication | Email address, phone number, passwordless login credentials (magic link / OTP) | Identification, authentication, account recovery, security |
| Profile (optional) | Nickname, avatar (no real name required) | Personalization, display |
| Age verification | "Aged 16 or older" result derived from date of birth at sign-up (raw date of birth is discarded) | Eligibility, child protection |
| Device / access | Device identifier, OS / app version, IP address, access logs, push token | Operation, security, notifications |
2. migram-specific data & permissions
| Category | Items | Purpose |
|---|---|---|
| Camera (makeup coaching) | Real-time camera frames and face-landmark points during coaching sessions | On-device AR coaching guidance. Camera frames and landmark points are processed on your device and are not uploaded. |
| Coaching face profile (stored with your account) | When you finish a coaching session while signed in: face-shape type (e.g., oval, round), three facial-proportion ratios (upper, middle and lower thirds), prominence levels of five facial areas, style tags and labels, the makeup zones and techniques recommended, a confidence value and the name of the landmark model; and a skin snapshot: undertone, hydration hint, average cheek colour values, average brightness of the T-zone and U-zone, and skin-condition levels (redness, texture, evenness, shine, dark circles). The look you practised, step scores and session times are saved with it. | Keeping a record of your completed coaching sessions |
| Saved media (optional) | Before/after photos or looks you explicitly choose to save | Your personal progress record |
| Ingredient scans (optional) | Photos of cosmetic ingredient labels you scan | Extracting label text to show ingredient information; not used to identify people |
| Learning records | Lesson progress, coaching session scores, GEM earn/spend history | Service delivery, reward calculation |
Face data — what leaves your phone. Your face is the most personal data there is, so here is exactly what happens. Camera frames, video and the face-landmark points stay on your device; we never upload them. When you complete a coaching session while signed in, the coaching face profile above — a short summary of categories and a few ratios derived from those landmarks — is saved with your account in our database (Google Cloud, Frankfurt, Germany), together with any media you explicitly choose to save. This summary contains no image and no landmark coordinates. It is used only for your coaching record: only you and authorised administrators can read it, it is not compared with other users’ data, and we do not use it to recognise or verify who you are. When you delete your account, all of your coaching sessions and coaching face profiles are deleted.
3. How we use information
- Account management: identification, authentication, recovery, abuse prevention
- Service delivery: the migram features above, GEM earn/spend
- Service improvement: pseudonymized / anonymized usage analysis
- Notices: capped at 1–2 push notifications per day; you control frequency, timing, and type
- Legal compliance and dispute handling
4. Retention and deletion
We delete personal data without delay once its purpose is fulfilled, keeping only what applicable law requires for its required period. Account deletion is actually possible by design — see Delete Your Account. Unused GEM is forfeited on deletion; since GEM is not redeemable for cash, no settlement occurs.
5. Sharing and sub-processors
We do not sell personal data and do not share it with third parties except with your prior explicit consent or under lawful process. Core sub-processors: Google Firebase (authentication, database, push, analytics) and email/SMS delivery providers (passwordless sign-in). Data sharing between ecosystem apps does not operate without your explicit opt-in.
6. Protection of children (ages 16+)
The service is provided only to users aged 16 or older. At sign-up we take a date of birth, keep only the "16+" result, and discard the raw date. If we learn a user is under 16, we delete the account and its data without delay.
7. Your rights
You may request access, rectification, deletion, portability, restriction of processing, and withdrawal of consent — in-app via "Global Piggy Inc. > Privacy" or by email to together@nodajifilabs.com. You may also lodge a complaint with your local data-protection authority.
8. Security
TLS encryption in transit, encrypted storage of sensitive data, access controls, server-authoritative abuse prevention, and no on-chain personal data by design.
9. Contact
Operator: NodajiFi Labs · Data Protection Officer: Myongsu Choe (CEO) · General: together@nodajifilabs.com · Privacy rights: together@nodajifilabs.com
10. Changes to this policy
We give in-app notice at least 7 days before changes take effect (at least 30 days for material changes adverse to users).