Cloud synced · Works on all devices ♡
Rating cannot be skipped — it takes 10 seconds and helps the community ♡
Before you dive in, here's what you're agreeing to:
You must be 13 or older to use TINCASE.
틴케이스 (TINCASE) is an independent K-pop photocard trading community app operated by a sole developer/owner ("TINCASE," "we," "us"). We are not affiliated with, endorsed by, sponsored by, or connected to any K-pop label, agency, entertainment company, or artist.
We use Supabase (database/auth/storage, AWS-hosted, AES-256 encrypted at rest), Netlify (hosting only), and Google Tenor (GIF search — search queries are sent to Tenor). We do not sell data to any third party. We may disclose data if required by applicable law or valid legal process.
All data in transit uses TLS encryption. Database encrypted at rest (AES-256). Row-Level Security (RLS) enforces per-user data access. PIN login uses SHA-256 hashing with email salt, stored only on your device, and locks after 5 wrong attempts. Password login locks after 5 failed attempts for 10 minutes.
TINCASE requires users to meet the minimum age applicable in their region. We collect your birth year at registration and verify it both in the app and at the database level before account creation is permitted. We do not knowingly collect data from children under 13 (or under 16 where EU/EEA law applies). Age of consent by region: US: 13+ (COPPA); EU/EEA: 13–16 by member state (GDPR Art. 8); UK: 13+ (UK GDPR); Canada: 13+ (PIPEDA); South Korea: 14+ (PIPA/COPA); Brazil: 12+ with parental consent (LGPD); Australia: 15+ recommended; Japan: 13+ with parental consent. If we discover an underage account, we will suspend it immediately and permanently delete all data. Parents may contact us at [contact email coming soon] to request deletion.
Active account data is retained while your account is active. On deletion, public content is hidden immediately and all data is permanently purged within 30 days. Message logs may be retained up to 90 days for abuse/safety review. Backup systems may retain data up to an additional 30 days after purge request.
In the event of a breach affecting your personal data, we will notify affected users via their account email within 72 hours of discovery where required by applicable law (including GDPR Article 33). We will also notify relevant supervisory authorities as required.
TINCASE is operated from the United States. Data is stored on AWS infrastructure (Supabase) which may be located in the US or other regions. By using TINCASE, you consent to the transfer of your data to the US and other countries. Where required by GDPR Chapter V, we rely on your explicit consent as the lawful basis for international transfers. Users in South Korea, Brazil, Japan, Australia, and Canada: your data is subject to US law and Supabase infrastructure policies.
[contact email coming soon] — for data requests, privacy questions, parental deletion requests, or to report concerns.
TINCASE is currently in Beta. The service is provided for testing and early-access purposes only. Features, pricing, availability, and data structures may be added, changed, or removed at any time without notice. Data loss may occur during the Beta period. TINCASE makes no guarantees of data preservation, uptime, feature continuity, or fitness for any purpose during Beta. TINCASE and its sole developer/owner expressly disclaim all liability for any loss, inconvenience, financial harm, or other damage arising from the Beta nature of the service. Use of TINCASE during Beta is entirely at your own risk. The transition from Beta to a paid or monetized service will be communicated via in-app notice and/or email. Continued use after such transition constitutes acceptance of any updated pricing or Terms.
By using TINCASE you agree to these Terms. If you do not agree, please do not use the app.
TINCASE is an independent fan-made platform operated by a sole developer/owner ("TINCASE," "we," "us"). TINCASE is not affiliated with, endorsed by, sponsored by, or connected to any K-pop label, agency, entertainment company, or artist.
You must meet the minimum age requirement applicable in your country or region (generally 13+; higher in some jurisdictions — see our Privacy Policy for a full regional breakdown). By registering, you represent and warrant that you meet the applicable minimum age. Age is verified using the birth year you provide at registration, checked both in the app and enforced at the database level. Providing a false birth year to circumvent the age gate is a material breach of these Terms and will result in immediate account termination. Users aged 13–17 represent that they have obtained parental or guardian consent. If TINCASE discovers a user is below the applicable minimum age, we will immediately suspend and permanently delete the account and all associated data without notice. TINCASE bears no liability for false age disclosures.
You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. You may not create more than one account or allow others to use your account. Automated access, bots, and scraping are prohibited.
TINCASE is a coordination platform only. We do not process payments, hold funds, provide escrow, offer buyer or seller protection, mediate disputes, or act as a party to any transaction. All trades and sales are entirely between individual users. TINCASE bears zero responsibility or liability for lost or damaged packages, non-delivery, payment fraud, scams, disputes over card condition or authenticity, or any other outcome of peer-to-peer transactions. Payment handles (Venmo, Cash App, PayPal, Zelle) are stored privately and only transmitted when you explicitly initiate sharing via the 💳 button and confirm the prompt.
The TINCASE name, logo, visual design, and application code are proprietary intellectual property of TINCASE. You may not reproduce, copy, distribute, or create derivative works without express written permission. Photocard images uploaded by users are the intellectual property of their respective K-pop labels and agencies. By uploading images you represent you own the physical card and are using the image solely to catalog your personal collection for non-commercial purposes.
You retain ownership of content you create and upload. By posting content, you grant TINCASE a non-exclusive, royalty-free, worldwide license to store, display, and transmit your content solely as necessary to operate the service. This license terminates when you delete your content or account.
TINCASE is currently free to use. We intend to introduce optional paid features, subscriptions, or in-app purchases in the future. Any paid features will be clearly labeled. You will never be charged without explicit consent and confirmation. Free tier functionality will remain available to all users. Users will be given reasonable notice before any currently-free feature becomes paid.
TINCASE is provided "as is" and "as available" without any warranty of any kind. We make no guarantees of uptime, data preservation, fitness for a particular purpose, or freedom from errors or bugs.
To the maximum extent permitted by applicable law, TINCASE and its sole developer/owner shall not be liable for any indirect, incidental, special, consequential, or punitive damages. Our total aggregate liability for any claim shall not exceed USD $0 (the service is free). You agree to indemnify and hold harmless TINCASE and its developer/owner from any claims, damages, losses, or expenses (including legal fees) arising from your use of the service, your content, or your violation of these Terms.
We reserve the right to suspend or permanently terminate any account at any time, for any reason, including for violation of these Terms. You may delete your own account at any time via the app — your data will be permanently removed within 30 days.
These Terms are governed by the laws of Washington State, USA. Any dispute must first be submitted informally in writing to [contact email coming soon] for good-faith resolution. If not resolved within 30 days, disputes shall be resolved by binding individual arbitration in Benton County, Washington. YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION. All claims must be brought within one (1) year. International users: Mandatory rights granted by your local law (including GDPR, PIPA, LGPD, Privacy Act, PIPEDA, or APPI) apply regardless of this clause and cannot be waived by contract.
We may update these Terms at any time. Material changes will be notified via in-app notice or email. Continued use after changes constitutes acceptance.
[contact email coming soon]