Your data, your rules.

This policy explains, in plain language, what personal data Skillium Studio collects, why, and the rights you have over it - including your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act). It applies to the Skillium website, the Skillium ID account system, and Manhwa AI Studio.

The short version: we collect the minimum needed to run your account - your Google email, a device identifier, and usage counters. Your comics, scripts and audio are processed on your own computer - they are never uploaded to us. You can download a full copy of your data or erase your account yourself, any time, from your account page.

1. Who we are

Skillium Studio ("we", "us") is the data fiduciary for the personal data described here. For anything in this policy, contact us.

2. What we collect, and why

We ask for your consent at sign-in. Each item below is collected only for the purpose stated next to it - nothing is reused for anything else, and nothing is sold or used for advertising.

• Email address and name from your Google account (when you sign in with Google) - creating and operating your account; receipts; support.
• A device identifier - a one-way hash derived from your Windows installation; we cannot read your hardware from it (when you sign in inside the app) - enforcing the 1-device licence and preventing account abuse.
• Usage counters - chapters generated per day, credits spent, series count (while you use the app) - enforcing your plan's limits and showing you your balance.
• Your reason for requesting a trial (only if you request a free trial) - reviewing trial requests and preventing repeat/fake trials. No phone number is collected; your Google account email identifies the request.
• Subscription status from our payment provider (if you buy a plan) - activating your plan. Card/UPI details go directly to Lemon Squeezy - we never see or store them.
• Messages you send us (if you contact support) - answering you.

What we deliberately do not collect: your content - comics you import, scripts and narration audio are processed and stored on your own computer and never transmitted to Skillium servers. No advertising identifiers, no tracking pixels, no analytics SDKs, no selling of data - to anyone, ever.

3. Consent, and withdrawing it

We process your data on the basis of the consent you give when you sign in. You can withdraw consent at any time by deleting your account from your account page - that erases your data as described below. Withdrawing consent doesn't affect processing that happened while consent was in force.

4. Your rights (DPDP Act, 2023)

• Access: download a complete machine-readable copy of your data from your account page ("Download my data").
• Correction: your email comes from Google, so it's always current; for anything else, email us and we'll correct it.
• Erasure: use "Delete my account" on your account page. It permanently removes your profile, devices, credits, referral code, trial requests and history from our database.
• Grievance redressal: email us with "Grievance" in the subject. We acknowledge within 72 hours and aim to resolve within 15 days. If you're not satisfied, you may complain to the Data Protection Board of India.
• Nomination: you may nominate someone to exercise these rights for you (email us to set this up).

5. How long we keep data

• Account data: until you delete your account - then it is erased immediately from the live database.
• Payment/subscription records: kept by Lemon Squeezy under their own legal retention obligations (tax and accounting law).
• Server logs at our infrastructure provider are short-lived and automatically rotated.

6. Who processes data for us

We use three processors, each only for its stated job: Google (sign-in), Lemon Squeezy (payments and billing), and Cloudflare (hosting and database). Cloudflare operates a global network, so data may be processed outside India; we rely on the DPDP Act's cross-border transfer provisions (Section 16) and Cloudflare's security certifications. We have no other recipients of your data.

7. Security

All traffic is encrypted in transit (TLS). Device identifiers are stored only as one-way hashes. Licences and app updates are cryptographically signed (Ed25519). Administrative access is key-gated, rate-limited and time-locked. If a breach affecting your personal data ever occurs, we will notify you and the Data Protection Board of India as the DPDP Act requires.

8. Children

Our products are not directed at children. You must be 18 or older - or use the service with the verifiable consent of a parent or guardian - to create an account. We do not knowingly process children's data and we do not do behavioural tracking or targeted advertising at all.

9. Changes

If this policy changes materially, we'll post the new version here with a new effective date, and for significant changes we'll tell you in the app or by email.