Privacy Policy

Purpose of Collecting and Processing Personal Information

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Collected personal information will not be used for purposes other than stated below. In the event of changes to the purposes of use, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
• Service Membership Registration and Management
• Note: The Company does not collect or process personal information of children under the age of 14.
• Service Provision and Content Usage
• Inquiry Responses and Complaint Resolution
• New Service Development and Personalized Service Delivery
• Marketing and Advertising

Methods of Collecting Personal Information

The Company collects personal information through the following methods:

1. When individuals agree to the collection of personal information during membership registration or service usage and directly provide their information.
2. When personal information is provided by partner services or organizations.
3. When personal information is collected during consultations through customer support solutions such as Zendesk, the iipuda app or website, email, or phone calls.
4. Through events or promotions conducted online or offline.
5. When information is automatically collected using tools like Google API Client, Amplitude, Firebase, AppsFlyer, Braze (marketing automation solutions), and Zendesk (customer support solution).

• The Company may collect information about users’ online activities across websites and connected devices for service-wide purposes.
• To achieve this, the Company may utilize analytics services provided by third-party processors as listed above.

Retention and Processing Period of Personal Information

1. General Retention and Processing Period

   The Company processes and retains personal information for the period specified by law or as agreed upon by the individual when collecting the information. Personal information will be destroyed without delay when its processing purpose is achieved, the Company closes its business, the individual requests deletion, or the individual withdraws consent for collection and use. However, the following exceptions apply:

   • Retention Periods as Required by Law:
   • Act on Consumer Protection in Electronic Commerce
     • Records on contracts or subscription withdrawals: 5 years
     • Records on payments and goods provision: 5 years
     • Records on consumer complaints or dispute resolution: 3 years
     • Records on labeling/advertising: 6 months
   • Protection of Communications Secrets Act
     • Service login records: 3 months
   • Framework Act on National Taxes
     • Books and supporting documents for all tax transactions: 5 years
2. Handling Dormant Accounts

   Following the amendment to the Personal Information Protection Act (Article 39-6, removal of the personal information validity period), effective November 24, 2023, the Company no longer converts inactive accounts into dormant status or separates and stores personal information after one year of inactivity.

Types of Personal Information Collected and Processed

The Company collects the following types of personal information, ensuring it is the minimum necessary to achieve the purposes of processing. Individuals have the right to refuse consent to the collection and use of personal information. However, refusal to provide consent may limit membership registration.

• General Membership Registration
  • Required: Login ID, password, name, mobile phone number, email, gender, date of birth, country of residence
• Membership Registration via Third-Party Accounts (e.g., Kakao, Naver, Facebook, Google, Line, Apple)
  • Required: Identifier value, name, mobile phone number, email, gender, date of birth, country of residence
• Service Provision and Content Usage
  • Required: Name, mobile phone number, email, nickname, gender, date of birth, country of residence, interest information, payment methods and transaction details, identity verification details (e.g., name, mobile number, date of birth, DI), refund account details (e.g., account holder, bank name, account number), AI analysis results (e.g., age, photos)
• Inquiry Responses and Complaint Resolution
  • Required: Name, mobile phone number, email, nickname, gender, date of birth, country of residence, payment methods, service usage records, device information
• New Service Development and Personalized Service Delivery
  • Required: Service usage records, access logs, cookies, access IP address
• Marketing and Advertising
  • Optional: Name, mobile phone number, email, nickname, gender, date of birth, country of residence, interest information, auto-generated and collected information, AI analysis results
• Auto-Generated and Collected Information
  • Visit dates, service usage records, misuse records, transaction records, access logs (browser type, operating system), user-generated content, search terms, language, cookies, IP address, MAC address, device identifiers (UDID, UUID), universal IC card identifiers (UICC-ID), ad identifiers (ADID, IDFA), device information (OS, screen size, model, manufacturer)