PRIVACY

Privacy Policy

InterrobangSoft Co., Ltd. (hereinafter referred to as the “Company”) makes every effort to protect the personal information of its members securely. The Company complies with the provisions of laws related to personal information, such as the Personal Information Protection Act, and strives to protect users' rights by establishing a privacy policy based on relevant laws. Users can refuse to consent to the collection, use, provision, and delegation of personal information as described below. However, if users refuse to consent, they may not be able to use all or part of the services.

※ This Privacy Policy applies to all sites (including mobile web/apps) that process personal information by InterrobangSoft.

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. Personal information is not used for purposes other than those specified, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Membership Registration: For verification of identity in the use of membership services, customer inquiries and complaints, and the delivery of various notices.

• Customer Management: For handling service inquiries and complaints and delivering various notices.

2. Period of Retention and Use of Personal Information

The Company collects the following personal information for membership registration (login) and customer support through the customer center and various service provisions:

• Membership Registration and Simple Login Integration:

  • (Collected items) Google: Name (nickname), email, profile photo, login identifier.

  • (Retention period) Until membership withdrawal.

• Diary Data:

  • (Collected items) Diary content, photos, location information, with all data encrypted.

  • (Retention period) Until membership withdrawal.

    • Diary content: User input.

    • Diary photos: User-added.

    • Location information: Location where the diary was written.

• Customer Inquiries:

  • (Collected items) Email, inquiry content, device information.

  • (Retention period) In accordance with the retention period specified in this Privacy Policy.

3. Provision of Personal Information to Third Parties

The Company processes personal information within the scope specified in the purpose of processing and provides personal information to third parties only in cases where the data subject has given consent, in accordance with Articles 17 and 18 of the Personal Information Protection Act, or where there is a special legal provision. Otherwise, personal information is not provided to third parties.

4. Delegation and Overseas Transfer of Personal Information

1. The Company regulates, through contracts with delegated parties, the compliance with laws related to personal information protection, confidentiality of personal information, prohibition of third-party provision, responsibility for accidents, delegation period, and destruction of personal information after processing, and ensures that these regulations are followed.

2. For better service provision, the Company delegates the processing of personal information as follows:

• Delegated Entity: Google Cloud Platform (GCP).

• Contact Information: 080-822-1422.

• Delegated Tasks and Purpose: Data storage and analysis.

• Country of Transfer: United States.

• Personal Information Items Transferred: Email address, profile name, diary data.

• Time and Method of Transfer: Transmitted over the network at the time of login and diary entry.

• Retention and Use Period: In accordance with the retention period specified in this Privacy Policy.

Users can refuse the overseas transfer of their personal information by contacting the Company’s Personal Information Protection Officer and responsible department. If a user refuses, the Company will exclude their personal information from overseas transfers. However, services that require essential overseas transfers of personal information may be limited.

Additionally, the Company complies with Google API Services User Data Policy.

5. Destruction of Personal Information

Personal information is destroyed without delay when the purpose of processing is achieved, except where other laws require retention. The destruction procedures, time, and methods are as follows:

• Destruction Procedure: Information entered by users is destroyed after the retention period has expired or the purpose of processing has been achieved, in accordance with internal policies and related laws. Collected personal information is not used for purposes other than as stipulated by law.

• Destruction Method: All data related to users who have terminated their contracts will be deleted from the database.

6. Rights and Responsibilities of the Data Subject and Legal Representative

1. Members and their legal representatives may view or modify their personal information at any time and may withdraw their consent to the use of personal information through the membership withdrawal process.

2. Personal information can be viewed or modified in the [Settings] section within the app. Membership can be canceled (consent withdrawn) through the [Withdraw Membership] option in [Settings]. Users can also request to view, modify, or withdraw their information by contacting the Company's Personal Information Protection Officer via email, phone, or written request.

3. If a member or their legal representative requests the correction of errors in personal information, the Company will not use or provide the personal information until the correction is completed. Personal information that is canceled or deleted upon the request of the member or their legal representative will be processed according to the retention and use period specified in this Privacy Policy and will not be accessed or used for other purposes.

7. Measures to Ensure the Security of Personal Information

The Company takes the following measures to ensure the security of personal information:

• Restriction of Personal Information Processors: The Company limits the number of employees processing personal information and regularly provides training to confirm compliance with this policy.

• Access Control for Unauthorized Persons: The Company has established and operates procedures to control access to personal information.

8. Personal Information Protection Officer and Contact Information

The Company has designated a department in charge of customer service and a Personal Information Protection Officer to protect users' personal information and handle complaints related to personal information. For inquiries related to personal information, please contact the following:

• Contact Person: Yoonmi Kim.

• Email: ibs.appdev@gmail.com.

9. Remedies for Infringement of Rights

If you need to report or seek advice on personal information infringement, you can contact the following organizations:

• Personal Information Infringement Report Center: www.118.or.kr / 118.

• Cyber Crime Investigation Unit of the Prosecutor’s Office: www.spo.go.kr / 02-3480-3571.

• Cyber Terror Response Center of the National Police Agency: www.ctrc.go.kr / 182.

10. Changes to the Privacy Policy

This Privacy Policy has been effective since September 1, 2024.