Privacy Policy for "GeulBox"

1. Purpose of Personal Information Processing

"GeulBox" processes personal information for the following purposes and does not use it for any other purposes:

- App: Verification of customer registration intent, identification/authentication of individuals for service provision to customers, maintenance/management of membership status, etc.
- Includes Admob (advertising program), and Admob's privacy policy can be found at https://policies.google.com/privacy?hl=en
- Uses Google Analytics for service improvement, and through Google Analytics, the following information can be collected: app installation, deletion, update events / device models and operating systems used / app event locations, gender, age, traffic sources, etc.
- Google Analytics Terms of Service : https://firebase.google.com/terms/analytics
- Google Privacy Policy : http://www.google.com/intl/en/policies/privacy/

2. Processing and Retention Period of Personal Information

① "GeulBox" processes and retains personal information within the period agreed upon by the information subject or within the period required by law when collecting personal information from the information subject.

② The specific processing and retention period for personal information are as follows:

- Customer registration and management: Until the service membership is terminated.

3. Provision of Personal Information to Third Parties

1. Admob, Google Analytics
- Purpose of the recipient's personal information use: Providing customized services, including content and advertisements. https://policies.google.com/privacy?hl=en#whycollect
- Personal information items provided : https://policies.google.com/privacy?hl=en#infocollect
- Retention and use period of the recipient : https://policies.google.com/technologies/retention?hl=en

4. Personal Information Processing Outsourcing

① "GeulBox" does not outsource personal information processing tasks.

5. Rights and Obligations of the Information Subject and Methods of Exercising Them As an information subject, users can exercise the following rights regarding personal information protection:

① The information subject can exercise the following rights related to personal information protection against "GeulBox" at any time:

1. Request for access to personal information
2. Request for correction in case of errors
3. Request for deletion
4. Request to suspend processing

6. Items of Personal Information Being Processed

① "GeulBox" processes the following personal information items:

7. Destruction of Personal Information

"GeulBox" generally destroys personal information without delay once the purpose of processing personal information is achieved. The procedures, deadlines, and methods of destruction are as follows:

-Destruction procedure:
- App: The information provided by the user is transferred to a separate database (or separate document for paper-based information) after achieving the purpose and is stored for a certain period according to internal policies and relevant laws and regulations before being destroyed immediately. The transferred personal information will not be used for any purpose other than legal requirements.
- Admob, Google Analytics : https://policies.google.com/technologies/retention?hl=en

-Destruction deadline:
- App: Personal information of users will be destroyed immediately when it is determined that the processing of such information is no longer necessary.
- Admob, Google Analytics : https://policies.google.com/technologies/retention?hl=en

8. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

1. The developer may collect the user's ADID/IDFA. ADID/IDFA refers to the advertising identification value of mobile app users, which can be collected for the purpose of providing personalized services to users or delivering better-targeted advertisements.

Opt-out methods:
- Android: Settings → Google → Ads → Disable personalized ads
- iOS (iOS 13 and below): Settings → Privacy → Advertising → Limit Ad Tracking / iOS 14 and above: Settings → Privacy → Tracking → Disable Tracking

2. Online personalized advertising service:
- The developer allows online personalized advertising operators to collect advertising identifiers and behavioral information.
- Advertising operator collecting and processing behavioral information: Admob (Google)
- Method of collecting behavioral information: Automatically collected and transmitted when the user runs the developer's app.

9. Privacy Officer

①"GeulBox" designates a privacy officer responsible for overseeing personal information processing, handling complaints and damages related to personal information processing, etc.

② Users can contact the privacy officer and the relevant department for any inquiries, complaints, or requests regarding personal information protection arising from the use of "GeulBox" services or business. "GeulBox" will respond and handle the inquiries from users promptly.

10. Changes to the Privacy Policy

① This privacy policy will be effective from the date of enforcement. In case of any additions, deletions, or modifications based on laws and policies, the changes will be notified through the notice section at least 7 days prior to the implementation of the changes.

11. Measures to Ensure the Security of Personal Information

"GeulBox" takes the necessary technical, administrative, and physical measures to ensure the security of personal information in accordance with Article 29 of the Personal Information Protection Act.

1. Encryption of personal information:
User passwords are encrypted and stored in a one-way encryption method, ensuring that only the user knows the password. Important data is encrypted or protected using separate security functions such as file encryption and file locking for transmission.

2. Access restrictions to personal information:
Access control measures, such as granting, changing, and revoking access rights to the database system processing personal information, are implemented to control access to personal information. Intrusion prevention systems are utilized to control unauthorized access from external sources.

Effective date of the privacy policy: May 29, 2023.