개인정보 처리방침 Privacy Policy

The Company processes personal information for the following purposes. Personal information processed by the Company shall not be used for purposes other than those stated below, and the Company shall take all necessary measures in accordance with applicable laws if the purpose of use changes.

1. Membership Registration and Login - Quick login via Google account, registration and login via phone number, member identification/account management/identity verification, prevention of fraudulent use and service operation
2. Community Services - Provision of posting, commenting, liking, saving, and reporting features; support for information sharing and communication within the community; delivery of notices; handling of reports and responses to policy violations
3. QnA (Knowledge-Sharing) Service - Provision of question-and-answer information sharing functionality
4. Chat Service - Provision of chat functionality between users, management of message transmission/reception and conversation history
5. Meet-ups Service - Creation, application, and participation management for gatherings
6. Student Market (Second-hand Trading) Service - Registration, modification, and deletion of second-hand trading posts
7. Student Jobs Service - Registration, modification, and deletion of job postings and applications
8. Events Service - Provision of event information, local information, lifestyle information, and recommended content
9. Customer Inquiries and Policy Enforcement
10. Service Improvement and Operational Analysis
11. Compliance with Legal Obligations

* The Company provides an optional Map feature that allows users to voluntarily share their location with mutually selected friends. Location information is collected only when the user manually checks in, and is not collected automatically or in the background. See Section 2 for details.

The Company collects and uses the minimum personal information necessary for providing its services.

1) Personal Information Processed Without User Consent

• a. Google Login - Email address, name or profile identification information, nickname
• b. Phone Number Login - Phone number, verification information, nickname
• c. Service Operation and Protection - Service usage records, access logs, access IP addresses, device information, report history, sanction history

2) Personal Information Processed With User Consent

• a. Profile Information - Profile photo, bio/self-introduction
• b. Community Features - Posts, comments, likes, saved content, report details
• c. QnA (Knowledge-Sharing) Features
• d. Chat Features - Chat room participation info, message content, transmission date/time, attached images or files
• e. Meet-ups Features
• f. Student Market (Second-hand Trading) Features
• g. Student Jobs Features
• h. Events Features
• i. Map & Location Features - GPS coordinates (latitude and longitude) collected only upon manual check-in, check-in timestamp, location sharing preferences, and Map Friends list (mutually selected users who can view each other's location on the map)

3) Information Automatically Collected During Service Use

Service usage records, access logs, access IP addresses, device information, cookies or similar technology-based information, error and crash logs

The Company shall destroy personal information without delay when it is no longer needed due to the expiration of the retention period, achievement of the processing purpose, or other reasons.

• Electronic files: Permanently deleted using methods that make recovery impossible
• Paper documents: Shredded or incinerated

As a general rule, the Company does not provide users' personal information to external parties. However, the following cases are exceptions:

• When the user has given prior consent
• When required by law or when an investigative agency makes a request pursuant to procedures and methods prescribed by law for investigation purposes
• When urgently necessary to protect the life, body, or property of the user or a third party

The Company does not currently engage in any routine additional use or provision of personal information without the data subject's consent. Should additional use or provision become necessary in the future pursuant to Articles 15(3) and 17(4) of PIPA, the Company shall make such determinations by comprehensively considering the relevance to the original purpose of collection, the predictability based on the circumstances under which the information was collected or processing practices, whether the interests of the data subject are unfairly infringed, and whether necessary measures to ensure safety (such as pseudonymization or encryption) have been taken.

The Company entrusts the processing of personal information as follows for smooth handling of personal data operations.

When entering into an entrustment contract, the Company specifies in the contract or other documents the prohibition of processing personal information beyond the purpose of the entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of the service provider, and matters concerning liability for damages, in accordance with Article 26 of PIPA. The Company also monitors whether the service provider processes personal information securely.

The Company uses the Google Firebase service, and accordingly, users' personal information may be transferred to countries where Google servers are located, including the United States.

In accordance with Article 29 of PIPA, the Company implements the following technical, managerial, and physical measures to ensure the security of personal information.

• Managerial Measures: Establishment and implementation of an internal management plan, minimization and training of personnel handling personal information
• Technical Measures: Access control management for personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security software
• Physical Measures: Access control for server rooms, data storage rooms, and other facilities

The Company may use "Cookies" that store and retrieve usage information to provide personalized services to users.

Purpose of Using Cookies

Cookies are used to analyze users' access frequency and visit times, identify users' preferences and interests, and provide customized services.

Installation, Operation, and Rejection of Cookies

Users have the right to choose whether to install cookies. Through web browser settings, users can allow all cookies, require confirmation each time a cookie is stored, or refuse storage of all cookies. However, refusing to store cookies may cause difficulties in using some personalized services.

The Company provides a voluntary Map feature that allows users to share their location with selected friends. The following safeguards are in place:

• a. Manual Check-In Only: Location is never collected automatically or in the background. Users must manually tap "Check In" each time they wish to share their location. There is no option to enable automatic check-ins.
• b. Mutual Consent Required: A user's location is only visible to other users whom they have mutually added to their "Map Friends" list. Both users must opt in to see each other's location. Location is not displayed to all app users.
• c. Automatic Expiration: Location data is automatically removed from the map 1 hour after check-in. Users may also manually "Check Out" at any time to immediately remove their location.
• d. Full Opt-Out: Users can disable location sharing entirely through the in-app settings at any time. Disabling this setting immediately removes the user from the map and stops all location data collection.
• e. No Background Tracking: The app does not track, store, or transmit location data when the user has not actively checked in. No location history is maintained.
• f. Age Restriction: The Map feature is available only to users aged 18 and above, as reflected in the app's age rating.

The Company may use third-party analytics tools such as Google Analytics for service operation and analysis, through which users' behavioral information may be collected by third parties. Behavioral information collected may include service usage records, visit patterns, and search history. Users can refuse such collection through browser settings or the opt-out tools provided by the respective services.

Users (data subjects) may exercise the following rights related to the protection of personal information at any time with regard to the Company.

1. Request to access personal information
2. Request to correct errors or inaccuracies
3. Request to delete personal information
4. Request to suspend processing of personal information

The above rights may be exercised by submitting written requests or by email to the Company, and the Company shall take action without delay. If a data subject requests correction or deletion of erroneous personal information, the Company shall not use or provide the relevant personal information until the correction or deletion is completed.

Users may also exercise their personal information protection rights through an authorized representative. In this case, a power of attorney in the form prescribed by Attached Form No. 11 of the Enforcement Rule of PIPA must be submitted.

Users shall not infringe upon the personal information or privacy of themselves or others processed by the Company in violation of PIPA or other applicable laws.

The Company does not currently make any automated decisions that significantly affect the rights or obligations of users. Should automated decision-making be introduced in the future, the Company will provide prior notice to users and establish procedures enabling users to request explanations or raise objections regarding such decisions.

The Company designates the following Privacy Officer and responsible department to oversee the overall processing of personal information and to handle complaints and remedies related to personal information processing for data subjects.

Users may contact the above department regarding all inquiries, complaints, and remedies related to personal information protection arising from the use of our services. The Company will respond to and process users' inquiries without delay.

Users may apply for dispute resolution or counseling with the following organizations to obtain remedies for personal information infringement.

This Privacy Policy is effective as of April 9, 2026.

If there are any additions, deletions, or modifications to the contents of this Privacy Policy, the Company will provide prior notice through the website or in-app announcements at least 7 days before the effective date. However, if there are significant changes affecting users' rights, the Company will provide notice at least 30 days in advance.