Privacy Policy

Article 1 (Purposes of processing)

The Company processes personal information for the following purposes. It does not use the information for any other purpose, and if a purpose changes, it takes the necessary steps, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

1. Sign-up and member management: confirming the intention to join, identifying and verifying members, maintaining membership, preventing abuse, sending notices, handling complaints
2. Providing the Service: device registration and management, collecting, storing and displaying measurement data, sending alerts, answering through the AI assistant, providing software and updates
3. Payments and billing: payments and refunds for paid plans, issuing tax invoices
4. Stability and security: checking access logs, handling failures, responding to unauthorised access and hacking
5. Advertising (only members who agree): news about features, events and discounts
6. Improving AI answers (only members who agree): analysing errors in answers and improving guidance material

Article 2 (Personal information processed and how it is collected)

The Company processes only the minimum personal information needed for the Service.

1. How we collect: sign-up and service screens, external account providers (Kakao, Naver, Google), automatic transmission from devices, gateways and software, and enquiries by email and phone.
2. Payment details such as card numbers are processed directly by the payment service provider, and the Company does not store full card numbers.
3. The Company does not collect unique identifiers such as resident registration numbers or sensitive information. Please do not enter such information into the AI assistant either.
4. The Company does not accept sign-ups from children under 14 and does not collect their personal information.

Article 3 (Processing and retention periods)

The Company processes and keeps personal information within the retention period set by law or agreed by the data subject.

The following information is kept for the periods set by the relevant laws.

Article 4 (AI assistant conversations)

The Company handles conversations with the AI assistant as follows.

1. What is stored: content of questions and answers, time of conversation, number of uses per day
2. Purposes: showing conversation history and answering follow-up questions, managing usage limits per plan, preventing abuse and investigating errors. Staff look at a conversation only when the member asks for help or abuse is suspected.
3. Improving quality: conversations of members who agreed to improving AI answers may be reviewed by staff to find errors in answers and improve guidance material. Members who do not agree can still use every service, including the AI assistant, and can withdraw consent at any time in the account settings.
4. AI training: the Company does not use conversations to train artificial intelligence models. OpenAI, which generates the answers, also does not use the data it receives for model training under its API data policy.
5. Retention and deletion: conversation history is kept until the member deletes it or withdraws, and conversations the member deletes are deleted immediately.
6. Transfer abroad: to generate answers, the question and the measurement data needed are sent to OpenAI in the United States, as described in Article 7.
7. Labelling: answers from the AI assistant are generated by artificial intelligence, and the Service indicates this on screen.

Article 5 (Provision to third parties)

The Company provides personal information to third parties only in the cases set out in Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject’s consent or under a special provision of law. The Company currently does not provide personal information to any third party.

Article 6 (Outsourcing of processing)

To provide the Service smoothly, the Company outsources the processing of personal information as follows.

1. When entering into an outsourcing contract, the Company sets out in the contract or other documents, as required by Article 26 of the Personal Information Protection Act, the prohibition of processing beyond the outsourced task, technical and managerial safeguards, restrictions on sub-outsourcing, management and supervision of the processor, and responsibility including damages, and it supervises whether the processor handles personal information safely.
2. If the outsourced tasks or processors change, the Company announces it without delay through this Privacy Policy.

Article 7 (Transfer of personal information abroad)

To generate AI assistant answers, the Company transfers personal information abroad as follows. This is outsourcing needed to perform the contract with the data subject, and it is disclosed in this policy in accordance with Article 28-8(1)(3) of the Personal Information Protection Act.

Article 8 (Destruction of personal information)

1. The Company destroys personal information without delay when it is no longer needed, for example because the retention period has ended or the purpose has been achieved.
2. Personal information that must be kept under other laws is moved to a separate database or stored in a separate place.
3. Procedure: the information to be destroyed is identified and destroyed with the approval of the Chief Privacy Officer.
4. Method: electronic files are erased by technical methods that make recovery impossible, and paper documents are shredded or incinerated.

Article 9 (Rights and duties of data subjects and legal representatives)

1. Data subjects may at any time ask the Company to let them see, correct, delete or stop processing their personal information, or withdraw their consent.
2. These rights can be exercised directly in the account settings or by asking the Company in writing, by phone or by email. The Company acts within 10 days of receiving the request.
3. Rights may also be exercised through a representative, such as a legal representative or a person given authority. In that case, a power of attorney in Form 11 of the Notice on Methods of Processing Personal Information must be submitted.
4. Deletion cannot be requested for personal information that other laws require to be collected, and requests to see or stop processing information may be limited where the law has a special provision or there is a risk of harm to another person’s life or body, among other cases.
5. The Company checks that the person exercising the rights is the data subject or a legitimate representative.
6. Data subjects must keep their personal information accurate and must not infringe the personal information of others.

Article 10 (Automated decisions)

The Company does not make decisions that significantly affect the rights or duties of data subjects by processing personal information in fully automated systems. Alerts are notifications sent according to thresholds set by the member, and answers from the AI assistant are reference information to help the member decide.

Article 11 (Security measures)

In accordance with Article 29 of the Personal Information Protection Act, the Company takes the following measures to keep personal information safe.

1. Managerial: establishing and implementing an internal management plan; minimising and regularly training staff who handle personal information
2. Technical: managing and controlling access to systems that process personal information (firewalls, etc.), storing passwords with one-way encryption, encrypting web traffic (HTTPS), keeping and checking access records, applying security updates
3. Physical: servers run in data centres of a cloud provider (AWS) with controlled access

Article 12 (Cookies and similar technologies)

1. The Company uses cookies and browser storage to remember your language and screen theme (light or dark) and to keep you logged in.

   Name	Purpose	Kept for
   ts_lang	Remembers the language you chose	1 year
   theme	Remembers the screen theme you chose	1 year
   Login cookie	Keeps you logged in	Until you log out or close the browser (up to 30 days if you choose to stay logged in)

2. The Company does not use cookies for advertising or behaviour analysis, and does not collect behavioural information for targeted advertising.
3. You can refuse or delete cookies in your web browser’s settings (for example, “Privacy and security” in Chrome). If you refuse cookies, your language and theme will not be remembered and you cannot use services that require login.

Article 13 (Chief Privacy Officer and complaints)

The Company has appointed a Chief Privacy Officer and a responsible department as follows to oversee the processing of personal information and to handle complaints and remedies of data subjects.

Data subjects can contact the above for any enquiries, complaints, remedies or requests to see their personal information arising from use of the Service. The Company responds and acts without delay.

Article 14 (Remedies for infringement)

Data subjects may apply to the following bodies in Korea for dispute resolution or advice about infringement of personal information.

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors’ Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

Article 15 (Changes to this Privacy Policy)

1. This Privacy Policy applies from October 2, 2026.
2. When content is added or changed, the Company announces it on the Service from 7 days before it takes effect. If there are material changes to your rights, such as to the items collected, purposes of use or provision to third parties, it announces them from 30 days before and obtains consent again where necessary.