Privacy Policy
Last updated: April 12, 2025
1. Personal Information Collected
The Company collects the following personal information to provide the Service. [Required] • Email address • Password (stored encrypted) • Service usage records, access logs [Optional] • Name • Profile information [Automatically Collected] • IP address, browser type, access time • Cookies, service usage records
2. Purpose of Collection and Use
• Membership management: User identification, identity verification, prevention of unauthorized use • Service provision: Simulation execution, result reports, credit management • Payment processing: Credit purchases, refund processing • Service improvement: Usage statistics analysis, service quality enhancement • Customer support: Inquiry response, notice delivery
3. Retention and Use Period
• Until account deletion (destroyed without delay after withdrawal) • However, when preservation is required by applicable laws: - Records of contracts or subscription withdrawal: 5 years (E-Commerce Act) - Records of payment and supply of goods: 5 years (E-Commerce Act) - Records of consumer complaints or dispute resolution: 3 years (E-Commerce Act) - Records of access logs: 3 months (Protection of Communications Secrets Act)
4. Provision to Third Parties
The Company does not provide personal information to third parties as a rule. Exceptions include: • When the User has given prior consent • When required by law or requested by investigative agencies through legally prescribed procedures
5. Outsourcing of Processing
The Company outsources personal information processing as follows: • Vercel Inc. — Web hosting and service infrastructure • Google LLC (Firebase) — Authentication and database operations • Korea PortOne — Payment integration services • Korea Payment Networks (KPN) / Paymentwall — Payment gateway services
6. Cross-Border Transfer of Personal Information
The Company may transfer Users' personal information overseas to provide the Service. • Recipients: Vercel Inc. (USA), Google LLC (USA) • Purpose: Web hosting, authentication, database operations • Items transferred: Email, service usage records, access logs • Method: Transmission via network • Retention period: Until account deletion or termination of outsourcing contract These providers maintain appropriate security measures to protect personal information.
6. User Rights and How to Exercise Them
Users may exercise the following rights at any time: • Request to view personal information • Request to correct or delete personal information • Request to suspend processing of personal information • Account deletion These rights may be exercised through the Service settings or by emailing mind-wellness@naver.com.
7. Use of Cookies
The Company uses cookies for User convenience. • Purpose: Login maintenance, language settings, service usage analysis • How to refuse cookies: Cookies can be allowed/blocked through browser settings • Refusing cookies may limit the use of some services.
8. Security Measures
The Company takes the following measures to ensure the security of personal information: • Encrypted storage of passwords • Data transmission encryption via SSL/TLS • Restriction of access to personal information • Regular security audits
9. Privacy Officer
• Officer: Woojae Yun (CEO) • Email: mind-wellness@naver.com • Phone: +82-10-6718-6781 For other inquiries regarding privacy infringement, please contact: • Korea Internet & Security Agency (privacy.kisa.or.kr / 118) • Supreme Prosecutors' Office Cyber Investigation Division (spo.go.kr / 1301) • National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)
10. Rights of International Users
Users residing outside the Republic of Korea may have additional rights under their local laws. [California Residents (CCPA)] • Right to know the categories of personal information collected • Right to request deletion of personal information • Right to opt out of the sale of personal information (the Company does not sell personal information) [Japan Residents (APPI)] • Right to request notification of the purpose of use of personal information • Right to request disclosure, correction, or deletion of personal information To exercise these rights, please contact mind-wellness@naver.com.
11. Changes to This Policy
This Privacy Policy is effective from the date of implementation. Any changes will be announced through the Service at least 7 days prior to the effective date.