Privacy Policy - PenUpMemory

1. Overview

This Privacy Policy outlines how the "Pen Up Memory" mobile application (hereinafter referred to as the "App") protects users' personal information and rights while providing services. It aims to facilitate the resolution of grievances related to personal information by specifying relevant matters.  

2. Types of Personal Information Collected and Collection Methods

2.1 Types of Personal Information Collected  

- During Account Registration and App Use: OAuth basic information (email address, name, profile picture, etc., provided via social login).  

- Information Generated During App Use: Usage history, access logs, device information.  

- Advertising-Related Information: Advertising ID.  

- Device Access Permissions: Storage (saving and reading images).  

2.2 Collection Methods  

- Direct input by users during app installation or registration (with consent).  

- Automatically generated information during app usage.  

- Integration with external platforms (social login).  

3. Purpose of Collecting and Using Personal Information

The Company uses collected personal information for the following purposes:  

- Providing and operating app services.  

- User identification and management.  

- Providing diary drawing storage and calendar recording services.  

- Improving app functionality and performance.  

- Delivering personalized services.  

- Providing advertising services and measuring effectiveness.  

4. Retention and Use Period of Personal Information 

The Company destroys personal information without delay after the purpose of collection is fulfilled. However, information may be retained if required by relevant laws:  

- App access logs: 3 months (Communications Secrets Protection Act).  

- Advertising records: 6 months (E-Commerce Consumer Protection Act).  

- Contract or withdrawal records: 5 years (E-Commerce Consumer Protection Act).  

- Payment and supply records: 5 years (E-Commerce Consumer Protection Act).  

- Dispute resolution records: 3 years (E-Commerce Consumer Protection Act).  

5. Procedures and Methods for Destroying Personal Information

The Company destroys personal information immediately when it is no longer necessary.  

- Electronic files: Permanently deleted using irretrievable technical methods.  

- Server-stored data: Not immediately deleted upon app uninstallation. Users must use the "Delete Account" feature in the app’s settings.  

6. Rights of Users and Legal Representatives

Users or legal representatives may view, modify, or withdraw consent to personal information processing via **Settings > Privacy** in the app. Note that certain services may become unavailable upon withdrawal.  

7. Use of Advertising ID and Opt-Out Methods

The App uses Advertising IDs for personalized ads. Users can reset or disable this via device settings:  

- Android: Settings > Google > Ads > Reset Advertising ID / Disable personalized ads.  

- iOS: Settings > Privacy > Tracking > Disable "Allow Apps to Request Tracking".  

8. App Access Permissions

The App requires the following permissions:  

- Required Permissions:  

  - Storage: Saving and reading images.  

  - Camera: Taking photos for diary entries.  

Permissions can be modified via device settings at any time.  

9. Data Protection Officer and Contact Information

The Company designates the following officer to oversee personal information protection:  

- Name: Yuhyeon Kim  

- Email: rladbgus0516@naver.com  

10. Changes to the Privacy Policy 

This policy is effective from February 21, 2025.

Any changes will be notified through the App’s announcement section 7 days prior to implementation.