JGB1990 (Jjang-Kkaem-Ppo) Privacy Policy

H2F Co., Ltd. (the "Company") values users' personal information and complies with the Personal Information Protection Act (개인정보 보호법) and related laws and regulations. This Privacy Policy explains how users' personal information is collected, used, retained, and destroyed in the JGB1990 (Jjang-Kkaem-Ppo) mobile application (the "Service") provided by the Company.

Article 1 (Personal Information Collected)

1. Automatically Collected Items

• Device identifiers (Advertising ID, Firebase Installation ID)
• App launch and usage records (game play logs, point earning records, subscription status)
• Crash data and diagnostic information
• Advertising identifier (AdMob)

2. Items Collected at Login

• When using Google login: email address, display name, profile photo URL
• When using Apple login: Apple ID, email (if the user chooses to share it), name (first time only)
• Anonymous login: no personal information is collected (only a Firebase UID is generated)

3. Items Collected upon Subscription Payment

• Payment information is processed directly by Apple or Google, and the Company does not collect payment information (such as card numbers).
• Only subscription status information, such as whether the subscription is active and its expiration date, is stored in Firebase.

Article 2 (Purposes of Collection and Use of Personal Information)

1. Providing the Service: Running the game, granting coins, and operating the ranking and friend invitation features
2. Member management: Identity verification, account management, and prevention of fraudulent use
3. Providing the subscription service: Managing monthly subscription status, automatically granting daily coins, and applying the ad-removal benefit
4. Advertising services: Providing rewarded ads and displaying personalized ads through the advertising identifier
5. Service improvement: Analyzing usage statistics, developing new features, and fixing bugs

Article 3 (Retention and Use Period of Personal Information)

1. Users' personal information is retained for the period of use of the Service and is destroyed without delay upon withdrawal of membership.
2. Information that must be retained for a certain period under applicable laws is as follows.

   Item	Retention period	Legal basis
   Records of payment and supply of goods	5 years	Act on the Consumer Protection in Electronic Commerce (전자상거래법)
   Records of consumer complaints and dispute resolution	3 years	Act on the Consumer Protection in Electronic Commerce (전자상거래법)
   Access log records	3 months	Protection of Communications Secrets Act (통신비밀보호법)

Article 4 (Provision of Personal Information to Third Parties)

The Company uses users' personal information only within the scope of the purposes specified in Articles 1 and 2 and, in principle, does not provide it to outside parties. However, the following cases are exceptions.

• Where the user has given prior consent
• Where required by law, or where an investigative agency requests it for investigative purposes in accordance with the procedures and methods prescribed by law

Article 5 (Entrustment of Processing)

To provide the Service smoothly, the Company entrusts the processing of personal information as follows.

Article 6 (Overseas Transfer of Personal Information)

The Company may store some personal information overseas through the Google Firebase service.

• Countries of transfer: Regions operated by Firebase, such as the United States and Singapore (currently using the Seoul region, asia-northeast3)
• Items transferred: The items of collection specified in Article 1
• Method of transfer: Encrypted transmission over the network
• Purpose of transfer: Providing the Service and data storage

Article 7 (Rights of Users)

1. Users may at any time request access to, correction of, deletion of, or suspension of the processing of their personal information.
2. Users can delete their account directly through the "Delete Account" function in the in-app menu, in which case the member's scores, subscription information, and profile data stored in Firebase are permanently deleted.
3. The advertising identifier (Advertising ID) can be reset or tracking can be limited in the device settings.

Article 8 (Measures to Ensure the Security of Personal Information)

• Encryption of personal information: Important information such as passwords is stored and transmitted in encrypted form.
• Access control through Firebase Security Rules
• Encryption of data in transit through the HTTPS protocol
• Minimizing the number of people who can access personal information

Article 9 (Cookies and Advertising Identifiers)

1. The Service uses the Google AdMob advertising identifier to provide personalized ads.
2. Users can limit ad tracking or reset the identifier in their device settings.
   • iOS: Settings > Privacy & Security > Tracking
   • Android: Settings > Google > Ads

Article 10 (Protection of Children's Personal Information)

The Service is registered as suitable for all ages (4+), and for children under 14 years of age, the consent of a legal guardian may be required. The Company does not intentionally collect personal information from children and, if a user is identified as a child, will immediately delete that information.

Article 11 (Personal Information Protection Officer)

The Company oversees matters relating to the processing of personal information and has designated a Personal Information Protection Officer, as set out below, to handle user complaints and provide remedies for damage.

Article 12 (Changes to the Privacy Policy)

This Privacy Policy may be changed in accordance with laws and service policies, and any changes will be announced within the app and on the website. In the case of significant changes, notice will be given 7 days before the effective date.