Privacy Policy

Team9D (hereinafter referred to as "the Company") is committed to protecting the personal information of users of its services (hereinafter referred to as "the Service") provided through its websites, mobile applications, and software. The Company complies with the personal information protection regulations under relevant laws, such as the Act on Promotion of Information and Communications Network Utilization and Information Protection and the Personal Information Protection Act, and has established and discloses the following Privacy Policy.

Article 1 (Items of Personal Information Collected)

The Company collects the following personal information to provide the Service.

Mobile Application Service

• Collection through Social Login

• Google Login

• Required: Google Play Account Identification Information, Email Address
• Generated Information: User Identification Code, Profile Information

• Apple Login

• Required: Apple ID Identification Information, Email Address (if agreed to share email)
• Generated Information: User Identification Code, Profile Information

• Collection through Guest Login

• Required: Nickname, Device ID
• Generated Information: User Identification Code

Web Service

• Collection through Social Login

• Google Login

• Required: Google Account Identification Information, Email Address
• Generated Information: User Identification Code, Profile Information

• Apple Login

• Required: Apple ID Identification Information, Email Address (if agreed to share email)
• Generated Information: User Identification Code, Profile Information

• Collection through Guest Connection

• Required: Nickname, Browser Identification Information
• Generated Information: User Identification Code, Session Information

Items Automatically Collected During Service Use

• Mobile Application

• Required: Device Information (model, type and version, language, device settings, operating system, etc.), Payment Records, Log Information (connection and usage logs), Connection IP Information, App Version, App Usage Analysis Data, Advertising Identifier (IDFA/GAID)

• Web Service

• Required: Device Information (browser type and version, operating system, etc.), Payment Records, Log Information (connection and usage logs), Connection IP Information, Cookie Information, Web Usage Analysis Data

Device Permission Usage Information (Mobile Application)

• Storage Access Permission: Saving and reading media such as profile images
• Camera Access Permission: Taking profile images, etc.
• Notification Permission: Providing service notifications

Article 2 (Purpose of Personal Information Collection)

The Company collects personal information for the following purposes. The collected personal information will not be used for any purpose other than those listed below, and if the purpose of use is changed, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.

• User identification, confirmation of intent to join, and prevention of unauthorized service use
• Provision of smooth service and improvement of service quality
• Settlement of fees and management of payment information when purchasing and using paid services
• Handling user inquiries and complaints, and delivering notices during the service use process
• Development of new services and provision of customized services
• Understanding connection frequency or generating statistics on members' service use
• Provision of services optimized for each platform (iOS/Android/Web)
• Analysis for service improvement and bug fixing

Article 3 (Personal Information Processing and Retention Period)

The Company processes and retains personal information within the period of retention and use of personal information pursuant to laws, or within the period of retention and use agreed upon by the user at the time of collection.

The processing and retention period for each item of personal information are as follows:

• Where the user consents to the retention period at the time of membership registration or paid service subscription:

• Member Information: Until the time of membership withdrawal
• Records of fraudulent registration and disciplinary records such as service suspension for preventing fraudulent use by bad members: 1 year
• Log records for statistics and service improvement: 3 months

• Where relevant laws impose an obligation to store information for a certain period:

• Records on contracts or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
• Records on payment settlement and supply of goods, etc.: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)1
• Records on consumer complaints or dispute settlement: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)2
• Records on labeling and advertisement: 6 months (Act on Consumer Protection in Electronic Co3mmerce, etc.)
• Account books and evidentiary documents related to transactions stipulated by tax laws: 5 years (Framework Act on National Taxes, Corporate Tax Act)
• Records on electronic financial transactions: 5 years (Electronic Financial Transactions Act)
• Personal information related to service use: 3 months (Protection of Communications Secrets Act)

Article 4 (Provision of Personal Information to Third Parties)

The Company collects personal information only within the scope specified in Article 2 (Purpose of Personal Information Collection), and provides personal information to third parties only in cases corresponding to Article 17 and 18 of the Personal Information Protection Act, such as obtaining user consent or having special provisions in law.

• Currently, the Company does not provide users' personal information to external parties. Should the Company provide personal information to a third party in the future, it will notify the user in advance of the recipient, purpose of provision, items provided, and retention and use period, and obtain consent.

Article 5 (Outsourcing of Personal Information Processing)

The Company outsources personal information processing tasks as follows for smooth personal information handling. If the details of the outsourced tasks or the contractor change, they will be disclosed through this Privacy Policy without delay.

Article 6 (Transfer of Personal Information Abroad)

The Company may use users' personal information in countries other than the user's country of service registration for purposes explained in this Privacy Policy, in connection with providing the Service to the user. By agreeing to this Privacy Policy, the user explicitly consents to the Company processing the user's data in countries such as Korea and the United States in accordance with this Privacy Policy.

Article 7 (Destruction of Personal Information)

Destruction Procedure

• The Company shall destroy the personal information without delay when the personal information becomes unnecessary, such as upon the expiration of the personal information retention period or the achievement of the processing purpose.
• If the user requests membership withdrawal or personal information deletion, the Company will proceed with the destruction procedure without delay.
• In this case, information that must be preserved pursuant to laws is transferred to a separate database (DB) and stored for a certain period according to internal regulations and relevant laws before being destroyed.

Destruction Method

• Personal information printed on paper is destroyed by shredding or incineration.
• Personal information stored in electronic file format is deleted using a technical method that prevents the records from being regenerated.
• In the case of backup data, it is destroyed using an overwrite method after the backup cycle has passed.

Article 8 (Rights and Obligations of Users and Legal Representatives and Methods of Exercise)

• Users can exercise rights such as demanding access, correction, deletion, or suspension of processing of personal information via email if a serious abnormality occurs in service use.

• Email: teamgurod@gmail.com

• The rights under Paragraph 1 can be exercised against the Company through written documents, e-mail, etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
• The rights under Paragraph 1 may be exercised through an agent, such as the user's legal representative or a person who has received a power of attorney. In this case, a power of attorney in the format of Annex No. 11 of the "Notice on Personal Information Processing Methods (No. 2023-7)" must be submitted.
• The user's rights to access and demand suspension of processing of personal information may be restricted pursuant to Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
• The demand for correction and deletion of personal information cannot be requested if the personal information is explicitly designated as a collection target by other laws.
• The Company verifies whether the person making the request for access, correction/deletion, or suspension of processing based on the user's rights is the user themselves or a legitimate agent.

Article 9 (Processing of Personal Information of Children under 14 Years of Age)

• If the Company collects personal information of children under the age of 14, it must obtain consent from their legal representative. In this case, the Company may request necessary information from the legal representative, such as their name and contact information, to obtain consent for the child.

• Personal information items collected from the child: Nickname, Device ID
• Personal information items collected from the legal representative: Name, Date of birth, Contact information, Email address
• Method for confirming legal representative's consent: Mobile phone identity verification, Email verification

• Even if the Company obtains consent from the legal representative, it will take necessary measures to allow the legal representative to access, correct, or delete the child's personal information upon request.

Article 10 (Installation/Operation and Refusal of Automatic Personal Information Collection Devices)

Use of Cookies and Similar Technologies

The Company uses "Cookie" and similar technologies to provide personalized services to users and to analyze service usage.

• Cookie: A small text file that a website stores on the user's browser
• Web Beacon: A small, transparent image included in a web page or email that tracks user behavior
• Local Storage: HTML5 technology for storing information in the browser
• Mobile Identifier: IDs that identify mobile devices, such as IDFA (iOS) and GAID (Android)

Purpose of Collection

• Maintaining user authentication and login status
• Saving user environment settings and service usage records
• Analyzing service usage patterns and providing customized services
• Measuring advertising performance and providing targeted advertisements

Method of Refusal

• Web Browser

• Chrome: Settings > Privacy and Security > Cookies and other site data
• Safari: Settings > Safari > Block All Cookies
• Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
• Firefox: Settings > Privacy & Security > Cookies and Site Data

• Mobile App

• Android: Settings > Apps > [App Name] > Storage > Clear Data
• iOS: Settings > Privacy & Security > Tracking > Revoke [App Name] Tracking Permission

• Restricting Cookie settings may limit the use of some services.

Article 11 (Information Provision through App Stores)

When registering the app on the Google Play Store and Apple App Store, the Company provides the following information in accordance with each store's privacy policy.

Apple App Store Privacy Labels

• Data Used to Track You

• Data collected to track users: Purchase history, User and Device identifiers, Usage data
• Data linked to the user: Email address, User ID, Device ID, Purchase history, Usage data
• Data not linked to the user: Diagnostics data, Performance data

Google Play Store Data Safety

• Data Collected

• Personal info: Name, Email address
• Financial info: Purchase history
• App activity: App interactions, App performance data
• Device or other IDs: Device ID, Advertising ID

• Purpose of Data Use

• App functionality
• Analytics
• Personalization
• Advertising or marketing

App Tracking Transparency

• On devices using iOS 14.5 or later, the app requests explicit permission before tracking the user. This is necessary for the app to access the device's advertising identifier (IDFA) or track the user.

Article 12 (Personal Information Feedback and Complaint Handling)

Users may inquire about all complaints arising while using the Service through the contact information below.

• E-mail: teamgurod@gmail.com

The Company is responsible for overseeing personal information processing tasks and has designated the following Chief Privacy Officer and relevant staff for handling user complaints and providing relief for damages related to personal information processing.

Article 13 (Notification of Personal Information Usage Details)

In accordance with Article 30-2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Company notifies users of their personal information usage details at least once a year.

• Notification Method: Selected from email, mobile app push notification, or website announcement
• Notification Items: Items of personal information collected, purpose of use, status of provision to third parties

Article 14 (Remedies for Infringement of Rights)

Users can apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, etc., to seek relief for personal information infringement. For other reports or counseling regarding personal information infringement, please contact the following organizations:

• Personal Information Dispute Mediation Committee: (Without Area Code) 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: (Without Area Code) 118 (privacy.kisa.or.kr)
• Supreme Prosecutors’ Office: (Without Area Code) 1301 (www.spo.go.kr)
• Korean National Police Agency: (Without Area Code) 182 (ecrm.cyber.go.kr)

Any person whose rights or interests have been infringed due to a disposition or non-action by the head of a public institution regarding a request under Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), or Article 37 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act may file an administrative appeal in accordance with the Administrative Appeals Act.

• Refer to the Central Administrative Appeals Commission (www.simpan.go.kr)
• Installation/Operation and Refusal of Automatic Personal Information Collection Devices (※ This item duplicates the content of Article 10)

Article 15 (Request for Personal Information Account and Data Deletion)

Users can request the deletion of all personal information data related to their account at any time.

• Method for Requesting Account and Data Deletion

• Website: My Page > Personal Information Management > Account Deletion
• Mobile App: Settings > Account Management > Account Deletion
• Email Request: Send an email requesting account deletion to teambrickstream@gmail.com

• Processing Procedure

• Proceed with identity verification
• Process within 7 days after receiving the deletion request
• Notify via email or other methods upon completion of deletion

Article 16 (Duty of Notification)

This Privacy Policy may be changed due to changes in laws and notices or changes in internal operating policies, and the Company will provide notification in the following ways:

• Website: Posting changes on the service initial screen
• Mobile App: Notification via in-app announcements and pop-ups
• Email: Notification to the registered email address for significant changes
• The revised Privacy Policy will take effect 7 days after the notification date of the change.

Article 17 (Effective Date)

This Privacy Policy is effective from April 22, 2025.

Separate Items

GDPR and Google Policy Compliance

When transferring users' personal information abroad, the Company applies the following protection measures in accordance with Article 39-12 of the Personal Information Protection Act:

• The Company has entered into a contract with Google LLC based on the EU Standard Contractual Clauses (SCCs) and is taking necessary legal and technical measures to ensure that the transferred personal information is securely protected.
• The Company has entered into a Data Processing Agreement with Apple Inc. to ensure that users' personal information is securely processed in accordance with the EU General Data Protection Regulation (GDPR).
• Users within the European Economic Area (EEA) can exercise their personal information rights under the GDPR (right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object, etc.). Please contact teambrickstream@gmail.com to exercise these rights.
• Detailed information regarding international transfers can be inquired about through the customer center or email (teambrickstream@gmail.com).

Cookie Usage and Refusal

The Company may automatically collect user connection records, service usage records, and device information through Cookies and similar technologies during the service usage process.

• Purpose of Cookie Use: Maintaining user connection, providing customized services, analyzing user environment, measuring advertising effectiveness, and providing targeted advertisements
• Method for Refusing Cookie Storage

• Android: [Settings] > [Apps] > [Browser] > [Storage] > [Clear cookies]
• iOS: [Settings] > [Safari] > [Advanced] > [Remove All Website Data]
• PC Browser: Available in Settings > Privacy or the browser-specific Cookie settings menu

Third-Party Advertising Services

The Company may use the following third-party advertising services within the Service:

• Google AdMob

• Information Collected: Advertising identifier, Device information, Location information, User activity information
• Purpose of Collection: Providing targeted advertisements and measuring advertising effectiveness
• Privacy Policy: https://policies.google.com/privacy

• Apple Advertising Services

• Information Collected: Advertising identifier, Device information, App usage information
• Purpose of Collection: Providing targeted advertisements and measuring advertising effectiveness
• Privacy Policy: https://www.apple.com/legal/privacy/

Security Measures

The Company implements the following security measures to safely protect users' personal information:

• Personal Information Encryption: Important personal information is encrypted, stored, and managed
• Access Control: Restriction of access rights to personal information and management of access records
• Installation of Security Programs: Installation and operation of security programs against viruses, malicious code, etc.
• Physical Access Restriction: Control of entry to the personal information storage location and installation of locking devices
• Regular Security Inspection: Conducting vulnerability checks and security updates
• Personal Information Handler Education: Regular security training for employees who process personal information

Effective Date: August 4, 2025

Company Name: Team 9D

Representative: Kim Dongwan