Kim & Jang Korea (the "Operator") complies with relevant laws including the Personal Information Protection Act when providing the mimilog service (the "Service") and establishes the following Privacy Policy to protect users' personal information.
1. Personal Information Collected
1.1 Required Information
| Item | Purpose | Retention Period |
|---|---|---|
| Email address | User identification, login, customer support | Deleted immediately upon withdrawal |
| Nickname | Display within service, community activities | Deleted immediately upon withdrawal |
| Password (encrypted) | Account security | Deleted immediately upon withdrawal |
1.2 Optional Information
| Item | Purpose | Retention Period |
|---|---|---|
| Profile image | Profile display | Deleted immediately upon withdrawal |
| Learning language settings | Personalized learning content | Deleted immediately upon withdrawal |
1.3 Automatically Collected Information
| Item | Purpose | Retention Period |
|---|---|---|
| Device information (model, OS version) | Service optimization, error analysis | 1 year from collection |
| App usage records | Service improvement, statistical analysis | 1 year from collection |
| Access logs (IP address, access time) | Fraud prevention, security | 3 months from collection |
| Push notification token | Push notification delivery | Deleted immediately upon withdrawal |
1.4 Information Generated During Service Use
| Item | Purpose | Retention Period |
|---|---|---|
| Log content | Service provision, AI learning content generation | Deleted immediately upon withdrawal |
| AI-generated learning content | Service provision | Deleted immediately upon withdrawal |
| AI conversation history | Service provision, quality improvement | Deleted immediately upon withdrawal |
2. Purpose of Collection
Collected personal information is used only for the following purposes:
2.1 Service Provision
- Member registration and management
- Log creation and storage
- AI-based learning content generation
- Community features
- Push notification delivery
2.2 Service Improvement
- UX improvement through user behavior analysis
- AI model quality improvement (after anonymization)
- New feature development
2.3 Customer Support
- Handling inquiries and complaints
- Delivering announcements
2.4 Marketing (with optional consent)
- New feature and event notifications
- Personalized content recommendations
3. Third-Party Provision
The Operator does not provide users' personal information to third parties in principle. However, the following cases are exceptions:
3.1 Essential Provision for Service
| Recipient | Items Provided | Purpose | Retention Period |
|---|---|---|---|
| External AI service providers (USA) | Log content, conversation content, language settings | AI translation, learning content generation, AI conversation | Deleted immediately after API processing |
| Firebase/Google Cloud (USA) | Account information, service data | Service infrastructure | Deleted upon withdrawal |
3.2 Legal Requirements
When information provision is required by law to investigative agencies, etc.
3.3 Consent-Based Provision
- When the user provides separate consent
- When providing anonymized statistical data to research institutions
4. International Transfer of Personal Information
Personal information may be transferred overseas for service provision:
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| External AI service providers | USA | Log content, conversation content | AI processing | Deleted immediately after processing |
| Google LLC (Firebase/Cloud) | USA | Account information, service data | Service infrastructure | Deleted upon withdrawal |
5. Retention and Destruction
5.1 Retention Period
- Principle: Deleted immediately upon withdrawal
- Exception: When legally required to retain
5.2 Legal Retention Requirements
| Item | Period | Legal Basis |
|---|---|---|
| Contract or subscription withdrawal records | 5 years | E-Commerce Act |
| Payment and goods supply records | 5 years | E-Commerce Act |
| Consumer complaint or dispute records | 3 years | E-Commerce Act |
| Access logs | 3 months | Communications Privacy Act |
5.3 Destruction Method
- Electronic files: Permanently deleted using irreversible methods
- Paper documents: Shredded or incinerated
5.4 Retention of Anonymized Data
Data that has been anonymized for purposes such as service improvement, statistical analysis, and academic research does not constitute personal information and may be retained and used after account withdrawal. Anonymized data cannot be used to identify individuals and is used in accordance with the Terms of Service.
6. User Rights
6.1 Rights
Users may exercise the following rights:
- Request to access personal information
- Request to correct personal information
- Request to delete personal information
- Request to suspend processing of personal information
- Request to transfer personal information
6.2 How to Exercise Rights
- Direct processing through in-app settings menu
- Request via email: mimilog.captain@gmail.com
6.3 Processing Timeline
- Processed within 10 days of request receipt
- If there is a legitimate reason, the user will be notified and the timeline may be extended
7. Protection of Children's Personal Information
7.1 Age Restrictions
- Parental or guardian consent is required for children under 14.
- Personal information collected from children without guardian consent will be immediately deleted.
7.2 Guardian Rights
- May request to access, correct, or delete child's personal information
- May withdraw consent
8. Security Measures
The Operator takes the following measures to ensure the security of personal information:
8.1 Technical Measures
- Personal information encryption (TLS for transmission, AES-256 for storage)
- Access control system operation
- Security program installation and updates
- App integrity verification through Firebase App Check
8.2 Administrative Measures
- Minimization of personal information access rights
- Regular security audits
9. Cookies and Tracking Technologies
9.1 Purpose of Use
- Maintaining login status
- Storing user settings
- Collecting service usage statistics
9.2 How to Refuse
- Cookie collection can be refused through browser settings
- However, some service features may be limited
10. Privacy Officer
For privacy-related inquiries, please contact:
- Email: mimilog.captain@gmail.com
11. Policy Changes
11.1 Change Procedure
- Changes to this Privacy Policy will be announced at least 7 days before the effective date.
- Important changes will be individually notified via in-app notification or email.
11.2 Change History
| Version | Effective Date | Major Changes |
|---|---|---|
| 1.0 | 2025-01-20 | Initial version |
12. Remedies for Rights Infringement
If you need assistance or remedy regarding personal information infringement, you may contact the Operator at mimilog.captain@gmail.com, or file a complaint with the relevant data protection authority in your country of residence.