Previaworks (hereinafter referred to as "Company") operates the app "이럴때어떡해" (hereinafter referred to as "App") and establishes and discloses the following privacy policy to protect the personal information of data subjects and to handle related complaints promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

1. Purpose of Processing Personal Information

The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those stated below, and if the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

• Service Provision: Providing app features, content, and personalized services
• Service Improvement: Analyzing service usage statistics, improving service quality, developing new services
• Advertising and Marketing: Providing personalized advertisements, event and promotion notifications
• Customer Support: Responding to inquiries, handling complaints, delivering notices

2. Period of Processing and Retention of Personal Information

The Company processes and retains personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed upon when collecting personal information from the data subject.

• Service Usage Records: Until service termination (however, if preservation is required by relevant laws, it will be retained for the relevant period)
• Advertising Identifiers: Until the advertising purpose is achieved or consent is withdrawn
• Statistical and Analytical Data: May be retained long-term after anonymization

Additionally, the Company retains the following information for certain periods in accordance with relevant laws:

• Act on Consumer Protection in Electronic Commerce: Records related to contracts or withdrawal of offers (5 years)
• Communications Secrets Protection Act: Service usage records (3 months)

3. Items of Personal Information Processed

The Company processes the following personal information items.

3.1 Automatically Collected Information

• Device Information: Device model, operating system version, unique device identifier (Android ID, iOS ID), advertising ID (GAID, IDFA)
• Log Information: IP address, access date and time, service usage records, app version, crash logs
• Location Information: Approximate location information (optional, when using location-based services)

3.2 Information Collected During Service Use

• Account Information: Email address (when using social login), nickname
• Service Usage Information: Created content, service usage patterns, preference information

3.3 Information Collected Through Third-Party Services

The Company may collect certain information through the following third-party services:

• Google Analytics 4 (GA4): App usage statistics, user behavior analysis, performance measurement
• Google AdMob: Ad delivery and performance measurement, advertising identifier collection
• Firebase: App performance monitoring, crash reporting, remote configuration, push notifications

4. Provision of Personal Information to Third Parties

The Company processes personal information of data subjects only within the scope stated in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as consent from the data subject or special provisions of laws.

4.1 Current Status of Third-Party Provision

The Company cooperates with the following third-party service providers for service provision and improvement:

• Google LLC
  • Items Provided: Device information, advertising ID, app usage statistics, crash logs
  • Purpose of Use: Providing Google Analytics 4, Google AdMob, and Firebase services
  • Retention and Use Period: In accordance with each service provider's privacy policy

Google's privacy policy can be found at the following links:

• Google Privacy Policy: https://policies.google.com/privacy
• Google Analytics Privacy Policy: https://policies.google.com/privacy?hl=en

5. Entrustment of Personal Information Processing

The Company entrusts personal information processing tasks as follows for smooth personal information processing:

• Entrusted Party (Processor): Google LLC
• Content of Entrusted Tasks:
  • Google Analytics 4: User behavior analysis and statistics collection
  • Google AdMob: Ad delivery and performance measurement
  • Firebase: App performance monitoring, crash reporting, data storage and management
• Entrustment Period: During the service provision period

When entering into an entrustment contract, the Company specifies matters such as prohibition of personal information processing beyond the purpose of performing entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the processor, and compensation for damages in documents such as contracts in accordance with Article 26 of the Personal Information Protection Act, and supervises whether the processor safely processes personal information.

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may exercise the following rights related to personal information protection against the Company at any time:

• Right to request suspension of personal information processing
• Right to request access to personal information
• Right to request correction or deletion of personal information
• Right to request suspension of personal information processing

Exercise of rights can be made to the Company in writing, by email, facsimile transmission (FAX), etc., in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

Additionally, for advertising IDs, you can set or reset advertising tracking restrictions in device settings:

• Android: Settings > Google > Ads > Reset advertising ID or disable ad personalization
• iOS: Settings > Privacy > Advertising > Limit Ad Tracking

7. Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary, such as when the retention period of personal information has elapsed or the processing purpose has been achieved.

7.1 Destruction Procedure

Information entered by users is transferred to a separate database (or separate documents in the case of paper) after the purpose is achieved, stored for a certain period in accordance with internal policies and other relevant laws, or destroyed immediately.

7.2 Destruction of Personal Information upon Account Deletion

Members may request account deletion at any time within the app. Upon account deletion, the following personal information will be immediately destroyed:

• Account Information: Email address, nickname, and other user account information
• Service Usage Information: Content created by the user, voting records, mission records, invitation records, etc.
• User Documents: User profile and related data

Upon account deletion, all data will be permanently deleted and cannot be recovered. However, information that must be retained in accordance with relevant laws will be retained for the period specified by such laws and then destroyed.

7.3 Destruction Method

• Electronic file format: Deleted using technical methods that cannot reproduce records
• Records, printouts, written documents, etc.: Shredded or incinerated

8. Personal Information Protection Officer

The Company is responsible for overseeing all tasks related to personal information processing, and has designated a personal information protection officer as follows to handle complaints and damage relief related to personal information processing by data subjects.

9. Measures to Ensure Personal Information Security

The Company implements the following technical, administrative, and physical measures necessary to ensure security in accordance with Article 29 of the Personal Information Protection Act.

• Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
• Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
• Physical Measures: Access control to computer rooms, data storage rooms, etc.

10. Changes to Privacy Policy

This privacy policy takes effect from December 28, 2025, and if there are additions, deletions, or corrections to the content due to changes in laws and policies, notice will be given through announcements 7 days before the implementation of the changes.