eddaba Privacy Policy

eddaba (hereinafter referred to as the "Company") establishes and publishes this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea in order to protect users' personal information and to promptly and appropriately handle related complaints.

Article 1 (Purpose of Processing Personal Information)

The Company processes personal information for the purposes described below. Personal information will not be used for purposes other than those stated below. If the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

Article 2 (Personal Information Processed and Methods of Collection)

The Company collects and processes the following categories of personal information as necessary to provide the service.

1. Categories of personal information collected

Category Information Collected Purpose of Collection and Use
Registration and profile (required) Name, nickname, phone number, gender, date of birth (age), profile photo, password; for social sign-up: social-provider identifier and email address; for mobile-possession verification: verification text and verification result. User identification, identity verification, age-restriction checks, and profile configuration.
Calls and communications (optional) Call records (date/time and call duration), DM message content and transmitted media, community posts, comments, and stories. Providing one-to-one voice/video calls, messaging, and user-content services.
Payments and points (optional) Payment authorization records and in-app purchase receipt/transaction information. Processing paid services and point purchases, charging, and settlement.
Automatically collected information IP address, cookies, service usage and access logs, device information (OS type/version and device model), and push-notification tokens (FCM/APNs). Maintaining service stability, preventing fraudulent use, providing push notifications, and analyzing service improvements.

2. Methods of collection

Article 3 (Processing and Retention Period)

1. The Company processes and retains personal information for the period required by applicable laws or for the period agreed to by the user when the information was collected.

2. The principal retention periods are as follows:

3. Where retention is required by applicable law, the Company retains the relevant information for the statutory periods below.

Records Retained Legal Basis Retention Period
Records concerning contracts or withdrawal/cancellation of offers Act on the Consumer Protection in Electronic Commerce, Etc. 5 years
Records concerning payment and supply of goods or services Act on the Consumer Protection in Electronic Commerce, Etc. 5 years
Records concerning consumer complaints or dispute resolution Act on the Consumer Protection in Electronic Commerce, Etc. 3 years
Internet access logs and access-location tracking records Protection of Communications Secrets Act 3 months

Article 4 (Provision of Personal Information to Third Parties)

1. The Company processes personal information only within the scope described in Article 1 and provides personal information to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, including where the user has consented or where otherwise specifically permitted by law.

2. As a general rule, the Company currently does not independently disclose users' personal information to third parties. If third-party disclosure becomes necessary in the future, the Company will obtain consent or take other measures required by applicable law before such disclosure.

Article 5 (Entrustment and Service Providers)

1. The Company uses the following service providers to support the processing of personal information and operation of the service.

Service Provider Services Performed
Google LLC (Firebase / AdMob) Sending FCM push notifications, displaying mobile advertisements, and supporting service-error and usage-statistics analysis.
Apple Inc., Google LLC, and payment service providers Processing in-app purchases and paid point transactions.
Social sign-in providers (Kakao, Google, Apple) Providing simplified account authentication using social accounts.
Octoverse Co., Ltd. (OCTOMO) Confirming an outgoing verification text for Korean mobile-number possession verification, including processing the mobile number, verification text, sending time, and verification result.

Article 6 (Destruction of Personal Information)

1. The Company destroys personal information without undue delay when it is no longer necessary because the retention period has expired or the purpose of processing has been achieved, except where retention is required by law.

2. The procedures and methods of destruction are as follows:

Article 7 (Rights of Users and Legal Representatives)

1. Users may exercise rights regarding their personal information, including requesting access, correction, deletion, or suspension of processing, as provided by applicable law.

2. Users may exercise these rights through profile/settings and account-deletion features in the app, or by contacting the privacy officer in writing or by email. The Company will respond without undue delay in accordance with applicable law.

3. The service restricts registration by children under 14 years of age.

Article 8 (Measures to Protect Personal Information)

The Company takes the following measures to help secure personal information.

Article 9 (Cookies and Other Automatic Collection Technologies)

1. The Company may use cookies and similar technologies that store and retrieve usage information in order to provide individualized or personalized services.

2. Users may restrict cookies or certain data collection through browser or mobile operating-system settings. Some personalized features may not function properly if such collection is restricted.

Article 10 (Privacy Officer and Contact Information)

The Company designates a privacy officer to oversee matters relating to the processing of personal information and to handle user complaints, inquiries, and requests for remedies relating to personal information.

Privacy Officer

Name: Dong Woo Yang

Title: Representative / Privacy Officer

Email: [email protected]

For additional assistance regarding personal-information infringement or dispute resolution in the Republic of Korea, users may contact the following organizations:

Article 11 (Changes to this Privacy Policy)

This Privacy Policy has been in effect since August 10, 2026. The changes concerning OCTOMO mobile-possession verification and related processing by a service provider take effect on September 25, 2026. Material additions, deletions, or revisions will be announced through the service notice system at least seven days before they take effect unless a different notice period is required by law.