Privacy policy (Latest)

Purposes of Processing Personal Information

The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Membership registration and management
• Provision of goods or services
• Service improvement and development of new services
• Building and managing a safe service environment, including security and privacy protection
• Sending app notifications and providing event and advertising information (advertising information is sent only to those who have consented to receive it)

Items of Personal Information Processed

The Company collects and uses personal information to the minimum extent necessary to provide the service. Personal information is entered directly by users or collected in the course of use, and may also be received from linked services such as Google, Naver, and Apple. It may also be collected by usage statistics tools used to improve the service and understand user responses.

• Member information: nickname, profile picture, business/organization name, email address, password
• Information received when signing in with a linked service (Google, Naver, Apple): email address, name, and the member identifier of that service (if you choose to hide your email when signing in with Apple, the relay email address created by Apple)
• Information collected during identity verification: name, mobile phone number, mobile carrier, whether the user is a Korean national or a foreigner, encrypted user identification value (CI), and duplicate registration verification information (DI)
• Payment information: the user's payment information delivered to the electronic payment service provider, and payment processing information received from the electronic payment service provider (payment information received from users is not stored directly by the Company but is managed through the entrusted provider; only payment processing information is stored to manage payment history)
• Settlement information: if revenue is generated within the service and you receive a settlement, your name, resident registration number, bank account number, and identification card for tax reporting purposes
• Information automatically generated and collected in the course of use: search history, transaction records, visit records, service usage records including content creation, viewing, and recommendations, IP address, device information such as operating system information, interface, and language settings, and advertising identifiers may be generated and collected.
• Information collected when using the mobile app: device identifier generated by the app, device name and type, app version, push notification token, whether and when consent to receive advertising information was given, and app integrity verification information (Apple App Attest key identifier and public key)

Processing and Retention Period of Personal Information

The Company processes and retains personal information within the retention and use period prescribed by relevant laws or the retention and use period consented to by the data subject at the time of collection.

• Member information, settlement information, and information automatically generated and collected in the course of use (including information collected when using the mobile app): until 1 year after membership withdrawal (however, if an investigation or inquiry due to a violation of relevant laws is in progress, until the conclusion of such investigation or inquiry)
• Payment information: until 5 years from the time of payment

Processing of Personal Information of Children Under 14

Users, and, in the case of users under the age of 14, their legal representatives, may view and modify personal information and delete the account.

Procedures and Methods for Destroying Personal Information

When personal information becomes unnecessary, such as upon expiration of the retention period or achievement of the purpose of processing, the Company destroys the personal information without delay. However, if there is a retention period set by the Company's internal policy or relevant laws, the information is retained for a certain period and then destroyed.
The procedures and methods for destroying personal information are as follows.

• Destruction procedure: Personal information that has reached the destruction criteria is deleted through automated processing, and the deletion process is reported to administrators through the computer system. In addition, non-electronic materials such as paper documents are carefully destroyed manually, and all processing is recorded and managed.
• Destruction method: Personal information printed on paper is destroyed by shredding or incineration, and records stored in electronic file form are deleted using technical methods that make them irrecoverable.

Entrustment of Personal Information Processing

The Company entrusts part of the processing of personal information to the extent necessary for the smooth provision of the service.

Overseas Transfer of Personal Information

The Company entrusts personal information collected from service users to overseas parties as follows. Since the transfer overseas is required for tasks essential to data storage and infrastructure operation for providing the service, the service cannot be used if you refuse the overseas transfer.

Installation, Operation, and Refusal of Automatic Personal Information Collection Devices

The Company uses "cookies," which are automatic personal information collection devices that store and retrieve usage information from time to time, in order to provide individually customized services to data subjects. Users may block cookies if they do not wish to accept them.

Chief Privacy Officer

• Name: Hangyul Lee
• Position: Chief Privacy Officer
• Contact: team@noonnu.cc

Remedies for Infringement of Data Subjects' Rights

Users may contact the following institutions for remedies, consultation, and other inquiries regarding infringement of personal information.

• Personal Information Infringement Report Center (개인정보 침해신고센터)
  • Website: privacy.kisa.or.kr
  • Phone: 118 (no area code)
• Personal Information Dispute Mediation Committee (개인정보 분쟁조정위원회)
  • Website: www.kopico.go.kr
  • Phone: 1833-6972
• Cyber Investigation Division, Supreme Prosecutors' Office (대검찰청 사이버수사과)
  • Website: www.spo.go.kr
  • Phone: 1301 (no area code)
• Cyber Investigation Bureau, Korean National Police Agency (경찰청 사이버수사국)
  • Website: ecrm.police.go.kr
  • Phone: 182 (no area code)

Effective Date and Changes to the Privacy Policy

• The Company may amend this Privacy Policy to reflect government policies, relevant laws, or changes to the service, and in such case will notify users of the changes through the website at least 7 days in advance.
• This Privacy Policy is effective as of October 30, 2026.