Privacy Policy

1. Data Controller (개인정보 처리자)

GANADARA REWARDS is operated by 체크앤밸런스 (Check & Balance).

• Business Registration No.: 749-33-00758
• Representative: 설미영 (Seol Mi-young)
• Address: 더리브골드타워 309호, 양천로 400-12, 강서구, 서울특별시, 대한민국

2. Privacy Officer (개인정보 보호책임자)

• Name: 이광호 (Lee Kwang-ho)
• Email: [email protected]

You may contact our Privacy Officer for any personal data inquiries, complaints, or requests. We will respond within 10 business days.

3. Personal Data We Collect (수집하는 개인정보 항목)

4. Purpose of Processing (처리 목적)

• Account creation and authentication
• Providing personalised Korean learning content
• Tracking and rewarding study progress
• Processing reward redemptions and physical shipments
• Sending transactional emails (e.g. password reset)
• Service improvement and fraud prevention
• Compliance with applicable laws

5. Retention Period (보유 및 이용기간)

• Account data: Until account deletion, then permanently deleted within 30 days
• Order/delivery data: 5 years (Act on Consumer Protection in Electronic Commerce)
• Server logs: 3 months

6. Third-Party Disclosure (제3자 제공)

We do not sell your personal data. We share data only as follows:

• Railway (railway.app) — cloud hosting & database infrastructure
• Resend — transactional email delivery
• Korea Post (EMS / 우체국) — shipping of physical rewards (name, address, phone only)
• Authorities — when required by Korean law or court order

7. Cross-Border Transfer (국외 이전)

Your data may be transferred to and stored on servers outside Korea (United States — Railway infrastructure). Such transfers are conducted with appropriate safeguards in accordance with the Personal Information Protection Act (PIPA).

8. Your Rights (정보주체의 권리)

Under the Korean Personal Information Protection Act (개인정보 보호법), you have the right to:

• Access — view your personal data
• Correction — correct inaccurate data
• Deletion — request deletion of your data
• Suspension of processing — request we stop processing your data

You may exercise these rights via the app (Profile → Delete Account) or by contacting our Privacy Officer at [email protected].

You may also file a complaint with the Personal Information Protection Commission (개인정보보호위원회) at pipc.go.kr or call 182 (Privacy Infringement Report Center).

9. Data Security (안전성 확보 조치)

• Passwords are stored using bcrypt hashing (never in plain text)
• All data is transmitted over HTTPS (TLS encryption)
• Access to personal data is restricted to authorised personnel only

10. Cookies & Local Storage

We use localStorage (not cookies) to store your login token and learning progress on your device. No third-party advertising or tracking cookies are used.

11. Children (만 14세 미만)

Our service is not directed at children under 14. We do not knowingly collect personal data from children under 14. If you believe a child has provided us with personal data, please contact us immediately.

12. Policy Changes

We may update this policy. We will notify users of significant changes via in-app notice or email at least 7 days in advance.