1. Principles of Personal Data Processing

This service follows a "privacy-by-design approach with minimal data storage" to protect users' privacy. We do not directly collect or store personally identifiable information (such as names or contact details) on our servers.

2. Data We Process and Why

• Connection and technical information: Temporary IP address and device information generated when connecting to the server (for fraud prevention and security).
• Advertising identifiers: Used to measure ad performance (third-party and in-house ads) and prevent duplicate clicks.
• De-identified analytics data: Age group, gender, and approximate region information (used for service improvement when users choose to share).

3. De-identification and Security of Connection Data

All data is protected through the following technical safeguards:

• Partial masking: The final segment of IP addresses is masked to reduce identifiability.
• Encrypted transmission: Communication channels are protected using AES-256-GCM and TLS (HTTPS).

4. Advertising Services and Sharing of De-identified Information

When ads are shown or clicked, this service may process or share de-identified information as described below to provide the service and measure performance.

• 1) Third-party ad platforms (e.g., AdMob): Ad identifiers and device information may be used to deliver relevant ads, and data handling follows each platform's own policies.
• 2) In-house ads and partner delivery: When an ad is clicked, de-identified traffic information (such as masked IP, device model, and click logs) may be sent to advertisers or performance measurement platforms. This data cannot identify individuals and is used only for ad performance analysis.

5. External Services and Disclaimer

Please note the following when using external services (such as shopping or ordering pages) accessed through ad clicks.

• All personal data collection performed on linked external sites (including order forms, payments, and sign-ups) is the responsibility of those external services.
• This service does not participate in data collection or transactions on external sites and does not separately store or retain that information.

6. Data Retention and Deletion

This service does not retain direct personal data. Technical connection logs are deleted promptly after their purpose is fulfilled. Statistical data is anonymized and managed in a non-recoverable form.

7. User Rights and Choices

Users can choose whether to receive personalized ads or reset advertising identifiers through their device privacy settings. Since no separate account registration is required, data processing stops when the app is deleted.

8. Privacy Contact

Email: bankcgi@naver.com

9. Changes and Effective Date

This policy is effective as of March 1, 2026.