Effective Date: May 8, 2026
Mogak (hereinafter "Company") complies with applicable laws and regulations, including the Personal Information Protection Act, and establishes and discloses this Privacy Policy to protect users' personal information.
The Company processes personal information for the following purposes. Personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
The Company processes and retains personal information within the personal information retention and use period prescribed by law or agreed upon when collecting personal information from the data subject.
The Company processes the following items of personal information.
The Company processes personal information only within the scope specified in Article 1, and provides personal information to third parties only where the data subject has consented or as otherwise permitted under Articles 17 and 18 of the Personal Information Protection Act, including specific legal provisions.
The Company does not currently provide personal information to third parties.
The Company entrusts the processing of personal information as follows for smooth handling of personal information affairs.
| Consignee | Consigned Tasks | Information Transferred |
|---|---|---|
| Google LLC (Firebase Authentication) | Member authentication and Google social login processing | Email address, Firebase UID |
| MongoDB Inc. (MongoDB Atlas) | Service database operation and management | Member information, service usage data |
The above consignees are located in the United States, and personal information is transferred overseas. The Company discloses the transfer destination country, items transferred, timing and method of transfer, and consignee information in accordance with Article 28-8 of the Personal Information Protection Act.
When concluding consignment agreements, the Company specifies matters relating to liability, including prohibition of processing personal information for purposes other than the consigned tasks, technical and administrative protective measures, restrictions on re-consignment, supervision of the consignee, and compensation for damages, in contracts and other documents, in accordance with Article 26 of the Personal Information Protection Act.
Data subjects may exercise the following personal information protection rights against the Company at any time.
Rights may be exercised by written request, email, or other means, and the Company will take action without delay.
When personal information becomes unnecessary, such as upon the expiration of the retention period or achievement of the processing purpose, the Company destroys such personal information without delay.
The Company restricts membership registration for children under 14 years of age. If a child under 14 attempts to register as a member, use of the Services will be refused.
The Company takes the following measures to ensure the security of personal information.
The Company uses only cookies that are essential to the operation of the Services and does not currently use cookies for analytical or marketing purposes. Additional cookies will be used only with the consent of users.
Users may refuse to accept cookies through their web browser options. However, if cookie storage is refused, services that require login may be difficult to use.
The Company designates a Personal Information Protection Officer to take overall responsibility for personal information processing affairs and to handle complaints and remedy damages related to personal information processing by data subjects.
Data subjects may contact the following organizations regarding remedies and consultations for personal information infringement.
This Privacy Policy is effective from May 8, 2026. Previous versions of the Privacy Policy are available upon request from the Company.