Privacy Policy

Ongil Inc. (the "Company") values the personal information of users of the 'K-Story Trail' service and complies with applicable laws, including the Personal Information Protection Act of Korea. This Privacy Policy explains what personal information the Company collects and uses, and how it is protected. 1. Personal Information We Collect a. Upon sign-up and social login - Required: email address, nickname, social login identifier, profile image URL - Optional: self-introduction (bio) b. Automatically collected during use of the Service - Device information (OS, device token), access logs, IP address, usage records (visit journals, quiz progress, favorites) 2. Purpose of Use - Identifying members and verifying identity, providing and operating the Service - Synchronizing user data such as visit journals and learning progress - Sending push notifications and delivering announcements - Improving the Service, statistical analysis, and preventing fraudulent use 3. Retention and Use Period - Member information: retained until membership withdrawal and destroyed without delay thereafter. However, where retention is required by applicable law, it is kept for the relevant period. - Access logs and API logs: retained for up to one year from the date of collection and then destroyed. 4. Provision to Third Parties The Company does not use users' personal information beyond the scope stated in this Policy or provide it to third parties, except in the following cases: - When the user has given prior consent - When required by law, or when an investigative agency requests it in accordance with the procedures prescribed by law for investigative purposes 5. Outsourcing of Personal Information Processing For the smooth provision of the Service, the Company may outsource certain tasks, such as cloud infrastructure and push notification delivery, to specialized external providers, and will stipulate necessary matters to ensure safe management in accordance with applicable law. 6. Rights of Users and How to Exercise Them Users may at any time view, correct, or delete their personal information, or request suspension of its processing, and may withdraw consent to the collection and use of personal information by withdrawing membership. Rights may be exercised through in-service settings or the contact below. 7. Procedures and Methods of Destruction Personal information whose collection and use purpose has been achieved is destroyed without delay. Electronic files are permanently deleted in a manner that prevents recovery, and printed materials are shredded or incinerated. 8. Measures to Ensure Security The Company implements technical and administrative protection measures for the safe processing of personal information, including access-rights management, encryption of transmission channels, and retention of access logs. 9. Privacy Officer and Contact For inquiries, complaints, or remedies regarding the processing of personal information, please contact the following. - Company: Ongil Inc. - Privacy Officer: Privacy Protection Team - Email: privacy@ongil.me 10. Changes to This Policy In the event of any addition, deletion, or modification of this Policy, notice will be given through the Service announcements at least 7 days before the effective date. Addendum This Privacy Policy takes effect on June 25, 2026.