Privacy Policy

<건강해짐> processes personal information lawfully and manages it securely, in compliance with the Personal Information Protection Act (「개인정보 보호법」) and related statutes, in order to protect the freedoms and rights of data subjects. Accordingly, pursuant to Article 30 of the Personal Information Protection Act, we establish and publish this Privacy Policy as follows, in order to inform data subjects of the procedures and standards for processing personal information and to handle related complaints promptly and smoothly.

Purposes of Processing Personal Information

<건강해짐> processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use changes, we will take necessary measures, such as obtaining separate consent, pursuant to Article 18 of the Personal Information Protection Act.

  1. The purposes of processing for the personal information files that <건강해짐> registers and discloses pursuant to Article 32 of the Personal Information Protection Act are as follows.
    • Personal information collected at sign-up : email, name
    • Personal information collected at the start of the service : gym-related information
  2. In the course of using the service, service usage history, access logs, access IP information, cookies, payment records, etc. may be generated and collected.

Retention and Processing Period of Personal Information

  1. <건강해짐> processes and retains personal information within the retention and use period prescribed by law or the retention and use period to which the data subject consented when the personal information was collected.
  2. The processing and retention period for each category of personal information is as follows.
Category Items processed Retention period and destruction
Member information Email, name, password (stored encrypted when signing up with email), social login identification information (Kakao, Naver, Google, Apple), profile photo, selected/registered gym, target weight Destroyed without delay upon withdrawal of membership. Social login linkage is also released upon withdrawal.
Workout and weight records Workout records (exercise, sets, memo, photos), weight records, activity point history Destroyed without delay upon withdrawal of membership.
Community activity Posts and photos written, comments and replies, likes Destroyed without delay upon withdrawal of membership. A post is deleted together with other members' comments and likes on that post. Comments left on other members' posts or records have their content removed and are displayed only as "삭제된 댓글" ("Deleted comment") (to preserve other members' replies), and the author is displayed as "탈퇴한 회원" ("Withdrawn member"). Likes are deleted.
Notification information Notification history, push notification token (including device type) Destroyed without delay upon withdrawal of membership. The push notification token is also deleted when you log out.
Login authentication information Login persistence token, password reset token Destroyed without delay upon withdrawal of membership.
Server access logs Server logs such as access IP and request time and address Automatically deleted 14 days after the collection date.
Behavioral information Information collected by Google Analytics, such as visit and usage records (website and mobile app) Automatically deleted 14 months after the collection date (for user-level data, after the last visit). Information sent from the app is not deleted immediately when you withdraw; it is deleted after this period. For details, see "Matters Concerning the Collection, Use and Refusal of Behavioral Information" below.
  1. Workout records, posts and comments that a member has deleted themselves are retained in a state where they are merely hidden from view on screen, and are destroyed together upon withdrawal of membership.
  2. <건강해짐> does not currently offer paid features or payments, and there is no personal information that is separately preserved under other laws.

Matters Concerning Procedures and Methods for Destroying Personal Information

  1. <건강해짐> destroys personal information without delay when it becomes unnecessary, such as when the retention period has elapsed or the purpose of processing has been achieved.
  2. If personal information must continue to be preserved under other laws even though the retention period consented to by the data subject has elapsed or the purpose of processing has been achieved, the personal information is moved to a separate database (DB) or stored in a different location.
  3. The procedures and methods for destroying personal information are as follows.
    • Destruction procedure : <건강해짐> prepares a destruction plan for the personal information (or personal information files) to be destroyed, and destroys it accordingly. <건강해짐> selects the personal information (or personal information files) for which a reason for destruction has arisen, and destroys it after obtaining the approval of <건강해짐>'s Chief Privacy Officer.
    • Destruction method : <건강해짐> destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and destroys personal information recorded and stored on paper documents by shredding or incinerating them.

Matters Concerning the Rights, Obligations and Exercise of Rights of Data Subjects and Legal Representatives

  1. Data subjects may exercise rights against <건강해짐> at any time, such as requesting access to, correction of, deletion of, or suspension of the processing of their personal information.
    ※ Requests such as access to the personal information of a child under the age of 14 must be made directly by the legal representative. A data subject who is a minor aged 14 or older may exercise rights regarding their own personal information either personally or through a legal representative.
  2. Rights may be exercised against <건강해짐> in writing, by email, by facsimile (FAX), etc. pursuant to Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act (｢개인정보 보호법｣ 시행령), and <건강해짐> will take action without delay.
  3. Rights may also be exercised through an agent, such as the data subject's legal representative or a person authorized by the data subject. In this case, you must submit a power of attorney in the form of Annex Form No. 11 of the "Notice on Methods of Processing Personal Information (No. 2020-7)" (“개인정보 처리 방법에 관한 고시(제2020-7호)”).
  4. Requests for access to personal information and for suspension of processing may have the data subject's rights restricted pursuant to Article 35, paragraph 4 and Article 37, paragraph 2 of the Personal Information Protection Act.
  5. Requests for correction or deletion of personal information cannot be made where other laws expressly specify that personal information as a subject of collection.
  6. When a request for access, correction, deletion or suspension of processing is made in exercise of a data subject's rights, <건강해짐> verifies whether the person making the request is the data subject or a legitimate agent.

Matters Concerning the Collection, Use and Refusal of Behavioral Information

<건강해짐> collects and uses behavioral information through Google Analytics, a web analytics tool, on the website and through Google Analytics for Firebase (Firebase Analytics) in the mobile app, in order to analyze service usage statistics and improve the service. Both tools report to the same Google Analytics property. The collected behavioral information is not used for personalized advertising, and advertising identifiers (IDFA, advertising ID) are not collected.

  1. Items of behavioral information collected : website visit and page view records, service usage records such as clicks and scrolls, information on the access device, operating system and browser, and access region (country and city level) information
    • In the mobile app, in addition to the above: the main steps used in the app (in guest mode, screen views, starting and linking an account; sign-in and sign-up; exercise page views), app launch and session records, the member number (a random UUID created by the server, guests included; the same value is sent as the Google Analytics User-ID), the Firebase app instance ID, device model, operating system version, app version, language, and approximate country. Name and email are not sent.
  2. Collection method : collected automatically through the Google Analytics script and cookies when users visit or use the website. Inside the mobile app (webview) no script is loaded; the web screen passes events and the member number (User-ID) to the app through the native bridge, and the app sends them to Google with the Firebase Analytics SDK. Use on development and test devices (debug builds, simulators, TestFlight) is marked as internal traffic and left out of the statistics, and nothing is collected on Google's automated test devices (Firebase Test Lab).
  3. Retention and use period : event data such as visit and usage records, 14 months from the collection date; user-level data linked to a cookie identifier or member number (User-ID), 14 months from the last visit (automatically deleted after the period elapses, according to the Google Analytics data retention settings)
  4. Overseas transfer of personal information : By using Google Analytics, the above behavioral information is transferred overseas and stored and processed there.
    • Recipient : Google LLC (inquiries about personal information : https://support.google.com/policies)
    • Country of transfer : the United States and other countries where Google operates data centers
    • Date, time and method of transfer : transmitted over the information and communications network at the time of website or mobile app use
    • Purpose of transfer and retention period : analysis of service usage statistics; same as the retention and use period above
  5. How to refuse collection of behavioral information : Users may refuse the collection of behavioral information by the following methods, and refusing does not restrict use of the service.
    • Refuse or delete cookies in the web browser settings
    • Install the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout)
    • Mobile app : the app has no switch to turn collection off. Deleting the app stops further collection, and when you log out or withdraw, the app stops sending the member number (User-ID). To have information already collected under your member number deleted, ask the Chief Privacy Officer (contact@junghaebom.com) before you withdraw (we need the member number to find and remove it). It is deleted with the Google Analytics user deletion feature.

Matters Concerning Measures to Ensure the Security of Personal Information

<건강해짐> takes the following measures to ensure the security of personal information.

  1. Administrative measures : establishment and implementation of an internal management plan, regular staff training
  2. Technical measures : technical countermeasures against hacking, etc., encryption of personal information, retention of access records and prevention of their forgery or alteration, restriction of access to personal information, security measures to prevent leakage or exposure of personal information when designing the website
  3. Physical measures : use of locking devices for document security, access control to the data storage room

Matters Concerning the Chief Privacy Officer

<건강해짐> has designated a Chief Privacy Officer as below, who is responsible for overseeing the processing of personal information and for handling complaints and providing remedies for damage relating to the processing of personal information.

  1. Chief Privacy Officer

Department Receiving and Handling Requests for Access to Personal Information

Data subjects may submit a request for access to personal information under Article 35 of the Personal Information Protection Act to the department below. <건강해짐> will endeavor to ensure that data subjects' requests for access to personal information are handled promptly.

  1. Chief Privacy Officer

Remedies for Infringement of Data Subjects' Rights

To obtain relief for infringement of personal information, data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc. For other reports of or consultations on personal information infringement, please contact the organizations below.

  1. Personal Information Dispute Mediation Committee : (no area code) 1833-6972 (www.kopico.go.kr)
  2. Personal Information Infringement Report Center : (no area code) 118 (privacy.kisa.or.kr)
  3. Supreme Prosecutors' Office : (no area code) 1301 (www.spo.go.kr)
  4. National Police Agency : (no area code) 182 (ecrm.cyber.go.kr)

<건강해짐> guarantees data subjects' right to self-determination over their personal information and endeavors to provide consultation and relief for personal information infringement. If you need to file a report or seek consultation, please contact the Chief Privacy Officer (contact@junghaebom.com).

Matters Concerning Changes to the Privacy Policy

This Privacy Policy applies from its effective date. If content is added, deleted or corrected due to changes in laws or this policy, we will announce it through a notice from 7 days before the changes take effect. However, if there is a change that materially affects users' valuable rights or obligations, we will announce it at least 30 days before the effective date.