Article 1 (Purpose of Collection and Use of Personal Information)

SAI (hereinafter referred to as the "Service") collects and uses the minimum personal information necessary for the following purposes. Collected personal information will not be used for other purposes, and prior consent will be obtained if the purpose of use changes.

• Sign-up and Service Provision: User registration via Google Social Login or mobile phone verification, identity verification, confirmation of account withdrawal intent, etc.
• Service Delivery and Optimization: Diary data backup and synchronization, personalized memory visualization services, etc.
• Customer Support and Notice: Processing customer inquiries and delivering important service updates.
• Advertising Provision: Providing personalized or non-personalized advertisements and measuring ad performance through third-party ad platforms such as Google AdMob.

Article 2 (Items of Personal Information Collected)

The Service collects the following items of personal information during the registration and usage process:

• For Google Social Login: Email address, profile name, unique User ID (UID).
• For Phone Number Login: Mobile phone number (for verification).
• Information Automatically Generated During Service Use: Device information (OS version, device model), service usage logs, connection logs, IP address.
• Advertising Identifier & Tracking Data: Advertising Identifier (IDFA — only if the user consents to tracking in the iOS environment), Advertising ID (ADID/GAID), ad engagement and interaction logs.

Article 3 (Retention and Use Period of Personal Information)

As a rule, the user's personal information is retained and used until account deletion, upon which it is destroyed without delay. However, if retention is required under applicable laws, the information will be stored for the period specified by the law:

• Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
• Service access logs: 3 months (Protection of Communications Secrets Act)

Article 4 (Procedures and Methods of Personal Information Destruction)

Personal information that has reached its retention period or accomplished its purpose is immediately destroyed using the following methods:

• Electronic Files: Permanently deleted using technical methods that prevent records from being restored or reproduced (such as formatting).
• Paper Documents: Shredded with a shredder or incinerated.

Article 5 (Third-Party SDKs and Advertising Identifier (IDFA) Guidelines)

The Service integrates third-party SDKs to provide personalized advertisements and measure advertising performance. The policies for advertising identifiers are as follows:

• Third-Party SDK Provision: We use Google AdMob for providing in-app advertisements.
• Advertising Identifier (IDFA) Handling (iOS Devices):
  • If the user consents to App Tracking Transparency (ATT) on iOS devices: The Advertising Identifier (IDFA) is collected and used to deliver personalized advertisements.
  • If the user denies or revokes tracking consent: IDFA is not collected, and non-personalized (non-targeted) ads will be served. However, device identifiers (e.g., ADID/GAID) may still be processed in an encrypted or non-personally identifiable format for purposes such as frequency capping and ad fraud prevention.
• How to Opt Out / Withdraw Consent in iOS Settings: Users can withdraw tracking consent at any time by going to [Settings] > [Privacy & Security] > [Tracking] on their iOS devices and turning off the permission for the specific app, or by disabling the "Allow Apps to Request to Track" setting globally.
• EEA and UK Users (GDPR and UMP): For users located in the European Economic Area (EEA) and the United Kingdom, consent for advertising tracking is managed and obtained separately in accordance with GDPR requirements using Google's User Messaging Platform (UMP) or equivalent consent management solutions.

Article 6 (Rights and Obligations of Users)

Users may view, edit, or request deletion of their personal information at any time, and can withdraw their consent to the collection and use of personal data by deleting their account. Users have an obligation to protect their own credentials and are responsible for any issues resulting from sharing their account info with others.

Article 7 (Privacy Officer and Contact Information)

The Service designates the following contact for managing user feedback, resolving complaints, and securing personal data:

• Email: moonshot5730@gmail.com