K DanJang Privacy Policy

Effective Date: October 18, 2026

Office5 (the "Company") operates the K DanJang website and apps (the "Service") and processes personal information in accordance with applicable law. This policy explains what we collect and why, who processes it on our behalf, when we delete it, and what rights you have.

Table of Contents

• Personal Information We Collect
• How We Use It
• Retention
• Provision to Third Parties
• Processors and International Transfers
• Location
• Your Rights
• Deletion Procedure
• Cookies and Similar Technologies
• Security Measures
• Protection of Children Under 16
• Protection for Users by Country
• Data Protection Officer and Contact
• Changes to This Policy

Personal Information We Collect

How We Use It

• Account sign-up and management, identity and age verification, fraud prevention
• AI face diagnosis and personalized makeup guides (text and audio)
• Weather-aware guides (if location is allowed)
• Payments, subscription management and refunds
• Customer support and service notices
• Usage analytics, quality improvement and ad performance measurement (within the consent in Section 8)
• Marketing emails (only with separate consent)
• AI model improvement (original photos only with separate consent)

Retention

Provision to Third Parties

We do not sell your personal information and do not provide it to third parties except as required by law or with your separate consent.

Processors and International Transfers

We engage the processors below to provide the Service. Most of them are located outside Korea, so personal information is transferred over the network to those countries when you use the Service. This transfer is necessary to perform our contract with you and is disclosed in this policy (Korea PIPA Art. 28-8(1)(3)).

• You can stop the transfer by deleting your account; because these functions are core to the Service, the Service cannot be used without them.
• We review our processing agreements and each provider's safeguards so that processors handle personal information securely.
• Social login: Google, Kakao and Apple login are not processing on our behalf. The company you choose provides your information to us at your request, and that company's handling of your personal information follows its own privacy policy.

Location

• Only if you allow location permission, the app/website uses your device location (latitude/longitude) when creating a weather-aware guide. The Android app requests approximate location only, and in all cases the coordinates are rounded to two decimal places (about 1 km) before they are sent.
• The location is sent directly to Open-Meteo for the weather lookup and is not stored on our servers. We receive only the weather value (e.g., sunny, rain).
• You can turn location off in your device settings at any time; you will then get guides without weather.

Your Rights

• You may request access, correction, deletion or suspension of processing, and delete your account at any time.
• Delete diagnostic codes, withdraw AI training consent (stored photos are deleted immediately) and unsubscribe from marketing in Settings.
• Request via Settings → Delete account in the app, or by email (kdanjang@kdanjang.com). We act without delay.
• If you request it, we will ask our payment providers (Polar, RevenueCat) and email provider (Brevo) to delete your remaining information, except payment records they must keep by law.
• De-identified statistics that cannot identify you are not personal information and are not subject to deletion requests.

Deletion Procedure

• Personal information is deleted without delay once its retention period ends or its purpose is achieved.
• Electronic records are deleted irrecoverably and stored files (photos, audio) are permanently removed from storage.
• Information we must keep by law is stored separately and deleted when that period ends.

Cookies and Similar Technologies

• We use browsing and usage records only to measure ad performance and never sell them.
• The Android app collects the Android Advertising ID through Firebase to measure installs and ad performance; you can turn it off in device settings (Settings → Google → Ads → Delete advertising ID). The iOS app does not collect the advertising identifier (IDFA).

Security Measures

• All data is sent over encrypted connections (HTTPS).
• Database access is restricted so only you can access your account data, and administrator access is minimized.
• Face photos are analyzed on your device; photos of users who consent to AI training are kept in separate private storage.
• Service secrets (API keys) are stored separately and administrator actions are logged.

Protection of Children Under 16

The Service is available only to users aged 16 and older, and the Company does not intentionally collect personal information from children under 16. If it is confirmed that personal information of a child under 16 has been collected, the Company will destroy it without delay.

If the Company becomes aware that personal information of a child under 16 has been collected, it will delete the account and the personal information without delay. A guardian may request such deletion at kdanjang@kdanjang.com.

Protection for Users by Country

1. Users residing in the European Economic Area (EEA) and the United Kingdom may exercise rights under the General Data Protection Regulation (GDPR) and the UK GDPR (including the rights of access, rectification, erasure, restriction of processing, portability, and objection).

2. Users residing in certain U.S. states, including California, may exercise rights such as opting out via a Global Privacy Control (GPC) signal under applicable state law.

3. Where the law of a particular jurisdiction guarantees rights more favorable to users than this policy, that jurisdiction's law shall take precedence.

Data Protection Officer and Contact

Contact: Sunghoon Oh

Email: kdanjang@kdanjang.com

Phone: +82-10-9290-1220

Changes to This Policy

If this policy is changed, the Company will announce the changes on the Service's initial screen at least 7 days before the effective date (30 days in advance for significant changes).

View the previous policy (effective September 2, 2026)