Chính sách bảo mật

1. 소개

Pomiel Rewardapp은 사용자의 개인정보 보호를 최우선으로 생각합니다. 본 개인정보처리방침은 앱 사용 시 수집, 사용, 저장 및 보호하는 정보에 대해 설명합니다.

2. 수집하는 정보

• 개인정보: 이름, 이메일, 전화번호
• 계정정보: 사용자명, 비밀번호(암호화됨)
• 은행정보: 계좌번호, 은행명 (포인트 출금용)
• 사용 데이터: 퀴즈 참여 이력, 포인트, 거래 내역
• 기기 정보: 기기 유형, 운영체제, 기기 ID

3. 정보 사용 목적

• 서비스 제공 및 개선
• 거래 처리 및 포인트 지급
• 계정 및 활동 관련 알림 발송
• 사용자 경험 분석 및 개선
• 부정행위 방지 및 보안 유지

4. 정보 보안

다음과 같은 최신 보안 조치를 사용합니다:

• 민감한 데이터 암호화 (비밀번호, 은행 정보)
• JWT(JSON Web Token) 인증으로 세션 보호
• 보안 서버에 안전하게 저장
• 권한이 있는 직원만 데이터 접근 허용

5. 정보 공유

귀하의 개인정보를 판매하지 않습니다. 다음의 경우에만 정보를 공유합니다:

• 은행/결제 파트너와 출금 처리를 위해
• 법적 요구사항이 있을 때
• 귀하의 동의가 있을 때

6. 귀하의 권리

귀하는 다음의 권리를 가집니다:

• 개인정보 열람 및 확인
• 부정확한 정보 수정 요청
• 계정 및 개인정보 삭제 요청
• 동의 철회 (언제든지)

7. 문의

개인정보처리방침에 대한 질문이 있으시면 연락주세요:

1. Purpose of Personal Information Processing

Rewardapp processes personal information for the following purposes. Personal information being processed is not used for purposes other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

• Membership registration and management: Confirmation of membership intention, identification and authentication for membership services, maintenance and management of membership qualifications, prevention of fraudulent use of services
• Provision of goods or services: Provision of point accumulation and exchange services, content provision, customized service provision
• Use in marketing and advertising: Provision of events and advertising information and participation opportunities

2. Processing and Retention Period of Personal Information

① Rewardapp processes and retains personal information within the personal information retention and use period consented to when collecting personal information from data subjects or the personal information retention and use period according to laws and regulations.

② The specific personal information processing and retention periods are as follows:

• Membership registration and management: Until service use contract or membership cancellation, but until settlement of creditor-debtor relationships if creditor-debtor relationships remain
• Provision of goods or services: Until completion of goods and service supply and completion of payment and settlement

3. Items of Personal Information Processed

① Rewardapp processes the following personal information items:

• Required items: Email, password, name, mobile phone number
• Optional items: Referral code
• Automatically collected items: IP address, cookies, service usage records, visit records

4. Third Party Provision of Personal Information

① Rewardapp processes personal information only within the scope specified in Article 1 (Purpose of Personal Information Processing) and provides personal information to third parties only when it corresponds to Articles 17 and 18 of the Personal Information Protection Act, such as consent of the data subject and special provisions of laws.

② Rewardapp is not currently providing personal information to third parties.

5. Consignment of Personal Information Processing

① Rewardapp consigns personal information processing tasks as follows for smooth personal information processing.

Currently, there is no consignment of personal information processing tasks, but we will notify the consignment details and trustees if we consign in the future.

6. Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercise

① Data subjects can exercise the following personal information protection-related rights against Rewardapp at any time:

1. Request for notification of personal information processing status
2. Request for suspension of personal information processing
3. Request for correction and deletion of personal information
4. Request for damages

② The exercise of rights under paragraph 1 can be done in writing, email, facsimile (FAX), etc. in accordance with Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and Rewardapp will take measures without delay.

7. Safety Measures for Personal Information

Rewardapp takes the following technical/administrative and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act.

1. Minimization and training of personal information handling staff: We designate staff members who handle personal information and limit them to those in charge to minimize and manage personal information.
2. Regular internal audits: We conduct regular internal audits (quarterly) to ensure the stability of personal information handling.
3. Encryption of personal information: User personal information and passwords are encrypted and stored and managed, so only the user can know them, and important data uses separate security functions such as encrypting files and transmission data or using file locking functions.

8. Personal Information Protection Officer

① Rewardapp designates a personal information protection officer as follows to take overall responsibility for personal information processing and to handle complaints and remedy damages related to personal information processing of data subjects.

② Data subjects can contact the personal information protection officer and department for all matters related to personal information protection inquiries, complaint handling, damage relief, etc. that occur while using Rewardapp services.