Privacy Policy

The Operator collects the following personal information to provide the Service.

1. Upon Social Login (Required)

• Social provider unique ID (Kakao / Google / Apple)
• Email address (collected for login, identity verification, and unified web/app account linking — required for Kakao and Google; a relay email is collected if Apple "Hide My Email" is selected)

2. During Profile Setup

3. Collected During Service Use (Creating and Publishing Works)

• Generation request information such as stories and text entered by the user (for the purpose of AI webtoon generation)
• Records of community activity such as works created, posts, and comments by the user

4. Automatically Collected During Service Use

• Device information and push token (FCM token — for push notification delivery)
• Payment/transaction information (transaction identifier, payment method type, credit purchase/usage history — only for paid users. Actual payment method details such as card numbers are processed by the payment gateway and are not collected by the Operator)
• Service usage records (work creation/viewing, posting/commenting, etc.)
• Access logs (server request logs, access IP — for security and incident response)
• Error/diagnostic logs (app crash/error records, device information — for improving service stability)
• Advertising identifier (Android Advertising ID/AAID — for delivering rewarded ads and measuring ad performance. Users can reset the advertising ID or opt out of personalized ads in device settings)

The Operator does not, in principle, disclose users' personal information to third parties. Exceptions include:

1. When the user has provided prior consent
2. When required by law or pursuant to a lawful request from investigative authorities

The Operator entrusts personal information processing as follows for service provision.

Trustees may not use personal information for purposes other than the entrusted work or provide it to third parties.

Details on transfers to trustees located overseas are provided in Article 4-2.

The Operator transfers personal information overseas as follows for service operations. If you do not consent to such transfers, you cannot use the Service.

1. The Operator retains users' personal information until the collection purpose is fulfilled and destroys it upon withdrawal request.
2. However, the following information is retained for certain periods in accordance with applicable law:

   Item Retained	Legal Basis	Retention Period
   Records of contracts, subscription withdrawals, and other transactions	E-Commerce Act	5 years
   Records of payment and supply of goods, etc.	E-Commerce Act	5 years
   Records of consumer complaints or dispute resolution	E-Commerce Act	3 years
   Access logs, access IP information	Act on Promotion of Information and Communications Network Utilization	3 months

1. When a user withdraws or the retention period expires, the relevant personal information is destroyed without delay.
2. Destruction methods:
   • Electronic files: Permanently deleted in a manner that cannot be restored or reproduced
   • Personally identifiable information (PII): Email, nickname, profile image, etc. are set to null

Users may exercise the following rights at any time:

1. Right to access: View the status of personal information processing
2. Right to rectification/deletion: Correct or delete inaccurate information
3. Right to restrict processing: Temporarily suspend processing of personal information
4. Right to withdraw consent: Withdraw optional consents (e.g., marketing) at any time

Rights may be exercised through in-service settings or by emailing fcsquadon@gmail.com, and requests will be processed within 10 days.

Users may request account deletion at any time, and requests are processed immediately upon submission.

1. In-Service Deletion

1. Go to the Profile menu in the top right
2. Select Settings
3. Select Account Management → Withdraw Membership
4. Select a reason for withdrawal and tap the Withdraw button

2. Email Request

If you cannot access the Service, email fcsquadon@gmail.com to request account deletion, and it will be processed within 10 days.

3. Data Processed Upon Deletion

Users may delete and manage individual data without deleting their account, using the methods below.

1. In-Service Deletion

• Works: In Library, open the work's ⋮ menu → Delete
• Comments: On your own comment, open the ⋮ menu → Delete
• Profile image: Change to a default avatar in Profile Edit

2. Email Request

To request deletion of specific data, email fcsquadon@gmail.com and it will be processed within 10 days. Deleted data cannot be recovered; payment/transaction records (5 years) and access logs (3 months) that are subject to statutory retention may be retained for those periods.

The Operator may use cookies and browser storage (such as local storage) to the extent necessary to provide the Service, including maintaining login sessions. Users may refuse cookie storage through their browser settings; however, in that case the use of certain features such as login may be restricted. In addition, anonymized usage analytics data may be collected to improve service quality.

The Operator uses the Google AdMob SDK to deliver rewarded ads, and in this process the advertising identifier (AAID) and device information may be collected and used. Users can reset the advertising ID or opt out of personalized ads under "Settings > Google > Ads" on their device. The Operator may also collect app error/diagnostic information via Sentry to improve service stability.

The Operator sells credits via PG payment through electronic payment gateways (such as Toss Payments) on the web. Actual payment method details (card numbers, etc.) are processed directly by the payment gateway, and the Operator does not collect or store them.

• Payment-related information collected by the Operator: transaction identifier, payment method type, credit purchase/usage history
• Purpose of collection: provision of paid services, management of credit balances, and refund processing
• Retention period: 5 years after payment (Act on the Consumer Protection in Electronic Commerce, etc.)

The Operator takes the following measures to ensure safe processing of personal information:

1. Encryption: Sensitive information such as refresh tokens is stored using one-way encryption (bcrypt/SHA256)
2. Access control: Management of access rights to personal information processing systems and blocking of unnecessary access
3. Communication encryption: Personal information transmitted via HTTPS (TLS)
4. Security updates: Regular security patches applied to servers and libraries
5. Access log management: Access records of personal information processing systems retained (3 months)

1. The Operator does not collect or use personal information from children under 14 and does not permit service registration by children under 14.
2. If a child under 14 attempts to register, the service agreement is not formed and any entered information is immediately destroyed.
3. If it is discovered that information from a child under 14 has been collected, it will be immediately deleted.

The following person is designated as Privacy Officer to oversee personal information processing and handle complaints and grievances.

For reports or consultations regarding privacy violations, you may contact the following agencies:

• Personal Information Infringement Report Center: privacy.kisa.or.kr / 118 (no area code)
• Supreme Prosecutors' Office Cyber Investigation Division: spo.go.kr / 1301 (no area code)
• National Police Agency Cyber Investigation Bureau: ecrm.cyber.go.kr / 182 (no area code)

This Privacy Policy may be changed in response to changes in law, policy, or the Service. Changes will be announced through the in-service notice section at least 7 days before the effective date.