Privacy Policy

1. Controller and scope

주식회사 앱필 (the Company) processes personal information for ITOOJA in accordance with applicable law. This policy covers registration, learning and tests, community features and support, and applies to all educational subjects offered through the service. Separate notices and consent are provided where required.

2. Purposes and information

a. Accounts: ID, email address, password, country and confirmation of being at least 14 are used for identification, login, account management and service delivery. Name/nickname and city are optional and used for reports, regional services and usage statistics. Omitting these optional fields does not prevent registration or basic service use. Registration is currently for users aged 14 or older.

b. Learning and tests: subjects/courses, study and test times, submitted answers, scores, assessments, progress and reports are used for learning, grading, review and learning history.

c. Community: posts, comments, author information and creation/update times are used to publish and manage content and support communication.

d. Advertising, partnerships and support: company/brand, contact person, reply email, country/city, industry, subject and message are used to handle and answer inquiries. Preferred advertising period and budget are optional. An account identifier is associated with signed-in inquiries; receipt time and delivery status are recorded. Do not send unnecessary identification documents, passwords or sensitive information.

e. Operations: connection IP, access/usage records, browser information, cookies/sessions and consent records (document type/version, time and IP hash) support service delivery, troubleshooting, abuse prevention and consent verification. Approximate IP-based country/city information supports default language and local weather, not device GPS tracking.

3. Retention

Account information and associated learning/score records are retained until account closure or the end of their processing purpose. Inquiries are deleted when their purpose is fulfilled, except relevant records needed to meet legal obligations or handle disputes for the necessary period.

The service usage-log retention standard is 180 days. Consent records are retained for the period necessary to verify consent and handle related disputes.

Where a separate transaction creates retention obligations under Korean electronic commerce legislation, contract/withdrawal records are retained for 5 years, payment and supply records for 5 years, consumer complaints/disputes for 3 years, and display/advertising records for 6 months. These periods do not automatically apply to free learning records or entire accounts. Other statutory retention is limited to the information and period required by law.

4. Deletion procedures and methods

Information is deleted without undue delay when its retention period expires or its purpose is fulfilled. Records subject to statutory retention are kept separately and deleted when the reason ends. Electronic records are deleted to prevent recovery or reproduction; paper records are securely shredded or otherwise destroyed.

5. Third-party disclosure and public posts

The Company does not disclose personal information to third parties without consent or another basis permitted by law. Where separate disclosure is needed, recipients, purposes, information and retention are disclosed and required consent or other lawful procedures are followed. Registration is not blanket consent to all disclosures.

Public posts, comments and displayed author information can be viewed by other users. Avoid including unnecessary personal information about yourself or others.

6. Service providers and overseas transfers

When processing is outsourced, the Company follows applicable contractual and supervision obligations.

For regional information, the connection IP is sent to ipapi.co to obtain approximate country/city/coordinates; those coordinates are sent to Open-Meteo for weather.

Where overseas transfers occur, required information about countries, recipients/contact details, data, purposes, timing/methods, retention and refusal is disclosed and applicable legal requirements are met. This general explanation does not replace separate notices or consent required for overseas transfers.

7. Your rights and how to exercise them

You can request access, correction, deletion, restriction, withdrawal of consent or account closure through the privacy contact below. Include your account ID and request, but not your password.

Legal guardians and duly authorized representatives may also exercise rights, subject to necessary identity and authority checks. Reasons will be explained where the law restricts a request. Include the relevant URL when requesting removal of public content.

8. Cookies and choices

Cookies and sessions support login and language preferences. The language cookie remembers Korean/English for up to one year. You can inspect, delete or block cookies in browser settings. Blocking essential cookies may prevent login or other features from functioning.

9. Information security

The Company maintains safeguards including access controls, password protection, access records, security checks and staff management. Passwords are stored as one-way hashes. Do not share your password, and log out on shared devices. This notice does not guarantee absolute security or claim a particular security certification.

10. Privacy contact and complaints

Operator: 주식회사 앱필

Privacy and complaints department: Management Division (경영본부)

Privacy and service email: infodesk@appfeel.net

Address: 4F, 13 Geumsan-ro, Gunpo-si, Gyeonggi-do, Republic of Korea

Requests are handled after identity checks to the extent necessary. For independent assistance, contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or Personal Information Dispute Mediation Committee (kopico.go.kr).

11. Policy changes

Changes and effective dates are announced on the site. Additional notices or consent procedures are followed where required by law.

12. Advertising applications and contracts (effective 2026-10-03)

The separate advertising system processes account identifiers, company/brand, contact name and email, advertising images and links, requests, quotes, consent, advertiser permissions, payment confirmations, transactional email delivery records and screenshots for review, contracting, delivery, cancellation and refunds. Uncontracted applications are retained for one year after closure; contract, consent, payment and supply evidence is retained for five years after termination, with separately applicable legal retention limited to its scope. Only approved advertising titles, brand names, images and links are public during placement. Contact details and contract history are restricted to the applicant and administrators. Approval and final publication instructions are emailed to the member account address. Advertiser permission is retained until account closure or revocation. This information is not used for marketing. Required collection consent is requested when applying; refusal prevents system-based applications. Requests for access or deletion: infodesk@appfeel.net. Full notices and contract conditions are available on the Advertising Guide page.