Privacy Policy
This Privacy Policy was originally written in Korean. In case of any discrepancy, the Korean version prevails.
E4NET Co., Ltd. (the “Company”) values the personal information of its users and complies with applicable laws, including the Personal Information Protection Act of Korea. Through this Privacy Policy, the Company explains for what purposes and in what manner users' personal information is used, and what measures are taken to protect it.
1. Purposes of Collecting and Using Personal Information
- Identifying members and managing use of the Service
- Providing personalized content and services
- Improving the Service and developing new services
- Preventing misuse and maintaining security
2. Personal Information We Collect
- Sign-up and login: email address, password
- Optional information: profile image
- Automatically collected while using the Service: device information, access logs, usage records, IP address, cookies
- Generated when using AI services: learning data (question-solving records, entered text, etc.)
3. Use of Personal Information and AI
The Company may analyze and use users' learning data and input in order to provide the Service and improve its quality. In this process, personal information is de-identified or anonymized to the extent possible.
4. Use of On-Device Storage
The Company uses local storage on the device to maintain user authentication and security features.
| Item | Storage location | Purpose | Retention period |
|---|---|---|---|
| access_token | Secure encrypted storage | Maintaining login state and authentication | Until the token expires or the user logs out / deletes the app |
| refresh_token | Secure encrypted storage | Renewing authentication tokens | Until the token expires or the user logs out / deletes the app |
| User information | SharedPreferences | Maintaining subscription features and app settings | Until the user logs out or deletes the app |
5. Retention and Use Period
- On membership withdrawal: retained for 1 week, then destroyed
- Inquiry handling information: retained for 1 week after the inquiry is resolved, then destroyed
- Mock exam and assessment records: per LoroTOPIK's management policy (retained for 1 year from the exam date)
- Where retention is required by applicable law, information is kept for the period required
6. Provision of Personal Information to Third Parties
As a rule, the Company does not provide users' personal information to outside parties. The following are exceptions:
- Where the user has given prior consent
- Where a request is made under applicable law
7. Outsourcing of Personal Information Processing
To provide the Service smoothly, the Company may outsource the processing of personal information as follows:
- Cloud service providers (e.g. Amazon Web Services)
- Payment service providers (PG companies)
- AI service providers
When entering into outsourcing agreements, the Company supervises and manages the contractors to ensure compliance with personal information protection laws.
8. Transfer of Personal Information Overseas
The Company may transfer personal information overseas in order to provide the Service.
- Items transferred: account information and Service usage information
- Destination country: the country where the service provider's servers are located
- Purpose of transfer: data storage and service operation
9. Users' Rights
Users may exercise the following rights regarding their personal information at any time:
- Requesting access to, correction of, deletion of, or suspension of processing of personal information
- Requesting withdrawal of consent
Requests may be submitted through the contact below, and the Company will act without delay in accordance with applicable law.
10. Security Measures
- Encrypted storage of personal information
- Managing and minimizing access privileges
- Operating security programs
11. Personal Information Protection Officer
- Department: Technology Research Institute
- Personal Information Protection Officer: Lee Deuk-kyung (이득경)
- Contact: lorotopik@e4net.net
12. Changes to This Privacy Policy
This Privacy Policy may change in line with laws, policies or changes to the Service. Any change will be announced through in-service notices at least 7 days before it takes effect.