DRE&M Privacy Policy

Effective: August 8, 2026

Article 1 (On-device storage)

1. Habit records, text, and photos are generally stored on the user’s device. Except for information posted to the Feed, they are not stored in the Company’s Firebase.
2. Data may be lost if the app is deleted or the device is reset, lost, damaged, or its operating system changes. Users may manually use Google Drive backup.

Article 2 (Feed information and disclosure)

When a user enters a habit record, it is uploaded to Firebase for the Feed. A user who does not want it posted must delete the record.

1. Feed information is uploaded when entered but becomes visible to other users beginning the following day.
2. It is automatically deleted from Firebase data, photos, related caches, and backups after 30 days from the start of disclosure and cannot be recovered.
3. If the user deletes the record sooner, it is immediately deleted from Firebase, whether or not disclosure has started, and cannot be recovered.
4. Users must not enter content that infringes another person’s privacy, copyright, or other rights.

Article 3 (App ID and nickname)

1. Instead of an account, the Service generates a random App ID on first launch to distinguish Feed posts. It is not a general device identifier.
2. Reinstalling the app creates a new App ID, but restoring a Google Drive backup may restore the previous App ID.
3. Users can view their App ID in the app. For a privacy request, the Company may separately explain how to verify it.
4. The nickname is visible to other users on the Feed.

Article 4 (Google Firebase processor)

Article 5 (Google Drive backup and restore)

1. After signing into Google and pressing Backup or Restore, DRE&M accesses the DRE&M folder created in the user’s Google Drive.
2. Access is limited to that app-created folder and its files. Data moves directly between the device and the user’s Drive, does not pass through Company servers, and is not stored or viewed by the Company.
3. A backup may contain the App ID and on-device habit records, text, and photos. Firebase Feed data itself is not included.
4. Backup runs only when the user presses the button. Files are not separately encrypted, so users must protect their Google account and backup files.
5. Users may revoke access in Google Account settings or delete backup files in Drive. Google’s terms and privacy policy apply.

Article 6 (Advertising)

The Company uses Google AdMob to provide the free Service. Google may process IP addresses, advertising or app/device identifiers, ad interactions, diagnostic information, and approximate location for advertising, analytics, and fraud prevention. See the Google Privacy Policy and How Google uses information from partner apps.

Article 7 (Disclosure to third parties)

The Company does not provide personal information to third parties, except that Feed information is disclosed to the audience selected by the user and information may be processed where required by law. Article 6 and Google’s policies apply to AdMob.

Article 8 (Deletion)

1. Feed information is automatically deleted 30 days after disclosure begins or immediately if the user deletes it sooner.
2. Electronic files are deleted securely so they cannot be recovered or reproduced.
3. The Company cannot directly delete data on the user’s device or Drive; the user must delete it there.

Article 9 (User rights)

1. Users may view or delete their records and Feed posts in the app.
2. Losing the App ID after deletion or device replacement may prevent management of old posts. A Drive backup may restore it.
3. Requests may be emailed below. The Company may separately explain how to verify the App ID or other necessary information and will act under applicable law after verification.
4. Because a nickname alone cannot establish identity, a request concerning a specific post may be limited if the necessary information cannot be verified.

Article 10 (Users under 14)

The Company does not separately verify age. A user under 14 needs consent from a legal guardian before using a Feed containing personal information. If the Company learns that such information was processed without verified consent, it will promptly delete it or take other necessary measures.

Article 11 (Security)

The Company takes necessary technical and organizational measures, including access restrictions, transmission protection, and system reviews, to prevent loss, theft, leakage, forgery, alteration, or damage.

Article 12 (Privacy officer and remedies)

For advice or remedies, contact the Personal Information Dispute Mediation Committee (+82-1833-6972, kopico.go.kr), Privacy Infringement Report Center (+82-118, privacy.kisa.or.kr), or Korean National Police cybercrime service (+82-182, ecrm.police.go.kr).

Article 13 (Changes)

The Company may amend this Policy for legal or service changes and will announce the effective date and major changes in the app or on its website.