MemoPlayer Privacy Policy

Effective 1 Oct 2026 · Consolidated with the previous website policy (www.memoplayer.com, 17 Dec 2023). This document prevails if they overlap.

Convenience translation. If this conflicts with the Korean text, the Korean version governs.

MemoPlayer (hereinafter "the Company") strictly complies with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization, and other relevant legal frameworks of the Republic of Korea. We are fully committed to protecting the fundamental rights of data subjects.

This website (link.memoplayer.com) does not deploy proprietary tracking cookies; however, third-party modules (such as YouTube players) may implement their own tracking mechanics. The processing conditions stipulated below apply primarily to the MemoPlayer mobile application.

1. Purpose of Processing

• Authentication & Management: Verification via Google Account integration, customer support, and membership retention.
• Service Execution: Provision of official catalogs, UGC communities, club infrastructures, and handling of intellectual property infringement claims.
• Financial Transactions: Management of in-app points, execution of Google Play billing, refunds, and subscription lifecycle management.
• System Integrity & Abuse Prevention: Enforcing application integrity, detecting fraudulent access, restricting re-registration of malicious users, and penalizing Terms of Use violations.

2. Categories of Processed Data

• Google Account UID & Email Address — Utilized for authentication, purchase attribution, and dispute resolution. Promptly destroyed upon account deletion, subject to statutory retention periods (30-day grace period for withdrawal).
• Public Identifiers (Handle/Profile) — Utilized for community representation. Retained until account deletion (UGC may be anonymized and archived post-deletion).
• Anonymous Firebase UID — Retained strictly for pre-authentication session management.
• Play Billing Token Hashes & Digital Wallet Ledgers — Retained for a mandatory period of 5 years pursuant to the Act on the Consumer Protection in Electronic Commerce, etc.
• UGC, Nicknames, Club Affiliations, Disputed Records, FCM Tokens, AdMob Advertising IDs, and Device Hashes — Retained strictly in accordance with internal corporate policies for operational administration and abuse deterrence.

Data subjects are strictly prohibited from embedding sensitive personal information of third parties (e.g., examination registration numbers, real-name contact details) within community environments.

3–4. Methods of Collection, Processors, and Cross-Border Transfers

Data is voluntarily provided by the user via Google authentication, submissions, and direct inquiries. The Company initiates processing only upon obtaining explicit, affirmative consent to this Privacy Policy and the Terms of Use within the application interface. Third-party SDKs (Firebase, Google Play, AdMob) may autonomously generate system data during utilization. Primary processors include Google LLC and its global affiliates, inherently necessitating cross-border data transfers (predominantly to the United States). The Company expressly prohibits the provisioning of personal data to third parties for marketing purposes without explicit consent, barring compelled disclosures required by competent law enforcement agencies.

5. Retention and Destruction Protocols

Personal data is irreversibly destroyed without undue delay upon fulfillment of the processing objective or account termination, with the following exceptions dictated by statutory obligations or critical internal policies: Records of contracts or withdrawal of subscription (5 years); Records of payment and supply of goods (5 years); Records of consumer complaints or dispute resolution (3 years).
Abuse-prevention retention: For accounts terminated for severe Terms violations, the Company may retain minimal identifiers for up to 1 year to prevent re-registration abuse. Longer retention applies only where permitted by law (e.g., ongoing legal process). Permanent retention is not the default.

6–9. Data Subject Rights, Targeted Advertising, Security, and Minors

Data subjects may exercise rights (access, rectification, erasure, suspension) via app settings (see Account Deletion) or the contact email. Erasure may be limited by statutory retention. Android Advertising IDs used for rewarded ads may be opted out in OS settings. The Company applies HTTPS, Firebase Security Rules, and Play Integrity.
Where the Company has met its statutory security duties, liability for breaches caused solely by user negligence or by intrusions beyond reasonable control may be limited under applicable law. Criminal liability cannot be waived by contract.
The community is not directed at children under 14. Age checks rely on Google Account and Play Family Policies.

10–11. Privacy Officer & Notification Procedures

Corporate Privacy Officer / Legal Inquiries: biya27@naver.com. External escalations may be directed to KISA (118), KOPICO, PIPC, or the National Police Agency (112). Any material modifications to this Privacy Policy shall be legally promulgated at least 7 days (30 days for adverse alterations) prior to implementation via the application interface or this public domain.

Addendum. This revised policy shall enter into full force and legal effect on October 1, 2026.