Bean's Factorial Inc. (hereinafter referred to as the "Company") establishes and discloses the following personal information handling policy to protect users' personal information in accordance with Article 30 of the "Personal Information Protection Act" and to handle related matters promptly and smoothly.

The Company processes personal information for specific purposes and does not use the processed information for any other purposes. If the purpose of use changes, we will implement necessary measures, such as obtaining separate consent under Article 18 of the "Personal Information Protection Act." Additionally, the Company provides services to users over the age of 14.

If we recognize that the personal information of children under 14 has been collected, we will delete it without delay.

1. Personal information items to be collected and methods of collection (1) Items of personal information to be collected

   • When registering as a member, we collect the following information: When using an Apple account: public profile (name), email address
   • When registering through external platform authentication, we do not store personal information other than the above.
   • Ad identifier, visit history, device information (type, model name, OS version, APP version, device identifier, language, and country), purchase information for in-app purchases (subscription items, subscription start/end date and time, receipt ID, etc.)

   (2) During service use, we may collect the following information:

   • Nickname, service use record, access log, misuse record, mobile device information (model name, carrier information, OS information, language, and country information, APP version, device unique identification number, advertisement ID), access country information, language information, IP information, cookies, visit history

   (3) The Company may collect additional information when using customer-related services. In such cases, we obtain consent to collect and use personal information following relevant laws. Additional collection types and items of personal information to be collected:

   • When applying for customer consultation (including 1:1 inquiry): Answer registration email
   • When an event is in progress: Email or mobile phone number, name, date of birth, gender

   (4) How we collect personal information:

   • We collect information through membership registration, service use (including mobile service), member information modification, event application, provision from partner companies, customer center consultation, and generated information collection tools.

2. Purpose of collection and use of personal information

   1. Implementation of service provision contracts and content delivery
   2. Membership registration and management Identity verification, personal identification, prevention of illegal use and unauthorized access, confirmation of membership intent, complaint handling, and customer consultation
   3. Provision of goods or services Providing customized services including in-app purchases, content, and advertisements
   4. Marketing and statistical analysis Development of new services, delivery of promotional information, provision of targeted services and advertisements, identification of access frequency, and statistical analysis of member service use
   5. Handling difficulties Confirmation of user identity, inquiry verification, fact investigation contact, notification of processing results

3. Period of retention and use of collected personal information In principle, we destroy personal information promptly after achieving its purpose. However, we may retain certain information for specified periods as required by relevant laws:

   • Records on display/advertisement: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records regarding contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records on handling consumer complaints or disputes: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)
   • Records of website visits: 3 months (Communications Secret Protection Act)
   • If an investigation is in progress due to a violation of relevant laws, until the investigation is completed
   • In case of ongoing receivables and debt relationships, until they are settled

4. Procedure and method of destroying personal information We destroy information promptly after achieving its purpose. The destruction procedure and method are as follows:

   1. Destruction procedure
      • Information entered by users for membership registration is stored for a specified period and then destroyed in accordance with our internal policy and legal requirements (refer to the retention and use period) after achieving its purpose.
   2. Destruction method
      • Personal information stored in electronic file format is deleted using a technical method that prevents record reproduction.
      • Personal information printed on paper is shredded or incinerated.

5. Provision of personal information to third parties

   1. The Company processes users' personal information only within the scope specified in Article 1 (Purpose of processing personal information). We provide information to third parties only when it falls under Articles 17 and 18 of the "Personal Information Protection Act," such as with the consent of the information subject or under special legal provisions.
   2. The Company does not provide personal information to third parties without user consent.

6. Consignment of personal information processing

   1. The Company entrusts the following personal information processing tasks:

      • Amazon Web Services, Inc. Server hosting CDN business Until the end of service use or the consignment contract

      • Google Authentication Service usage analysis Until the end of service use or the consignment contract

      • Adapty Tech Inc.

        In-app purchases usage analysis

   2. When concluding a contract, the Company complies with Article 26 of the "Personal Information Protection Act." We specify responsibilities in contracts, including prohibiting processing of personal information for purposes other than the entrusted tasks, implementing technical and administrative protection measures, restricting re-entrustment, managing and supervising the trustee, and compensating for damages. We supervise whether the trustee handles personal information safely.

   3. If the contents of the consignment work or the consignee change, we will promptly disclose it through this personal information processing policy.

7. Rights and obligations of users and their legal representatives and how to exercise them

   1. Users can exercise the right to view, correct, delete, and suspend processing of personal information at any time: View & correction personal information: Settings > My Profile Profile picture, nickname Delete personal information : Settings > ⚙️
   2. Users' rights may be restricted in accordance with Article 35 (4) and 37 (2) of the Personal Information Protection Act when requesting information access and processing suspension.
   3. Requests for correction and deletion of personal information cannot be made if the information is specified as a collection target in other laws.
   4. The Company verifies whether the person making requests for reading, correction, deletion, or suspension of processing is the actual user or a legitimate agent.
   5. If the subject exercising rights under Paragraph 4 is an agent (a user's legal representative or delegated person), they must submit a power of attorney in accordance with the attached form No. 11 of the "Personal Information Processing Method Notice (No. 2020-7).”

8. Measures to ensure the safety of personal information

   1. The Company takes the following measures to ensure the safety of personal information: Establishment and implementation of internal management plans & training
   2. Technical measures: Management of access rights

9. Matters concerning the installation, operation, and rejection of automatic personal information collection devices

   1. The Company uses 'cookies' to store and retrieve usage information to provide users with individually customized services. Cookies are small amounts of information that the server (HTTP) used to operate the website sends to the user's computer browser and stores in the user's device.
      1. Purpose of using cookies We use cookies to provide optimized information and advertisements (including personalized ads) to users by identifying visit types, usage patterns, popular search terms, and secure access to services and websites visited by users.
      2. Installation, operation, and rejection of cookies iOS: Select "Block all cookies" in [Settings > Safari > Privacy & Security] Users who refuse to store cookies may experience difficulties using customized services.
   2. The Company uses advertisement identifiers and analysis software to provide suitable and more useful services and advertisements (including customized ads) to users.
      1. The advertisement identifier is automatically collected when the user activates the ad-related function in the OS settings of their smartphone or tablet PC. Users can opt out of having advertising identifiers used for interest-based advertising by changing device settings or using the advertising platform operator's opt-out feature.

10. Advertising platfom operator : Google LLC

11. Block personalized ads

    iOS: Uncheck "Personalized Ads" in [Settings > Privacy > Apple Advertising] Analysis software is used to analyze information automatically generated when a user visits a website or uses a mobile service. Users can refuse this. iOS: Uncheck "Allow Apps to Request to Track" in [Settings > Privacy > Tracking]

12. Changes and Notice of Privacy Policy If we add, delete, or modify the contents of this Privacy Policy, we will notify you through 'Notice' or 'Notifications' at least 7 days before the revision. For significant changes in user rights, such as changes in collected personal information items or purposes of use, we may obtain user consent again.

13. Scope of application of this Privacy Policy

    1. This privacy policy applies to all services (including website and APP) provided by the Company. However, if service characteristics differ, a specialized personal information handling policy may apply to that service.
    2. If users visit another company's website linked to the Company's services, or if the visited website collects personal information, this Privacy Policy does not apply.

14. Personal Information Protection Officer

    1. The Company has designated a person in charge of personal information protection to handle complaints and damage relief related to personal information processing.
    2. Users may contact the personal information protection officer regarding inquiries, complaint handling, and damage relief related to personal information protection while using the Company's services. We will answer and process inquiries as soon as possible. If there's a delay due to unavoidable reasons, we will notify the user.

    Contact : KakKyoo, Lee

CONTACT US