Article 1 (Purpose of processing personal information)

The company processes personal information for the following purposes.

1.Membership Registration and Management: To perform Confirmation of user intention to sign up, Identification of user information including age details, Maintenance of the membership, Prevention of fraudulent use of services, Confirmation of consent from legal representatives when processing personal information of children under the age of 14, and Various notifications and announcements.

2. Provision of goods or services: To perform Provision of basic/customized services, Transmission of contracts and invoices, Identification, Age Certification, Payment and Settlement of service charges, Credit collection.

3. Claim Processing: To perform Identification of users, Identification of the claims, Notification or contact for fact collecting, and Notification of results

4. Use in marketing and advertising: To deliver customized advertising, provide event and advertising details, and provide opportunities for participation

5. Service Improvement and Development: To improve o existing services and develop new, customized services

6. Utilization of Pseudonym: To pseudonymize and utilize information for statistical preparation, scientific research, preservation of public interest records, etc.

Article 2 (Personal Information Items to process)

1. Account Data

① The company collects and processes the following personal information items from the service users.

② Basic collecting items (required items): Name, Email, Password, Phone Number

③ Basic collecting items (optional items): Nickname, Birthdate, Gender

④ The additionally provided items from the affiliates for the purpose of approval of membership by each membership selecting options.

User Selecting	Affiliate/Service Providing Items
Membership Affiliate/ Service	Required	Optional
Sign up with Naver ID	User Personal ID, E-mail, Phone Number	Birthdate, Gender, Age, Birthyear
Sign up with Google ID	Profile Image, Email, Phone Number	.
Sign up with Apple ID	Name, E-mail	.
Sign up with Kakao talk ID	Profile Information (Nickname, Profile Image) Kakao Account (Email, Phone Number)	Birthdate, Gender, Age, Birthyear
Sign up with Facebook ID	E-mail	.

①1. Items to be collected in the process of the service use: Account Information for Virtual Assets (Password, Balance, Etc.) and listed items from “2. Device Driven Data”, “3. Sensitive Information Data”.

②2. Items to be collected automatically in process of the service use: IP Address, Cookies, Service Use Records (visit and use records, misuse, or abuse records, etc.), Device Information (device model name, OS name and version information), Advertisement Identifier.

③3. Event of Claim Processing: the separeted items from the users to be collected and processed in accordance with the table above in the event of the necessity for claim processing

The company can process and use the personal information collected according to the preceding paragraph under pseudonym and separately manage it and take necessary protective measures so that it is not re-identified.

2. Device Driven Data

The Service can access and collect data through the following built-in utilities of devices.

①Location Data (GPS)

②Camera

③Accelerometer

④Storage, Photo&Album and Media

⑤ Biometric information

The Service shall request permission to access above mentioned information at the moment of installation or initial usage in the service. The specific data collected can vary depending on the individual settings of the device and the permissions granted at the point of service installation and initial use.

3. Sensitive Information Data

"Sensitive Information Data" is a subset of personal information that requires a higher level of protection. Examples of sensitive information include information related to your race or ethnic origin, political opinion, religion, trade union or other professional associations or membership, philosophical beliefs, sexual orientation, sexual activity or sex life, criminal records, health information, or biometric information.

The following types of sensitive information is what the company can collect.

①Location Data (GPS)

② Biometric information

The Company does not collect sensitive information without consent, and use or disclose Sensitive Information without permission granted nor being required or approved by the relevant laws.

Article 3 (Collecting and Utilizing of Personal Information)

The Company can collect the personal information of the users in case the user perform any actions below listed on web and app of its service.

(1) Account Registration

(2) Submission of the servey form for the service programs; competition, contest and reward earnings.

(3) Content Access via a mobile device or an web browser.

(4) Any Contact via E mail, Social media or any kinds of similar activity.

(5) In the event of mentioning the company or the service in public.

The Company can collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed if the manner of processing doesn’t withstand below purposes.

(1) Provision of the Service and esential functions in App and Web.

(2) Performance of analystics upon the market values, research and develope of business to operate and mange the service in App or Web including company owning social medias.

(4) Provision of Marketing and Advertisement Information about the company goods or other 3rd parties’ that company can consider users are interested in.

(5) Provision of additional benefits to users for event participating and reward earnings.

(6) Performance of Internal Technical Evaluation to operate and mange the service in App or Web including company owning social medias

③ The company separately maintain the personal information of the users out of the service for one year or a period separately determined by the user by storage or termination.

Article 4 (Period of Processing and Holding of Personal Information)

① If a user withdraws from or loses his/her qualification to use the service, the company shall delete and destroy the collected user's information regardless of further request. However, despite the withdrawal of membership or loss of qualifications, the following information will be preserved for the following reasons.

1. In the event of a police inquiry or investigation due to a violation of the relevant act of laws or regulation, the relevant information shall remain preserved by the moment of the case clearance.

2. In the event of the responsible credit bonds or relations remains due to the app use, the relevant information shall remain preserved by the settlement of the responsibility

3. Where the company terminates the service use contract in accordance with the terms of use, the records of fraudulent use of the service shall be preserved for one year after termination to prevent fraudulent re-subscription and service use

② Notwithstanding the preceding paragraph, the Company shall preserve it until the end of the period in the event of below.

1. Personal Information (form of log records) regarding Service Use: 3 Months of Preservation under the Communications Secrets Protection Act.

2. Records on the Withdrawal of Contracts or Subscriptions and Supplement of goods, etc.: 5 Years of Preservation under the Consumer Protection Act on Electronic Commerce, etc.

3. Records of Consumer Complaints and Resolutions: 3 Years of Preservation under the Consumer Protection Act on Electronic Commerce, etc.

4. Records on Advertisement Display: 6 Months of the Preservation under the Consumer Protection Act on Electronic Commerce, etc.

5. Documentation of All Kinds with relevant to Transactions Prescribed by the Tax Act: 5 Years of Preservation under the Framework Act on National Taxes.

③ The company separately maintain the personal information of the users out of the service for one year or a period separately determined by the user by storage or termination.

Article 5 (Providing Personal Information to a Third Party)

① The company shall provide personal information to third parties only with the consent of the user or considered special cases of the Personal Information Protection Act or other laws. If the company provides personal information to third parties, the consent of the user must be required in advance.

Article 6 (Entrustment of Personal Information Processing)

The company entrusts the processing of personal information as follows for smooth processing of personal information.

Trustee	Entrusting Services
Ground X	To provide wallet service / By the moment of entrustment termination

Article 7 (Use and Provision of Personal Information to the Reasonable Extent of the Purpose of Collection.)

Within the reasonable extent of the original purpose of collection the company can provide personal information to the third-party trustees without the user consent in consideration of the following criteria

1. The Possibilities of the Relations with the Original Purpose: To be determined by considering the relations in nature or tendency between both the original purpose and the one for additional use or provision.

2. The Possibilities of Prediction for Further Use or Provision of Personal Information in Consideration of Circumstances or General Processing Practices of Collecting Personal Information: To be determined through the relationship between the personal information processor and the user, the level of technology and development progress, and the general circumstances (practices) established over a considerable period

3. The Possibilities of the Unjust Infringement of User Profits: To be determined by the existence of actual infringement on user profits in the process of additional use and the possibility of unjustness from the relevant interests.

4. The Existence of Necessary Measures to Ensure Information Security, such as Pseudonym Process or Encryption: To be determined by the existence of implementation of proper securing measures in consideration of the possibility of infringement, etc.

Article 8 (Rights, Obligations, and Exercise Methods for Users and Legal Representatives)

① Users can exercise their rights to the company at any time, such as admission, correction, termination and revocation of their consent to the collection and use of their personal information.

② The exercise of rights under paragraph 1 can be carried out in writing or by e-mail, and the company shall take action without delay.

③ The exercise of rights under paragraph (1) can be carried out through the legal representative of the user or through an agent such as a delegated trustee. In this case, the user must submit a power of attorney to confirm the delegation to the trustee.

④ The exercise of users' rights such as admission, correction, and revocation of their consent to the collection, use of their personal information and request for suspension of processing can be restricted as prescribed by related laws such as the Personal Information Protection Act.

⑤ Requests for correction and revocation of personal information can be ignored if the relevant laws specify that the personal information is subject to be preserved.

⑥ The company shall check whether the request such as admission, correction, and revocation of their consent to the collection and use of their personal information is carried out through the user or the legal representative or through an agent such as a delegated trustee.

Article 9 (Revocation of Personal Information)

① In the event that personal information becomes unnecessary due to the expiration of the personal information preservation period and the achievement of the purpose of processing, the company shall destroy the personal information without delay.

② In the event that the company must keep preserving personal information in accordance with the laws and regulations described in Article 3 (2) after the period of personal information agreed by the user has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or preserved in a different storage.

③ The procedure and method of the termination of the personal information are as follows.

1. Termination Procedure: The company shall select and terminate personal information that has caused the reason for termination. The termination must be under the approval of the company's personal information protection manager.

2. Termination Method: The company must terminate personal information recorded and stored in the form of an electronic file using a technical method so that records cannot be reproduced, in the event of paper documents, terminate by crushing or incinerating with a shredder.

Article 10 (Measures to Ensure the Security of Personal Information)

The company is taking the following measures to ensure the security of personal information.

1. Management Measures: Establishment and implementation of internal management plans, Regular employee training etc.

2. Technical Measures: Technical countermeasures against hacking, etc., Encryption of personal information, Management of access right to the personal information processing system, Storage of access records, Prevention of forgery, etc

3. Physical Measures: Access control to server rooms, archive rooms, etc

Article 11 (Concerning the Installation, Operation and Rejection to the Automatic Personal Information Collecting Devices)

In order to provide individual customized services to users, the company uses "the Cookies" as below to store usage information and call it from time to time. Cookies are a small amount of information sent by the server used to run the website to the user's computer browser and are also stored on the user's hard disk within the user's PC computer.

1. Purpose of Use: To analyze user's access frequency and visit time, identification and tracking of user's service usage patterns, security access, user size, etc. to improve security management and service development, customized service, and advertisement.

2. Installation, Operation and Rejection: Service users can install cookies. the user can also refuse its installation by changing the settings of the option in the web browser as shown below.

3. Refusing Cookies Installation can cause difficulties in using proper services.

Article 12 (Concerning Collection, Utilization, Rejection of the Behavioral Information)

① in the process of service use, the company collects and uses behavioral information to provide customized services, benefits, and online customized advertisements to the information subject.

② the company collects behavioral information as follows.

Items	user's visit history
Collecting Method	Automatic collecting for each app visit /run history
Purposes of Collecting	To provides personalized product recommendation services (including advertisements) based on users' interests and tendencies.
Period of Preservation	Instant termination with user withdrawal

③ the company allows customized advertising online operators to collect and process behavioral information as follows.

1. Google

- Collecting Method: Automatic collecting and transmitting per each user visit to website or run apps.

- Collecting Items: User's web/app visit history

- Period of Preservation: Instant termination with user withdrawal

④ The company collects only the minimum behavioral information necessary for online customized advertisements and does not collect sensitive behavioral information that can clearly infringe on individual rights, interests, or privacy, such as personal opinions, beliefs, families and relatives, academic backgrounds and other social activities.

⑥ The company collects and uses advertisement identifiers for online customized advertisements in mobile apps. The information subject can block and allow customized advertisements of the app by changing the settings of the mobile device.

- Android: Settings -> Privacy -> Advertising -> Reset Ad ID or Delete Ad ID

- iPhone: Settings -> Privacy -> Tracking -> Allow apps to request tracking

* The menu and method can slightly differ depending on the mobile OS version.

Article 13 (Policy Limits)

the Service can contain links to external sites that are not operated by the company. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy Collecting MethodAutomatic collecting for each app visit /run historyPurposes of CollectingTo provides personalized product recommendation services (including advertisements) based on users' interests and tendencies.Period of PreservationInstant termination with user withdrawal practices.

Article 14 (Personal Information Protection Officer)

① The company is obligated for the processing of personal information and location information, and designates a person remain responsible for personal information/location information protection as follows to resolve related complaints and remedy damages of users

▶ Personal Information Protection Officer
- Name: Yun In Kyu
- Position: Representative Director
- Contact: 070-7605-0777, ceo@greever.io

② Users can contact the person in charge of personal information/location information protection and the department below for all personal information protection inquiries, complaints, and damage relief that occurred while using the company's services.

- Department Name: Greever Team - Contact: 070-7605-0777, help@greever.io

Article 15 (Change of Personal Information Processing Policy)

The company can revise its personal information processing policy for the purpose of reflecting changes in laws or services. If the personal information processing policy is changed, the company shall post it at least seven days before the effective date of the change, and the changed personal information processing policy will take effect on the effective date described. However, if a significant change in user rights occurs, such as a change in the purpose of use or item collecting, it must be notified at least 30 days in advance.

This personal information processing policy will take effect from August 29, 2023.