Privacy Policy

SWYG Inc. (the “Company”) complies with the personal information protection provisions of the laws that providers of information and communications services must observe, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Personal Information Protection Act. The Company has established this Privacy Policy in accordance with these laws and is committed to protecting users’ rights and interests.

This Privacy Policy applies to users’ use of the services (the “Services”) provided on the service platforms managed and operated by the Company (including web, mobile web, and apps; the “Platform”), and sets out the following.

Article 1 (Purpose of Processing Personal Information)

The Company uses the information collected from users for the following purposes.

  • Membership registration, smooth customer support, provision of the Services promised to users, identity verification for service provision, purchases and payment, provision of the user’s service usage history, and registration of payment methods.

  • Member management, including confirming intent to register, verifying age, verifying the identity of users and their legal representatives, identifying users, confirming intent to withdraw membership, and handling inquiries or complaints.

  • Protecting users and maintaining a stable service environment, including restricting use by users who violate laws or Company policies (including the Terms of Service); preventing and sanctioning fraudulent use, unauthorized acts, and other acts that disrupt the smooth operation of the Services; preventing account theft and fraudulent transactions; delivering notices; and retaining records for dispute resolution.

  • Providing services based on demographic characteristics, analyzing access frequency, improving features, compiling statistics on service use, and providing new services that reflect analysis of users’ paid service purchases (payments), usage patterns, interests, and usage history based on service analytics and statistics.

  • Events and promotions, such as providing event information and advertising (where the user has consented to receive marketing and advertising information).

Article 2 (Processing and Retention Period of Personal Information)

In principle, the Company retains users’ personal information until membership withdrawal. However, to prevent transaction-related disputes and for similar reasons, the Company retains information for the periods specified below even after withdrawal in the following cases.

A. Retention under the Company’s internal policies

  • Records of fraudulent use (fraudulent use means (1) transactions whose method or content violates Company policies, including the Terms of Service; (2) methods or transactions that infringe the rights or interests of the Company, users, or third parties; and (3) transactions equivalent to (1) and (2)). Reason: management of and response to fraudulent use. Retention period: 1 year.

B. Where an investigation or inquiry into a user for violation of applicable laws is in progress: until the investigation or inquiry concludes.

C. Where claims or obligations remain between the Company and the user: until they are fully settled.

D. Where retention is required under applicable laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains user information for the period prescribed by those laws.

In such cases, the Company uses the retained information only for the purpose of retention, and the retention periods are as follows.

  • Records of consumer complaints or dispute handling
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 3 years

  • Records of contracts or withdrawal of subscriptions
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Records of payment and supply of goods
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Service use and access logs
    Reason: Protection of Communications Secrets Act
    Retention period: 3 months

Article 3 (Personal Information Items Processed)

(1) The Company collects the following personal information from users for membership registration and management, provision of various services, smooth handling of grievances, and provision of personalized services.

Category

Required or optional

Items collected

Sign-up

Required

Email address, password

Social sign-up (Google)

Optional

Email address, profile photo, nickname

(2) In addition to the items in paragraph (1), IP address, cookies, visit date and time, service usage records, records of fraudulent use, and device information may be collected while using the Services or running the app, and email addresses or phone numbers may be collected while receiving and handling customer inquiries.

(3) Where identification, identity verification, or age verification is required in the course of using the Services, name, date of birth, gender, nationality (Korean or foreign), mobile phone number or i-PIN number, encrypted connecting information (CI), and duplication information (DI) may be automatically generated, added, and collected.

(4) The Company does not collect sensitive personal information that could infringe on users’ fundamental human rights (such as race, ideology, creed, political orientation, criminal records, or medical information).

(5) The Company does not use collected personal information for purposes other than those for which it was collected, and obtains separate prior consent from users if the purpose of collection or use changes.

(6) The Company may collect users’ personal information through the following methods.

  • Website, mobile devices, written forms, fax, phone, support boards, email, event entries, delivery requests

  • Collection through generated-information collection tools

Article 4 (Rights and Obligations of Users)

(1) Users may exercise the following rights.

  1. Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw consent to the use of their personal information through the membership withdrawal process. In such cases, the Company verifies that the person making the request is the user or a legitimate representative.

  2. Rights under item 1 may be exercised in writing, by email, or by fax, and the Company will act on them without delay. However, name, resident registration number, and alien registration number cannot be corrected, except for a legal name change or a change of resident (or business) registration number for administrative reasons.

  3. Even where a user requests suspension of processing, the Company may refuse the request in the following cases.

    • Where there is a special provision in law or it is unavoidable in order to comply with a legal obligation

    • Where there is a risk of harming another person’s life or body, or of unjustly infringing another person’s property or other interests

    • Where performance of a contract would be difficult without processing the personal information, such as being unable to provide services agreed with the data subject, and the data subject has not clearly expressed an intent to terminate the contract

  4. Rights under item 1 may be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

  5. Requests for access to or suspension of processing of personal information may be restricted under applicable laws.

  6. Deletion cannot be requested where the personal information is specified as subject to collection under other laws. Where a user requests correction of an error, the Company will not use or provide the personal information until the correction is complete, unless provision is requested under other laws. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction so that it is reflected.

(2) Users may exercise their rights to access and correct personal information, withdraw consent, refuse consent, and withdraw membership as follows.

  1. Scope of access and correction

    • Personal information about the user held by the Company

    • Personal information used by the Company or provided to third parties

    • Status of consent to the collection, use, and provision of personal information

  2. How to access and correct personal information, withdraw consent, and refuse consent to advertising

    • Users may exercise their right to refuse consent by contacting the Company’s customer center on the Platform.

    • The customer center is operated through “Channel Talk,” as posted on the website.

    • The customer center is closed on weekends and public holidays. Its hours are as follows.
      [Hours] Monday to Friday, 11:00 AM to 5:30 PM (KST)

  3. Membership withdrawal

    • Users may withdraw membership within the Platform following the procedure set by the Company.

(3) As data subjects, users have the following obligations to protect their own personal information.

  1. Users must keep their personal information up to date, and are responsible for problems arising from inaccurate information they enter.

  2. The Company is not liable for problems arising from leaks of personal information where it is not at fault. This includes leaks caused by the user’s own negligence (such as transferring, lending, or losing their email, password, or access credentials, or leaving a device unattended while logged in) and leaks caused by internet-related issues the Company could not control despite exercising reasonable care, such as hacking using methods or technologies that cannot be blocked by the security measures required under applicable laws.

  3. Users must take care to prevent leaks of personal information such as email, password, and access credentials, and may not transfer or lend them to third parties. The Company is not liable for damages caused by the user’s own negligence.

  4. Registering or using the Services with another person’s personal information may result in loss of membership and punishment under applicable laws.

  5. Users must cooperate with the Company’s security requests under its personal information protection policy, such as changing passwords periodically.

  6. Users must comply with this Privacy Policy and applicable laws on personal information.

Article 5 (Outsourcing of Personal Information Processing)

(1) To provide smooth services and improve service quality, the Company may outsource part of the related work to external service providers. When outsourcing personal information processing, the Company stipulates in contracts matters such as compliance with privacy laws, confidentiality of personal information, prohibition of provision to third parties, liability in the event of an incident, the outsourcing period, and the obligation to destroy personal information after processing ends, and manages and supervises compliance to protect users’ personal information.

(2) The Company outsources personal information processing as follows to improve services and process work effectively.

Processor

Outsourced work

Retention and use period

NAVER Cloud Corp.

Sending informational and promotional emails and text messages

Until membership withdrawal or termination of the outsourcing contract

Channel Corporation

Channel Talk service

Until membership withdrawal or termination of the outsourcing contract

(3) If the outsourced work or the processor changes, the Company will disclose this without delay through this Privacy Policy, and such disclosure shall be deemed to constitute consent to the outsourcing.

Article 6 (Procedure and Method for Destroying Personal Information)

(1) In principle, the Company destroys users’ personal information without delay once the purpose of collection and use has been achieved. However, under the “personal information validity period system,” the Company destroys, or separately stores and manages, the personal information of users who have not used the Services for one year.

(2) The Company’s procedure and method for destroying personal information are as follows.

A. Procedure: Information entered by users for registration and similar purposes is, once its purpose has been achieved, moved to a separate database (or a separate filing cabinet for paper records), stored for a set period in accordance with internal policies and other applicable laws (see retention and use periods), and then destroyed. Such personal information is not used for any purpose other than retention unless required by law.

B. Method: Personal information recorded or stored on paper is shredded or incinerated, and personal information stored as electronic files is deleted using technical methods that make the records unrecoverable.

Article 7 (Rights and Obligations of Users and Legal Representatives, and How to Exercise Them)

(1) Users may at any time exercise their rights to request access to, correction of, deletion of, or suspension of processing of their personal information.

* Requests for access and similar rights concerning the personal information of children under 14 must be made directly by a legal representative. Minors aged 14 or older may exercise rights over their personal information themselves or through a legal representative.

(2) Rights may be exercised in writing, by email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on them without delay.

(3) Rights may also be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Notice on Personal Information Processing Methods (No. 2020-7) must be submitted.

(4) Requests for access to or suspension of processing of personal information may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.

(5) Deletion cannot be requested where the personal information is specified as subject to collection under other laws.

(6) When a user requests access, correction, deletion, or suspension of processing, the Company verifies that the person making the request is the user or a legitimate representative.

Article 8 (Technical and Administrative Safeguards for Personal Information)

The Company takes the following measures to ensure the security of personal information.

  1. Administrative measures: establishing and implementing an internal management plan, operating a dedicated team, and conducting regular staff training

  2. Technical measures: managing access rights to personal information processing systems, installing access control systems, encrypting personal information, and installing and updating security software

  3. Physical measures: controlling access to server rooms and data storage rooms

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

(1) To provide smooth services, the Company uses “cookies” and similar technologies that store and retrieve user information. A cookie is a very small text file sent by the server operating a website to the user’s browser, which may be stored on the user’s computer hard drive.

(2) The Company uses cookies for purposes such as analyzing access frequency and visit times, identifying users’ preferences and interests and tracking their activity, measuring event participation and visit counts, and providing targeted marketing and personalized services.

(3) Users may choose whether to accept cookies. By setting options in their web browser, users may allow all cookies, confirm each time a cookie is stored, or refuse all cookies. However, refusing cookies may make it difficult to use some services that require login.

(4) To refuse cookies as described in paragraph (3), users may select options in their web browser to allow all cookies, confirm each time a cookie is stored, or refuse all cookies.

(5) To provide the same or a similar internet experience on mobile services as on PC, the Company may also use cookies on mobile devices (for example, smartphones and tablets). The Company collects cookies in accordance with applicable laws and regulatory guidelines, and does not collect cookies that contain personal information, or that can by themselves identify an individual, without the user’s prior consent.

(6) On mobile devices, users can also choose whether to allow cookies in their web browser settings. Although this may vary by operating system and browser, in most cases users can decide whether to allow cookies, or delete all existing cookies, through the mobile browser’s settings. However, refusing cookies may cause inconvenience in using some services that require login.

Article 10 (The Company’s Efforts to Protect Personal Information)

(1) In processing users’ personal information, the Company takes the following technical and administrative measures to ensure security and prevent loss, theft, leakage, alteration, or damage.

A. Encryption of personal information: The Company encrypts users’ personal information such as passwords and payment methods in accordance with legally required standards, and uses intrusion prevention devices to block external attacks and hacking. In particular, servers storing users’ personal information are managed separately and are not directly connected to external internet lines.

B. Measures against hacking: The Company does its utmost to prevent users’ personal information from being leaked or damaged by hacking or computer viruses. It uses up-to-date antivirus software to prevent leaks or damage to users’ personal information and data, and uses encrypted communications to transmit personal information safely over the network. The Company strives to put in place every available technical safeguard to secure its systems.

C. Limiting and training staff: The Company limits the number of staff handling personal information to designated personal information managers, and emphasizes compliance with this Privacy Policy through regular training.

(2) Notwithstanding paragraph (1), the Company bears no liability for problems arising from the leak or exposure of personal information such as email or password due to the user’s own intent or negligence, or due to internet-related issues.

Article 11 (Collection, Use, Provision, and Refusal of Behavioral Information)

Item

Details

Behavioral information collected

• Web/app visit history; usage records such as searches and clicks; advertising identifiers

Collection method

• The Company uses Google Analytics and Google Tag Manager, web log analysis tools provided by Google, to collect information such as visit frequency and pages visited; only anonymized information that cannot identify individuals is used
• It also collects logs of key user actions on the website and in the app

Purpose of collection

• Product and service development and statistics; user analysis such as customer analysis; personalized advertising based on behavioral information

Retention/use period and subsequent handling

• Retained and used for up to 3 years from the date of collection; deleted without delay when the period ends

How users can exercise control

• Users can refuse by adjusting browser settings, such as refusing cookie storage.
• Web browser (example): Settings menu at top > Internet Options > Privacy > Advanced > Block cookies
• Microsoft Edge (example): “…” at top right > Settings > “Privacy, search, and services” at top left > Tracking prevention section > Tracking prevention > choose whether to always use “Strict” tracking prevention when browsing InPrivate;
in the Privacy section, choose whether to send “Do Not Track” requests
• Chrome (example): Settings menu at right > Privacy and security > choose whether to “Block third-party cookies and site data”
• Smartphone (example)
• Android: (1) Google settings > (2) Ads > (3) opt in to or out of ads personalization
• iPhone: (1) Settings > (2) Privacy > (3) Advertising > (4) Limit Ad Tracking (* steps may vary by OS version)

Remedies for users

• Relevant department and inquiries: Customer center (email)

Article 12 (Personal Information Protection Officer)

(1) The Company has designated the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle users’ complaints and remedies related to it.

▸ Personal Information Protection Officer

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

* This address connects to the personal information protection team.

(2) Users may direct all inquiries, complaints, and requests for remedies related to personal information protection arising from use of the Services to the Personal Information Protection Officer and the responsible department. The Company will respond to and handle inquiries without delay.

Article 13 (Requests for Access to Personal Information)

Users may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will strive to process access requests promptly.

▸ Department receiving and handling access requests

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 14 (Remedies for Infringement of Users’ Rights)

If you need to report or seek advice on other personal information infringements, please contact the organizations below.

(1) To obtain remedies for personal information infringement, users may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Privacy Infringement Report Center, and other bodies. For other reports or consultations regarding personal information infringement, please contact the organizations below.

  1. Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972, no area code)

  2. Privacy Infringement Report Center (privacy.kisa.or.kr / 118, no area code)

  3. Supreme Prosecutors’ Office (www.spo.go.kr / 1301, no area code)

  4. Korean National Police Agency (ecrm.cyber.go.kr / 182, no area code)

(2) The Company guarantees users’ right to informational self-determination and strives to provide consultation and remedies for personal information infringement. If you need to report or consult, please contact the department below.

▸ Personal information consultation and reports

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 15 (Duty of Notification)

If the Company adds to, deletes from, or amends this Privacy Policy, it will post a notice on the website or notify users individually at least 7 days before the revision takes effect. As this Privacy Policy may change from time to time, please review it each time you visit the site.

Article 16 (Miscellaneous)

Please note that this Privacy Policy does not apply to the collection of personal information by web pages linked from the Services provided by the Company.

Announced: November 27, 2023
Effective: December 11, 2023

SWYG Inc.

8F, 815 Daewangpangyo-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

CEO: Kyoungmin Seo

Tel: +82-70-4138-2023

Business registration no.: 476-86-02913

E-commerce registration no.: 2024-성남분당A-0090

Trusted by

ⓒ 2026 SWYG Inc. All Rights Reserved.

SWYG Inc.

8F, 815 Daewangpangyo-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

CEO: Kyoungmin Seo

Tel: +82-70-4138-2023

Business registration no.: 476-86-02913

E-commerce registration no.: 2024-성남분당A-0090

Trusted by

ⓒ 2026 SWYG Inc. All Rights Reserved.

SWYG Inc.

8F, 815 Daewangpangyo-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

CEO: Kyoungmin Seo

Tel: +82-70-4138-2023

Business registration no.: 476-86-02913

E-commerce registration no.: 2024-성남분당A-0090

Trusted by

ⓒ 2026 SWYG Inc. All Rights Reserved.

Privacy Policy

SWYG Inc. (the “Company”) complies with the personal information protection provisions of the laws that providers of information and communications services must observe, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Personal Information Protection Act. The Company has established this Privacy Policy in accordance with these laws and is committed to protecting users’ rights and interests.

This Privacy Policy applies to users’ use of the services (the “Services”) provided on the service platforms managed and operated by the Company (including web, mobile web, and apps; the “Platform”), and sets out the following.

Article 1 (Purpose of Processing Personal Information)

The Company uses the information collected from users for the following purposes.

  • Membership registration, smooth customer support, provision of the Services promised to users, identity verification for service provision, purchases and payment, provision of the user’s service usage history, and registration of payment methods.

  • Member management, including confirming intent to register, verifying age, verifying the identity of users and their legal representatives, identifying users, confirming intent to withdraw membership, and handling inquiries or complaints.

  • Protecting users and maintaining a stable service environment, including restricting use by users who violate laws or Company policies (including the Terms of Service); preventing and sanctioning fraudulent use, unauthorized acts, and other acts that disrupt the smooth operation of the Services; preventing account theft and fraudulent transactions; delivering notices; and retaining records for dispute resolution.

  • Providing services based on demographic characteristics, analyzing access frequency, improving features, compiling statistics on service use, and providing new services that reflect analysis of users’ paid service purchases (payments), usage patterns, interests, and usage history based on service analytics and statistics.

  • Events and promotions, such as providing event information and advertising (where the user has consented to receive marketing and advertising information).

Article 2 (Processing and Retention Period of Personal Information)

In principle, the Company retains users’ personal information until membership withdrawal. However, to prevent transaction-related disputes and for similar reasons, the Company retains information for the periods specified below even after withdrawal in the following cases.

A. Retention under the Company’s internal policies

  • Records of fraudulent use (fraudulent use means (1) transactions whose method or content violates Company policies, including the Terms of Service; (2) methods or transactions that infringe the rights or interests of the Company, users, or third parties; and (3) transactions equivalent to (1) and (2)). Reason: management of and response to fraudulent use. Retention period: 1 year.

B. Where an investigation or inquiry into a user for violation of applicable laws is in progress: until the investigation or inquiry concludes.

C. Where claims or obligations remain between the Company and the user: until they are fully settled.

D. Where retention is required under applicable laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains user information for the period prescribed by those laws.

In such cases, the Company uses the retained information only for the purpose of retention, and the retention periods are as follows.

  • Records of consumer complaints or dispute handling
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 3 years

  • Records of contracts or withdrawal of subscriptions
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Records of payment and supply of goods
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Service use and access logs
    Reason: Protection of Communications Secrets Act
    Retention period: 3 months

Article 3 (Personal Information Items Processed)

(1) The Company collects the following personal information from users for membership registration and management, provision of various services, smooth handling of grievances, and provision of personalized services.

Category

Required or optional

Items collected

Sign-up

Required

Email address, password

Social sign-up (Google)

Optional

Email address, profile photo, nickname

(2) In addition to the items in paragraph (1), IP address, cookies, visit date and time, service usage records, records of fraudulent use, and device information may be collected while using the Services or running the app, and email addresses or phone numbers may be collected while receiving and handling customer inquiries.

(3) Where identification, identity verification, or age verification is required in the course of using the Services, name, date of birth, gender, nationality (Korean or foreign), mobile phone number or i-PIN number, encrypted connecting information (CI), and duplication information (DI) may be automatically generated, added, and collected.

(4) The Company does not collect sensitive personal information that could infringe on users’ fundamental human rights (such as race, ideology, creed, political orientation, criminal records, or medical information).

(5) The Company does not use collected personal information for purposes other than those for which it was collected, and obtains separate prior consent from users if the purpose of collection or use changes.

(6) The Company may collect users’ personal information through the following methods.

  • Website, mobile devices, written forms, fax, phone, support boards, email, event entries, delivery requests

  • Collection through generated-information collection tools

Article 4 (Rights and Obligations of Users)

(1) Users may exercise the following rights.

  1. Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw consent to the use of their personal information through the membership withdrawal process. In such cases, the Company verifies that the person making the request is the user or a legitimate representative.

  2. Rights under item 1 may be exercised in writing, by email, or by fax, and the Company will act on them without delay. However, name, resident registration number, and alien registration number cannot be corrected, except for a legal name change or a change of resident (or business) registration number for administrative reasons.

  3. Even where a user requests suspension of processing, the Company may refuse the request in the following cases.

    • Where there is a special provision in law or it is unavoidable in order to comply with a legal obligation

    • Where there is a risk of harming another person’s life or body, or of unjustly infringing another person’s property or other interests

    • Where performance of a contract would be difficult without processing the personal information, such as being unable to provide services agreed with the data subject, and the data subject has not clearly expressed an intent to terminate the contract

  4. Rights under item 1 may be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

  5. Requests for access to or suspension of processing of personal information may be restricted under applicable laws.

  6. Deletion cannot be requested where the personal information is specified as subject to collection under other laws. Where a user requests correction of an error, the Company will not use or provide the personal information until the correction is complete, unless provision is requested under other laws. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction so that it is reflected.

(2) Users may exercise their rights to access and correct personal information, withdraw consent, refuse consent, and withdraw membership as follows.

  1. Scope of access and correction

    • Personal information about the user held by the Company

    • Personal information used by the Company or provided to third parties

    • Status of consent to the collection, use, and provision of personal information

  2. How to access and correct personal information, withdraw consent, and refuse consent to advertising

    • Users may exercise their right to refuse consent by contacting the Company’s customer center on the Platform.

    • The customer center is operated through “Channel Talk,” as posted on the website.

    • The customer center is closed on weekends and public holidays. Its hours are as follows.
      [Hours] Monday to Friday, 11:00 AM to 5:30 PM (KST)

  3. Membership withdrawal

    • Users may withdraw membership within the Platform following the procedure set by the Company.

(3) As data subjects, users have the following obligations to protect their own personal information.

  1. Users must keep their personal information up to date, and are responsible for problems arising from inaccurate information they enter.

  2. The Company is not liable for problems arising from leaks of personal information where it is not at fault. This includes leaks caused by the user’s own negligence (such as transferring, lending, or losing their email, password, or access credentials, or leaving a device unattended while logged in) and leaks caused by internet-related issues the Company could not control despite exercising reasonable care, such as hacking using methods or technologies that cannot be blocked by the security measures required under applicable laws.

  3. Users must take care to prevent leaks of personal information such as email, password, and access credentials, and may not transfer or lend them to third parties. The Company is not liable for damages caused by the user’s own negligence.

  4. Registering or using the Services with another person’s personal information may result in loss of membership and punishment under applicable laws.

  5. Users must cooperate with the Company’s security requests under its personal information protection policy, such as changing passwords periodically.

  6. Users must comply with this Privacy Policy and applicable laws on personal information.

Article 5 (Outsourcing of Personal Information Processing)

(1) To provide smooth services and improve service quality, the Company may outsource part of the related work to external service providers. When outsourcing personal information processing, the Company stipulates in contracts matters such as compliance with privacy laws, confidentiality of personal information, prohibition of provision to third parties, liability in the event of an incident, the outsourcing period, and the obligation to destroy personal information after processing ends, and manages and supervises compliance to protect users’ personal information.

(2) The Company outsources personal information processing as follows to improve services and process work effectively.

Processor

Outsourced work

Retention and use period

NAVER Cloud Corp.

Sending informational and promotional emails and text messages

Until membership withdrawal or termination of the outsourcing contract

Channel Corporation

Channel Talk service

Until membership withdrawal or termination of the outsourcing contract

(3) If the outsourced work or the processor changes, the Company will disclose this without delay through this Privacy Policy, and such disclosure shall be deemed to constitute consent to the outsourcing.

Article 6 (Procedure and Method for Destroying Personal Information)

(1) In principle, the Company destroys users’ personal information without delay once the purpose of collection and use has been achieved. However, under the “personal information validity period system,” the Company destroys, or separately stores and manages, the personal information of users who have not used the Services for one year.

(2) The Company’s procedure and method for destroying personal information are as follows.

A. Procedure: Information entered by users for registration and similar purposes is, once its purpose has been achieved, moved to a separate database (or a separate filing cabinet for paper records), stored for a set period in accordance with internal policies and other applicable laws (see retention and use periods), and then destroyed. Such personal information is not used for any purpose other than retention unless required by law.

B. Method: Personal information recorded or stored on paper is shredded or incinerated, and personal information stored as electronic files is deleted using technical methods that make the records unrecoverable.

Article 7 (Rights and Obligations of Users and Legal Representatives, and How to Exercise Them)

(1) Users may at any time exercise their rights to request access to, correction of, deletion of, or suspension of processing of their personal information.

* Requests for access and similar rights concerning the personal information of children under 14 must be made directly by a legal representative. Minors aged 14 or older may exercise rights over their personal information themselves or through a legal representative.

(2) Rights may be exercised in writing, by email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on them without delay.

(3) Rights may also be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Notice on Personal Information Processing Methods (No. 2020-7) must be submitted.

(4) Requests for access to or suspension of processing of personal information may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.

(5) Deletion cannot be requested where the personal information is specified as subject to collection under other laws.

(6) When a user requests access, correction, deletion, or suspension of processing, the Company verifies that the person making the request is the user or a legitimate representative.

Article 8 (Technical and Administrative Safeguards for Personal Information)

The Company takes the following measures to ensure the security of personal information.

  1. Administrative measures: establishing and implementing an internal management plan, operating a dedicated team, and conducting regular staff training

  2. Technical measures: managing access rights to personal information processing systems, installing access control systems, encrypting personal information, and installing and updating security software

  3. Physical measures: controlling access to server rooms and data storage rooms

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

(1) To provide smooth services, the Company uses “cookies” and similar technologies that store and retrieve user information. A cookie is a very small text file sent by the server operating a website to the user’s browser, which may be stored on the user’s computer hard drive.

(2) The Company uses cookies for purposes such as analyzing access frequency and visit times, identifying users’ preferences and interests and tracking their activity, measuring event participation and visit counts, and providing targeted marketing and personalized services.

(3) Users may choose whether to accept cookies. By setting options in their web browser, users may allow all cookies, confirm each time a cookie is stored, or refuse all cookies. However, refusing cookies may make it difficult to use some services that require login.

(4) To refuse cookies as described in paragraph (3), users may select options in their web browser to allow all cookies, confirm each time a cookie is stored, or refuse all cookies.

(5) To provide the same or a similar internet experience on mobile services as on PC, the Company may also use cookies on mobile devices (for example, smartphones and tablets). The Company collects cookies in accordance with applicable laws and regulatory guidelines, and does not collect cookies that contain personal information, or that can by themselves identify an individual, without the user’s prior consent.

(6) On mobile devices, users can also choose whether to allow cookies in their web browser settings. Although this may vary by operating system and browser, in most cases users can decide whether to allow cookies, or delete all existing cookies, through the mobile browser’s settings. However, refusing cookies may cause inconvenience in using some services that require login.

Article 10 (The Company’s Efforts to Protect Personal Information)

(1) In processing users’ personal information, the Company takes the following technical and administrative measures to ensure security and prevent loss, theft, leakage, alteration, or damage.

A. Encryption of personal information: The Company encrypts users’ personal information such as passwords and payment methods in accordance with legally required standards, and uses intrusion prevention devices to block external attacks and hacking. In particular, servers storing users’ personal information are managed separately and are not directly connected to external internet lines.

B. Measures against hacking: The Company does its utmost to prevent users’ personal information from being leaked or damaged by hacking or computer viruses. It uses up-to-date antivirus software to prevent leaks or damage to users’ personal information and data, and uses encrypted communications to transmit personal information safely over the network. The Company strives to put in place every available technical safeguard to secure its systems.

C. Limiting and training staff: The Company limits the number of staff handling personal information to designated personal information managers, and emphasizes compliance with this Privacy Policy through regular training.

(2) Notwithstanding paragraph (1), the Company bears no liability for problems arising from the leak or exposure of personal information such as email or password due to the user’s own intent or negligence, or due to internet-related issues.

Article 11 (Collection, Use, Provision, and Refusal of Behavioral Information)

Item

Details

Behavioral information collected

• Web/app visit history; usage records such as searches and clicks; advertising identifiers

Collection method

• The Company uses Google Analytics and Google Tag Manager, web log analysis tools provided by Google, to collect information such as visit frequency and pages visited; only anonymized information that cannot identify individuals is used
• It also collects logs of key user actions on the website and in the app

Purpose of collection

• Product and service development and statistics; user analysis such as customer analysis; personalized advertising based on behavioral information

Retention/use period and subsequent handling

• Retained and used for up to 3 years from the date of collection; deleted without delay when the period ends

How users can exercise control

• Users can refuse by adjusting browser settings, such as refusing cookie storage.
• Web browser (example): Settings menu at top > Internet Options > Privacy > Advanced > Block cookies
• Microsoft Edge (example): “…” at top right > Settings > “Privacy, search, and services” at top left > Tracking prevention section > Tracking prevention > choose whether to always use “Strict” tracking prevention when browsing InPrivate;
in the Privacy section, choose whether to send “Do Not Track” requests
• Chrome (example): Settings menu at right > Privacy and security > choose whether to “Block third-party cookies and site data”
• Smartphone (example)
• Android: (1) Google settings > (2) Ads > (3) opt in to or out of ads personalization
• iPhone: (1) Settings > (2) Privacy > (3) Advertising > (4) Limit Ad Tracking (* steps may vary by OS version)

Remedies for users

• Relevant department and inquiries: Customer center (email)

Article 12 (Personal Information Protection Officer)

(1) The Company has designated the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle users’ complaints and remedies related to it.

▸ Personal Information Protection Officer

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

* This address connects to the personal information protection team.

(2) Users may direct all inquiries, complaints, and requests for remedies related to personal information protection arising from use of the Services to the Personal Information Protection Officer and the responsible department. The Company will respond to and handle inquiries without delay.

Article 13 (Requests for Access to Personal Information)

Users may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will strive to process access requests promptly.

▸ Department receiving and handling access requests

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 14 (Remedies for Infringement of Users’ Rights)

If you need to report or seek advice on other personal information infringements, please contact the organizations below.

(1) To obtain remedies for personal information infringement, users may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Privacy Infringement Report Center, and other bodies. For other reports or consultations regarding personal information infringement, please contact the organizations below.

  1. Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972, no area code)

  2. Privacy Infringement Report Center (privacy.kisa.or.kr / 118, no area code)

  3. Supreme Prosecutors’ Office (www.spo.go.kr / 1301, no area code)

  4. Korean National Police Agency (ecrm.cyber.go.kr / 182, no area code)

(2) The Company guarantees users’ right to informational self-determination and strives to provide consultation and remedies for personal information infringement. If you need to report or consult, please contact the department below.

▸ Personal information consultation and reports

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 15 (Duty of Notification)

If the Company adds to, deletes from, or amends this Privacy Policy, it will post a notice on the website or notify users individually at least 7 days before the revision takes effect. As this Privacy Policy may change from time to time, please review it each time you visit the site.

Article 16 (Miscellaneous)

Please note that this Privacy Policy does not apply to the collection of personal information by web pages linked from the Services provided by the Company.

Announced: November 27, 2023
Effective: December 11, 2023

SWYG Inc.

8F, 815 Daewangpangyo-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

CEO: Kyoungmin Seo

Tel: +82-70-4138-2023

Business registration no.: 476-86-02913

E-commerce registration no.: 2024-성남분당A-0090

Trusted by

ⓒ 2026 SWYG Inc. All Rights Reserved.

SWYG Inc.

8F, 815 Daewangpangyo-ro, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

CEO: Kyoungmin Seo

Tel: +82-70-4138-2023

Business registration no.: 476-86-02913

E-commerce registration no.: 2024-성남분당A-0090

Trusted by

ⓒ 2026 SWYG Inc. All Rights Reserved.

Privacy Policy

SWYG Inc. (the “Company”) complies with the personal information protection provisions of the laws that providers of information and communications services must observe, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Personal Information Protection Act. The Company has established this Privacy Policy in accordance with these laws and is committed to protecting users’ rights and interests.

This Privacy Policy applies to users’ use of the services (the “Services”) provided on the service platforms managed and operated by the Company (including web, mobile web, and apps; the “Platform”), and sets out the following.

Article 1 (Purpose of Processing Personal Information)

The Company uses the information collected from users for the following purposes.

  • Membership registration, smooth customer support, provision of the Services promised to users, identity verification for service provision, purchases and payment, provision of the user’s service usage history, and registration of payment methods.

  • Member management, including confirming intent to register, verifying age, verifying the identity of users and their legal representatives, identifying users, confirming intent to withdraw membership, and handling inquiries or complaints.

  • Protecting users and maintaining a stable service environment, including restricting use by users who violate laws or Company policies (including the Terms of Service); preventing and sanctioning fraudulent use, unauthorized acts, and other acts that disrupt the smooth operation of the Services; preventing account theft and fraudulent transactions; delivering notices; and retaining records for dispute resolution.

  • Providing services based on demographic characteristics, analyzing access frequency, improving features, compiling statistics on service use, and providing new services that reflect analysis of users’ paid service purchases (payments), usage patterns, interests, and usage history based on service analytics and statistics.

  • Events and promotions, such as providing event information and advertising (where the user has consented to receive marketing and advertising information).

Article 2 (Processing and Retention Period of Personal Information)

In principle, the Company retains users’ personal information until membership withdrawal. However, to prevent transaction-related disputes and for similar reasons, the Company retains information for the periods specified below even after withdrawal in the following cases.

A. Retention under the Company’s internal policies

  • Records of fraudulent use (fraudulent use means (1) transactions whose method or content violates Company policies, including the Terms of Service; (2) methods or transactions that infringe the rights or interests of the Company, users, or third parties; and (3) transactions equivalent to (1) and (2)). Reason: management of and response to fraudulent use. Retention period: 1 year.

B. Where an investigation or inquiry into a user for violation of applicable laws is in progress: until the investigation or inquiry concludes.

C. Where claims or obligations remain between the Company and the user: until they are fully settled.

D. Where retention is required under applicable laws such as the Commercial Act and the Act on Consumer Protection in Electronic Commerce, the Company retains user information for the period prescribed by those laws.

In such cases, the Company uses the retained information only for the purpose of retention, and the retention periods are as follows.

  • Records of consumer complaints or dispute handling
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 3 years

  • Records of contracts or withdrawal of subscriptions
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Records of payment and supply of goods
    Reason: Act on Consumer Protection in Electronic Commerce
    Retention period: 5 years

  • Service use and access logs
    Reason: Protection of Communications Secrets Act
    Retention period: 3 months

Article 3 (Personal Information Items Processed)

(1) The Company collects the following personal information from users for membership registration and management, provision of various services, smooth handling of grievances, and provision of personalized services.

Category

Required or optional

Items collected

Sign-up

Required

Email address, password

Social sign-up (Google)

Optional

Email address, profile photo, nickname

(2) In addition to the items in paragraph (1), IP address, cookies, visit date and time, service usage records, records of fraudulent use, and device information may be collected while using the Services or running the app, and email addresses or phone numbers may be collected while receiving and handling customer inquiries.

(3) Where identification, identity verification, or age verification is required in the course of using the Services, name, date of birth, gender, nationality (Korean or foreign), mobile phone number or i-PIN number, encrypted connecting information (CI), and duplication information (DI) may be automatically generated, added, and collected.

(4) The Company does not collect sensitive personal information that could infringe on users’ fundamental human rights (such as race, ideology, creed, political orientation, criminal records, or medical information).

(5) The Company does not use collected personal information for purposes other than those for which it was collected, and obtains separate prior consent from users if the purpose of collection or use changes.

(6) The Company may collect users’ personal information through the following methods.

  • Website, mobile devices, written forms, fax, phone, support boards, email, event entries, delivery requests

  • Collection through generated-information collection tools

Article 4 (Rights and Obligations of Users)

(1) Users may exercise the following rights.

  1. Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw consent to the use of their personal information through the membership withdrawal process. In such cases, the Company verifies that the person making the request is the user or a legitimate representative.

  2. Rights under item 1 may be exercised in writing, by email, or by fax, and the Company will act on them without delay. However, name, resident registration number, and alien registration number cannot be corrected, except for a legal name change or a change of resident (or business) registration number for administrative reasons.

  3. Even where a user requests suspension of processing, the Company may refuse the request in the following cases.

    • Where there is a special provision in law or it is unavoidable in order to comply with a legal obligation

    • Where there is a risk of harming another person’s life or body, or of unjustly infringing another person’s property or other interests

    • Where performance of a contract would be difficult without processing the personal information, such as being unable to provide services agreed with the data subject, and the data subject has not clearly expressed an intent to terminate the contract

  4. Rights under item 1 may be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

  5. Requests for access to or suspension of processing of personal information may be restricted under applicable laws.

  6. Deletion cannot be requested where the personal information is specified as subject to collection under other laws. Where a user requests correction of an error, the Company will not use or provide the personal information until the correction is complete, unless provision is requested under other laws. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction so that it is reflected.

(2) Users may exercise their rights to access and correct personal information, withdraw consent, refuse consent, and withdraw membership as follows.

  1. Scope of access and correction

    • Personal information about the user held by the Company

    • Personal information used by the Company or provided to third parties

    • Status of consent to the collection, use, and provision of personal information

  2. How to access and correct personal information, withdraw consent, and refuse consent to advertising

    • Users may exercise their right to refuse consent by contacting the Company’s customer center on the Platform.

    • The customer center is operated through “Channel Talk,” as posted on the website.

    • The customer center is closed on weekends and public holidays. Its hours are as follows.
      [Hours] Monday to Friday, 11:00 AM to 5:30 PM (KST)

  3. Membership withdrawal

    • Users may withdraw membership within the Platform following the procedure set by the Company.

(3) As data subjects, users have the following obligations to protect their own personal information.

  1. Users must keep their personal information up to date, and are responsible for problems arising from inaccurate information they enter.

  2. The Company is not liable for problems arising from leaks of personal information where it is not at fault. This includes leaks caused by the user’s own negligence (such as transferring, lending, or losing their email, password, or access credentials, or leaving a device unattended while logged in) and leaks caused by internet-related issues the Company could not control despite exercising reasonable care, such as hacking using methods or technologies that cannot be blocked by the security measures required under applicable laws.

  3. Users must take care to prevent leaks of personal information such as email, password, and access credentials, and may not transfer or lend them to third parties. The Company is not liable for damages caused by the user’s own negligence.

  4. Registering or using the Services with another person’s personal information may result in loss of membership and punishment under applicable laws.

  5. Users must cooperate with the Company’s security requests under its personal information protection policy, such as changing passwords periodically.

  6. Users must comply with this Privacy Policy and applicable laws on personal information.

Article 5 (Outsourcing of Personal Information Processing)

(1) To provide smooth services and improve service quality, the Company may outsource part of the related work to external service providers. When outsourcing personal information processing, the Company stipulates in contracts matters such as compliance with privacy laws, confidentiality of personal information, prohibition of provision to third parties, liability in the event of an incident, the outsourcing period, and the obligation to destroy personal information after processing ends, and manages and supervises compliance to protect users’ personal information.

(2) The Company outsources personal information processing as follows to improve services and process work effectively.

Processor

Outsourced work

Retention and use period

NAVER Cloud Corp.

Sending informational and promotional emails and text messages

Until membership withdrawal or termination of the outsourcing contract

Channel Corporation

Channel Talk service

Until membership withdrawal or termination of the outsourcing contract

(3) If the outsourced work or the processor changes, the Company will disclose this without delay through this Privacy Policy, and such disclosure shall be deemed to constitute consent to the outsourcing.

Article 6 (Procedure and Method for Destroying Personal Information)

(1) In principle, the Company destroys users’ personal information without delay once the purpose of collection and use has been achieved. However, under the “personal information validity period system,” the Company destroys, or separately stores and manages, the personal information of users who have not used the Services for one year.

(2) The Company’s procedure and method for destroying personal information are as follows.

A. Procedure: Information entered by users for registration and similar purposes is, once its purpose has been achieved, moved to a separate database (or a separate filing cabinet for paper records), stored for a set period in accordance with internal policies and other applicable laws (see retention and use periods), and then destroyed. Such personal information is not used for any purpose other than retention unless required by law.

B. Method: Personal information recorded or stored on paper is shredded or incinerated, and personal information stored as electronic files is deleted using technical methods that make the records unrecoverable.

Article 7 (Rights and Obligations of Users and Legal Representatives, and How to Exercise Them)

(1) Users may at any time exercise their rights to request access to, correction of, deletion of, or suspension of processing of their personal information.

* Requests for access and similar rights concerning the personal information of children under 14 must be made directly by a legal representative. Minors aged 14 or older may exercise rights over their personal information themselves or through a legal representative.

(2) Rights may be exercised in writing, by email, or by fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will act on them without delay.

(3) Rights may also be exercised through a representative, such as the user’s legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed in Annex Form No. 11 of the Notice on Personal Information Processing Methods (No. 2020-7) must be submitted.

(4) Requests for access to or suspension of processing of personal information may be restricted under Articles 35(4) and 37(2) of the Personal Information Protection Act.

(5) Deletion cannot be requested where the personal information is specified as subject to collection under other laws.

(6) When a user requests access, correction, deletion, or suspension of processing, the Company verifies that the person making the request is the user or a legitimate representative.

Article 8 (Technical and Administrative Safeguards for Personal Information)

The Company takes the following measures to ensure the security of personal information.

  1. Administrative measures: establishing and implementing an internal management plan, operating a dedicated team, and conducting regular staff training

  2. Technical measures: managing access rights to personal information processing systems, installing access control systems, encrypting personal information, and installing and updating security software

  3. Physical measures: controlling access to server rooms and data storage rooms

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

(1) To provide smooth services, the Company uses “cookies” and similar technologies that store and retrieve user information. A cookie is a very small text file sent by the server operating a website to the user’s browser, which may be stored on the user’s computer hard drive.

(2) The Company uses cookies for purposes such as analyzing access frequency and visit times, identifying users’ preferences and interests and tracking their activity, measuring event participation and visit counts, and providing targeted marketing and personalized services.

(3) Users may choose whether to accept cookies. By setting options in their web browser, users may allow all cookies, confirm each time a cookie is stored, or refuse all cookies. However, refusing cookies may make it difficult to use some services that require login.

(4) To refuse cookies as described in paragraph (3), users may select options in their web browser to allow all cookies, confirm each time a cookie is stored, or refuse all cookies.

(5) To provide the same or a similar internet experience on mobile services as on PC, the Company may also use cookies on mobile devices (for example, smartphones and tablets). The Company collects cookies in accordance with applicable laws and regulatory guidelines, and does not collect cookies that contain personal information, or that can by themselves identify an individual, without the user’s prior consent.

(6) On mobile devices, users can also choose whether to allow cookies in their web browser settings. Although this may vary by operating system and browser, in most cases users can decide whether to allow cookies, or delete all existing cookies, through the mobile browser’s settings. However, refusing cookies may cause inconvenience in using some services that require login.

Article 10 (The Company’s Efforts to Protect Personal Information)

(1) In processing users’ personal information, the Company takes the following technical and administrative measures to ensure security and prevent loss, theft, leakage, alteration, or damage.

A. Encryption of personal information: The Company encrypts users’ personal information such as passwords and payment methods in accordance with legally required standards, and uses intrusion prevention devices to block external attacks and hacking. In particular, servers storing users’ personal information are managed separately and are not directly connected to external internet lines.

B. Measures against hacking: The Company does its utmost to prevent users’ personal information from being leaked or damaged by hacking or computer viruses. It uses up-to-date antivirus software to prevent leaks or damage to users’ personal information and data, and uses encrypted communications to transmit personal information safely over the network. The Company strives to put in place every available technical safeguard to secure its systems.

C. Limiting and training staff: The Company limits the number of staff handling personal information to designated personal information managers, and emphasizes compliance with this Privacy Policy through regular training.

(2) Notwithstanding paragraph (1), the Company bears no liability for problems arising from the leak or exposure of personal information such as email or password due to the user’s own intent or negligence, or due to internet-related issues.

Article 11 (Collection, Use, Provision, and Refusal of Behavioral Information)

Item

Details

Behavioral information collected

• Web/app visit history; usage records such as searches and clicks; advertising identifiers

Collection method

• The Company uses Google Analytics and Google Tag Manager, web log analysis tools provided by Google, to collect information such as visit frequency and pages visited; only anonymized information that cannot identify individuals is used
• It also collects logs of key user actions on the website and in the app

Purpose of collection

• Product and service development and statistics; user analysis such as customer analysis; personalized advertising based on behavioral information

Retention/use period and subsequent handling

• Retained and used for up to 3 years from the date of collection; deleted without delay when the period ends

How users can exercise control

• Users can refuse by adjusting browser settings, such as refusing cookie storage.
• Web browser (example): Settings menu at top > Internet Options > Privacy > Advanced > Block cookies
• Microsoft Edge (example): “…” at top right > Settings > “Privacy, search, and services” at top left > Tracking prevention section > Tracking prevention > choose whether to always use “Strict” tracking prevention when browsing InPrivate;
in the Privacy section, choose whether to send “Do Not Track” requests
• Chrome (example): Settings menu at right > Privacy and security > choose whether to “Block third-party cookies and site data”
• Smartphone (example)
• Android: (1) Google settings > (2) Ads > (3) opt in to or out of ads personalization
• iPhone: (1) Settings > (2) Privacy > (3) Advertising > (4) Limit Ad Tracking (* steps may vary by OS version)

Remedies for users

• Relevant department and inquiries: Customer center (email)

Article 12 (Personal Information Protection Officer)

(1) The Company has designated the following Personal Information Protection Officer to take overall responsibility for personal information processing and to handle users’ complaints and remedies related to it.

▸ Personal Information Protection Officer

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

* This address connects to the personal information protection team.

(2) Users may direct all inquiries, complaints, and requests for remedies related to personal information protection arising from use of the Services to the Personal Information Protection Officer and the responsible department. The Company will respond to and handle inquiries without delay.

Article 13 (Requests for Access to Personal Information)

Users may submit requests for access to personal information under Article 35 of the Personal Information Protection Act to the department below. The Company will strive to process access requests promptly.

▸ Department receiving and handling access requests

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 14 (Remedies for Infringement of Users’ Rights)

If you need to report or seek advice on other personal information infringements, please contact the organizations below.

(1) To obtain remedies for personal information infringement, users may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Privacy Infringement Report Center, and other bodies. For other reports or consultations regarding personal information infringement, please contact the organizations below.

  1. Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972, no area code)

  2. Privacy Infringement Report Center (privacy.kisa.or.kr / 118, no area code)

  3. Supreme Prosecutors’ Office (www.spo.go.kr / 1301, no area code)

  4. Korean National Police Agency (ecrm.cyber.go.kr / 182, no area code)

(2) The Company guarantees users’ right to informational self-determination and strives to provide consultation and remedies for personal information infringement. If you need to report or consult, please contact the department below.

▸ Personal information consultation and reports

Name: Kyoungmin Seo

Department: Product

Title: Lead

Contact: support@swyg.im

Article 15 (Duty of Notification)

If the Company adds to, deletes from, or amends this Privacy Policy, it will post a notice on the website or notify users individually at least 7 days before the revision takes effect. As this Privacy Policy may change from time to time, please review it each time you visit the site.

Article 16 (Miscellaneous)

Please note that this Privacy Policy does not apply to the collection of personal information by web pages linked from the Services provided by the Company.

Announced: November 27, 2023
Effective: December 11, 2023