BCODEIT establishes and publishes the following privacy policy pursuant to Article 30 of the Personal Information Protection Act of Korea to protect data subjects’ personal information and to address related concerns promptly and smoothly.
Article 1. Purposes of processing personal information
BCODEIT processes personal information only to the extent necessary to provide, maintain and improve services and to review and respond to user inquiries. Apps that use advertising, usage analytics or error diagnostics services process information necessary for those purposes as described in Article 9.
Article 2. Categories of personal information processed
① Depending on the functions and configuration of a service, BCODEIT may process service usage records, access logs, cookies, IP addresses, payment information, information entered or selected by users, and device, installation and advertising identifiers. Not every app processes every category. The information and purposes applicable to each app are described in its app-specific policy. Article 9 describes the information processed by advertising, usage analytics and error diagnostics services.
Article 3. Provision of personal information to third parties
① BCODEIT processes personal information only within the purposes stated in Article 1 and provides it to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act of Korea, such as with the data subject’s consent or under a specific provision of law.
② When personal information is provided to a third party, BCODEIT discloses the recipient, purpose, categories of information and retention and use period, along with other relevant details.
Article 4. Entrustment of personal information processing
① When BCODEIT entrusts personal information processing to a service provider, it discloses the provider and the entrusted work.
② When entering into an entrustment agreement, BCODEIT specifies responsibilities in writing, including prohibition of processing outside the entrusted purposes, technical and administrative safeguards, restrictions on further entrustment, supervision of the provider and liability for damages, in accordance with Article 26 of the Personal Information Protection Act of Korea. BCODEIT supervises the provider to ensure that personal information is processed securely.
③ Changes to the entrusted work or service providers will be disclosed promptly through this privacy policy.
Article 5. Retention and destruction of personal information
① BCODEIT destroys personal information without delay when it is no longer needed, including when the retention period has expired or the processing purpose has been achieved.
② If another law requires continued retention after a consented retention period expires or a purpose is achieved, the information is moved to a separate database or otherwise stored separately. When information is retained under a legal obligation, BCODEIT separately discloses the legal basis, information categories and retention period.
③ BCODEIT checks which information is subject to destruction and whether continued retention is necessary, then destroys information that is not subject to a retention obligation. Electronic files are deleted so they cannot be recovered or reproduced; paper documents, if any, are shredded or incinerated.
Article 6. Rights and obligations of data subjects and legal representatives and how to exercise them
① Data subjects may request access to, correction or deletion of, or suspension of processing of their personal information from BCODEIT at any time.
② Requests under paragraph 1 may be submitted by email to the contact below, and BCODEIT will act without delay.
Privacy contact: BCODEIT
Email for inquiries and rights requests: bcodeit.official@gmail.com
③ These rights may also be exercised through a legal representative or an authorized agent. BCODEIT may request the minimum documentation necessary to verify the agent’s authority.
④ Requests for access or suspension of processing may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act of Korea.
⑤ Deletion cannot be requested where another law expressly requires collection of that personal information.
⑥ BCODEIT verifies that the requester is the data subject or a duly authorized representative only to the minimum extent necessary to handle the request.
Article 7. Measures to protect personal information
BCODEIT applies the following safeguards according to the configuration of its services and the way personal information is processed.
① Service infrastructure protection: BCODEIT uses security features provided by the cloud services it uses, such as Supabase and Firebase, to protect personal information.
② Encryption of personal information: Encryption is applied to storage and transmission where required by the type of personal information and the processing method.
③ App code protection: Release versions of Android apps use code obfuscation, including R8 and ProGuard rules, to make code analysis more difficult.
The specific safeguards applicable to each app are described in its privacy policy.
Article 8. Installation, operation and refusal of automatic information collection mechanisms
① Where a BCODEIT website uses cookies, it may store and retrieve usage information to provide services and analyze usage. This article’s web cookie information applies to websites that use cookies; Article 9 covers app advertising and analytics SDKs.
② Cookies are small pieces of information sent by a website’s server (HTTP) to a user’s browser and may be stored on the hard drive of the user’s computer.
a. Purpose of cookies: Cookies are used to understand visits to and usage of services and websites, popular search terms and secure connections, and to provide information suited to users.
b. Managing and refusing cookies: Users can refuse cookie storage through their browser’s privacy or cookie settings. Menu names and locations vary by browser and version.
c. Refusing cookie storage may make personalized services difficult to use.
Article 9. Advertising, usage analytics and error diagnostics services
① This article applies separately to each relevant service in apps that use Google AdMob, Google Analytics for Firebase or Firebase Crashlytics. Each app-specific policy identifies the services actually used. Processing by a service that an app does not use does not apply to that app.
② Google AdMob — advertising delivery and measurement
In apps that use AdMob, the Google advertising SDK may automatically collect and transmit IP addresses, device and account identifiers such as advertising identifiers, app and advertising interaction information, and diagnostic information for advertising delivery, measurement, analysis and fraud prevention. IP addresses may be used to estimate approximate location. Actual processing depends on the operating system, SDK version, advertising requests, and user consent and settings. Information may be processed when the SDK initializes or an ad is requested; collection is not limited to when an ad is clicked or viewed.
③ Google Analytics for Firebase — usage analytics
In apps that use Analytics, screen and feature usage events, usage results, session information, app and device information, and identifiers such as app instance identifiers may be transmitted to Google to understand service usage and improve features. Whether additional information such as advertising identifiers is processed depends on the app’s implementation and collection settings.
④ Firebase Crashlytics — error diagnostics
In apps that use Crashlytics, error and crash records, stack traces, occurrence times, app, operating system and device information, and installation identifiers may be transmitted to Google to identify causes of errors and improve stability.
⑤ Information protection and user choices
Events and information manually added by the app for analytics and error diagnostics are distinct from information automatically collected by SDKs. Specific transmitted fields and collection restrictions depend on each app’s implementation and settings. Automatic SDK collection follows the service-specific information and applicable configuration.
Android: Users can use available features such as deleting or resetting the advertising ID in their device’s advertising settings. Menu locations and features vary by device and operating system version.
iOS: Users can manage tracking permissions for individual apps under Settings > Privacy & Security > Tracking.
Deleting an advertising ID or restricting tracking does not remove all ads, stop Analytics or Crashlytics collection, or delete information already transmitted. Where an app provides separate collection settings, users can use them. Personal information requests can be submitted to the contact in Article 6.
⑥ External processing and storage
Information may be transmitted to Google servers and processed outside Korea while these services are used. Service-specific official information describes collection categories and processing methods. Actual processing relationships, international transfers and retention periods will be described in accordance with the applicable service agreements and operational settings.
Article 10. Changes to this privacy policy
When this privacy policy changes, the publication page will explain the changes and effective date. Where separate notice or consent is required, the relevant procedures will be followed.
Notice date: November 9, 2026
Effective date: November 9, 2026