Privacy Policy

Wonderple (the “Company”) values users’ personal information and strives to comply with applicable laws, including the Personal Information Protection Act. To handle related concerns promptly and smoothly, the Company establishes and discloses this Privacy Policy as follows.

1. Collection and Use of Personal Information

Wonder Powder (the “Service”) can be used without signing up with an email address, but some features may be limited. The Company uses the personal information it collects for the following purposes.

(1) To provide the Service smoothly, the Company collects the following personal information when you sign up as a member.

• Collecting items: Email, nickname
• Purpose of use: Member identification, prevention of duplicate registrations

(2) While using the Service, the following data may be automatically generated and collected.

• Collecting items: IP address, cookies, service usage records, device information (device identifiers such as app instance ID and advertising ID (ADID/IDFA), device model, OS version, etc.), approximate location, age group, and statistical information such as service usage time
• Purpose of use: Service provision, service improvement through usage record analysis, prevention of unauthorized or fraudulent use of the Service

2. Methods of Personal Information Collection

The Company collects personal information through the following methods:

• Collecting personal information directly provided by users when signing up or using the Service
• Collecting information automatically generated by the app, website, etc., when using the Service
• Collecting information through email for inquiries, the Contact Us menu, etc.
• Collecting information through events, promotions, and other activities participated in by users

3. Provision of Personal Information to Third Parties

The Company uses users’ personal information only within the scope of the purposes of collection and use, and in principle does not provide it to external parties.

However, the following cases are exceptions:

• When the Company is obligated to submit personal information under applicable laws and regulations
• When personal information is processed into a form that cannot identify a specific individual and provided for statistics, academic research, or market research
• When users have given prior consent for the use of the Service

4. Entrustment of Personal Information Processing

The Company entrusts the processing of personal information as follows, only where necessary to provide the Service.

If the entrusted company or the contents of the entrusted tasks change, the Company will disclose this in the Privacy Policy.

• Google LLC: Statistical and trend analysis of service usage records
• Google LLC: Member authentication and cloud data storage and synchronization

5. Overseas Transfer of Personal Information

The Company transfers personal information overseas as follows to provide the Service.

Item	Details
Recipient	Google LLC
Country	United States
Contact	Google privacy inquiries
Items transferred	Member information (email, nickname), data entered and stored by users in the app (such as cosmetics information) IP address, cookies, service usage records, device information (device identifiers such as app instance ID and advertising ID (ADID/IDFA), device model, OS version, etc.), approximate location, age group, and statistical information such as service usage time
Purpose	Member authentication, data storage, and synchronization across devices, statistical and trend analysis of service usage records
Time and method	Transmitted over the network when the Service is used
Retention period	Member information and stored data: Until withdrawal from membership (or for the period required by applicable laws, if retention is required) Usage records, etc.: Up to 14 months from the date of collection

If users do not want their personal information to be transferred overseas, they may refuse by stopping use of the Service through withdrawal from membership or deleting the app. In this case, however, the Service cannot be used.

6. Procedures and Methods of Personal Information Destruction

Users’ personal information is destroyed without delay upon withdrawal from membership, using the following procedures and methods:

① Personal information stored in electronic file format is deleted using technical methods that make the records impossible to reproduce.

② Personal information printed on paper is shredded or incinerated.

If personal information must continue to be retained under applicable laws and regulations even though a reason for destruction has arisen, it will be moved to a separate database (DB) or stored in a different location.

7. Rights of Users and Legal Representatives and How to Exercise Them

Users and legal representatives may view or modify personal information at any time, and may request withdrawal of consent (cancellation of membership) to its collection, use, and provision.

When a request for access, correction/deletion, or suspension of processing is made in accordance with users’ rights, the Company verifies whether the person making the request is the user or a legitimate representative.

If you wish to withdraw your consent (cancel your membership), you can make a request using one of the following methods:

• Use the [Delete Account] menu in the app settings
• Contact the Personal Information Protection Officer

8. Personal Information Protection Officer and Responsible Department

The Company has designated a Personal Information Protection Officer and a responsible department to protect users’ personal information and to address complaints related to personal information.

Users may ask the person in charge to exercise their rights regarding their personal information, and may report any complaints related to personal information protection that arise while using the Service. The Company will respond to users’ reports promptly and thoroughly.

• Data Protection Officer: Privacy Protection Team Leader
• Responsible Department: Privacy Protection Team
• Email: support@wonderplecorp.com

9. Technical and Administrative Measures for Personal Information Protection

The Company implements various protective measures and efforts to securely protect users’ personal information.

• Administrative Measures: Minimization of personnel handling personal information, implementation of personal information education, etc.
• Technical Measures: Restriction of access to personal information, installation of antivirus programs and security software, etc.
• Physical Measures: Access control to computer rooms, data storage rooms, etc.

10. Scope of This Privacy Policy

This Privacy Policy applies only to the Service. If you move to another company’s website through a link or similar means, that website’s privacy policy applies, so please review the policy of the website you visit.

11. Updates to This Privacy Policy

This Privacy Policy may be changed to reflect changes in laws or the Service. If any content of this Privacy Policy is added, deleted, or modified, notice will be given through announcements in the app or on the website, etc., at least 7 days before the revision.