Privacy Policy
inflfeed (the “Service”) establishes and discloses the following privacy policy under Article 30 of the Personal Information Protection Act of the Republic of Korea, to protect the personal data of data subjects and to handle related grievances promptly.
Launch update requests
We collect your email, consent timestamp, notice version and language to manage requests and send launch updates. A request does not create an account or verify email ownership. Requests are transmitted over the network to PostHog, our data processor, when submitted. We delete them once the notification purpose is fulfilled or consent is withdrawn. You may refuse consent; only waitlist registration is affected. Contact the privacy officer below to withdraw consent or request deletion. Optional interests and their consent record submitted after signup are linked to the request to help prepare launch content, with the same retention and deletion rules. Skipping the interest survey does not affect launch notifications.
1. What personal data is collected, and how
The Service collects the following. It never collects resident registration numbers.
| Source | Data | How it is collected |
|---|---|---|
| Google sign-in | Email address, profile name, profile picture, Google account identifier | Received from Google when the user logs in |
| Service usage records | Chosen creators, whether a post was read or saved and when, categories of interest, the content of creator and category requests | Entered or chosen by the user while using the Service |
| Automatically generated data | Access time, browser and device type, records of actions taken on screen | Collected automatically while the Service is used |
When browsing without logging in, the chosen creators and the read and saved history are kept in the user’s browser and are not stored on the server. They are sent to the server on each request so that a matching list can be built; what is sent is used only to build the response and is not stored.
2. Purposes of processing
- Identifying members and keeping them logged in
- Providing a feed matching the creators a user chose, keeping the read and saved history, and carrying it across devices
- Receiving creator and category requests and telling the requester the outcome
- Improving the Service by analysing how it is used
3. Processing and retention periods
The Service retains personal data until the purpose of collection and use has been achieved, and destroys it without delay once the periods below have passed.
| Data | Retention period |
|---|---|
| Account information and service usage records | Until the member closes their account |
| Creator and category requests | One year after the request is handled |
| Automatically generated data (analytics) | One year from collection |
Where law requires retention, the data is kept for the period that law sets.
4. Provision to third parties
The Service does not provide users’ personal data to third parties. It does so only where there is a special provision of law, or where an investigative authority makes a request under the procedure and method set by law.
5. Entrusted processing and transfer abroad
To run the Service reliably, the operator entrusts personal data processing as set out below. Personal data may be processed outside the Republic of Korea as a result.
| Processor | Entrusted work | Data transferred | Retention and use period |
|---|---|---|---|
| Supabase, Inc. | Member authentication, database storage | All personal data collected | Until the processing agreement ends or the member closes their account |
| Vercel Inc. | Service hosting, traffic handling, usage analytics | Access records, automatically generated data | Until the processing agreement ends |
| PostHog, Inc. | Usage analytics; launch update request storage | Access records, records of actions taken on screen; submitted email and consent record | Until the processing agreement ends (launch requests: until purpose fulfillment or withdrawal) |
A user may refuse the transfer of their personal data abroad. In that case the Service, in whole or in part, cannot be used. Please send a refusal to the contact address below.
6. Procedure and method of destruction
Personal data is destroyed without delay once the retention period has passed or the purpose of processing has been achieved.
Data held as electronic files is permanently deleted by a method that leaves it unrecoverable. Anything printed on paper is shredded or incinerated.
When a member closes their account, the creators they followed, their read and saved history, their categories of interest and their requests are deleted with it.
7. Rights of data subjects and legal representatives, and how to exercise them
A user may at any time request access to, correction of, deletion of, or suspension of the processing of their personal data (Articles 35 to 37 of the Personal Information Protection Act).
Such a request may be made in writing or by email to the privacy officer below, and the Service acts on it without delay.
A request may also be made through a legal representative or an authorised agent. In that case a letter of authority must be submitted.
8. Devices that collect data automatically, and how to refuse them
The Service uses cookies to keep a user logged in. During sign-in, temporary cookies carry the chosen creators over to the account and remember the language being read; they expire after ten minutes.
Tools that analyse how the Service is used store an identifier in the browser.
A user may refuse cookies in their browser settings. Features that require logging in cannot be used in that case.
9. Measures to secure personal data
- Access to personal data is limited to the minimum necessary, and row-level access control is applied in the database.
- Encrypted transport (HTTPS) is applied to every path over which personal data travels.
- Secrets needed to run the Service are kept separate from the source code.
10. Privacy officer
The Service designates the following privacy officer, who takes overall responsibility for personal data processing and handles data subjects’ enquiries, complaints and requests for redress.
- Privacy Officer
- Operator
- Contact
- wlsghkim0908@gmail.com
11. Remedies for infringement of rights
For a report or consultation about an infringement of personal data, you can contact the following bodies.
- Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
- Privacy Infringement Report Centre — 118 (privacy.kisa.or.kr)
- Supreme Prosecutors’ Office, Cyber Investigation Division — 1301 (www.spo.go.kr)
- National Police Agency, Cyber Investigation Bureau — 182 (ecrm.police.go.kr)
12. Changes to this privacy policy
This privacy policy applies from its effective date. Where content is added, removed or amended, notice is given on a screen of the Service from seven days before the change takes effect.
13. Language
This privacy policy was written in Korean and may also be provided in translation. If a translation and the Korean version differ in meaning, the Korean version prevails.