Privacy Policy

1. Purposes of processing

① Membership and account management — identity confirmation, account maintenance, abuse prevention

② Providing the Service — posting and displaying content, delivering messages, follows, reactions and comments

③ Feed ranking — using viewing history to order which posts appear

④ Running the community board — displaying posts and comments

⑤ Handling reports — reviewing what is reported and acting on it

⑥ Support — handling enquiries and replying

2. Personal data processed

[Required] email address, name, username

[Optional] profile photo, pet details (name, species, breed, gender, birthday, bio), pet voice recordings

[Generated] content (videos, thumbnails, captions), comments, reactions, follows, saves, message contents

[Generated] community posts, comments and likes

[Generated] reports you file (target, reason, any note you add), accounts you block

[Collected automatically] viewing history (which posts were watched and for how long), access timestamps

[Collected automatically] the device identifier used to deliver notifications (push token), device type, app language

We never take a password. Signing in goes through Apple or Google, and we keep only the email address they hand us.

Collection method: entered by the user while signing in and using the app, or generated automatically while using the Service.

3. Retention periods

① Member information — until the account is deleted

② Content and activity records — until deleted by the user or the account is closed

③ Viewing history — until the account is deleted

④ Reports — kept after the reported item is deleted, so the outcome remains traceable

Records required by law are kept for the statutory period: advertising records 6 months, consumer complaint and dispute records 3 years (E-Commerce Act), communication confirmation data 3 months (Protection of Communications Secrets Act).

4. Provision to third parties

The Company does not provide personal data to third parties, except where specifically required by law or requested by investigative authorities following statutory procedure.

5. Outsourced processing

· Processor: Supabase, Inc. — database operation and authentication. Retained until the contract ends or the account is deleted.

· Processor: Cloudflare, Inc. — video and image storage and delivery (CDN). Retained until the contract ends or the content is deleted.

· Processor: Expo (650 Industries, Inc.) — sending push notifications. Retained until the contract ends or notifications are turned off.

6. Overseas transfer

· Recipient: Cloudflare, Inc. (United States)

Items: post videos, thumbnails, profile photos, pet voice recordings

When: transmitted to CDN locations on upload

Purpose: media storage and delivery

Retention: until the content is deleted

· Recipient: 650 Industries, Inc. (United States)

Items: device push token, notification text

When: transmitted to the United States when a notification is sent

Purpose: delivering push notifications

Retention: until notifications are turned off or the account is deleted

· Recipient: Supabase, Inc. (data stored in the Seoul region)

Items: account, profile and post metadata

Purpose: database operation

Retention: until the account is deleted

Users may refuse the overseas transfer, but the Service may then be unavailable.

7. Destruction of personal data

Personal data is destroyed without delay once the retention period expires or the purpose is achieved. Electronic files are erased irrecoverably; printed materials are shredded or incinerated.

8. Rights of data subjects

Users may request access, correction (Settings → Edit profile), deletion (deleting individual posts, or Settings → Account → Delete account) and suspension of processing. Requests may be made in the app or to the privacy officer below, and are acted on without delay.

9. Security measures

Passwords are stored hashed and cannot be reversed. Traffic is encrypted with HTTPS. Database access is restricted with row-level security so accounts cannot reach data that is not theirs. The number of staff handling personal data is kept to a minimum.

10. Automatic collection devices

The Service uses no advertising identifiers. Viewing history is used only to rank the feed and is not shared for advertising or third-party analytics.

11. Privacy officer

· Privacy officer: Hanbyul Kang

· Position: CTO

· Contact: contact@petrsona.com

12. Remedies

· Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

· Privacy Infringement Report Centre: 118 (privacy.kisa.or.kr)

· Supreme Prosecutors’ Office Cyber Investigation: 1301 (www.spo.go.kr)

· National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

13. Changes to this policy

This policy applies from its effective date. Additions, deletions or corrections are announced in the app at least 7 days before they take effect.