This policy covers the entire Service — web and mobile app. External sites you reach from the Service (partner clinic websites, payment provider pages) are governed by their own policies.

We ask for the minimum we need. Items marked "Optional" can be left blank; you can still register and use the basics.

a. Information you enter or upload

b. Information generated as you use the Service

• Membership tier, point balance, lifetime points earned, point ledger entries
• Access timestamps, last seen time, IP address, browser and device information
• Push notification token (if you allow notifications), marketing consent status
• A fingerprint (hash) of receipt images and a risk score, used to block duplicate submissions
• Payment request and response records, used to reconcile approvals and cancellations
• Usage measurement through Google Analytics 4 (measurement ID G-NMDCXSK9GV): a random identifier stored in a cookie, the pages you open, the page that referred you, language, screen size, browser and operating system, and an approximate location Google derives from your IP address. This runs on the live service only — it is switched off in development and preview builds. See "Cookies" below.

c. What we do NOT collect

• Passport numbers, alien registration numbers, resident registration numbers or any other national identifier. The profile field "passport name" is the Latin spelling of your name, used so clinic bookings match your documents. It is not a number.
• Card numbers, CVC or other payment credentials. The payment window is provided by the payment provider; card numbers never reach our servers.
• Your browsing history or your use of other apps.

The core of this Service touches medical records. The data below is "sensitive data" (information concerning health) under Article 23 of PIPA. We obtain consent for it separately from consent to process other personal data.

We are not a medical institution and we do not practise medicine. Records you upload are entrusted to us so that you can store, translate and consult on them. We never use them for advertising, insurance decisions or employment decisions.

1. 1.Identifying you at login and preventing fraudulent or duplicate registrations
2. 2.Reviewing receipt verifications, awarding cashback points and calculating membership tier
3. 3.Storing and searching your medical records, and returning translations
4. 4.Brokering consultations and bookings with partner clinics, and supporting the resulting chat
5. 5.Taking orders, processing payment, issuing vouchers and gift certificates, and handling cancellations and refunds
6. 6.Answering enquiries, resolving disputes and sending service notices
7. 7.Analysing usage and improving the Service (in a form that does not identify individuals)
8. 8.Sending benefit and event information, only to people who opted in
9. 9.Meeting legal obligations and preventing abuse

We do not use personal data beyond these purposes. If a purpose changes, we tell you first and ask for consent again.

We destroy personal data without delay once its purpose is met. Where the law requires retention, we store those items separately for the periods below.

As a rule we do not share personal data with third parties. We do so only in the cases below, and only when you have chosen that feature yourself.

What we send to a clinic includes sensitive health information. We tell you exactly what goes to which clinic on the consultation screen and ask for separate consent there. If you decline you cannot send that consultation, but everything else in the Service stays available.

Beyond that, we disclose data only where a law specifically requires it or where an investigative authority follows the procedure the law prescribes.

We entrust parts of the processing to the companies below. Every contract forbids use beyond the stated purpose, restricts sub-processing, requires security measures and assigns liability for incidents.

Under Article 28-8 of PIPA we disclose every transfer of personal data out of Korea below. You may refuse these transfers; if you do, the affected features (translation, automatic receipt reading, the relevant social login) become unavailable. Refusing the usage-measurement transfer disables nothing — every feature keeps working.

To refuse, turn off the relevant consent in Settings or write to the contact below. To refuse usage measurement only, block cookies in your browser or install Google’s opt-out add-on (tools.google.com/dlpage/gaoptout). Refusing does not affect your membership or your points.

Parts of the Service run automatically. Here is what is decided by machine and how you can challenge it.

Our contracts with the model providers do not permit your material to be used to train their models.

Procedure

Once the retention period ends or the purpose is met we destroy the data without delay. Items the law requires us to keep are stored apart from other personal data and destroyed when that period ends.

Method

• Electronic files: permanently erased so they cannot be recovered or reconstructed.
• Uploaded images and documents: deleted from storage. Only non-reversible comparison values such as image fingerprints remain, solely to prevent abuse.
• Paper documents: shredded or incinerated.

You, or your legal representative, may at any time:

1. 1.Ask to see the personal data we hold about you
2. 2.Ask us to correct anything that is wrong
3. 3.Ask us to delete it (except items we must keep by law)
4. 4.Ask us to stop processing it
5. 5.Withdraw consent — separately for marketing, sensitive data and overseas transfers
6. 6.Ask for a copy in a structured, machine-readable format (data portability)

How

• In the app: [My] → [Settings] lets you edit your profile, change marketing settings and delete your account.
• By email: write to business@afformation.co.kr. We verify identity before acting.
• A representative acting for you needs a power of attorney and identification.

We act within 10 days of receiving your request and tell you the outcome. If we decline we explain why, and you may object to that decision.

You can delete your account yourself in [My] → [Settings] → [Delete account]. Removing the app does not delete the account.

Immediately on deletion

• The account is deactivated and you can no longer log in.
• Marketing consent is withdrawn and the push notification token is erased.
• All remaining points are forfeited and cannot be restored.
• Discount coupons you hold become unusable.
• Vouchers and gift certificates you already paid for are NOT voided by deletion. Use them before you go, or ask for a refund under the Refund & Cancellation Policy.

What remains

• Payment and refund records, point ledger entries and verification outcomes are kept separately for the periods in the retention table above, because the law requires it.
• Reviews you already published may remain visible to others. Delete them before leaving, or ask us.
• Consultation details already delivered to a partner clinic follow that clinic’s retention duties. Ask the clinic directly to erase them.

Cookies do two things here: keep you signed in and remember your settings, and let us count how the Service is used. We do not use advertising cookies and we do not track you across other websites.

a. Cookies the Service needs to work

b. Usage measurement

On the live service we load Google Analytics 4 (Google LLC, measurement ID G-NMDCXSK9GV). It gives your browser a random identifier and stores it in the cookies below, so that several visits can be counted as one visitor. It is not loaded in development or preview builds.

What is sent to Google: the pages you open, the page that referred you, language, screen size, browser and operating system, and your IP address, which Google uses to derive an approximate location. Google’s servers are in the United States — see "Transfers outside Korea" above.

You can refuse cookies in your browser settings. Blocking the session cookie means you will not stay signed in. To turn off usage measurement only, install Google’s opt-out add-on (tools.google.com/dlpage/gaoptout) or block cookies for this site — every feature keeps working either way.

The Service is not directed at children under 14 and we do not accept registrations from them. If we learn that a child under 14 registered without a legal representative’s consent, we destroy that data without delay.

Where the law of your country sets a higher age (for example 16 in some EU member states), that higher age applies.

• Organisational: the number of staff who can process personal data is kept minimal and access is split by role. Significant actions in the admin console are recorded in an audit log.
• Technical: row-level security in the database means you can read and write only your own records. Server-only credentials are never exposed to the client.
• Encryption in transit: all traffic runs over HTTPS.
• Uploaded files: receipts and medical documents are stored under paths only you can reach.
• No card storage: payment credentials are handled by the payment provider and never stored on our servers.
• Access logs are retained and protected against tampering.

We have designated a Chief Privacy Officer responsible for personal data processing and for handling complaints and remedies.

Send questions, complaints or requests for remedy to the contact above. We answer without delay.

If you believe your privacy has been infringed you may contact the Korean authorities below.

You may also seek administrative appeal under the Administrative Appeals Act, and you may complain to the supervisory authority where you live.

The Service serves users in many countries. Where your local law grants additional rights, we honour them.

European Economic Area and the United Kingdom — GDPR

• Legal bases: performance of a contract (Art. 6(1)(b)), consent (a), compliance with a legal obligation (c), and legitimate interests such as fraud prevention (f). Health data is processed only on explicit consent under Art. 9(2)(a).
• Rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and lodging a complaint with a supervisory authority.
• International transfers: the Republic of Korea holds an adequacy decision from the European Commission. Transfers to processors in the United States rely on Standard Contractual Clauses or another lawful mechanism.
• Automated decisions: for the processing listed under "Automated decisions" you may request human intervention, express your point of view and contest the decision.

Japan — APPI

• Our purposes of use are those listed under "Why we process it".
• Health-related data qualifies as special care-required personal information and is acquired and processed only with your prior consent.
• Where we provide data to a third party in a foreign country, the country and the recipient’s measures are disclosed in the transfer table above.

Thailand — PDPA

• Health data is a special category under section 26 of the PDPA and is processed only on explicit consent.
• You have rights of access, rectification, erasure, objection, portability and withdrawal of consent, and you may complain to the PDPC.
• For transfers abroad we disclose the destination and the risks in the table above and obtain consent.

Taiwan and mainland China

• Under Taiwan’s Personal Data Protection Act you may request access, a copy, correction, cessation of collection, processing or use, and deletion.
• Under the PRC Personal Information Protection Law you may request access and a copy, correction, deletion, restriction, an explanation of our rules, and withdrawal of consent. Health data is sensitive personal information and is processed only on separate consent.

Exercise any of these rights by writing to business@afformation.co.kr.

We announce changes in the Service and on this page at least 7 days before they take effect. Where a change is to your disadvantage or concerns something material, we give 30 days’ notice and ask for consent again if needed.

This document is published in six languages. If the versions differ, the Korean text governs for the purposes of Korean law.