Privacy Policy

1. Personal Information Collected

The Operator may collect the following information to provide the service.

• Required: Minimum information necessary for service use
  • Registration/Login Information: Email, name, password (for regular registration)
  • SNS Login Information: Email, name, SNS unique ID (when using Kakao, Google, or Apple login)
  • Device Information: Device model, OS version, app version
  • Service Usage Logs: Access logs, error logs, feature usage records
• Optional: Collected only with user consent
  • Profile Information: Profile photo, phone number, date of birth, gender, country
  • Audio Data: Audio data through microphone when using voice input feature (for real-time text conversion)
  • Location Information: Location information through GPS (when using the service)
  • Camera/Gallery Access: When registering profile photo

※ Audio data is converted to text in real-time, and original audio data is not stored.
※ This matches the Data safety section in Google Play Console.

2. Methods of Collecting Personal Information

• Direct input by users during registration/login/profile modification
• Automatic collection through SNS login (Kakao, Google, Apple) with user consent
• Automatic generation during service use (access logs, error logs, app usage statistics, etc.)
• Collection after user consent when using device permissions
  • Microphone Permission: When using voice input feature
  • Location Permission: When using location-based services
  • Camera/Gallery Permission: When registering profile photo

3. Purpose of Using Personal Information

• Service Provision and Function Performance
  • User authentication and login service provision
  • Medical consultation reservation and management
  • Voice input feature provision (converting voice to text)
  • Location-based service provision
  • Profile management and personalized service provision
• Customer Support
  • Customer inquiry response and notice delivery
  • Push notification delivery (reservation alerts, notices, etc.)
• Service Quality Improvement
  • Error analysis and performance improvement
  • Usability analysis and service optimization
  • App stability enhancement
• Security and Fraud Prevention
  • Fraud prevention and security enhancement
  • Account security management

4. Retention and Use Period

• In principle, personal information is destroyed without delay when the purpose of collection and use is achieved.
• However, if retention is required by relevant laws, it will be retained for the required period and then destroyed.

Service operation standard retention period:

• Account Information: Destroyed within 30 days after membership withdrawal (for fraud prevention purposes)
• Service Usage Records: Destroyed immediately upon membership withdrawal
• Error/Access Logs: Retained for 90 days and then destroyed
• Audio Data: Destroyed immediately after real-time text conversion (not stored)

※ Cases requiring retention according to relevant laws:

• Act on Consumer Protection in Electronic Commerce: Records on contracts or withdrawal of subscription (5 years)
• Communications Secrets Protection Act: Login records (3 months)

5. Third-Party Provision

The Operator does not provide users' personal information to third parties in principle. However, it may be provided only when based on laws or with prior consent from users.

6. Processing Entrustment and External Services

The following external services are used for service operation.

• Firebase (Google)
  • Purpose: Push notification delivery (Firebase Cloud Messaging), app error analysis, app usage statistics
  • Information Collected: Device token, app usage logs, error logs
  • Privacy Policy: https://firebase.google.com/support/privacy
• Kakao
  • Purpose: Login service provision through Kakao account
  • Information Collected: Kakao account information (email, name, profile photo, etc.)
  • Privacy Policy: https://www.kakao.com/policy/privacy
• Google
  • Purpose: Login service provision through Google account, voice recognition service (Google Speech-to-Text API)
  • Information Collected: Google account information (email, name), audio data (for text conversion)
  • Privacy Policy: https://policies.google.com/privacy
• Apple
  • Purpose: Login service provision through Apple account (iOS only)
  • Information Collected: Apple account information (email, name)
  • Privacy Policy: https://www.apple.com/privacy/

External services may process data according to their respective policies. When using the voice recognition feature, audio data is sent to Google Speech-to-Text API for text conversion, and the audio data is deleted immediately after conversion.

7. User Rights and Exercise Methods

• Users may request access, correction, deletion, and suspension of processing of their personal information.
• Requests will be processed without delay after identity verification by contacting the "Contact" below.
• Permissions (microphone/location/camera, etc.) can be revoked in app settings, and can also be changed in OS settings.
• Users may request deletion of all personal information through membership withdrawal.

8. Procedures and Methods for Destruction of Personal Information

• Destruction Procedure: Stored for a certain period according to internal policy and relevant laws after achieving the purpose, then destroyed
• Destruction Methods
  • Electronic files: Permanently deleted in an unrecoverable manner
  • Records, printouts, written documents, etc.: Shredded or incinerated

9. Personal Information Protection Officer

If you have any inquiries regarding personal information protection, please contact us below.

• Email: yj.lee@medicaddy.kr

10. Changes to Privacy Policy

This Privacy Policy may be amended, added, or deleted in accordance with changes in laws, policies, or security technology. When changes are made, we will notify users through service announcements 7 days before the effective date.

• Announcement Date: 2026-01-01
• Effective Date: 2026-01-01