Privacy Policy — Collection & Use of Personal Information
UniS · GG Kingdom Co., Ltd. · Effective Date: April 20, 2026 · Ver 1.0
01 Personal Information We Collect
| Category | Items Collected | Required |
|---|---|---|
| Email Sign-Up | Email address, password (encrypted) | Required |
| Google Social Login | Account identifier, email, profile name, photo | Required |
| LINE Social Login | User ID, display name, profile photo, email (if provided) | Required |
| Kakao Social Login | Account identifier, nickname, profile photo, email (if consented) | Required |
| Profile Information | Nickname, profile photo, affiliated team/organization name | Optional |
| Payment Information | Payment method token, payment history (card number not stored) | Required |
| Service Usage Records | Training records, score data, access logs, IP address, device information | Required |
Passwords are stored using one-way encryption (BCrypt). Actual card numbers are processed by a PCI-DSS certified payment gateway and are never stored by GG Kingdom Co., Ltd.
02 Purposes of Collection and Use
| Purpose | Details |
|---|---|
| Member Management | Membership verification, identity authentication, prevention of unauthorized use |
| Service Provision | Saving and analyzing training records, team management, AI coaching services |
| Payment & Subscription Management | Processing paid service payments, subscription renewal/cancellation, refund processing |
| Customer Support | Handling inquiries and complaints, delivering notices |
| Service Improvement | Usage statistics analysis, quality improvement, new feature development |
| Marketing (Optional) | Event and promotion notifications, personalized service recommendations |
03 Retention and Use Period
In principle, personal information is destroyed immediately after the purpose of collection is achieved. The following retention periods apply under applicable laws.
| Legal Basis | Items Retained | Retention Period |
|---|---|---|
| Member Service | Basic member information, training records | Until account deletion |
| E-Commerce Act | Contract/withdrawal records, payment and supply records | 5 years |
| E-Commerce Act | Consumer complaint and dispute records | 3 years |
| Protection of Communications Secrets Act | Login records, access logs | 3 months |
| Framework Act on National Taxes | Tax invoices and tax-related records | 5 years |
Upon account deletion, personal information is immediately destroyed. Information retained under legal obligations is stored separately and then destroyed upon expiry.
04 Disclosure to Third Parties
In principle, personal information is not shared with third parties. Exceptions apply only in the following cases.
| Recipient | Purpose | Items Provided | Retention Period |
|---|---|---|---|
| Square / Toss Payments | Payment processing | Payment method information, payment amount | 5 years after payment |
| Social login authentication | Google account identifier | Immediately upon authentication | |
| LINE Corporation | Social login authentication | LINE user ID | Immediately upon authentication |
| Kakao | Social login authentication | Kakao account identifier | Immediately upon authentication |
05 Outsourcing of Personal Information Processing
To provide smooth services, the following personal information processing tasks are outsourced.
| Processor | Outsourced Task | Retention Period |
|---|---|---|
| Microsoft Azure / AWS | Server infrastructure operation, data storage | Duration of service use |
| Email Delivery Service | Membership verification emails, notices | Immediately upon delivery |
| Square / Toss Payments | Payment processing and subscription management | 5 years after payment |
Outsourcing agreements include obligations to comply with privacy laws, maintain confidentiality, prohibit third-party disclosure, and bear liability in the event of an incident.
06 User Rights and How to Exercise Them
Users may exercise the following rights regarding their personal information at any time.
- Right of Access — Request to view the status of personal information processing
- Right to Rectification/Erasure — Request correction or deletion of inaccurate personal information
- Right to Restriction of Processing — Request temporary suspension of personal information processing
- Right to Withdraw Consent — Withdraw consent for collection, use, or disclosure (account deletion)
- Right to Data Portability — Request to receive personal information in a structured format
Requests can be made directly via Settings → Account Management in the app, or by emailing the Privacy Officer. Requests are processed within 10 business days.
07 Automated Data Collection (Cookies)
The Company uses cookies and similar technologies to operate the service.
| Cookie Type | Purpose | Retention Period |
|---|---|---|
| Authentication Cookie (Unis.Auth) | Maintaining login state, session management | 30 days (if "Stay logged in" is selected) |
| External Auth Cookie (Unis.External) | Social login processing | 15 minutes (deleted after authentication) |
| Security Cookie (CSRF Token) | Prevention of cross-site request forgery | Until session ends |
You may refuse cookie storage via browser settings; however, some services such as login may be restricted as a result.
08 Technical and Administrative Security Measures
- TLS/SSL encryption applied during personal information transmission
- Passwords stored using one-way hash encryption (BCrypt)
- Minimized DB access permissions and access log recording
- Protection against SQL Injection, XSS, and CSRF vulnerabilities
- Minimized personnel handling personal information with regular training
- Personal information breach response manual in operation
In the event of a personal information breach, users will be notified within 72 hours and the relevant authorities will be reported to.
09 Protection of Children Under 14
- UniS is intended for users aged 14 and older.
- Children under 14 may not register without consent from a legal guardian (parent, etc.).
- If information is found to have been collected without consent, it will be deleted immediately.
- Legal guardians may request access, correction, or deletion of a child's personal information.
10 Privacy Officer
The following Privacy Officer is designated to oversee personal information processing and handle user complaints and remedies.
| Category | Details |
|---|---|
| Company | GG Kingdom Co., Ltd. |
| Service | UniS (Archery Training Management System) |
| Privacy Officer | Representative |
| privacy@unis-app.com | |
| Business Hours | Weekdays 09:00–18:00 KST (excluding public holidays) |
- Korea Internet & Security Agency (KISA): privacy.kisa.or.kr / ☎ 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / ☎ 1833-6972
- Supreme Prosecutors' Office Cyber Investigation Division: www.spo.go.kr / ☎ 1301
- National Police Agency Cyber Investigation Bureau: ecrm.cyber.go.kr / ☎ 182