Privacy Policy

Effective: May 22, 2026  |  Version: 1.0

RMB ("we", "our", or "us") operates the GlowMatch application ("App"). This Privacy Policy explains how we collect, use, store, and delete your personal information in compliance with Korea's Personal Information Protection Act (PIPA) and applicable international privacy standards.

1. Information We Collect

• Account Information: Email address, name, profile photo (via Google / Kakao OAuth)
• Skin Analysis Results: AI-generated scores and skin type classification — original photos are deleted immediately after analysis
• Location Data: GPS coordinates for nearby clinic recommendations (used in real time only, never stored)
• Device Information: Push notification token (for service alerts)
• Clinic Accounts: Business registration number, business name, representative details (clinic partners only)

2. How We Use Your Information

• Delivering AI skin analysis results
• Recommending nearby clinics and beauty shops matched to your skin concerns
• Operating the price-request and clinic-matching service
• Providing your personal analysis history in-app
• Sending push notifications for service updates (e.g., clinic price offers)
• Preventing fraud and maintaining service security

3. Data Retention

• Account information: Until account deletion (deleted immediately upon request)
• Analysis results: Until account deletion or upon individual request
• Location data: Not stored — discarded after real-time processing
• Push tokens: Until notification opt-out or account deletion
• Legal obligations: Certain data may be retained longer if required by Korean law

4. Sharing Your Information

We do not sell or share your personal information with third parties except in these cases:

• Clinic matching: When you send a price request to a clinic, your skin analysis results (skin type and concerns) are shared with that clinic. Your identity (name, contact) is NOT shared.
• Legal requirements: When required by law or government authority

5. Sub-Processors

• Supabase Inc. — Database and authentication (USA, AWS)
• Google LLC — Gemini AI skin analysis, OAuth sign-in (USA)
• Railway Corp. — Backend API hosting (USA)
• Expo, Inc. — Push notification delivery (USA)

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Correct inaccurate data
• Deletion: Request deletion of your account and all associated data
• Restriction: Request that we stop processing your data
• Portability: Receive your data in a portable format

Exercise these rights via My Page → Request Data Deletion in the app, or by contacting us at the address below. We will respond within 10 business days.

7. Cookies & Tracking

The App stores a Supabase authentication token on your device to maintain your session. We do not use advertising cookies or third-party tracking SDKs.

8. Children's Privacy

GlowMatch is not directed at children under 14. If we become aware that a user is under 14, we will immediately delete their account and associated data.

9. Changes to This Policy

We will notify you of material changes via in-app notice or email before they take effect. Significant changes that affect your rights will require renewed consent.

10. Contact Us

Act on the Protection and Use of Location Information, Article 16

Location-Based Service Terms

Effective: June 1, 2026  |  Version: 1.0

Article 1 (Purpose)

These terms govern the rights, obligations, and responsibilities between KNA Co., Ltd. ("Company") and users regarding the location-based services provided through GlowMatch.

Article 2 (Service Provider)

• Company: KNA Co., Ltd. (GlowMatch)
• Address: 1004-1, 10F, 144 Wanjeong-ro, Seo-gu, Incheon, Korea
• Contact: glowmatch.official@gmail.com

Article 3 (Service Description)

• Service name: Nearby Clinic Search & Recommendation
• Description: Uses the user's current GPS location to search and recommend nearby skin care shops and dermatology clinics.
• Region: Nationwide (South Korea)
• Platform: iOS / Android

Article 4 (Location Data Collection & Use)

• Data collected: Current latitude and longitude (GPS)
• Purpose: Searching and ranking nearby clinics by distance
• Method: Collected via device GPS after the user grants location permission
• Frequency: Once per clinic search session (no background collection)

Article 5 (Retention & Deletion)

Location data is discarded immediately after clinic recommendations are generated and is never stored on our servers.

Article 6 (Third-Party Disclosure)

We do not share your location data with any third parties.

Article 7 (Right to Refuse & Consequences)

You may refuse to grant location permission. However, doing so will prevent you from using the nearby clinic search and recommendation feature.

Article 8 (Withdrawing Consent)

You may withdraw location permission at any time via your device settings: Settings > App Permissions > Location > Deny.

Article 9 (Disclaimer)

The Company is not responsible for inaccuracies in recommendations caused by GPS signal errors or inaccurate user-provided location data. Distances are approximate and for reference only.

Article 10 (Changes to These Terms)

Any changes to these terms will be announced in-app or on this page at least 7 days before taking effect.