Privacy Policy

Yerim Park (the operator of the app “Bam,” hereinafter the “Operator”) complies with applicable laws and regulations, including the Personal Information Protection Act, and processes users’ personal information safely.

Article 1 (Categories of Personal Information Processed)

The Operator provides services without requiring sign-up and does not collect identifying information that users directly enter, such as name, email, or phone number.
However, the following information may be processed during service operation.

• Automatically collected data (server access logs): IP address, access date/time, request path (URL), response status code, User-Agent, app version, and OS information (to the extent available)
• Device-local stored data: favorites list and last selected event information (stored on the user’s device)
• Location information (optional permission): device location permission may be used to provide map features, and under current operations no location data is stored on or transmitted to the server.

Article 2 (Purpose of Processing Personal Information)

The Operator processes personal information for the following purposes.

• Service provision and operation
• Security, prevention of misuse, and incident response
• Access statistics analysis and service quality improvement

Article 3 (Processing and Retention Period)

• Server access logs: retained for 90 days from collection, then deleted
• Incident/security response logs: retained for 90 days from collection, then deleted
• Device-local stored data: until the user deletes the app or app data

Article 4 (Provision to Third Parties)

The Operator does not provide users’ personal information to third parties.
Exceptions apply where required by law or upon a lawful request from an investigative authority.

Article 5 (Outsourcing of Personal Information Processing)

For smooth service operation, the Operator may outsource certain tasks as follows.

• Service provider: Pinfory (Pinfory)
• Outsourced tasks: server hosting, log storage, and infrastructure operation
• Retention/use period: until the outsourcing contract ends or the purpose is achieved

Article 6 (Cross-Border Transfer of Personal Information)

Currently, there is no cross-border transfer of personal information.
If such transfer occurs in the future, this policy will be updated in advance with: recipient, destination country, transferred items, transfer date/method, purpose, and retention/use period.

Article 7 (Rights and Duties of Data Subjects and How to Exercise Them)

Users may request access, correction/deletion, suspension of processing, and withdrawal of consent regarding personal information.
Requests can be submitted via the contact listed in Article 10, and the Operator will take action without delay in accordance with applicable laws.

Article 8 (Destruction Procedures and Methods)

The Operator destroys personal information without delay once the retention period expires or the purpose of processing is achieved.

• Electronic files: permanently deleted using non-recoverable methods
• Printed materials: shredded or incinerated

Article 9 (Measures to Ensure Security)

The Operator implements the following measures to protect personal information.

• Minimization of access rights and access control
• Protection measures for logs and data
• Regular security inspections and internal management procedures

Article 10 (Chief Privacy Officer and Contact)

• Personal information processor (Operator): Yerim Park
• Chief Privacy Officer: Yerim Park
• Email: clairepark031@gmail.com

Article 11 (Remedies for Infringement of Rights)

Users may apply for consultation or remedies regarding personal information infringement through the organizations below.

• Personal Information Infringement Report Center: 118 (without area code) / https://privacy.kisa.or.kr
• Personal Information Dispute Mediation Committee: 1833-6972 (without area code) / https://www.kopico.go.kr
• Supreme Prosecutors’ Office: 1301 (without area code) / https://www.spo.go.kr
• Korean National Police Agency: 182 (without area code) / https://ecrm.police.go.kr

Article 12 (Changes to this Privacy Policy)

This policy takes effect on the effective date above. If any content is added, deleted, or revised, notice will be provided through the app or website.