Privacy Policy

WantFit (hereinafter referred to as the "Company") values the privacy of its users and complies with relevant laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Personal Information We Collect

We collect the following personal information to provide our services:

A. Information Collected During Registration

• Required: Email address, password (except for social login), nickname
• Optional: Profile image, bio

B. Information Collected Through Social Login

• Google: Email, name, profile image
• TikTok: User ID, nickname, profile image, public video information
• Instagram: User ID, username, profile image, media information

C. Information Automatically Collected During Service Use

• IP address, access logs, cookies, service usage records, device information

2. Purpose of Collecting and Using Personal Information

We use the collected personal information for the following purposes:

1. Member Management: Identity verification, member identification, prevention of unauthorized use
2. Service Provision: Creator homepage creation, content delivery, personalized services
3. SNS Integration: TikTok, Instagram account linking and content synchronization
4. Affiliate Services: Product recommendations, revenue settlement, transaction record management
5. Marketing and Advertising: Event information and promotional communications (with consent)
6. Service Improvement: New service development, statistical analysis, quality enhancement

3. Retention and Use Period of Personal Information

We retain personal information only for the period necessary to fulfill the purposes for which it was collected. However, we may retain information for longer periods as required by applicable laws:

• Records of contracts or withdrawal: 5 years (E-Commerce Act)
• Records of payment and supply of goods: 5 years (E-Commerce Act)
• Records of consumer complaints or disputes: 3 years (E-Commerce Act)
• Access logs: 3 months (Communications Privacy Act)

4. Provision of Personal Information to Third Parties

We do not provide personal information to third parties without user consent, except in the following cases:

1. When the user has given prior consent
2. When required by law or requested by investigative agencies in accordance with legal procedures

5. Outsourcing of Personal Information Processing

We outsource personal information processing to the following service providers:

6. SNS Integration Services

We provide integration services with social media platforms such as TikTok and Instagram. When using SNS integration, personal information is processed as follows:

A. TikTok Integration

• Information collected: TikTok user ID, nickname, profile image, public video information
• Purpose: Display TikTok content on creator homepage, provide follower statistics
• Retention period: Until integration is disconnected

B. Instagram Integration (Instagram API)

Our app collects data through the Instagram API, including the following:

• Information collected: Instagram user ID, username, profile image, media information (posts, reels), insights data
• Purpose: Display Instagram content on creator homepage, provide follower statistics and performance analytics
• Retention period: Until integration is disconnected

Users can disconnect SNS integration at any time through service settings. Upon disconnection, all information collected from that SNS will be immediately deleted.

7. Destruction of Personal Information

We destroy personal information without delay when it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.

A. Destruction Procedure

Information entered by users is transferred to a separate database after the purpose is achieved and destroyed according to internal policies and applicable laws.

B. Destruction Method

• Electronic files: Deleted using technical methods that prevent recovery
• Paper documents: Shredded or incinerated

8. User Rights and How to Exercise Them

Users have the following rights as data subjects:

1. Right to Access: You may request to view your personal information.
2. Right to Rectification/Deletion: You may request correction or deletion of inaccurate information.
3. Right to Suspend Processing: You may request suspension of personal information processing.
4. Right to Withdraw Consent: You may withdraw consent to the collection and use of personal information.

These rights can be exercised through service settings or by contacting our customer service. We will take necessary action without delay.

9. Use of Cookies

We use cookies to provide personalized services. Cookies are small text files sent by our server to your browser.

• Purpose of cookies: Login maintenance, user settings storage, service usage analysis
• How to refuse cookies: You can refuse cookies through browser settings. However, refusing cookies may limit some service features.

10. Security Measures for Personal Information

We implement the following measures to ensure the security of personal information:

1. Administrative measures: Internal management plan, regular employee training
2. Technical measures: Encryption of personal information, access control, security software
3. Physical measures: Access control to server rooms and data storage areas

11. Privacy Officer

We have designated a Privacy Officer to oversee personal information processing and handle user inquiries and complaints:

For other privacy-related inquiries or complaints, please contact:

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)

12. Changes to Privacy Policy

This Privacy Policy is effective from the date of implementation. Any changes due to legal requirements or policy updates will be announced at least 7 days prior to implementation through our website.