Last updated: June 19, 2026 · Effective: July 1, 2026

PawMily ("Service") complies with the Personal Information Protection Act (PIPA) of Korea and other applicable laws to protect users' personal information. This Privacy Policy explains how we collect, use, and safeguard your data.

Article 1 — Information We Collect

We collect the following information during your use of the Service:

[Required] Anonymous user ID (UUID, auto-assigned), device push token [Optional] Pet name, date of birth, photo, breed, gender, personality; family nickname and profile photo; diary text, attached photos, weather, mood, and activity records

Collection method: Information is collected directly when you enter it or upload photos within the app.

Article 2 — How We Use Your Information

① Service delivery: storing and viewing shared diaries, sharing content among PawMily members ② Notifications: alerts for comments, likes, and other interactions ③ Service improvement: error analysis and feature enhancement

We do not use your information for any purpose beyond those listed above, nor do we sell it to third parties.

Article 3 — Retention Period

Personal information is retained while your account is active. Upon account deletion, data is destroyed within 30 days. Exceptions apply where retention is required by law:

• Contract records (E-Commerce Act): 5 years • Access log records (Communications Secrets Protection Act): 3 months

Article 4 — Data Deletion

Upon expiry of the retention period or achievement of the collection purpose, data is destroyed without delay. • Electronic files: permanently deleted using irrecoverable methods • Physical records: shredded or incinerated

Article 5 — Third-Party Disclosure

We do not share your personal information with third parties without your consent, except in the following cases: ① When required by law enforcement or government agencies ② Content you have directly set to share with PawMily members or PawFriends

Article 6 — Data Processing Delegation

We delegate certain data processing to the following provider:

Processor: Supabase Inc. Purpose: Database hosting and file storage operations Retention: Duration of the service agreement

Supabase operates on AWS infrastructure (Virginia, USA) and complies with international data protection standards.

Article 7 — Your Rights

You may exercise the following rights at any time: ① Request access to your personal information ② Request correction of errors ③ Request deletion (account termination) — Settings > Delete Account ④ Request suspension of processing

Requests can be submitted via the in-app settings or to [email protected] and will be processed within 10 business days.

Article 8 — Security Measures

We implement the following measures to protect your personal information: ① Transmission encryption (TLS 1.3) ② Database access control (Row Level Security) ③ Principle of least privilege ④ Regular security audits

Article 9 — Privacy Officer

The officer responsible for personal information protection is:

Name: PawMily Privacy Team Email: [email protected]

Complaints and inquiries regarding personal information will be acknowledged and responded to promptly.