Last updated: September 6, 2026 · Effective: July 1, 2026

PawMily ("Service") complies with the Personal Information Protection Act (PIPA) of Korea and other applicable laws to protect users' personal information. This Privacy Policy explains how we collect, use, and safeguard your data.

Article 1 — Information We Collect

We collect the following information during your use of the Service:

[Required] Email address, user ID (UUID, auto-assigned), device push token [Optional] Pet name, date of birth, photo, breed, gender, personality; family nickname and profile photo; diary text, attached photos, weather, mood, and activity records

Depending on how you sign up, we collect: · Email sign-up: email address and password (stored encrypted; the Service cannot read it) · Sign in with Apple: the email address and name provided by Apple. If you choose to hide your email, we receive only Apple's private relay address. · Sign in with Google: your Google account email address, name, and profile picture

If you use the family invitation feature, we retain the invitee's email address you enter until the invitation is accepted or cancelled.

Collection method: Information is collected directly when you enter it or upload photos within the app, or is passed to us by Apple or Google when you use their sign-in. Photos and videos are processed and compressed on your device before transmission; original camera files are never transmitted to or stored on our servers.

Article 2 — How We Use Your Information

① Account identification and authentication: sign-in, password reset, account recovery ② Service delivery: storing and viewing shared diaries, sharing content among PawMily members, family invitations ③ Notifications: alerts for comments, likes, and other interactions ④ Paid service operation: verifying and managing PawMily Plus subscription status ⑤ Service improvement: error analysis and feature enhancement

We do not use your information for any purpose beyond those listed above, nor do we sell it to third parties.

Article 3 — Retention Period

Personal information is retained while your account is active. Upon account deletion, data is destroyed within 30 days. Exceptions apply where retention is required by law:

• Contract records (E-Commerce Act): 5 years • Access log records (Communications Secrets Protection Act): 3 months

Article 4 — Data Deletion

Upon expiry of the retention period or achievement of the collection purpose, data is destroyed without delay. • Electronic files: permanently deleted using irrecoverable methods • Physical records: shredded or incinerated

Article 5 — Third-Party Disclosure

We do not share your personal information with third parties without your consent, except in the following cases: ① When required by law enforcement or government agencies ② Content you have directly set to share with PawMily members or PawFriends

Article 6 — Data Processing Delegation

We delegate certain data processing to the following provider:

· Supabase Inc. — Database hosting, file storage, account authentication · Functional Software, Inc. (Sentry) — Application error collection and analysis · RevenueCat, Inc. — Subscription purchase status verification and management · Apple Inc. — Sign in with Apple, push notification delivery (APNs) · Google LLC — Sign in with Google, push notification delivery (FCM)

Retention: Duration of each service agreement

These providers operate servers outside Korea, including in the United States, and comply with international data protection standards. Supabase operates on AWS infrastructure (Virginia, USA).

Article 7 — Your Rights

You may exercise the following rights at any time: ① Request access to your personal information ② Request correction of errors ③ Request deletion (account termination) — Settings > Delete Account ④ Request suspension of processing

Requests can be submitted via the in-app settings or to [email protected] and will be processed within 10 business days.

Article 8 — Security Measures

We implement the following measures to protect your personal information: ① Transmission encryption (TLS 1.3) ② Database access control (Row Level Security) ③ Principle of least privilege ④ Regular security audits

Article 9 — Privacy Officer

The officer responsible for personal information protection is:

Name: PawMily Privacy Team Email: [email protected]

Complaints and inquiries regarding personal information will be acknowledged and responded to promptly.