PIKI

Piki Privacy Protection Policy

Piki strictly adheres to the laws related to information and communications networks, including the Information and Communications Network Act ("ICNA") and the Personal Information Protection Act, as well as domestic privacy protection laws. Additionally, we comply with international standards such as the OECD Privacy Protection Guidelines to provide our services.
 

Article 1: Overview and Significance of the Privacy Policy
Piki collects, uses, and provides personal information based on user consent and actively ensures the user's rights (self-determination of personal information). Furthermore, Piki complies with the relevant laws, privacy protection regulations, and guidelines that information service providers must adhere to in South Korea. The "Privacy Policy" refers to the guidelines that Piki must follow to protect users' valuable personal information, enabling them to use the services with peace of mind. 
This privacy policy applies to all Piki services.
 

Article 2: Personal Information Collected (Mandatory Notice)
We collect the minimum personal information necessary for providing the service.
1.    Personal Information Collected During Membership Registration
① Piki Account
a. [Mandatory] Email, password, agreement to terms of service, agreement to the privacy policy
b. [When verifying identity] User verification value (CI), duplicate registration check information (DI) via email
② Additional Information Collected During Service Use
a. [Mandatory] Nickname, mobile phone number, device identification information (IMEI, OS information, etc.), service usage records, payment history
b. [Optional] Profile picture, personal location information (GPS, IP address), device address book (for adding friends, recommendations), delivery address information (recipient name, address, phone number)
③ When Legal Guardian Consent is Provided
a. Legal guardian information (name, gender, date of birth, mobile phone number, encrypted CI, DI)
④ When Using Paid Services
a. [Credit card payment] Partial card number, card issuer name, etc.
2.    Personal Information Collected During Service Usage
① Device information (OS, screen size, device ID, phone model, model name)
② IP address, cookies, visit time, service usage records, fraudulent activity records
③ Inquiry consultation information (transaction, deposit/withdrawal-related consultation details, time, processing results, etc.)
※ Mandatory items refer to the essential information required to perform the fundamental functions of the service, while optional items do not impact service use but are collected to provide additional value to the user. For some services, additional personal information may be collected after user consent to provide specialized features beyond the common information collected in the "Piki account."

Article 3: Methods of Collecting Personal Information
When collecting personal information, Piki always informs the user in advance and obtains their consent. We collect personal information through the following methods:
1.    Personal information provided directly by the user during registration or service use
2.    Personal information received from affiliate services or organizations
3.    Information collected during consultations through the customer service center via phone or email
4.    Participation in online and offline events and promotions
5.    Device information and other generated data automatically collected during service use
 

Article 4: Purpose of Using Personal Information
The collected personal information is used for the following purposes:
•    Member Management: Account registration, identity verification, legal guardian consent verification, prevention of account misuse
•    Service Provision: Message transmission, friend registration and recommendations, personalized content delivery
•    Payment and Billing: When using paid services
•    Security and Prevention of Fraudulent Use: Detection and blocking of abnormal service use
•    Service Improvement: Development of new services and personalized service provision
•    Marketing and Advertising: Event and promotion notifications, advertising effectiveness analysis
Additionally, it is used for identity verification, preventing unauthorized use, confirming the intention to register or preventing duplicate registrations, record retention for dispute resolution, handling complaints, inquiries, and notifications.
 

Article 5: Retention and Use Period of Personal Information
• When a member ends service usage or requests membership cancellation, personal information will be promptly destroyed.
• However, if the law mandates retention for a certain period, the information will be safely stored and deleted after the retention period.
Retention Period According to the Law:
• Electronic commerce-related records (5 years)
• Contract or withdrawal records (5 years)
• Payment and consumer protection-related records (3-5 years)
• Website visit records (3 months)
 

Article 6: Provision of Personal Information to Third Parties
Piki generally does not provide personal information to external parties. However, personal information may be provided if required by law or with the user’s consent.
 

Article 7: User Rights and How to Exercise Them
•    Users can view, modify, or delete their personal information at any time through the [My Account] menu.
•    Users can request the cessation of processing their personal information, although exceptions may apply where required by law.
•    Legal guardians can request the viewing, modification, or deletion of personal information for users under the age of 14.
•    Upon receiving a user request, Piki will take prompt action and notify the user if their personal information has been shared with a third party.

Article 8: Measures for Protecting Personal Information
The company implements the following measures to securely manage users' personal information:
8.1 Administrative Measures
• Establishment and implementation of an internal plan for personal information protection
• Restriction and management of access rights
• Strengthening employee security training
8.2 Technical Measures
• Encryption of personal information (passwords, emails, authentication information, etc.)
• Operation of hacking and virus prevention systems
• Retention of access logs and prevention of forgery
8.3 Physical Measures
• Access control to data centers
• Strengthening security for document storage facilities
8.4 Appointment of Personal Information Protection Officer
• The company has appointed a Personal Information Protection Officer to oversee and take full responsibility for the processing of personal information. The officer will also handle complaints from data subjects and provide remedies for any damage related to personal information processing.

o      Privacy Protection Officer: Hwang Jung Kyu
         Email: [email protected]
         Phone: 070-4789-4987

o      Privacy Protection Manager: Lee Haesuk
         Email: [email protected]
         Phone: 070-4789-4987
 

Article 9: Children's Personal Information Protection Policy
9.1 Collection and Use of Children’s Personal Information
• PikiTalk does not collect personal information from children under the age of 13 and restricts service usage for them.
• Personal information of child users will not be collected without the consent of the legal guardian.
9.2 Measures for Protecting Children’s Personal Information
• Children’s personal information is encrypted during storage and transmission and will not be shared externally.
• PikiTalk applies access restrictions and protective measures to ensure that children’s personal information is not used improperly.
9.3 Deletion of Children’s Personal Information and Rights of Guardians
• Guardians may request to view, modify, or delete their child’s personal information, and such requests will be processed immediately upon receipt.
• If a guardian wishes to delete a child’s account, they can request deletion through customer service.
9.4 Restriction on Providing Children’s Personal Information to Third Parties
• PikiTalk does not provide children’s personal information to third parties without the consent of the legal guardian.
• However, in exceptional cases, it may be provided to law enforcement agencies upon legal request.
9.5 Personal Information Protection Officer for Children
To promptly respond to requests regarding the protection of children’s personal information and their rights, the company designates a Personal Information Protection Officer for children’s data.
o    Name: Lee Gunju
       Department: Operations
       Email: [email protected]
       Phone: 070-4789-4987
 

Article 10: Installation and Operation of Automatic Collection Devices for Personal Information
•    Cookies and similar technologies may be used to automatically collect user information during the service use.
•    Users can refuse or delete cookies through their web browser settings.
 

Article 11: Scope of Application of the Privacy Policy
This privacy policy applies to Piki and related services (including mobile web/apps). If personal information is collected from other services, it will be subject to the privacy policy of that service, and this policy will not apply once the information is provided with the user’s consent.
 

Article 12: Personal Information Protection Officer and Contact Information
For any inquiries related to personal information protection, please contact:
o   Personal Information Protection Officer: Hwang Jeongkyu
     Email: [email protected]
     Customer Service: 070-4789-4987
 

Article 13: Revision of Privacy Policy
If Piki revises the privacy policy, it will notify users at least 7 days prior, and if there are significant changes to user rights, at least 30 days in advance.

Supplementary Provisions
1.    These privacy protection guidelines will be effective starting from March 20, 2025.
2.    The major revision details are as follows: 
       -Article 9: Establishment of Child Personal Information Protection Policy.
3.    If users continue to use the service after the revised privacy protection guidelines come into effect, they will be deemed to have agreed to the revised guidelines.
4.    Revision History 
      -November 22, 2023, revision (discarded)
      -April 7, 2023, revision (discarded)