RoostDay

This is an English translation of the Korean original. If the two differ, the Korean version prevails.

The Company collects only the minimum personal information necessary to provide the service and does not use the information it collects for any purpose other than those set out below. This Policy applies to the entire RoostDay service.

1. Purposes of processing

Identifying members, keeping them logged in, and verifying group membership.
Creating and sending invitations, providing shared albums, and storing photos and making them available for viewing.
Payment for paid services, issuing receipts, and processing refunds.
Responding to service errors, preventing fraudulent use, and answering inquiries.
Sending notifications — delivering notifications about a service you are using, such as new photos, comments, mentions and to-dos assigned to you, to the devices where you have turned notifications on. Advertising notifications are not part of this purpose and go only to people who have separately consented.
Account protection — recovering the account of a member who has turned on two-step verification and can no longer use their authenticator app, showing signed-in devices and signing them out remotely, alerting you to sign-ins from an unusual country, and sending account security notices (two-step verification turned on, off or reset, recovery email changed, account deletion requested).

2. Information we collect

Sign-up — the email address and profile image provided by your Kakao or Google account, and the nickname you enter.
Generated while you use the service — photos and videos you upload and their capture information (capture time, device information, capture location), comments, group participation history, and invitation link usage history.
Collected automatically — cookies that keep you logged in. In addition, when you give consent and when an action touches personal information, we record the IP address and browser information at that moment (used only as evidence for consent records and access records).
Usage statistics — which screens you open and which menus you tap, the type of device and browser, and your approximate region (Section 10).
Sign-in records — each time you sign in, the time, device and browser information, IP address, and the country inferred from the IP address. You can see them yourself in Settings → Devices and sign-ins.
Payment — payment method type, payment approval number, payment amount, and payment date and time. For in-app purchases made in the apps, we also keep the order number and purchase token issued by the store (used to re-verify the purchase with the store and to check whether it was refunded). The Company does not store full card numbers or bank account numbers; on the web these are processed by Toss Payments, and in the apps by each store.
Notifications — for each device on which notifications are turned on, we store a notification token, the device name (the type of browser or app), and the time it was last used. You can see the list of devices in Settings and turn them off one at a time.
Two-step verification — only for members who set up two-step verification: the address entered as the recovery email, whether and when that address was verified, and when and how many times a verification code was sent. Verification codes are stored only as hashes, never as the original digits, and cannot be used after 10 minutes. We do not collect this from members who do not set up two-step verification.
Optional input — bank account details for monetary gifts shown on an invitation. The invitation is created as usual even if you leave them out.

3. Photo storage and location information

Both original photos and the converted versions used for viewing are stored in Cloudflare R2. The Company's own server makes those converted versions and puts them in the same storage.
The Company's servers are not on the upload path — photos are sent directly from your browser to storage.
After upload, to find overlapping photos, our server reads each photo once and sends it to Google Vertex AI, receiving 512 numbers (a vector) that represent the scene. What the Company newly retains in this process is that vector.
The app does not downscale photos before upload. The original image quality and capture time are preserved as they are.
If a photo contains its capture location (GPS), immediately after upload we extract the area name at the city/county/district (si·gun·gu) level and the capture time zone, and then remove the location information from the original file. No coordinates remain in downloaded files either.
The Company keeps the capture coordinates contained in photos as they are, without rounding, and shows them at their exact location on the album map. The map and coordinates are visible only to members of that album. For photos you do not want on the map, turn off location on your device before taking them, or remove the location information before uploading.
Location information is used only to show photos together on a map and to sort capture times in the correct time zone. It is not provided to outside parties or used for any other purpose.

4. Retention periods

Member information — until account deletion becomes final. A deletion request becomes final 30 days later; at that point we delete the nickname and profile photo (see Section 5 for details).
Sign-in records — 90 days, after which a daily cleanup job deletes them.
Free albums — original retention for 30 days from the first photo's date (or 30 days from the date of creation, whichever is later), and viewing for 180 days from the date of creation. The original retention period is also the period during which photos can be uploaded, and it does not start while the album has no photos. After the viewing deadline, the album is locked, and albums that have passed 270 days are added to the list of albums subject to destruction. If a storage extension is purchased for a locked album, the viewing deadline is extended by five years and the point at which it joins that list moves with it, to 90 days after the new viewing deadline. For free albums created before this period was set, originals keep the deadline set at that time (90 days from the date of creation).
Albums with an album pass — original retention is extended to 12 months for Album pass M, 12 months for Album pass L, and 12 months for the Business annual pass, counted from the first photo date (the capture time of the earliest photo in that album); viewing becomes 5 years; and the album is removed from destruction eligibility. Payment never brings forward a deadline that has already been set — for an album whose first photo date is long past, the deadline that applied before payment remains as it is.
Photos moved to the trash — 15 days. They can be restored at any time within that period and disappear after it.
Recovery email — until the member withdraws, or until it is replaced with another address. It is deleted on withdrawal, and once a new address is verified, the previous address is replaced by it and not kept. Verification codes expire after 10 minutes and are deleted when used or when a new code is requested.
Notification tokens — until you turn notifications off on that device. Turning them off in settings deletes the token at that moment. If a device turns out to be gone when we send, we mark it so we stop sending to it.
Consent records — kept even after a member withdraws. The fact that consent was obtained is itself evidence, so we do not delete them.
Access records — 1 year (366 days). We record only actions that touch personal information, such as logging in, downloading a group member list, or taking down another person's photo. We do not record moving between screens.
Statutory retention — records of contracts and order withdrawals: 5 years; records of payments and supply of goods: 5 years; records of consumer complaints and dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce). Access logs under the Protection of Communications Secrets Act: 3 months.

5. Destruction procedures and methods

When a member deletes a photo, it stops being visible in the album and goes to the trash. To prevent accidental loss, it is kept in the trash first.
Photos that have been in the trash for more than 15 days are deleted from storage by a cleanup job that runs daily.
If you choose "Delete forever" in the trash instead of waiting 15 days, the photo is deleted from storage right away. The person who uploaded the photo and the host can do this, and it cannot be undone.
When an album is deleted, every photo and video in it, originals included, is deleted from storage right away, with no grace period. Photos other members uploaded, photos in the trash, and photos waiting for review are deleted too, and none of it can be restored. The host can delete an album, and in groups where "Members can delete albums" is turned on in the group settings, members can too.
When we delete files from storage, we also delete the copies kept on our content delivery network (CDN) for fast delivery. Copies that were already downloaded, or that remain in the browser on someone else's device, cannot be deleted by the Company.
If another photo refers to the same file (for example, the same photo uploaded to another album), the file is deleted only after all such references are gone.
Albums and groups that members have not deleted are not destroyed automatically. Those past their deadlines are compiled into a list and deleted after a person has reviewed them — because losing photos is the greatest risk in this service.
When you request account deletion, you are signed out on every device, and the deletion becomes final 30 days later. You can cancel by signing in again before then, and nothing is deleted until it is final. Once final, we delete your nickname, profile photo, and two-step verification recovery email, and you leave every group you belong to. You can sign up again with the same account, but your previous groups and records do not carry over.
Photos you uploaded to albums and posts you left remain after withdrawal, because other participants are viewing those albums with you. You can delete photos you uploaded yourself before withdrawing; after withdrawing, please make a request to the contact below.
If you want the account used for login itself to be completely deleted, please make a request to the contact below.
Electronic files are deleted using methods that make them unrecoverable.

6. Provision to third parties

The Company does not provide or sell personal information to third parties.
Your nickname, profile image, uploaded photos, and comments being visible to participants in the same group is a function of the service itself, not provision to a third party.
Information may be provided only where required by law or requested by investigative authorities through lawful procedures, and even then it is limited to the minimum requested.

7. Outsourced processing and transfer abroad

To operate the service, we outsource the processing of personal information to the parties below. They process it only within the scope of the outsourced purpose.
Supabase — storing member, group, and album records. Data is stored in the Korea (Seoul) region, and the operating entity is a U.S. corporation.
Cloudflare — photo and video storage (R2), and delivery of viewing copies of photos to users who connect from outside Korea (Workers). The operating entity is a U.S. corporation.
Vercel — service hosting. Requests are processed in the Korea (Seoul) region, and the operating entity is a U.S. corporation.
Google — sending notifications (Firebase Cloud Messaging), generating scene vectors to find overlapping photos (Vertex AI), sending receipt, verification, and security notice emails (Gmail API), processing in-app purchase approvals, cancellations, and refunds for the Android app (Google Play), and usage statistics (Google Analytics · Firebase Analytics). The operating entity is a U.S. corporation, and processing also takes place outside Korea.
Apple — processing in-app purchase approvals, cancellations, and refunds for the iOS app (App Store). The operating entity is a U.S. corporation, and processing also takes place outside Korea.
Toss Payments — processing payment approvals, cancellations, and refunds on the web. Processed in Korea.
The information transferred is limited to what is necessary for each purpose above; it is transferred at the time the service is used, by transmission over information and communications networks. It is retained until the outsourcing contract ends. If you do not want your information transferred, you can refuse by withdrawing your membership; however, you will then be unable to use the service.

8. Rights of data subjects and how to exercise them

Members may at any time request access to, correction of, or deletion of their personal information, or suspension of its processing, and may withdraw consent by withdrawing their membership.
You can take down photos you uploaded yourself at any time. Because only people who have signed up and joined a group can upload photos, the photos you uploaded always remain linked to your account and can be found.
A person who appears in a photo may request that it be taken down even if they did not upload it.
You can exercise these rights on the profile screen in the service or by making a request to the contact below, and you may also do so through a representative.
Contact: support@dxplan.kr

9. Children under 14

The Company does not accept sign-ups from children under 14. We confirm at sign-up that you are 14 or older.
If we learn that a user is under 14, we suspend the account and, after confirming this, destroy the personal information collected without delay.
If you find such an account, please let us know at the contact below.

10. Automatic collection tools (cookies) and how to refuse them

The Company uses cookies to keep you logged in.
To improve the service, we collect usage statistics — which screens you open and which menus you tap, the type of device and browser, and your approximate region. On the web, Google Analytics uses a cookie, and in the apps, Firebase Analytics uses an identifier tied to each app installation, to group visits from the same visitor. We do not send the identifiers or names of groups, albums, or invitations contained in screen addresses, nor any photos or text.
These statistics are not used for advertising. Ad personalization and Google signals are turned off, and we do not collect behavioral information for targeted advertising.
You can refuse cookies in your browser settings. However, you will not stay logged in, so you cannot use features that require login. To block only the statistics, you can use your browser's tracking protection or the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).
The Company does not make automated decisions about users.

11. Security measures

We encrypt data both in transit and at rest.
We record each sign-in and notify you by email and notification when your account is signed in from a country you don't usually use. Sign-ins left unused for 30 days end automatically.
Every lookup is checked for group membership (access control at the database level). Knowing a link does not open someone else's album.
Public identifiers are random values rather than sequential numbers, so knowing one address does not let anyone guess the album next to it.
Photo uploads and downloads take place only through temporary addresses that expire quickly.
Invitations and albums are blocked from being collected by search engines.
When you give consent, we record the IP address and browser information at that moment, so that it can be verified when you consented and to what.
Actions that touch personal information are kept as access records — who (account), when, from where (IP), whose information, and what was done. They are kept for 1 year, and the permissions themselves are blocked so that these records cannot be altered or deleted.

12. Chief Privacy Officer

Chief Privacy Officer: Suyoung Ahn (CEO)
Contact: support@dxplan.kr · 070-8866-8436
Requests for access and inquiries about personal information are received at the contact above, and we respond without delay.

13. Remedies for infringement of rights

Personal Information Dispute Mediation Committee — 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center — 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office, Cyber Investigation Division — 1301 (www.spo.go.kr)
Korean National Police Agency, Cyber Investigation Bureau — 182 (ecrm.police.go.kr)

14. Changes to this Policy

When we change this Policy, we post the reasons for and details of the change within the service starting 7 days before the effective date (30 days before, for changes unfavorable to users).
We will send you previous versions on request.
Effective date: September 1, 2026

Privacy Policy