1. Purpose of Personal Information Collection

Buddha AI ("Company") collects and uses personal information for the following purposes:

• Service Provision: Personalized meditation content recommendations and AI counseling services
• Account Management: User authentication, account creation, and security management
• Service Improvement: App functionality enhancement, user experience improvement, service quality enhancement
• Customer Support: Inquiry handling, technical support, notification delivery
• Subscription Management: Payment processing, subscription status management, refund processing
• Statistical Analysis: Service usage analysis and improvement direction establishment

2. Personal Information We Collect

2.1 Required Information

• Google Sign-in: Email address, name, profile picture
• App Usage Records: Meditation session records, progress, preference information
• Conversation Content: AI counseling conversation records (anonymized)

2.2 Automatically Collected Information

• Device Information: iOS version, device model, unique identifiers
• App Usage Logs: Access time, used features, error logs
• Network Information: IP address, access region (country level)

2.3 Optional Information

• Push Notifications: Notification reception consent
• Marketing Information: Event and promotion information reception consent

3. Data Retention Period

• Account Deletion: Immediate deletion (except information required by law)
• Inactive Period: Deletion after 3 years of inactivity with prior notice
• Legal Retention:
  • Contract or withdrawal records: 5 years (E-commerce Act)
  • Payment and supply records: 5 years (E-commerce Act)
  • Consumer complaint or dispute records: 3 years (E-commerce Act)

4. Data Destruction Procedures and Methods

4.1 Destruction Procedures

• Immediate destruction upon expiration of retention period or achievement of processing purpose
• Safe processing to prevent recovery and regeneration during destruction

4.2 Destruction Methods

• Electronic Files: Complete deletion using technical methods
• Paper Documents: Shredding or incineration

5. Third-Party Data Sharing

We do not share personal information with third parties, except in the following cases:

• With explicit prior consent from users
• As required by law or requested by investigative agencies
• When necessary for service provision (after prior consent)

6. Data Processing Partners

We outsource personal information processing to the following partners for service improvement:

• Google Firebase: Data storage, user authentication, app analytics
• Google Analytics: App usage analytics
• Apple Inc.: Subscription and payment processing (App Store)

We will notify you through this privacy policy when outsourcing partners change.

7. User Rights and Exercise Methods

Users have the following rights and can exercise them at any time:

• Right to Access: Check personal information processing status
• Right to Rectification/Deletion: Request correction and deletion of personal information
• Right to Restrict Processing: Request suspension of personal information processing
• Right to Compensation: Compensation for damages caused by personal information infringement

8. Children's Privacy Protection

• We obtain consent from legal guardians when processing personal information of children under 14
• Children's personal information is more strictly protected and collected only to the minimum extent necessary
• For inquiries about children's personal information processing, contact our Data Protection Officer

9. Data Protection Officer

• Data Protection Officer: johyowon
• Email: johyowon99@gmail.com
• Contact: Use in-app inquiry feature
• Responsibilities: Overall management of personal information processing, handling privacy-related complaints

10. Data Security Measures

• Technical Measures:
  • Data encryption through Firebase security system
  • Secure data transmission via HTTPS protocol
  • Access control system operation
  • Security program installation and updates
• Administrative Measures:
  • Minimization and training of personal information handlers
  • Regular security checks and updates
  • Personal information processing system access authority management

11. Privacy Violation Report Centers

For reports or consultations regarding privacy violations, you can contact the following organizations:

• Privacy Violation Report Center: privacy.kisa.or.kr (Dial 182)
• Privacy Dispute Mediation Committee: www.kopico.go.kr (Dial 1833-6972)
• Supreme Prosecutors' Office Cyber Crime Investigation Unit: www.spo.go.kr (02-3480-3571)
• National Police Agency Cyber Safety Bureau: cyberbureau.police.go.kr (Dial 182)

12. Privacy Policy Changes

• This privacy policy is effective from September 11, 2025
• Content may be modified due to changes in laws, policies, or security technologies
• We will notify you at least 7 days in advance through in-app notices or push notifications when revising
• Important changes will be notified 30 days in advance, and re-consent will be obtained when necessary