Privacy Policy

< Liviet > ('https://www.gandanapp.com' and 'https://interfasting.app', hereinafter referred to as 'InterFasting') establishes and discloses the following privacy policy to protect the personal information of data subjects and to handle related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.

○ This Privacy Policy is effective from January 1, 2023.

Article 1 (Purpose of Processing Personal Information)

< Liviet > ('https://www.gandanapp.com' and 'https://interfasting.app', hereinafter 'InterFasting') processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following, and if the purpose of use changes, necessary measures such as obtaining separate consent under Article 18 of the Personal Information Protection Act will be implemented.

1. Website membership registration and management

Personal information is processed for the purpose of maintaining and managing membership status and preventing fraudulent use of services.

2. Provision of goods or services

Personal information is processed for the purpose of item delivery, service provision, and fee payment and settlement.

3. Use in marketing and advertising

Personal information is processed for the purposes of developing new services (products) and providing customized services, providing event and advertising information, and providing participation opportunities.

Article 2 (Processing and Retention Period of Personal Information)

① < Liviet > processes and retains personal information within the retention and use period required by law or the period agreed upon when collecting personal information from the data subject.

② The processing and retention period for each type of personal information is as follows:

1. < Website membership registration and management >
Personal information related to < Website membership registration and management > is retained and used for the above purposes for <3 years> from the date of consent to collection and use.
Basis for retention : Act on the Consumer Protection in Electronic Commerce, etc.
Related laws : Records on consumer complaints or dispute resolution : 3 years
Exceptions :
2. < Website membership registration and management >
Personal information related to < Website membership registration and management > is retained and used for the above purposes for <3 years> from the date of consent to collection and use.
Basis for retention : Act on the Consumer Protection in Electronic Commerce, etc.
Related laws : Records on contracts or cancellation of subscription : 5 years
Exceptions :

Article 3 (Items of Personal Information Processed)

① < Liviet > processes the following items of personal information.

1. < Website membership registration and management >
Required items : Login ID
Optional items : Home phone number, Home address, Mobile phone number

Article 4 (Matters Concerning the Provision of Personal Information to Third Parties)

① < Liviet > processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and as a rule, does not provide users' personal information to third parties.

How we use information collected from HealthKit API and Motion & Fitness API
- This app collects your health information from HealthKit API and Motion & Fitness API to provide health, exercise, or fitness services. This information is not used for marketing, advertising, or use-based data mining, including to third parties.
- This app accesses the following health data:
  - TotalCaloriesBurnedRecord: Used to record calories burned.
  - ActiveCaloriesBurnedRecord: Used to record active calories burned.
  - BodyFatRecord: Used to record body weight.
  - DistanceRecord: Used to record distance for exercises and steps.
  - ExerciseSessionRecord: Used to record exercises.
  - StepsRecord: Used to record steps.
  - WeightRecord: Used to record weight.
Sharing data with third parties
- This app complies with App Store guidelines and may share user data with analytics tools, advertising networks, and third-party SDKs. In such cases, the shared data will be provided to third parties that offer the same or equivalent level of protection as stated in this Privacy Policy.
The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements
- The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.
- Use in marketing and advertising Personal information is processed for the purposes of developing new services (products), providing customized services, providing event and advertising information, and providing participation opportunities.
- Sharing data with third parties This app complies with App Store guidelines and may share user data with analytics tools, advertising networks, and third-party SDKs
- Health Connect Data will not be used for any other purpose, including transfer to advertising platforms, data brokers, or information resellers
- Health Connect Sensitive Data will be protected by data protection mechanism (AES)

Article 5 (Matters Concerning Entrustment of Personal Information Processing)

① < Liviet > entrusts personal information processing tasks for smooth personal information handling as follows.

1. < Google Inc >
Entrusted entity (Trustee) : Google Inc (googlekrsupport@google.com)
Contents of entrusted work : Personal information included in the collection, use, retention, and destruction items
Entrustment period : Destroyed upon termination of the entrustment contract

2. < Amazon Web Service Inc >
Entrusted entity (Trustee) : Amazon Web Service Inc (cs-reply@amazon.com)
Contents of entrusted work : Personal information included in the collection, use, retention, and destruction items
Entrustment period : Destroyed upon termination of the entrustment contract

② < Liviet > specifies in documents such as contracts the prohibition of processing personal information for purposes other than performing the entrusted tasks, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages in accordance with Article 26 of the Personal Information Protection Act when concluding an entrustment contract, and supervises whether the trustee processes personal information safely.

③ If the contents of the entrusted task or the trustee changes, we will disclose it through this Privacy Policy without delay.

Article 6 (Procedure and Method of Destroying Personal Information)

① < Liviet > destroys the personal information without delay when the personal information becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of processing has been achieved.

② If personal information must be preserved according to other laws despite the expiration of the personal information retention period agreed upon by the data subject or the achievement of the processing purpose, the personal information is transferred to a separate database (DB) or stored in a different location.
1. Legal basis :
2. Items of personal information preserved : Account information, transaction date

③ The procedure and method for destroying personal information are as follows.
1. Destruction procedure
< Liviet > selects the personal information that requires destruction and destroys the personal information with the approval of the Privacy Officer of < Liviet >.

2. Destruction method

Information in the form of electronic files uses technical methods that cannot reproduce the records.

Article 7 (Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising Them)

① The data subject may exercise the right to view, correct, delete, or suspend the processing of personal information at any time against Liviet.

② The exercise of rights pursuant to Paragraph 1 can be done in writing, by e-mail, or by facsimile (FAX) in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and Liviet will take action without delay.

③ The exercise of rights pursuant to Paragraph 1 may be done through an agent such as a legal representative of the data subject or a delegated person. In this case, you must submit a power of attorney in accordance with Form No. 11 of the "Notice on the Method of Processing Personal Information (No. 2020-7)".

④ Requests to view and suspend the processing of personal information may be restricted under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.

⑤ A request for correction or deletion of personal information cannot be made if the personal information is specified as a collection target in other laws.

⑥ Liviet confirms whether the person making the request to view, correct, delete, or suspend processing according to the data subject's rights is the person themselves or a legitimate representative.

Article 8 (Matters Concerning Measures to Ensure the Safety of Personal Information)

< Liviet > takes the following measures to secure the safety of personal information.

1. Establishment and implementation of an internal management plan
We establish and implement an internal management plan for the safe processing of personal information.

2. Minimization and training of employees handling personal information
We implement measures to manage personal information by designating employees who handle personal information and minimizing them to only the person in charge.

3. Restriction of access to personal information
We are taking necessary measures to control access to personal information through granting, changing, and canceling access rights to the database system that processes personal information, and we are controlling unauthorized access from outside using an intrusion prevention system.

4. Storage of access records and prevention of forgery
We store and manage records of access to the personal information processing system for at least one year. However, if personal information is added for more than 50,000 data subjects or if unique identification information or sensitive information is processed, it is stored and managed for at least two years.
In addition, security features are used to prevent access records from being forged, stolen, or lost.

Article 9 (Matters Concerning the Installation, Operation, and Refusal of Devices That Automatically Collect Personal Information)

Liviet does not use 'cookies' that store and retrieve the data subject's usage information from time to time.

Article 10 (Matters Concerning the Collection, Use, Provision, and Refusal of Behavioral Information)

Matters concerning the collection, use, provision, and refusal of behavioral information

< Name of Personal Information Controller > does not collect, use, or provide behavioral information for customized online advertising.

Article 11 (Criteria for Additional Use and Provision)

< Liviet > may additionally use and provide personal information without the consent of the data subject in consideration of the matters set forth in Article 14-2 of the Enforcement Decree of the Personal Information Protection Act in accordance with Article 15, Paragraph 3 and Article 17, Paragraph 4 of the Personal Information Protection Act. Accordingly, < Liviet > has considered the following matters in order to provide additional use and provision without the consent of the data subject.
▶ Whether the purpose of additional use and provision of personal information is relevant to the original purpose of collection

Article 12 (Matters Concerning the Privacy Officer)

① Liviet is generally responsible for the processing of personal information, and has designated a Privacy Officer as follows to handle complaints and damage relief from data subjects related to personal information processing.

▶ Privacy Officer
Name : Kim Yun-hoo
Position : CEO
Contact : 0507-0177-3816, support@liviet.app

※ This connects to the Personal Information Protection Department.

▶ Personal Information Protection Department
Name : Kim Yun-hoo
Position : CEO
Contact : 0507-0177-3816, support@liviet.app

② Data subjects may inquire about all personal information protection-related inquiries, complaint handling, and damage relief that occurred while using Liviet's services (or business) to the Privacy Officer and the relevant department. Liviet will answer and process the data subject's inquiries without delay.

Article 13 (Remedies for Infringement of Rights and Interests of Data Subjects)

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Report Center, etc. to receive relief for personal information infringement. For other reports and consultations on personal information infringement, please contact the institutions below.

1. Personal Information Dispute Mediation Committee : (Without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Report Center : (Without area code) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office : (Without area code) 1301 (www.spo.go.kr)
4. National Police Agency : (Without area code) 182 (ecrm.cyber.go.kr)

A person who has suffered infringement of rights or interests due to a disposition or omission made by the head of a public institution in response to a request under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the "Personal Information Protection Act" may request administrative appeals as prescribed by the Administrative Appeals Act.

※ For detailed information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).

Article 14 (Changes to the Privacy Policy)

① This Privacy Policy is effective from January 1, 2023.