This is an English translation of the Korean Privacy Policy. If there is any difference between the two, the Korean version prevails.
MONDAY OVERSLEEP CLUB Inc (the "Company") complies with the Personal Information Protection Act of Korea and other applicable laws, and processes the personal information of members of the Xames service (the "Service") as follows.
1. Personal Information We Collect
- Required: encrypted email address, password, date of birth, nickname, profile photos, profile information (including sensitive information), matching location
- Optional: answers to profile questions
- Collected automatically: service usage records, IP address, device information, error logs, app usage statistics, push notification token
- How we collect: members enter information directly when signing up and setting up their profile, and some information is generated automatically while using the app.
2. Processing of Sensitive Information
- For effective matching, the Company processes sensitive information such as sexual position preference, religion and political views, and obtains separate consent for it at sign-up. Sensitive information is used only for matching, and is destroyed when the member deletes their account.
- Because sensitive information is essential to the Service, members cannot sign up without consenting. To withdraw consent, members can delete their account.
- Sensitive information may be shown on profiles visible to other members, and members can change whether some items are shown in the settings.
3. Purposes of Use
The Company uses personal information only for the following purposes and will notify members in advance if the purposes change.
- Providing the Service and operating matching
- Member management and security (sign-up verification, blocking minors, handling reports, preventing misuse, etc.)
- Improving the Service and sending event information (with consent), etc.
4. Provision to Third Parties
The Company does not provide members' personal information to third parties, except as required by law or when requested by investigative agencies or courts under legal procedures.
5. Outsourcing of Processing
The Company entrusts the processing of personal information as follows to provide the Service, and its outsourcing contracts include the terms necessary to keep personal information secure.
| Service provider | Task | Retention period |
|---|---|---|
| Supabase, Inc. | Member data storage, server operation | Until account deletion or the end of the contract |
| Apple Inc. / Google LLC | In-app payment, subscription verification, push notification delivery | According to each company's terms and retention policies |
| Google LLC (Firebase) | Usage statistics, app error collection | Error logs 90 days, usage statistics 14 months |
6. Retention and Destruction
The Company destroys personal information without delay when a member deletes their account or the purpose of use has been achieved. However, the following information is stored separately for the stated period and then destroyed.
Retention under internal policy
- Misuse and report records: encrypted identifiers retained for 1 year after account deletion or completion of the report (5 years for the identity information of reported members)
- Re-registration restriction information (suspensions, etc.): while the restriction remains in effect
- Records of moderation actions: 2 years
- Service usage records: up to 14 months
Retention required by law
- Records of contracts, withdrawal of purchase and payments: 5 years (Act on the Consumer Protection in Electronic Commerce)
- Records of consumer complaints and dispute resolution: 3 years (same Act)
- Service access records: 3 months (Protection of Communications Secrets Act)
Electronic files are deleted in a way that cannot be restored.
7. Members' Rights
- Members can view and edit their personal information in My Page and Settings in the app, and can withdraw consent by deleting their account.
- Only adults aged 19 or older may sign up for Xames.
- Other requests can be sent to support@xames.app.
8. Security Measures
- Encryption: email addresses are stored as values that cannot be restored, and key data is stored encrypted.
- Access control: the Company keeps the number of people with access to personal information to a minimum and keeps access records.
9. Privacy Contact
- Department: Privacy and Operations Team
- Email: support@xames.app
10. Remedies
Members may seek consultation or remedies for privacy infringements from the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center, and other relevant bodies in Korea.
11. Changes to This Policy
The Company announces changes to this Policy through in-app notices before they take effect, and announces material changes 30 days in advance.
Addendum
This Policy takes effect on [launch date].