Privacy Policy

[Privacy Policy]

Focus On Travel (the “Company”) values the personal information of members and users who use the SimQoo web service, the ShoKaa mobile app and related services (collectively, the “Service”). The Company establishes and publishes this Privacy Policy in order to comply with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Act on Consumer Protection in Electronic Commerce, the Protection of Communications Secrets Act and other applicable laws of the Republic of Korea, as well as Google Play developer policies.

This Policy applies to the SimQoo Web, the ShoKaa mobile app, administrator and operation tools, customer support, payments, sponsorships, settlement, advertising, notifications, chat, boards and other services provided by the Company.

Article 1 (Basic Principles)
1. The Company collects and uses only the personal information necessary to provide the Service.
2. The Company continuously posts this Privacy Policy on linked pages and public web pages so that users can easily review it.
3. If important matters such as purposes of processing, items collected, third-party provision, entrustment or overseas transfer change, the Company will notify users or obtain consent where required by law.
4. The Company may link and process information necessary for service provision, including member information, content, payments, sponsorships, settlement, reports and restrictions, between SimQoo Web and ShoKaa App.
5. The Company applies protection measures such as authentication, access control, encrypted transmission and prevention of abnormal use according to the characteristics of the Web and App.

Article 2 (Items of Personal Information Processed)
The Company may process the following information to the extent necessary for membership, service provision, payment, settlement, security and legal compliance.

1. Membership and account information: email address, password hash, nickname, profile image, social login identifier, account status, grade, consent records, signup and login records, withdrawal records.
2. Service use information: posts, comments, profiles, likes, follows, blocks, reports, chat messages, notifications, search and viewing records, upload and download records, points, Shocoins, sponsorships and premium use records.
3. Device, access and log information: IP address, cookies, app version, browser and device information, operating system, access time, service use log, error log, security log and abnormal use detection records.
4. Upload and media information: images, videos, audio, BGM, thumbnails, metadata and related technical information uploaded or selected by users. The Company does not access all photos, videos, contacts or files on a user’s device merely because a permission is granted; it processes only information selected by the user or necessary for the function used.
5. Payment and paid service information: order number, payment status, product name, amount, payment time, payment method category, cancellation, refund and chargeback records, Google Play purchase verification information, order ID, receipt verification results, subscription status and paid function use records. The Company does not directly store full card numbers, CVC values or payment passwords.
6. Creator monetization and settlement information: monetization application status, approval or rejection records, eligible revenue records, settlement applications, settlement cycle, eligible amount, fees, taxes, withholding, final payment amount, payment status, bank account information, PayPal email, real name, date of birth, contact information and tax identification information required by law. Resident registration numbers or foreign registration numbers may be processed only to the extent necessary for settlement and tax obligations and are protected by encryption or access control.
7. Advertising and marketing information: ad impressions, clicks, rewarded ad viewing, advertising identifiers, device information, IP address, app interaction data, advertising errors and diagnostic information, event participation, marketing consent and opt-out records.
8. Safety, security, report and restriction information: reported content, report reasons, reporter and reported user identifiers, blocking records, moderation results, sanction history, anti-spam, abnormal traffic, payment abuse, account theft, copyright infringement and harmful content response records.

Article 3 (Methods of Collection)
The Company collects personal information through information directly entered or uploaded by users; automatically generated logs and device information during use of the Web or App; information received from social login providers, app markets, payment, settlement, advertising, push notification and cloud service providers necessary for operation; and information provided through customer support, email, inquiries, reports and partnership communication.

Article 4 (Purposes of Processing)
The Company processes personal information for the following purposes: membership verification and account protection; login, social account connection, password reset and additional verification; provision of SimQoo Web community, boards, comments, votes, chat, mobile plan and eSIM comparison, sales and operation; provision of ShoKaa App feeds, upload, stories, BGM, following, notifications, chat, viewing records, recommendations, reports, blocking, downloads, sponsorships and paid subscriptions; processing of Shocoins, points, premium benefits, in-app purchases, web payments, sponsorships, settlement, refunds, chargebacks, taxes, withholding and payment agency services; customer support, reports, dispute handling, investigation of violations and fraud prevention; service stabilization, error analysis, security improvement, statistical analysis and function improvement; and compliance with legal, accounting and tax obligations.

Article 5 (Retention and Use Period)
1. The Company processes and retains personal information during the period required to achieve the purpose of collection and use.
2. When a user withdraws membership, the Company deletes personal information without delay unless retention is required by law, dispute handling, fraud prevention, security, settlement, tax, accounting or other legitimate operational necessity.
3. Posts, comments, reports, settlement, payment and logs may be retained for a period necessary for legal compliance, dispute handling, abuse prevention and service safety.
4. Data required by e-commerce, communications secrets, tax and accounting laws may be retained for the periods required by those laws.

Article 6 (Third-Party Provision)
The Company does not provide personal information to third parties except where the user has consented, where provision is necessary for payment, settlement, tax, app market or service operation, where required by law or requested through lawful procedures by an authority, or where necessary to protect life, body, property, service safety or the rights of users. When providing information to a third party, the Company discloses or notifies the recipient, purpose, items and retention period as required by law.

Article 7 (Entrustment and External Service Providers)
The Company may entrust part of the processing of personal information to external service providers to operate the Service, including cloud infrastructure, storage, network and security services; app markets and payment agencies; social login providers; advertising, push notification, email, customer support, accounting, tax, security and analytics services. The Company manages and supervises entrusted providers so that personal information is processed safely and only within the entrusted scope. Specific providers and entrusted tasks may change according to service operation, and material changes will be disclosed through this Policy or notices.

Article 8 (Overseas Transfer)
Because the Service uses global cloud, app market, payment, advertising, notification and social login services, personal information may be stored or processed overseas to the extent necessary for service provision. In such cases, the Company follows applicable laws regarding overseas transfer and takes reasonable protective measures. Details such as transferred items, country, recipient, purpose, retention period and refusal rights will be provided where required by law.

Article 9 (Rights of Users and Legal Representatives)
Users may request access, correction, deletion, suspension of processing, withdrawal of consent and account deletion for their personal information. Legal representatives may exercise the rights of children or minors where permitted by law. The Company may request verification to confirm the identity of the requester and may limit or refuse a request where retention or processing is required by law, dispute handling, security or other legitimate reasons.

Article 10 (Account and Data Deletion)
1. Users may request account deletion through the Service or a web page designated by the Company.
2. When an account is deleted, the Company deletes or anonymizes personal information and data linked to the account without delay, except information that must be retained by law or legitimate operational necessity.
3. Payment, settlement, tax, accounting, fraud prevention, security, report, sanction and dispute records may be retained for the necessary period.
4. Content that has already been publicly posted, shared with others or included in reports or dispute records may remain within the minimum necessary scope or be processed separately according to service policy and applicable law.

Article 11 (Processing of Children and Minors)
The Service is not operated as a service directly targeting children, and membership by children under the age of 14 is restricted in principle. If personal information of a child under 14 must be processed, the Company will obtain consent from a legal representative where required by law. Paid payment, sponsorship, Shocoin use, downloads, subscriptions, creator monetization and settlement by minors may be restricted according to law, app market policies and Company policies.

Article 12 (Cookies and Similar Technologies)
The Company may use cookies and similar technologies for login maintenance, security, service settings, statistics, advertising and prevention of abnormal use. Users may refuse or delete cookies through browser settings, but some service functions may be limited.

Article 13 (Safety Measures)
The Company applies technical, managerial and operational measures necessary to protect personal information, such as encrypted transmission, access authority management, protection of passwords and sensitive information, prevention of abnormal access, input validation, upload file security checks, payment and settlement verification, security log review, administrator access control, important information access restrictions, backup and recovery procedures and periodic security checks.

Article 14 (Destruction of Personal Information)
When personal information becomes unnecessary due to expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay. Electronic files are deleted in a manner that makes recovery difficult, and printed materials are shredded or destroyed by similar methods. Information that must be retained by law or legitimate reasons may be stored separately or protected with restricted access.

Article 15 (Advertising, Analytics and Push Notifications)
The Company may use advertising, analytics and push notification services to provide ads, rewards, notifications, error analysis, fraud prevention and service improvement. Users may change advertising identifiers, notification permissions and marketing consent through device or service settings. Marketing messages are sent only where permitted by law or consent and may be refused by the user.

Article 16 (Personal Information Protection Officer)
The Company designates the following person in charge of personal information protection.
- Name: Minho Lee
- Position: General Administrator
- Contact: 010-2866-3785
- Email: [email protected]

Article 17 (Remedies for Infringement)
Users may contact the following external organizations for consultation or remedies regarding personal information infringement: Personal Information Dispute Mediation Committee, Personal Information Infringement Report Center, Supreme Prosecutors’ Office and the Korean National Police Agency Cybercrime Reporting System.

Article 18 (Changes to this Policy)
The Company may amend this Policy according to changes in laws, government guidance, Google Play policies, service functions, security technology or service providers. When the Policy changes, the Company will announce the effective date, changes and reasons through notices or linked pages. Changes that materially affect user rights or obligations will be announced at least 30 days in advance where possible, and other changes at least 7 days in advance.

Addendum
1. This Privacy Policy applies from June 21, 2026.
2. Previous privacy policies are replaced by this Policy.