Privacy Policy

Article 1 (Purpose and Enforcement) This policy outlines the procedures for handling personal information arising from the use of the app services provided by [Soda Syndrome] (hereinafter referred to as "the Company").

This policy may be added to, deleted, or modified from time to time in accordance with changes in relevant laws, guidelines, and internal company policies. * Effective Date: February 10, 2026

Article 2 (Items and Methods of Personal Information Collection) This service manages content access rights through device identification without a separate sign-up process. For this purpose, the following information is automatically collected.

• Items Collected: Randomly generated Unique Identifier (UUID) from the server, NFC tag unique information, access IP address, and device information (model name, OS version, language settings).
• Collection Method: Automatically collected and logged through communication with the backend server (Google Cloud Run) during the initial app launch, NFC tagging, app access, and all API requests within the service.

Article 3 (Purpose of Use of Personal Information)

Content Access Rights Management: Verifying the authenticity of distributed NFC cards and granting/maintaining viewing rights for specific devices (UUID).
Prevention of Misuse and Security: Blocking abnormal repetitive requests, restricting duplicate logins from multiple devices, and preventing unauthorized duplication of content.
Service Restriction by Region (Geo-blocking): Real-time determination of access from permitted regions (based on IP) in accordance with licensing regulations.

Article 4 (Retention and Destruction of Data)

In-Device Data: If a user deletes the app, the UUID stored in the device's Secure Storage is immediately destroyed. Consequently, the identification function of the device and previously granted viewing rights will be lost.
Server Data: Log data recorded on the server may not be immediately destroyed even if the user deletes the app. However, as the UUID within the device is deleted, such data is managed in a de-identified state that cannot be linked to a specific individual or device. It will be destroyed using irrecoverable methods after a certain period (e.g., 6 months) once the purpose of collection is achieved.
Legal Compliance: If preservation is required by relevant laws and regulations, the data will be stored separately for the specified period.

Article 5 (Technical Measures for Information Protection)

• Secure Storage: All identifying information is stored in an encrypted secure area within the app.
• Transmission Security: All data transmission between the client and the server uses the TLS/SSL (HTTPS) encryption protocol.
• Infrastructure Security: The service server processes only authenticated requests and performs real-time monitoring against abnormal access.

Article 6 (User Rights and Withdrawal)

Users may withdraw their consent to the collection and use of information in this service at any time by deleting the app.
Please be advised that since the existing identifier is destroyed upon app deletion, previous usage records or rights may not be restored upon reinstallation.

Article 7 (Privacy Officer and Contact Information) For inquiries regarding personal information arising during the use of the service, please contact:

Email: jun@sodasyndrome.com

Article 8 (Changes and Notification of Policy)

This Privacy Policy may be modified from time to time. In the event of additions, deletions, or modifications, notice will be provided via the service website or in-app link at least 7 days prior to the enforcement of the changes.
However, for significant changes to user rights, such as the collection and utilization of personal information or provision to third parties, a notice will be provided at least 30 days in advance.