한국어

Privacy Policy

YakKok (약꼭챙겨먹어)

Effective Date: September 3, 2026 (v2.0)  |  Previous Effective Date: January 22, 2026

YakKok ("the App" or "the Company") values your privacy and complies with the Personal Information Protection Act (PIPA) of the Republic of Korea.

1. Information We Collect

a. Processed on your device only (not transmitted to the Company)

b. Collected and stored by the Company only if you turn on Cloud Backup Optional

c. Collected automatically by the advertising service

d. Collected if you purchase a paid product

Sensitive Information Requires Separate Consent

Medication information is sensitive information under Article 23 of the Personal Information Protection Act. The Company transmits and stores it on Supabase servers only if you turn on Cloud Backup in Settings. If you do not turn on Cloud Backup, this information never leaves your device. You can use all core features of the App without Cloud Backup.

2. Purpose of Collection and Use

3. Retention and Use Period

🔒 By default, all data is stored locally on your device and is not transmitted to external servers.

Only if you turn on Cloud Backup in Settings, your medication information, intake records, email address, and device name are transmitted to Supabase servers and stored there. Transmission uses an encrypted connection. Cloud Backup is off by default and can be turned off at any time.

3-2. Destruction Procedure and Method

The Company destroys personal information without delay once the retention period has elapsed or the purpose of processing has been achieved.

4. Disclosure to Third Parties

The App does not share your personal information with third parties except as described in the table below.

RecipientItems disclosedPurposeRetention period
Google LLC (Google AdMob) Device Advertising ID, IP address, ad interaction data, device and diagnostic information Serving in-app ads and measuring ad performance Per Google's privacy policy
Google LLC (Google Play Billing) Purchase token, purchase state Processing and verifying in-app purchases Per Google's privacy policy

✅ The Company does not use personalized (behavioral) advertising. All ad requests in the App are set to Non-Personalized Ads, and your medication information is never used for advertising purposes or provided to advertising partners.

How to opt out of advertising identifier collection

5. Outsourcing of Data Processing

The Company entrusts the storage of Cloud Backup data and account authentication to Supabase Inc. Details are provided in the table below.

ProcessorEntrusted workRetention period
Supabase Inc. Storage of Cloud Backup data and account authentication processing Until you delete the backup or close your account

The Company specifies the requirements necessary for the safe management of personal information when entering into processing agreements, and supervises its processors. Any change to the entrusted work or the processor will be disclosed through this policy.

5-2. Overseas Transfer of Personal Information

Pursuant to Article 28-8 of the Personal Information Protection Act and Article 31(1)(2) of its Enforcement Decree, the Company transfers personal information overseas as follows.

Recipient / ContactCountryItems transferredTiming and methodPurposeRetention periodLegal basis
Google LLC (AdMob)
https://support.google.com/admob
United States Advertising ID, IP address, ad interaction data, device and diagnostic information Transmitted over TLS-encrypted connections when the app runs and requests ads Serving non-personalized ads and measuring ad performance Per Google's privacy policy Separate consent of the data subject (Art. 28-8(1)(1))
Google LLC (Google Play Billing)
https://support.google.com/googleplay
United States Purchase token, purchase state Transmitted over TLS-encrypted connections when a purchase is requested and verified Processing and verifying in-app purchases Per Google's privacy policy Entrusted processing for the conclusion and performance of a contract (Art. 28-8(1)(3)(a))
Google LLC / Apple Inc.
(social login)
United States Email address, account identifier Transmitted over a TLS-encrypted connection at the moment you sign in Account authentication for Cloud Backup Per each provider's privacy policy Entrusted processing for the conclusion and performance of a contract (Art. 28-8(1)(3)(a))
Supabase Inc.
https://supabase.com/privacy
United States (Supabase Inc. headquarters) — the storage region follows the Supabase project settings; if data is stored outside the United States, the country will be specified by amending this policy Medication information, intake records, notification settings, email address, device identifier and device name Transmitted over a TLS-encrypted connection whenever data changes after you turn on Cloud Backup Storage of Cloud Backup data and account authentication Until you delete the backup or close your account Entrusted processing and storage for the conclusion and performance of a contract (Art. 28-8(1)(3)(a))

How to refuse overseas transfer, the procedure, and its effect

5-3. App Permissions

Pursuant to Article 22-2 of the Act on Promotion of Information and Communications Network Utilization and Information Protection, the Company discloses the permissions used by the App as follows.

Required permissions

Optional permissions

You can use all services of the App except the corresponding features without granting optional permissions. Permissions can be changed at any time in your device settings.

6. Your Rights

You may exercise the following rights at any time:

You can exercise these rights through the settings menu in the app, or by written request or email to the contact in Section 8, and the Company will act on your request without delay. These rights are based on Articles 35 (access), 36 (correction and deletion), and 37 (suspension of processing) of the Personal Information Protection Act.

Personal information of children under the age of 14 is processed only with the consent of their legal representative. A legal representative may request access, correction, deletion, or suspension of processing of a child's personal information through the contact in Section 8.

The Company does not make automated decisions that significantly affect the rights or obligations of data subjects (Article 37-2 of the Personal Information Protection Act), and does not process pseudonymized information. The App also provides no feature that publicly discloses a user's sensitive information.

7. Security Measures

8. Privacy Officer

Privacy Officer: David Byun

Position: Representative (under Article 32(1) of the Enforcement Decree of the Personal Information Protection Act, the business owner of a small enterprise serves concurrently as the privacy officer)

Address: 2F A1081, 47 Gangnam-daero 112-gil, Gangnam-gu, Seoul, Korea

Email: wirelean@gmail.com

You may direct any inquiry, complaint, or remedy request relating to privacy to the contact above, and the Company will respond and act without delay.

9. Changes to This Policy

This privacy policy may be updated in accordance with changes in laws or our policies. Any change will be announced in the app and posted on this page before it takes effect.

VersionEffective dateSummary of changes
2.02026-09-03Added collection, outsourcing, and overseas transfer disclosures for Cloud Backup; clarified the scope of sensitive information processing; added destruction procedure, app permissions, paid purchases and withdrawal of subscription, seller identification, and expanded privacy officer details
1.02026-01-22Initial version

10. Contact for Privacy Concerns

If you have any questions or concerns about this privacy policy or our data practices, please contact us at wirelean@gmail.com.

Users in Korea may also contact the following bodies:

11. Paid Purchases and Withdrawal of Subscription

Paid products in the App (ad removal, cosmetics, premium, cloud backup) are billed through Google Play. Payment method details are handled by Google and are not collected by the Company.

Withdrawal of subscription (Article 17 of the Act on the Consumer Protection in Electronic Commerce)