1Purpose of Processing Personal Information

Hongborang ("the Company") processes personal information for the following purposes. The information will not be used for any other purpose, and if there is a change of purpose, the Company will obtain separate consent in accordance with Article 18 of the Personal Information Protection Act.

• Account Registration & Management: Identification, account maintenance, prevention of misuse
• Service Delivery: Automated callback SMS, call history management, caller ID configuration
• Subscription Payment: Monthly/annual plan billing, subscription status management
• Customer Support: Inquiry handling, notice delivery
• Service Improvement: Usage analytics, quality enhancement

2Processing and Retention Period

The Company processes and retains personal information within the period required by law or agreed upon with the data subject.

3Items of Personal Information Processed

(1) Account Registration & Service Use

Required Mobile phone number, password    Optional Login ID

(2) Payment Information

Required Payment amount, timestamp, plan type, subscription status, Google Play purchase token

※ Sensitive payment information such as card numbers is processed directly by Google Play's in-app billing system and is not collected by the Company.

(3) Call & SMS Information

Required Caller ID (CID), call timestamp, call status, automatically sent SMS content    Optional Registered customer contacts, images attached to MMS

Device info (OS version, model), app version, and access IP address may be collected automatically during service use.

4Provision to Third Parties

As a general rule, the Company does NOT provide personal information to third parties. Exceptions are limited to:

• When the data subject has given prior consent
• When required by law or by lawful request from investigative authorities

5Outsourcing of Processing

The Company outsources personal information processing to the following entities for service delivery.

6Cross-Border Data Transfer

Pursuant to Article 28-8 of the Personal Information Protection Act, the Company transfers personal information overseas as follows.

Method: Encrypted network transmission (HTTPS/TLS) during service use
Recipient Contact: Google LLC Privacy Policy (policies.google.com/privacy)

7SMS & Call Log Data Handling

This app handles call logs and SMS sending records as follows:

• On-device processing principle: Core processing — including call event detection, SMS composition, and message dispatch triggers — is performed entirely on the user's device.
• Server-stored data scope: For sending history management and multi-device sync, only the send timestamp, recipient number, send result (success/failure), and user-authored message content are encrypted via SSL/TLS and stored on the Company's servers.
• Data NOT stored: Received SMS content, call recordings, and call audio data are NEVER transmitted or stored on servers under any circumstances.
• No marketing or advertising use: Collected call and SMS data are NEVER used for marketing, advertising, or profiling purposes.
• No third-party sharing or sale: Collected call and SMS data are NEVER sold, shared, or transmitted to any third party.
• Access control: Within the Company, only a minimum number of designated personnel have access, and all access is logged.

8Destruction of Personal Information

The Company destroys personal information without delay when retention period expires or processing purpose is achieved.

• Electronic files: Permanently deleted using non-recoverable methods
• Paper documents: Shredded or incinerated

9Rights of Data Subjects

Data subjects may exercise the following rights at any time:

• Right to access personal information
• Right to rectification
• Right to erasure
• Right to restriction of processing

Rights may be exercised through the in-app customer center or by contacting the Data Protection Officer below by mail, phone, or email. The Company will respond without delay.

10Account & Data Deletion

Users may request deletion of their account and associated personal information at any time.

How to Request Deletion

• In-app: Open app → My Page → Account Deletion
• Email: Send "Account Deletion Request" with your registered phone number to ska0435@naver.com
• Phone: 1588-0936 (Weekdays 09:00–18:00 KST)

Processing Timeline & Scope

11Children's Privacy

This service is intended for business owners aged 14 and above. The Company does NOT knowingly collect personal information from children under 14. If such collection is identified, the data will be deleted immediately.

Guardians who discover that personal information of a child under 14 has been collected may request deletion using the procedures in Section 10 above.

12Security Measures

13App Permissions

The app requests the following permissions for service delivery. Optional permissions are not required to use the basic callback service.

(1) Core Permissions — Runtime Required (User must grant)

The app requests these via system dialog at runtime. Without them, core features (call detection, callback SMS) cannot operate.

(2) Optional Permissions — Runtime (User must grant)

Refusal does not affect basic callback functions, but may limit additional features (bulk send, contact-based filtering).

(3) Normal Permissions — Granted at Install

Granted automatically by the system without a user dialog.

14Data Protection Officer

For privacy infringement reports or consultation, contact the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr / 118 in Korea).

15Changes to This Policy

This Privacy Policy is effective as of May 6, 2026. Any changes will be announced via in-app notice at least 7 days before the effective date. For changes materially affecting user rights, notice will be given at least 30 days in advance.