Privacy Policy
Littleone values the safe protection of user's personal information as the most important.
Littleone uses the personal information provided by the user appropriately according to the purpose and does its best to guarantee the user's rights and choices regarding the provided personal information. To achieve this, Littleone transparently discloses how the provided personal information is used and protected. We also provide detailed information on what rights the user has and how to exercise those rights.
Chapter 1 Privacy Policy
Littleone Inc. (hereinafter referred to as 'Littleone') collects, uses, and provides personal information based on the user's consent and actively guarantees the user's rights (personal information self-determination rights).
The company complies with the relevant laws and regulations and guidelines that the information and communication service providers must comply with.
The 'Privacy Policy' means the guidelines that the company must follow to protect the user's valuable personal information, allowing users to use the service with peace of mind.
This Privacy Policy applies to the Littleone service provided by the company.
The company's privacy policy may be changed according to changes in laws and regulations, notices, and internal policies of the company. In the event of a revision, the company will announce the changes on the company's website.
Users have the right to refuse consent for the collection, use, provision, and consignment of personal information. However, we would like to inform you that if the user refuses consent, the user may not be able to use all or part of the service.
Chapter 2 Personal Information Collection
Personal information refers to information about a living individual that can identify the individual (including information that can easily be combined with other information to identify a specific individual).
We collect the minimum personal information necessary for providing the service through the service application during membership registration or service use.
Required
User name
Google account registration member
Relationship with the baby (mom/dad/family/babysitter, etc.), product purchase history in the service, service usage history
Apple account registration member
Apple member number, email
Relationship with the baby (mom/dad/family/babysitter, etc.), product purchase history in the service, service usage history
Baby
Name (nickname), gender
Optional information
Baby's profile photo
User's profile photo
The methods of collecting personal information are as follows. Whenever personal information is collected, users are informed in advance and their consent is obtained. The following methods are used to collect personal information:
When users provide information directly and agree to the collection of personal information during the process of signing up or using the service.
When service-related information about the user's use of the service is automatically collected during the service process.
When collecting email information through the customer center to provide customer support.
Chapter 3 Use of Personal Information
The company uses personal information for member management, service improvement, and new service development.
The following minimum personal information is collected when users sign up or use the service:
Verification of membership and consent, verification of identity, and prevention of fraudulent use.
New service development, various service offerings, inquiries or complaints, and notification delivery.
Prevention and sanctions against actions that interfere with the smooth operation of the service (including account theft and fraudulent use).
Utilization of service records, access frequency and service usage statistics, construction of a service environment for privacy protection, and service improvement.
Chapter 4 Provision of Personal Information
Littleone does not provide user's personal information to third parties unless there is separate consent from the user or unless it is required by law.
Chapter 5 Entrustment of Personal Information Processing
The company stores personal information with overseas operators (AWS, Amazon Web Service Inc.) to provide smooth services and improve user convenience. The personal information acquired or generated by the user is stored in a database (physical storage location: Seoul) that AWS holds. AWS only manages the physical server and cannot access the user's personal information.
Details
Contractor: Amazon Web Service Inc.
Contact information for the information management officer of the contractor: aws-korea-privacy@amazon.com
Entrusted tasks and purpose: system operation and data retention
Previous items: personal information collected during the service process
Previous country: Seoul, South Korea (AWS Seoul Region)
Previous date and method: Personal information is stored in the AWS cloud computing environment when necessary information is entered for service use.
Personal information retention and usage period:
Until the user withdraws membership or the personal information validity period expires.
Until there is a change in the cloud service usage between the company and AWS.
Personal information will be destroyed without delay once the purpose of collection and use has been achieved, and the procedures and methods are as follows:
In the case of electronic files, they are safely deleted to prevent recovery and reproduction. For records, printed materials, documents, etc., they are shredded or incinerated for destruction.
However, the following information is kept for a certain period of time in accordance with internal policies before being destroyed:
The following information will be kept for a maximum of one year after the date of withdrawal before being destroyed:
The email information of the withdrawn user (for responding to customer inquiries related to withdrawal)
In addition, personal information that must be kept for a certain period of time according to the law and the corresponding laws are shown in the following table:
Retained items / Basis of law / Retention period
Records related to contracts or withdrawals, etc. / Act on Consumer Protection in Electronic Commerce, etc. / 5 years
Records of payment of goods, etc. / 5 years
Records related to consumer complaints or dispute resolution / 3 years
Records related to indication/advertising / 6 months
Ledgers and documentary evidence related to all transactions specified by the tax law / National Tax Basic Act / 5 years
Records related to electronic financial transactions / Electronic Financial Transactions Act / 5 years
Records of service visits / Act on Protection of Communications Secrets / 3 months
Chapter 7. Rights and Obligations of Users
Children under the age of 14 cannot join the service, and if it is discovered during the use of the service that a child under the age of 14 has joined, the user's membership will be terminated without delay.
If a child under the age of 14 has joined, they can request membership termination from the company or withdraw through the service settings menu.
Users are responsible for accurately entering personal information (such as email address) to prevent unexpected accidents (such as account loss, deletion of data due to long-term inactivity, etc.). If an accident occurs due to incorrect information entered by the user, the responsibility lies with the user. If false information, including the use of another person's information, is entered, the user's membership may be suspended. The user is responsible for maintaining the security of the ID password related to their personal information. Since the password is encrypted and stored, the service operator cannot know it.
Littleone does not directly ask users about their password, so please be careful not to leak your password to others.
Chapter 8. Miscellaneous
Children under the age of 14 cannot sign up for the service, and if it is found that a child under the age of 14 has signed up while using the service, their membership can be terminated without delay.
If a child under the age of 14 has signed up, they can request to cancel their membership with the company or withdraw through the service settings menu.
Users are advised to enter their personal information (such as a reachable email address) accurately to prevent unforeseen accidents (such as account loss, deletion of data due to long-term non-use, etc.). The responsibility for accidents caused by the user entering incorrect information lies with the user, and if false information is entered, such as using someone else's information, the user's membership may be suspended. The user is responsible for maintaining the security of their ID and password related to personal information. Passwords are encrypted and stored, so even the service operator cannot know them.
Littleone does not ask users directly about their passwords through any means, so please be especially careful not to expose your password to others.
Chapter 8 Miscellaneous
Littleone protects your rights.
Users can view or modify their personal information at any time and can withdraw their consent to the collection and use of personal information through membership cancellation. Specifically, users can view and modify their membership information or proceed with membership withdrawal through the account settings within the service, and if necessary, request personal information related matters through email or phone at the customer center, where prompt action will be taken.
If a user requests the correction of personal information errors, the information will not be used or provided until the correction is completed.
Littleone complies with the General Data Protection Regulation (GDPR) of the European Union and the laws of each member state. If the service is provided to users within the European Union, the following may apply.
[Purpose and legal basis for processing personal information] Littleone uses the collected personal information only for the purposes listed in section 3. Use of Personal Information, and obtains prior consent from the user. In addition, according to applicable laws such as GDPR, Littleone may process the user's personal information under one of the following circumstances: • Consent of the information subject • For the conclusion and performance of a contract with the information subject • For compliance with legal obligations • When necessary for the vital interests of the information subject • For pursuing the legitimate interests of the company (excluding cases where the interests and rights or freedoms of the information subject outweigh such interests) [Guarantee of rights for users in the European Union] Littleone protects the user's personal information as described in 'We Protect Your Rights.' According to applicable laws such as GDPR, the user may request the transfer of their personal information to another controller, or refuse the processing of their information. Additionally, the user has the right to lodge a complaint with a supervisory authority for data protection. Requests related to these matters may be made through the customer center via phone or email, and will be handled promptly. If a user requests correction of their personal information, the information will not be used or provided until the correction is complete. For any questions, complaints, advice, or other matters related to personal information protection during the use of the service, please contact the personal information protection officer or relevant department. Littleone will listen to your voice and do our best to provide a prompt and sufficient response. Personal Information Protection Officer and Relevant Department: • Officer: Byunghee Yoon (Personal Information Protection Officer) • Department: COO • Customer Center: Email (cs@littleone.io), Phone (1661-2503) If you need to report or consult about personal information infringement, you can contact the following agencies for assistance: Personal Information Infringement Report Center • (without an area code) 118 • https://privacy.kisa.or.kr Cyber Investigation Department, Supreme Prosecutors' Office • (without an area code) 1301 • cid@spo.go.kr Cyber Safety Bureau, National Police Agency • (without an area code) 182 • https://cyberbureau.police.go.kr
In case of any modification to the contents of the privacy policy due to changes in laws or services, we will notify users of the changes through the announcement section on our website at least 7 days prior to the effective date of the changes.
Littleone values the information of our users and promises to make every effort to ensure that users can use our services with confidence.
The privacy policy may be updated to reflect changes to the personal information we collect or other changes. If the privacy policy is updated, we will notify users of the changes at least 7 days before they take effect through announcements or other means.
Effective Date of Privacy Policy: March 28, 2021