Privacy Policy

1. Personal information we process and why

• Using checks (required): the site address entered, the check results, and when the check was made — processed to show you the results and to show them again under recent checks and History.
• Consultation requests (when you submit one): the check result attached to the request, the site types selected, when it was received, and the request status (received/canceled) — processed to receive and handle consultations and to reflect cancellations.
• Consultation messages (when messages are exchanged after a request): the messages you and our team exchanged within the Service and when they were sent — processed to carry out the consultation and reply.
• User identification (required): the access token that the Service generates and stores on this device (only a one-way encrypted value is stored on the server) and, if you use Toss Login, a one-way encrypted value of the user identifier provided by Toss — processed to keep each user's history separate so that no one else can see it.
• Connection information (collected automatically): IP address, time and address of requests, and error records — processed to block excessive requests from the same source and to diagnose errors.

We do not collect phone numbers, email addresses, resident registration numbers or payment method information. If you use Toss Login, Toss passes your name as an encrypted value, but the Company does not decrypt or store it.

The ad shown before viewing how to fix an issue and the banner ad at the bottom of the screen are displayed by the Toss app, and Toss processes the information needed to serve ads. The Company only checks within the app whether the ad was watched to the end, and does not send this to the server.

2. Retention period

• Check records are kept for up to the 30 most recent per user; older records are deleted.
• Check records and consultation requests (including messages) of users who do not use Toss Login are automatically cleaned up after 31 days.
• Check records and consultation requests (including messages) of users who use Toss Login are kept until the user deletes them or requests deletion.
• An access token is valid for 30 days from issuance, and expired records are deleted when a new connection is made.
• Records used for request rate limiting (including IP addresses) are counted by the minute, and past records are deleted frequently.
• Operation and error diagnostic logs are kept for up to 7 days in Cloudflare Workers Logs.

When a user taps "Delete history" under "Profile" in the app, check records and consultation requests (including messages) are deleted immediately.

Information that the law requires us to retain is kept for the required period and then destroyed.

3. Provision to third parties

The Company does not provide users' personal information to third parties except in lawful responses to requests based on law.

4. Outsourcing and overseas transfer

Pursuant to Article 28-8(1)(iii) of the Personal Information Protection Act, we disclose the outsourced processing and storage of personal information necessary to perform the Service as follows.

• Recipient: Cloudflare, Inc. (privacyquestions@cloudflare.com)
• Countries and regions of transfer: these vary depending on where a request is made from and how the Service is deployed; data is not sent to all countries at once. The countries and regions where processing takes place are listed below.
• Items transferred and purpose: the items in Section 1 are used for server hosting, storage and content delivery.
• Retention period: the period for each item in Section 2.

Cloudflare global processing countries and regions (as of October 5, 2026): United Arab Emirates (AE), Albania (AL), Armenia (AM), Angola (AO), Argentina (AR), Austria (AT), Australia (AU), Azerbaijan (AZ), Barbados (BB), Bangladesh (BD), Belgium (BE), Burkina Faso (BF), Bulgaria (BG), Bahrain (BH), Brunei (BN), Bolivia (BO), Brazil (BR), Bhutan (BT), Botswana (BW), Belarus (BY), Canada (CA), Congo-Kinshasa (CD), Switzerland (CH), Côte d'Ivoire (CI), Chile (CL), Cameroon (CM), China (CN), Colombia (CO), Costa Rica (CR), Cyprus (CY), Czechia (CZ), Germany (DE), Djibouti (DJ), Denmark (DK), Dominican Republic (DO), Algeria (DZ), Ecuador (EC), Estonia (EE), Egypt (EG), Spain (ES), Ethiopia (ET), Finland (FI), Fiji (FJ), France (FR), United Kingdom (GB), Grenada (GD), Georgia (GE), Ghana (GH), Greece (GR), Guatemala (GT), Guam (GU), Guyana (GY), Hong Kong (China SAR) (HK), Honduras (HN), Croatia (HR), Hungary (HU), Indonesia (ID), Ireland (IE), Israel (IL), India (IN), Iraq (IQ), Iceland (IS), Italy (IT), Jamaica (JM), Jordan (JO), Japan (JP), Kenya (KE), Kyrgyzstan (KG), Cambodia (KH), South Korea (KR), Kuwait (KW), Kazakhstan (KZ), Laos (LA), Lebanon (LB), Sri Lanka (LK), Lithuania (LT), Luxembourg (LU), Latvia (LV), Moldova (MD), Madagascar (MG), North Macedonia (MK), Mongolia (MN), Macao (China SAR) (MO), Mauritius (MU), Maldives (MV), Mexico (MX), Malaysia (MY), Mozambique (MZ), Namibia (NA), New Caledonia (NC), Nigeria (NG), Netherlands (NL), Norway (NO), Nepal (NP), New Zealand (NZ), Oman (OM), Panama (PA), Peru (PE), French Polynesia (PF), Philippines (PH), Pakistan (PK), Poland (PL), Puerto Rico (PR), Palestinian Territories (PS), Portugal (PT), Paraguay (PY), Qatar (QA), Réunion (RE), Romania (RO), Serbia (RS), Russia (RU), Rwanda (RW), Saudi Arabia (SA), Sweden (SE), Singapore (SG), Slovenia (SI), Slovakia (SK), Senegal (SN), Suriname (SR), Thailand (TH), Tajikistan (TJ), Tunisia (TN), Türkiye (TR), Trinidad and Tobago (TT), Taiwan (TW), Tanzania (TZ), Ukraine (UA), Uganda (UG), United States (US), Vietnam (VN), South Africa (ZA), Zambia (ZM), Zimbabwe (ZW)

Data is transmitted over encrypted communication networks when you use the Service. You may refuse an overseas transfer or request deletion at help@bamgwabi.com; if you refuse, we cannot provide the Service.

5. How we destroy data

Electronic files are deleted in a way that cannot be recovered.

6. Your rights

• You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information. Send your request to the contact below and the Company will handle it without delay.
• You can delete your check records and consultation requests yourself under "Profile" in the app, and cancel a consultation request with "Cancel request".
• This Service is intended for users aged 19 or older, and does not collect personal information from children under 14.

7. Security measures

• Encryption in transit (HTTPS) and minimizing access permissions
• Access tokens and Toss user identifiers are stored on the server only as one-way encrypted (SHA-256) values

8. Cookies and browser storage

The Service does not use cookies. It stores one access token in this device's browser storage; if you clear your browser data, it is deleted too and you can no longer see your past records.

9. Data Protection Officer

Data Protection Officer: Kim Hyun (CEO)

Contact: help@bamgwabi.com

You can also report or seek advice on personal information violations at the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 without an area code).

10. Notice

If this policy is changed, we will announce it within the Service starting 7 days before it takes effect.

First announced and effective: October 8, 2026