Privacy Policy

1. Personal Information We Collect

We process the following information to provide the service.

• Required items: Social login identifier information (account unique identifier), service user identifier, and authentication token information
• Service usage information: Order/payment/point/transaction history, access logs, and device/app information
• Abuse prevention and block operation information: Social account identifier (social_id), reason code, reason note, and block/unblock processing history
• Optional items (when using certain features): Camera-captured image files and capture time (for displaying lunch verification history)
• When using ads/reward integrations: Advertising identifier (AD_ID) and device information collected by ad SDKs

2. Purpose of Using Personal Information

• User identification, login authentication, and account/session management
• Providing lunch verification, point accumulation, and order/payment/history inquiry features
• Providing service-related notifications in accordance with user settings and applicable device permissions.
• Preventing abuse, ensuring service stability, and responding to errors
• Providing ads/rewards (offerwall), settlement, and performance measurement

3. Retention and Use Period of Personal Information

We delete personal information without delay once the purpose of collection has been fulfilled. However, if retention is required by applicable laws, we retain it for the required period.

• Member information: Deleted when membership is canceled or service use ends (except items required by law to be retained)
• E-commerce/payment-related records: Retained for the period prescribed by applicable laws
• Lunch verification images/local history stored on the device: May be deleted when removed by the user or when the app is uninstalled

4. Third-Party Sharing and External Service Integrations

To provide the service, we may use the external services below, and information may be processed within the necessary scope.

• Google/Firebase: Social login authentication and account linking
• Offerwall (ads/rewards) SDK: May process advertising identifier (AD_ID), device information, and usage information
• When required to comply with legal obligations or valid requests from investigative authorities

5. App Permissions

The app requests only the minimum permissions required to provide the service.

• Optional permission: Camera (requested only when taking lunch verification photos)
• Even if camera permission is denied, other app features remain available; only the photo capture feature may be limited.
• Optional permission: Notifications (POST_NOTIFICATIONS, Android 13+) for service-related alerts.
• Even if notification permission is denied, core app features remain available; only notification delivery may be limited.
• Users can change notification preferences at any time in device settings.
• AD_ID is not subject to runtime permission pop-ups and is used only within the scope of ad SDK integration purposes.

6. Procedures and Methods for Destruction of Personal Information

Personal information subject to destruction is securely deleted using methods that make recovery or restoration impossible.

• Electronic files: Deleted using technically irreversible methods
• Printed documents and similar materials: Shredded or incinerated

7. User Rights and How to Exercise Them

Users may request access, correction, deletion, or suspension of processing of their personal information at any time. We will take action without delay in accordance with applicable laws.

8. Account Deletion (Membership Withdrawal)

If you want to delete your account, you can proceed directly using the methods below.

• In-app request: Immediate withdrawal via [Settings > Delete Account]
• Email request: Request account deletion via customer support (Mochabase) email

All data, except information that must be retained under applicable laws and internal policies, is deleted immediately upon withdrawal and cannot be recovered.

9. Contact

For inquiries related to personal information, please contact the department below.

• Department: Mochabase
• Email: [email protected]

10. Notice of Changes

If this Privacy Policy is added to, deleted, or modified, notice will be provided through in-service announcements at least 7 days before the effective date.