Privacy Policy

WantFit (hereinafter referred to as the "Company") values the privacy of its users and complies with relevant laws and regulations, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Personal Information We Collect

We collect the following personal information to provide our services:

A. Information Collected During Registration

• Required: Email address, password (except for social login), nickname
• Optional: Profile image, bio, phone number, shipping address information (recipient name, shipping address, phone number)

B. Information Collected Through Social Login

• Google — Required: Email, name, profile image
• Kakao — Required: Email, name (nickname), profile image / Optional: phone number, shipping address information (recipient name, shipping address, phone number)
• TikTok — Required: User ID, nickname, profile image, public video information
• Instagram — Required: User ID, username, profile image, media information
• YouTube — Required: Channel ID, channel name, profile image, public video information, comment data, viewer statistics

C. Information Collected When Paying for Paid Services

• Payment records: order number, payment date and time, amount, payment method type, approval number, subscription and credit usage history
• For refunds: reason for refund, bank account details (only where cancelling the original payment is not possible)
• Note: card numbers, expiry dates, and similar payment instrument details are collected and stored directly by the payment gateway. We do not store them.

D. Information Automatically Collected During Service Use

• IP address, access logs, cookies, service usage records, device information

2. Purpose of Collecting and Using Personal Information

We use the collected personal information for the following purposes:

1. Member Management: Identity verification, member identification, prevention of unauthorized use
2. Service Provision: Creator homepage creation, content delivery, personalized services
3. SNS Integration: TikTok, Instagram, YouTube account linking and content synchronization
4. Affiliate Services: Product recommendations, revenue settlement, transaction record management
5. Paid Service Provision: Membership subscription payment and renewal, granting, deducting, and tracking credit balances, refund and withdrawal processing, and responding to billing enquiries
6. Marketing and Advertising: Event information and promotional communications (with consent)
7. Service Improvement: New service development, statistical analysis, quality enhancement

3. Retention and Use Period of Personal Information

We retain personal information only for the period necessary to fulfill the purposes for which it was collected. However, we may retain information for longer periods as required by applicable laws:

• Records of contracts or withdrawal: 5 years (E-Commerce Act)
• Records of payment and supply of goods: 5 years (E-Commerce Act)
• Records of consumer complaints or disputes: 3 years (E-Commerce Act)
• Access logs: 3 months (Communications Privacy Act)

4. Provision of Personal Information to Third Parties

We do not provide personal information to third parties without user consent, except in the following cases:

1. When the user has given prior consent
2. When required by law or requested by investigative agencies in accordance with legal procedures

5. Outsourcing of Personal Information Processing

We outsource personal information processing to the following service providers:

6. SNS Integration Services

We provide integration services with social media platforms such as TikTok, Instagram, and YouTube. When using SNS integration, personal information is processed as follows:

A. TikTok Integration (TikTok For Business API)

Our service processes data through the TikTok For Business API in compliance with the TikTok For Business Developer Terms:

• Information collected: TikTok user ID (open_id), nickname, profile image, public video information, follower/likes statistics, video comment information
• Purpose:
  • Display TikTok content on creator homepage
  • Provide follower statistics
  • Comment Management: Help creators respond to follower comments using pre-configured response templates. Creators review and configure all responses, and the system assists with delivery. This feature only operates when explicitly enabled by the creator.
• Retention period: Until integration is disconnected (immediately deleted upon disconnection)
• Third-party sharing: TikTok data is never sold, shared, or transferred to third parties
• Security: All TikTok data is encrypted during transmission and storage, following the highest industry security standards

B. Instagram Integration (Instagram API)

Our app collects data through the Instagram API, including the following:

• Information collected: Instagram user ID, username, profile image, media information (posts, reels), insights data
• Purpose: Display Instagram content on creator homepage, provide follower statistics and performance analytics
• Retention period: Until integration is disconnected

C. YouTube Integration (YouTube Data API / YouTube Analytics API)

Our service processes data through the YouTube Data API v3 and YouTube Analytics API. Our use and transfer of information received from Google APIs adheres to the YouTube API Services Terms of Service and Google Privacy Policy:

• Information collected: YouTube channel ID, channel name, profile image, public video list, video comment data, subscriber count, view count, watch time statistics, viewer demographic data
• API Scopes used:
  • youtube.force-ssl — Video and comment management (read/write/hide)
  • yt-analytics.readonly — YouTube Analytics data access (views, watch time, viewer statistics)
• Purpose:
  • Display YouTube content on creator homepage
  • Provide channel statistics and performance analytics
  • Comment Management: Help creators respond to viewer comments using pre-configured response templates, or hide negative/spam comments. All responses are configured by the creator, and the system assists with delivery. This feature only operates when explicitly enabled by the creator.
  • Provide content insights through viewer statistics (watch time, demographics, etc.)
• Retention period: Until integration is disconnected (immediately deleted upon disconnection)
• Third-party sharing: YouTube data is never sold, shared, or transferred to third parties
• Security: All YouTube data is encrypted during transmission and storage, in compliance with the Google API Services User Data Policy
• Limited Use Disclosure: WantFit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Users can disconnect SNS integration at any time through service settings. Upon disconnection, all information collected from that SNS will be immediately deleted.

7. Destruction of Personal Information

We destroy personal information without delay when it is no longer needed, such as when the retention period expires or the purpose of processing is achieved.

A. Destruction Procedure

Information entered by users is transferred to a separate database after the purpose is achieved and destroyed according to internal policies and applicable laws.

B. Destruction Method

• Electronic files: Deleted using technical methods that prevent recovery
• Paper documents: Shredded or incinerated

8. User Rights and How to Exercise Them

Users have the following rights as data subjects:

1. Right to Access: You may request to view your personal information.
2. Right to Rectification/Deletion: You may request correction or deletion of inaccurate information.
3. Right to Suspend Processing: You may request suspension of personal information processing.
4. Right to Withdraw Consent: You may withdraw consent to the collection and use of personal information.

These rights can be exercised through service settings or by contacting our customer service. We will take necessary action without delay.

9. Use of Cookies

We use cookies to provide personalized services. Cookies are small text files sent by our server to your browser.

• Purpose of cookies: Login maintenance, user settings storage, service usage analysis
• How to refuse cookies: You can refuse cookies through browser settings. However, refusing cookies may limit some service features.

10. Security Measures for Personal Information

We implement the following measures to ensure the security of personal information:

1. Administrative measures: Internal management plan, regular employee training
2. Technical measures: Encryption of personal information, access control, security software
3. Physical measures: Access control to server rooms and data storage areas

11. Privacy Officer

We have designated a Privacy Officer to oversee personal information processing and handle user inquiries and complaints:

For other privacy-related inquiries or complaints, please contact:

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)
• National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)

12. Changes to Privacy Policy

This Privacy Policy is effective from the date of implementation. Any changes due to legal requirements or policy updates will be announced at least 7 days prior to implementation through our website.