PhotoBook has established the following privacy policy in order to protect the personal information and rights of users in accordance with the Personal Information Protection Act and to smoothly handle user complaints related to personal information.

PhotoBook will notify users of any revisions to the privacy policy through website announcements (or individual notifications).

1. Purpose of processing personal information

PhotoBook processes personal information for the following purposes. The processed personal information will not be used for any purposes other than the following, and if the purpose of use is changed, prior consent will be obtained. ① Handling of complaints and inquiries Personal information is processed for the purposes of verifying the identity of the complainant, confirming the details of the complaint, contacting and notifying for investigation, and notifying the results of processing. ② Use of third-party services Google Analytics for Firebase, Firebase Crashlytics

2. Status of Personal Information Files

① Personal Information File Name: PhotoBook Privacy Policy

Personal Information Items: Service Usage Records, Access Logs, Cookies, Access IP Information, Payment Records Collection Method: Mobile Application Service Basis for Retention: Consent of the Data Subject Retention Period: Immediately destroyed upon requestion(Maximum 1 year) Related Laws:

1. Records related to consumer complaints or dispute resolution: 3 years
2. Records related to payment and supply of goods: 5 years
3. Records related to contracts or withdrawal of subscriptions: 5 years

3. Processing and Retention Period of Personal Information

① PhotoBook processes and retains personal information within the period agreed upon or consented by the data subject at the time of collection of personal information or as required by law. ② The processing and retention periods for each type of personal information are as follows:

A. Handling of Complaints Personal information related to handling complaints is collected and used until the consent for collection and use is withdrawn by the data subject for the purpose of handling complaints. Basis for Retention: Consent of the Data Subject Retention Period: Immediately destroyed upon requestion(Maximum 1 year) Related Laws:

1. Records related to consumer complaints or dispute resolution: 3 years
2. Records related to payment and supply of goods: 5 years
3. Records related to contracts or withdrawal of subscriptions: 5 years

4. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

As a data subject, you have the following rights:

① Data subjects can exercise the rights such as the right to access, correct, delete, and request to stop processing personal information from PhotoBook at any time.

② The exercise of rights under paragraph 1 may be done in writing, via electronic mail, etc., in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and PhotoBook will take immediate action upon such requests.