SKIPIKS ("Company") complies with applicable data protection laws including Korea's Personal Information Protection Act.

• Member identification
• Personalized fashion curation
• Personalization features (wishlist, reactions)
• De-identified statistics for service improvement
• Legal compliance (AI Framework Act, E-Commerce Act)

1. Member info: Soft-deleted immediately upon account deletion; permanently deleted 30 days after deletion.

2. During the 30-day grace period, signing in with the same Google account restores the account.

3. Data with legal retention obligations is kept for the required period (5 years for e-commerce, 3 months for telecom secrecy).

1. Personal data is stored on Cloudflare D1 (SQLite-based globally distributed database).

2. Cloudflare maintains SOC 2 Type II certification.

3. Transmissions are encrypted via HTTPS/TLS; authentication uses signed JWT tokens.

4. Cross-border transfer (storage & processing): Cloudflare, Inc. is a U.S. company and personal data is stored in Cloudflare data centers in the United States (primary region: U.S. East). Recipient: Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) · Country/timing/method: United States, transmitted and stored over the network whenever you use the Service · Items: all items listed under "Information We Collect" · Purpose: database (D1) and file (R2) storage and hosting as our processor (no use for its own purposes) · Retention: same as this policy · Refusal: you may refuse the transfer at [email protected], in which case member features cannot be provided.

We do not share personal data with third parties except: (1) with explicit user consent, (2) when legally required.

However, we use Google Analytics 4 for usage statistics. Device, browser, page-view, and event data (swipes, likes, shares) are transmitted to Google LLC. We do not send directly identifying information such as names or email addresses. See "Cookies" below for how to opt out.

• Access: View your info via My Page
• Correction / Deletion: Email [email protected]
• Processing restriction: Email [email protected]
• Account deletion: My Page → Delete Account

Under Article 31 of Korea's AI Framework Act:

• All images are AI-generated; compliance logs retained ≥ 3 years
• User-input PII is not used for AI model training
• Watermarks include model ID, timestamp, content hash (C2PA-compatible roadmap)

Opt out: Blocking cookies in your browser stops visitor identification (_ga) but hits may still be transmitted. To stop transmission, install Google's Google Analytics Opt-out Browser Add-on (desktop browsers only — not available on mobile browsers). Opting out does not restrict use of the service.

Officer: 김규태 (대표)
Email: [email protected]

Any changes will be announced via in-service notice at least 7 days prior to taking effect.

Amendment effective September 23, 2026 (notice given September 16, 2026)

Reason: Business registration completed (opened September 15, 2026) — business identification added and a Privacy Officer designated

• Business information: company name, representative, business registration number, address and hosting provider are now stated. Mail-order business registration is in progress; the number will be added once issued.
• Privacy Officer: the team label was replaced by the representative, 김규태.
• Cross-border transfer: the fact that personal data is stored on Cloudflare, Inc. (U.S.) servers, with the statutory disclosure items, was added under "Storage & Security".

Amendment effective August 29, 2026 (notice given August 22, 2026)

Reason: Introduction of usage analytics (Google Analytics 4)

• Third-party sharing: Disclosed that device, browser, page-view, and event data is transmitted to Google LLC.
• Processors: Added "usage analytics" to Google LLC's purpose.
• Cookies: Added _ga / _ga_<measurement-id> and opt-out instructions.

Analytics actually began operating on September 13, 2026; no data was collected before then (the measurement ID was not configured until that date, even after the August 29 effective date).