Yoga Asana Journal establishes and discloses this Privacy Policy pursuant to Article 30 of the Personal Information Protection Act of the Republic of Korea to protect users’ personal information and to ensure the prompt and proper handling of related inquiries and complaints.

Effective Date: September 30, 2024

Article 1 (Purpose of Processing Personal Information)

Yoga Asana Journal processes personal information for the following purposes. Personal information will not be used for purposes other than those specified below. If the purpose of use changes, Yoga Asana Journal will obtain separate consent or take other necessary measures in accordance with Article 18 of the Personal Information Protection Act.

1. Provision of Products or Services

   To verify and authenticate users in order to manage their records.

2. AI Asana Recommendation Feature

   To analyze yoga pose photos attached by the user and recommend/classify similar asanas (yoga poses). This feature operates only with the user's separate consent.

Article 2 (Retention Period of Personal Information)

1. Yoga Asana Journal processes and retains personal information within the period permitted by law or within the retention/use period to which the data subject has consented at the time of collection.
2. The specific processing and retention periods are as follows:

   • Provision of Products or Services

     Personal information related to the provision of products or services will be retained and used for three (3) years from the date of consent to collection and use.

     Basis for Retention: Provision of personalized services

     Relevant Statute: Records concerning the collection/processing and use of credit information – 3 years

     Exceptions: N/A

Article 3 (Items of Personal Information Processed)

1. Yoga Asana Journal processes the following items of personal information:

   • When using Sign in with Google/Apple

     User email address, name, and a personal identification token (FCM token)

   • During service use

     Access logs, journal entries

   • When using “Send Feedback to Developer”

     User email address

   • When using the AI Asana Recommendation feature (only with consent)

     Yoga pose photos attached by the user to journal entries

2. Yoga Asana Journal collects personal information through the following methods:

   • Access logs may be collected when the app is launched.
   • When submitting feedback via “Send Feedback to Developer,” the user’s email address may be collected.
   • When using the AI Asana Recommendation feature, photos attached by the user may be processed.

Article 3-2 (Cross-Border Transfer of Personal Information)

1. Yoga Asana Journal entrusts the following processing of personal information to an overseas service provider in order to provide the AI Asana Recommendation feature. This transfer occurs only when the user has consented to the use of the AI feature.
   • Recipient: Google LLC (Gemini API)
   • Country: United States
   • Timing and Method of Transfer: Transmitted via encrypted network (API) at the time the AI Asana Recommendation feature is used
   • Items Transferred: Yoga pose photo attached by the user (downscaled copy)
   • Purpose of Use by Recipient: Analysis of the photo to recommend/classify asanas (yoga poses)
   • Retention and Use Period by Recipient: Destroyed without delay upon completion of analysis. Pursuant to the Paid Services provisions of the Gemini API Additional Terms of Service, Google does not use transmitted photos to train its AI models and provides safeguards equivalent to those required under the Personal Information Protection Act.
2. Users may withdraw their consent (disable the feature) at any time via the toggle MY tab > “AI Feature – Auto-classify asanas from photos.” Refusing or withdrawing consent does not restrict the use of any services other than the AI Asana Recommendation feature.

Article 4 (Procedures and Methods for Destruction of Personal Information)

1. Yoga Asana Journal will promptly destroy personal information when it becomes unnecessary, such as upon expiration of the retention period or achievement of the processing purpose.
2. Where personal information must continue to be retained under other statutes despite the expiration of the consented retention period or fulfillment of the processing purpose, such personal information will be stored separately in a different database (DB) or preserved in a different location.
   • Legal Basis: Other applicable laws and regulations
   • Items Retained: As required by internal policies or other applicable laws and regulations
3. The procedures and methods for destruction are as follows:

   • Destruction Procedures

     Yoga Asana Journal selects the personal information for which a destruction ground has occurred, and destroys it upon approval by the Personal Information Protection Officer.

   • Destruction Methods

     Personal information in electronic file format will be destroyed using technical methods that prevent recovery or reproduction.

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)