CozyCamp Privacy Policy

1. Overview

ORIOTI (the "Company") maintains this policy to comply with the Personal Information Protection Act and other applicable laws, and to handle users' personal information safely while providing the mobile app "CozyCamp" (the "Service"). The Service does not ask for identity information such as real name, gender, date of birth or address.

2. Personal Information Collected and How

• Account identifiers: an anonymous user ID created by the Service. If you link an external account (Apple, Google or Kakao), the user ID and email address provided by that service (a relay address if you use Apple's "Hide My Email"). Kakao provides only a member number. Google also passes a display name and profile picture URL into the authentication record, but the Company does not display or use them elsewhere
• Profile: nickname, chosen character, belongings
• Camp activity: camps joined, online status, actions within a camp, chat messages, notes sent to other members
• Inventory and wallet: items held, coin balance, purchase history (product ID, time, store price). Payment details such as card numbers are handled by the Store and are not received by the Company
• Notifications: push notification token (used only to send Service notifications)
• Reports and blocks: the target and content of reports, report time, list of blocked users
• Device and diagnostics: device model, OS version, app version, error logs

How collected: entered or selected by you in the app, or generated automatically while you use the Service. Notes collected in your notebook are stored on your device and in your account (server) so they can be restored on a new device; only you can read them.

3. Purposes of Use

• Maintaining your account and restoring it across devices (external account linking)
• Sending Service push notifications
• Real-time display between camp members and delivery of notes
• Processing coin purchases and item purchases, and providing purchase history
• Handling reports, responding to inquiries, preventing abuse
• Error analysis and Service improvement (in statistical form)

4. Retention Period

Personal information is retained while your account exists and is deleted or anonymized within 30 days after you delete your account. Chat messages are deleted after a short period set by the Company (messages you mark to keep are an exception), and notes in transit are deleted shortly after delivery is complete.

The following are kept for the periods required by law: records of contracts, withdrawals, payments and supply of goods for 5 years, and records of consumer complaints and dispute handling for 3 years (Act on Consumer Protection in Electronic Commerce); access logs for 3 months (Protection of Communications Secrets Act).

5. Provision to Third Parties

The Company does not provide your personal information to third parties, except where required by law, upon a lawful request from an investigative agency, or with your separate consent.

6. Processing by Contractors and Cross-Border Transfer

• Google LLC (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging): account authentication (including Google sign-in), storage of camp, profile, ledger and report data, push notification delivery. Data is stored and processed on servers in regions operated by Google, including the United States (cross-border transfer). Transfer occurs in real time as you use the Service; the retention period is as in Section 4
• Apple Inc.: Sign in with Apple, in-app purchase processing, push notification delivery (APNs)
• Kakao Corp.: Kakao login (if you choose it)

You may refuse the cross-border transfer, but in that case account linking, restoration across devices, multiplayer and push notifications will not be available.

7. Destruction

Personal information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay. Electronic files are deleted in a way that prevents recovery; information kept under legal requirements is stored separately and destroyed when that period ends.

8. Your Rights

You may at any time request access to, correction or deletion of your personal information, or suspension of its processing. You can change your nickname and character directly in the app, and delete your account in the app; deleting your account also unlinks any external account. For other requests, contact support@orioti.com and the Company will respond within the period set by applicable law.

Children under 14 may not use the Service. If the Company learns that a child's information has been collected, it deletes it without delay. A legal guardian may request deletion at the email above.

9. Security Measures

• Encryption in transit (TLS) and server rules that allow only authenticated users to access their own data
• A structure in which the Company does not store payment details
• Short retention and automatic deletion of chat
• Minimized access privileges and the cloud provider's security management

10. Privacy Officer

Name: Yunju Jeong (Representative) · Email: support@orioti.com · Phone: +82 10-9523-5257

You may also report or consult on privacy violations at the Personal Information Infringement Report Center (privacy.go.kr, ☎ 118), the Supreme Prosecutors' Office Cyber Investigation Division (☎ 1301), or the National Police Agency Cyber Bureau (ecrm.police.go.kr, ☎ 182).

11. Changes to This Policy

This policy applies from September 24, 2026. Changes are announced in the app or on this page at least 7 days before they take effect, and 30 days in advance for important changes.

Rules for using the Service are governed by the Terms of Service.

Business Information