Classification	Collected items
Common items	Name (optional), nickname (optional), email, profile picture, age verification, school information (optional), school year, user group (student, parent, teacher, etc.), relationship with other users (for student/ parent pairing) (optional), information on relationship and interaction with the paired user (optional)
In the case of children under 14	Name and phone number of the legal representative
When using the student service	When using 「Ask My Parents」 service: student’s name, parent’s phone number (destroyed after two weeks of storage)
When using the teacher service	Information regarding enrolled university, verification such as the student ID, etc., email issued by the university, other individual profile information
When using the parent service	Name, phone number
When using the QANDA Tutor service	Name, country information, phone number, enrolled courses, course duration (type of the purchased service), rental status of a tablet pc, school information, prospective major (humanities, natural sciences), grades of registered subjects, dates available for tutoring sessions, preferred teaching methods, preferred teacher types, message to teachers, address

Classification	Collected items
General service	User ID, texts and images posted by users, purchase history of products and services, refund history, location information generated by user’s network connection, log data, device information (OS, screen size, device ID, type of mobile phone, model name of device), IP address, cookies, location information, service usage record, improper usage record, at the occurrence of error - function used and the application status at the time of occurrence, advertisement identifier, interaction between users, interaction between user and service, interaction between user and server When participating in events: information provided by the user (name, phone number, etc.) When using the 1:1 Q&A service: information provided by users such as the content of the inquiry, related pictures, etc.
Propensity analysis service	Name, phone number, school year, grade, preferred subjects, etc.
Paid service	Payment via credit card: payment details, phone number, etc. Payment via account transfer: payment details, name of bank, account number, account holder’s name, etc. Payment via mobile phone number: payment details, phone number, approval number, etc.
Coin refund	Name, account number, name of bank, resident registration number ※ QANDA processes the user’s resident registration number only in accordance with applicable laws such as the Income Tax Act.
Price refund	Name of bank, account number, account holder’s name

Classification	Collected items
When applying for the teacher registration	Name, phone number, date of birth, email, gender, teaching region, teaching subjects, lecture video sample
When contracting as a teacher	Requested ID, password, phone number, date of birth, email, gender, teaching subjects, account number, resident registration number (for the collection of withholding tax), certificate of graduation (or certificate of completion of school year)

Purpose of use	Details
Member management	·Member identification, person identification, confirmation of relationship between members (parent-student relationship, etc.), age verification, confirmation of consent from a legal representative when collecting personal information of children under the age of 14, confirmation of possession of a phone number ·Management of membership such as confirming the user’s will to sign up and withdraw ·Provision of services, provision of services based on member groups, delivery of service-related commodities such as class material, tablet PC, etc., receipt of returned commodities, settlement of charge and payment of price for provision of paid services, refund ·Restriction of rejoining for dishonest purposes, limitation on the number of sign-up opportunities, demographic analysis, analysis of service usage record, development of new services and improvement of existing services, improvement of service quality ·Provision of customized services, establishment of safe internet environment ·Prevention and sanction of any act that interrupts normal operation of the service (illegal or fraudulent use of accounts, authentication materials, etc.), usage limitation on members who violated relevant laws or QANDA terms and conditions ·Resolution of complaints, recordkeeping for future dispute resolution, delivery of notices, etc.
Fulfillment of service provision contract and fee settlement	·Provision of contents ·Provision of customized services ·Identity verification ·Purchase and billing ·Collection of charges
Use of service	·(For student members) Use of QANDA Zone services ·Messages transmission between members, friend invitation and registration ·Notification of activities to friends, member search & sign-up
Improvement of service quality, marketing, and advertisement	·Collection of service usage statistics based on which service satisfaction rate is analyzed ·Development of new services and provision of customized services ·Estimation of members’ interest, taste, propensity, and learning state information, etc. and utilization of the foregoing information for recommending customized contents and for other marketing methods ·Provision of marketing information including events and participation opportunities to these events ·Utilization for statistics on service usage record and access frequency, for establishment of service environment, and for service improvement ·Statistics on service usage of members ·Confirmation of service validation ·Production of statistics, research, recordkeeping purposes for public interests, etc. in pseudonyms
Screening and contracting for teacher registration	·Screening for teacher registration, reporting screening results and requesting for registration after the previous rejection according to the company’s needs ·Opening a teacher member account ·Posting in public individual profiles and work experiences for course description ·Confirmation of qualification as a teacher

• Whether the provision is related to the original purpose of collection
• Whether the additional use or provision of personal information was foreseeable in light of circumstances of collection or of customary practice
• Whether the provision wrongly infringes upon the data subject’s interest
• Whether necessary security measures are taken such as using pseudonyms, encryption, etc.

Recipient	Personal information to be provided	Purpose of provision
Students and parents on QANDA Tutor	Teacher’s name, phone number, information regarding enrolled university (school, major, student ID number, etc.), teaching subjects	·Progress of tutoring sessions, contacts regarding tutoring sessions (rescheduling, inquiries, etc.), delivery of notices, etc.

Delegatee	Description of Delegated Task
Ciot Security, Inc., NICE Payments, Inc., NAVER FINANCIAL Corp., Kakao Pay Corp.	Processing of payment
Kakao Corp.	Kakao SSP service (Kakao Subscription ON service)
Amazon Web Services, Inc., Stitch Inc., Google LLC (GCP)	System operation and data storage service (cloud service)
Google LLC (Firebase), Holistics	User data analysis service
Google LLC (BigQuery)	Data warehouse and cloud service for data analysis service
Adjust GmbH, Meta Platforms Inc.	Data analysis for marketing purpose
NICE Information Service	Identity verification of legal representatives for users under 14
LUNASOFT, Inc., Nextia Co., Ltd., NAVER Cloud Corp.	Sending messages such as email, SMS, etc.
Lever, Inc.	Recruit management platform service
ppLink, Inc.	Online platform for QANDA Tutor service
Zendesk Inc.	Customer communication solution service
TYPEFORM SL.	Online user survey service
KT Alpha Co., Ltd.	Sending online gifts to users (gifti-show)
Dver Corp., CJ Logistics Corporation	Delivering IT devices (such as I-pad, etc.) to users with respect to QANDA Tutor service
Modusign Inc.	Electronic contract execution and signed contract storage service
Tutor(s) assigned through QANDA Tutor service	Providing QANDA Tutor service

Recipient (contact info.)	Country	Date and Method of Transfer	Transferred Items	Purpose of Use and Retention Period
Stitch, Inc. (privacy@talend.com)	USA, Germany	Send through online network after collection	All collected information	Operation and management of cloud server during period of the contract
Google LLC (data-access-requests@google.com)	USA	Same as above	Same as above	Provision of services such as app development solution (Firebase), cloud service (GCP), data warehouse (BigQuery) during period of the contract
Adjust GmbH (privacy@adjust.com)	Germany	Same as above	Log data, location information, device information, information regarding interaction between user and QANDA service or use and QANDA server	Provision of user analysis service for marketing purpose during period of contract
Meta Platforms, Inc. (korealocalagent @support.facebook.com)	USA	Same as above	Information regarding interaction between user and QANDA service or use and QANDA server, Facebook app ID, Mobile Advertiser ID, terminal information (such as OS, screen size, device ID, model of phone, model of terminal), IP address, location information	Provision of effect analysis of online media advertisement during period of contract
Holistics (privacy@holistics.io)	USA	Same as above	All collected information	Provision of user data analysis service during period of contract
Lever, Inc. (privacy@lever.co)	USA, Canada	Same as above	Name, contact information, academic background, career background, all other information submitted by data subject for job application	Provision of online recruitment platform service during period of contract
Zendesk, Inc. (privacy@zendesk.com)	USA	Same as above	Name, contact information, user complaints, all other information required to process for customer communication	Provision of customer communication solution during period of contract
TYPEFORM SL. (privacy@typeform.com)	Spain	Same as above	Name, contact information, survey results, etc.	Provision of online survey solution during period of contract

Items to be retained	Applicable law	Retention period
Records of contract withdrawal of subscription	Act on the Consumer Protection in Electronic Commerce, etc.	5 years
Records of payment and supply of goods		5 years
Records of consumer complaints or settlement of disputes		3 years
Records of display and advertisement		6 months
Books and supporting documents for all transactions regulated by the Tax Act	Framework Act on National Taxes	5 years
Records of electronic financial transactions	Electronic Financial Transactions Act	5 years
Service visit history, access log, IP address	Protection of Communications Secrets Act	3 months

Chief Privacy Officer Name: Won-guk Jung Phone: 02-322-9433 Email: prox@mathpresso.com

• Effective Date: February 23, 2022