PRIVACY POLICY

QANDA, as a service of Mathpresso Inc. (hereinafter referred to as “QANDA”), takes the users’ information very seriously and actively guarantees the users’ right to self-determination.

This Privacy Policy is meant to describe the current status of processing personal information and protection measures taken by QANDA to protect users’ privacy.

This Privacy Policy information can always be found on QANDA’s application and its website (http://qanda.ai).

1. Collection of Personal Information

A. Personal Information Collected

QANDA collects the following personal information to provide better services. For some services, personal information other than those listed below may be collected, in which case QANDA asks for the user’s consent in advance under the Personal Information Protection Act, etc.

(1) Personal information collected when signing up for a membership

Classification	Collected items
Common items	Name (optional), nickname (optional), email, profile picture, age verification, school information (optional), school year, user group (student, parent, teacher, etc.), relationship with other users (for student/ parent pairing) (optional), information on relationship and interaction with the paired user (optional)
In the case of children under 14	Name and phone number of the legal representative
When using the student service	When using 「Ask My Parents」 service: student’s name, parent’s phone number (destroyed after two weeks of storage)
When using the teacher service	Information regarding enrolled university, verification such as the student ID, etc., email issued by the university, other individual profile information
When using the parent service	Name, phone number
When using the QANDA Tutor service	Name, country information, phone number, enrolled courses, course duration (type of the purchased service), rental status of a tablet pc, school information, prospective major (humanities, natural sciences), grades of registered subjects, dates available for tutoring sessions, preferred teaching methods, preferred teacher types, message to teachers, address

(2) Personal information collected during the use of service

Classification	Collected items
General service	User ID, texts and images posted by users, purchase history of products and services, refund history, location information generated by user’s network connection, log data, device information (OS, screen size, device ID, type of mobile phone, model name of device), IP address, cookies, location information, service usage record, improper usage record, at the occurrence of error - function used and the application status at the time of occurrence, advertisement identifier, interaction between users, interaction between user and service, interaction between user and server When participating in events: information provided by the user (name, phone number, etc.) When using the 1:1 Q&A service: information provided by users such as the content of the inquiry, related pictures, etc.
Propensity analysis service	Name, phone number, school year, grade, preferred subjects, etc.
Paid service	Payment via credit card: payment details, phone number, etc. Payment via account transfer: payment details, name of bank, account number, account holder’s name, etc. Payment via mobile phone number: payment details, phone number, approval number, etc.
Coin refund	Name, account number, name of bank, resident registration number ※ QANDA processes the user’s resident registration number only in accordance with applicable laws such as the Income Tax Act.
Price refund	Name of bank, account number, account holder’s name

(3) Personal information collected when registering and contracting as a teacher

Classification	Collected items
When applying for the teacher registration	Name, phone number, date of birth, email, gender, teaching region, teaching subjects, lecture video sample
When contracting as a teacher	Requested ID, password, phone number, date of birth, email, gender, teaching subjects, account number, resident registration number (for the collection of withholding tax), certificate of graduation (or certificate of completion of school year)

B. Method of Collection

Personal information is collected directly from a user when signing up for the service or during the use of service.

Personal information is collected directly from a user during the process of sign-up, editing membership information, and the use of service.

Also, a user’s personal information may be collected via the customer service center during customer helpline.

Personal information is provided through affiliated services or groups.

Personal information is provided by external companies through third-party affiliations such as signing up with social media accounts. In this case, QANDA ensures that the third party through which personal information is provided complies with legal requirements including users’ consent.

Personal information may be collected during the use of service.

QANDA may automatically generate and collect information related to a user during the user’s use of service. Information collected likewise may or may not qualify as personal information depending on the possibility of the information being associated with the user.

2. Use of Collected Personal Information

QANDA uses personal information for the following purposes.

Purpose of use	Details
Member management	·Member identification, person identification, confirmation of relationship between members (parent-student relationship, etc.), age verification, confirmation of consent from a legal representative when collecting personal information of children under the age of 14, confirmation of possession of a phone number ·Management of membership such as confirming the user’s will to sign up and withdraw ·Provision of services, provision of services based on member groups, delivery of service-related commodities such as class material, tablet PC, etc., receipt of returned commodities, settlement of charge and payment of price for provision of paid services, refund ·Restriction of rejoining for dishonest purposes, limitation on the number of sign-up opportunities, demographic analysis, analysis of service usage record, development of new services and improvement of existing services, improvement of service quality ·Provision of customized services, establishment of safe internet environment ·Prevention and sanction of any act that interrupts normal operation of the service (illegal or fraudulent use of accounts, authentication materials, etc.), usage limitation on members who violated relevant laws or QANDA terms and conditions ·Resolution of complaints, recordkeeping for future dispute resolution, delivery of notices, etc.
Fulfillment of service provision contract and fee settlement	·Provision of contents ·Provision of customized services ·Identity verification ·Purchase and billing ·Collection of charges
Use of service	·(For student members) Use of QANDA Zone services ·Messages transmission between members, friend invitation and registration ·Notification of activities to friends, member search & sign-up
Improvement of service quality, marketing, and advertisement	·Collection of service usage statistics based on which service satisfaction rate is analyzed ·Development of new services and provision of customized services ·Estimation of members’ interest, taste, propensity, and learning state information, etc. and utilization of the foregoing information for recommending customized contents and for other marketing methods ·Provision of marketing information including events and participation opportunities to these events ·Utilization for statistics on service usage record and access frequency, for establishment of service environment, and for service improvement ·Statistics on service usage of members ·Confirmation of service validation ·Production of statistics, research, recordkeeping purposes for public interests, etc. in pseudonyms
Screening and contracting for teacher registration	·Screening for teacher registration, reporting screening results and requesting for registration after the previous rejection according to the company’s needs ·Opening a teacher member account ·Posting in public individual profiles and work experiences for course description ·Confirmation of qualification as a teacher

QANDA may use or provide personal information to a third party within a scope relevant to the original purpose in accordance with the Personal Information Protection Act under the following considerations:

Whether the provision is related to the original purpose of collection
Whether the additional use or provision of personal information was foreseeable in light of circumstances of collection or of customary practice
Whether the provision wrongly infringes upon the data subject’s interest
Whether necessary security measures are taken such as using pseudonyms, encryption, etc.

3. Provision of Personal Information

QANDA does not provide personal information to any third party without users’ prior consent unless required by applicable laws. The following personal information is provided to a third party.

Recipient	Personal information to be provided	Purpose of provision
Students and parents on QANDA Tutor	Teacher’s name, phone number, information regarding enrolled university (school, major, student ID number, etc.), teaching subjects	·Progress of tutoring sessions, contacts regarding tutoring sessions (rescheduling, inquiries, etc.), delivery of notices, etc.

4. Delegation of Personal Information Processing

QANDA entrusts the following personal information to a third party to provide user services, etc.

Delegatee	Description of Delegated Task
Ciot Security, Inc., NICE Payments, Inc., NAVER FINANCIAL Corp., Kakao Pay Corp.	Processing of payment
Kakao Corp.	Kakao SSP service (Kakao Subscription ON service)
Amazon Web Services, Inc., Stitch Inc., Google LLC (GCP)	System operation and data storage service (cloud service)
Google LLC (Firebase), Holistics	User data analysis service
Google LLC (BigQuery)	Data warehouse and cloud service for data analysis service
Adjust GmbH, Meta Platforms Inc.	Data analysis for marketing purpose
NICE Information Service	Identity verification of legal representatives for users under 14
LUNASOFT, Inc., Nextia Co., Ltd., NAVER Cloud Corp.	Sending messages such as email, SMS, etc.
Lever, Inc.	Recruit management platform service
ppLink, Inc.	Online platform for QANDA Tutor service
Zendesk Inc.	Customer communication solution service
TYPEFORM SL.	Online user survey service
KT Alpha Co., Ltd.	Sending online gifts to users (gifti-show)
Dver Corp., CJ Logistics Corporation	Delivering IT devices (such as I-pad, etc.) to users with respect to QANDA Tutor service
Modusign Inc.	Electronic contract execution and signed contract storage service
Tutor(s) assigned through QANDA Tutor service	Providing QANDA Tutor service

5. Cross-border Transfer of Personal Information

Some personal information may be transferred or handled overseas as follows for service provision, etc.

Recipient (contact info.)	Country	Date and Method of Transfer	Transferred Items	Purpose of Use and Retention Period
Stitch, Inc. (privacy@talend.com)	USA, Germany	Send through online network after collection	All collected information	Operation and management of cloud server during period of the contract
Google LLC (data-access-requests@google.com)	USA	Same as above	Same as above	Provision of services such as app development solution (Firebase), cloud service (GCP), data warehouse (BigQuery) during period of the contract
Adjust GmbH (privacy@adjust.com)	Germany	Same as above	Log data, location information, device information, information regarding interaction between user and QANDA service or use and QANDA server	Provision of user analysis service for marketing purpose during period of contract
Meta Platforms, Inc. (korealocalagent @support.facebook.com)	USA	Same as above	Information regarding interaction between user and QANDA service or use and QANDA server, Facebook app ID, Mobile Advertiser ID, terminal information (such as OS, screen size, device ID, model of phone, model of terminal), IP address, location information	Provision of effect analysis of online media advertisement during period of contract
Holistics (privacy@holistics.io)	USA	Same as above	All collected information	Provision of user data analysis service during period of contract
Lever, Inc. (privacy@lever.co)	USA, Canada	Same as above	Name, contact information, academic background, career background, all other information submitted by data subject for job application	Provision of online recruitment platform service during period of contract
Zendesk, Inc. (privacy@zendesk.com)	USA	Same as above	Name, contact information, user complaints, all other information required to process for customer communication	Provision of customer communication solution during period of contract
TYPEFORM SL. (privacy@typeform.com)	Spain	Same as above	Name, contact information, survey results, etc.	Provision of online survey solution during period of contract

6. Storage and Destruction of Personal Information

A. Storage and Use Period of Personal Information

Personal information collected from users is stored during the retention period to which the users have given their consent. Personal information is destroyed immediately once the purpose of collection and use of personal information is fulfilled.

However, as to Republic of Korea, the following personal information that shall be retained under applicable laws and regulations are retained for the required period.

Items to be retained	Applicable law	Retention period
Records of contract withdrawal of subscription	Act on the Consumer Protection in Electronic Commerce, etc.	5 years
Records of payment and supply of goods		5 years
Records of consumer complaints or settlement of disputes		3 years
Records of display and advertisement		6 months
Books and supporting documents for all transactions regulated by the Tax Act	Framework Act on National Taxes	5 years
Records of electronic financial transactions	Electronic Financial Transactions Act	5 years
Service visit history, access log, IP address	Protection of Communications Secrets Act	3 months

B. Destruction of Personal Information

QANDA destroys personal information immediately once the purpose of collection and use of personal information is fulfilled unless retention is required by applicable laws. Personal information stored in electronic file formats is to be destroyed using technical means to avoid recovery and regeneration of the information. Personal information printed on paper is destroyed through shredding or incineration.

7. Right of Users and Exercising the Rights

Users are able to inquire and edit their personal information on QANDA service at any time and may request to view, edit, delete, or terminate the use of personal information of their or, in case of legal representatives, of users under the age of 14. To exercise the rights of users or legal representatives through the Privacy Protection Officer, please contact the QANDA customer service center (support@mathpresso.com, 02-322-9433).

Users or legal representatives may withdraw their consent to the collection and use of personal information or request termination of their subscription. Specifically, for any requests of change or cancellation of accounts via profile setting function on the app, or via contacting the Privacy Protection Officer, QANDA will immediately process the request and notify users without delay.

8. Technical and Administrative Protection Measures of Personal Information

In dealing with the personal information of users, QANDA takes technical and administrative protection measures required by the Personal Information Protection Act by restricting unauthorized access, storing access records to the personal information processing system, and conducting regular training on personal information protection and security for employees who handle users’ personal information to ensure the prevention of loss, theft, leakage, forgery or damage of personal information.

9. Use of Cookies

Cookies that store and retrieve user information may be used to automatically collect necessary information such as access logs, device information, etc. for service provision. A cookie is a small piece of text file set by the web server (HTTP) and stored in a user’s computer hard disk while the user is browsing the website.

A. Purpose of Use

In order to provide users with personalized services, we use cookies that store and retrieve user information. When a user visits the website, the website server reads cookies stored in the user’s device to maintain environment settings and customized services. Cookies help the user to access and use the website conveniently according to the user’s preference. Also, they are used to provide customized information, such as personalized ads and marketing by tracing the user’s website visit history and use patterns.

B. Settings/Operation and Refusal of Cookies

A user has an option for setting a cookie. Hence, a user may set the option on the web browser to accept all cookies, complete confirmation thereof whenever a cookie is stored, or refuse the storage of all cookies. Provided, however, when a user refuses the storage of a cookie, then the user may experience difficulties in using the service.

10. Chief Privacy Officer

QANDA has designated the following person as the Chief Privacy Officer to remain responsible for responding to user inquiries regarding personal information and resolving any related complaints.

Chief Privacy Officer

Name: Won-guk Jung

Phone: 02-322-9433

Email: prox@mathpresso.com

11. Report of security vulnerability

If you believe you have found a security vulnerability, please submit your report to us using the following email:

security@mathpresso.com

We will do our best to respond to your report as soon as possible. However, we do not offer monetary rewards for vulnerability disclosures.

12. Others

Obligation to Notify Prior to Amendment

QANDA may amend this Privacy Policy, to reflect changes in relevant laws or the internal policy. In this case, the modification will be notified through the app or web service apps of the Company.

Outbound Link

A user’s personal information may be processed by a third party when the user accesses websites, products, or services provided by the third party via QANDA service or website, etc. Regarding such processing of personal information, please refer to the privacy policy provided by the third party. This Privacy Policy does not apply to the process of users’ personal information by a third party.

Effective Date: February 23, 2022

See past privacy policies