A.PLA Privacy Policy 'A.PLA' (hereinafter referred to as the 'Company') values your personal information and complies with the Act on Promotion of Information and Communications Network Utilization and Information Protection in Korea. If you are located in any other country, the applicable laws of that country will prevail. The Company informs you of the purpose and method of using the personal information you provide through the Privacy Policy and what measures are being taken to protect your personal information. Enforcement of the Terms Your use of the Company's Services is subject to these Terms and the Company's Terms of Use and Privacy Policy. Anything not set forth in this Policy is governed by and subject to A.PLA's Terms of Use. This Policy is posted and announced through a link to the Privacy Policy on the App's initial screen, Help page, and on the App's download page within an app store (such as Google Play). We may revise this Policy, and any material changes will be announced in the App or at each posting location. The revised Policy will be effective upon posting on the App or at each posting location. If you do not agree to the Policy or do not provide accurate information, your use of the Services may be limited or unavailable. What personal information we collect The Company collects essential personal information to provide smooth service, and may collect additional personal information for special reasons such as sending event products, managing account information, and using paid services. - Required Login ID, password, e-mail, gender, date of birth, mobile phone number, carrier information, and content of communications in the app Provides some basic information necessary for the proper operation of the Service To add specific content, such as photos or videos, you need to allow access to the camera, microphone, and photo library. DOSI Wallet account information may be collected for avatar integration and NFT trading. User's image received from the camera preview is removed immediately after run motion capture algorithm for tracking user's motion real-time for reflectng user's motion to avatar. The user's image received from the camera preview is only used to apply the motion capture algorithm in real-time on the user device and is not transmitted to the server nor saved to local or remote. Also, We do not share user's face data with any third parties for any purpose including advertisement or commercial purpose. - Information automatically collected when you use external services User ID for external services Names and nicknames used for external services Profile images used for external services Other external service membership information (friend information, etc.) - Add-ons Name, home address, legal representative information (name, e-mail, phone number, I-PIN number, and other identifying information of the legal representative to consent to a minor's subscription and payment) - Optional (collected when you insert personal information into your Google Account): Age, gender, language spoken, occupation, advertising ID (may be linked to internal identifiers provided to you by your company to study, analyze and improve app usage). The following information may be automatically generated and collected in the course of service use or business processing. - Service usage history, location information, access logs, cookies, access IP information, access mobile phone number, transaction history, suspension history When you use a paid subscription service or make a payment directly with the company (rather than on a platform such as iOS or Android), you provide the company with information about your purchase or give the company's payment service provider information such as your debit or credit card number or other financial information. ο Items when using paid services 1) When paying by credit card: Card name, card number, card expiration date, etc. 2) Mobile phone payment: Mobile phone number, payment authorization number, etc. 3) ARS payment: Phone number, etc. 4) Account transfer: Bank name, account number, etc. 5) Coupon payment: Coupon information, etc. * Payment-related information must be entered according to other payment methods, and the payment information entered will not be used for any purpose other than payment. - Collecting location information When using the Service, the Company may collect personal location information (and other information) of the User through various means depending on the device used by the User, such as GPS, Bluetooth, Wi-Fi connection, etc. However, only if you have expressly consented to such collection, your personal location information will be collected through the background process of your device even when you are not using the Service if you have expressly allowed it. If you do not authorize us to collect your personal location information, we will not collect it. When accessing the Service, your personal location information (among other related information) is not provided to other users of the Service, and is utilized when necessary for your use of the Service (such as setting up a conversation partner match). ■ Purpose of collecting and using personal information "Personal Information" means information about a living individual that identifies that individual by reference to an identifiable factor, such as a name, contained in the information (including information that can be readily combined with other information to identify a specific individual, even if the information alone does not identify that individual). We use the personal information we collect for the following purposes ο Fulfillment of contracts for the provision of services and settlement of fees for the provision of services, provision of content, purchase and payment of fees, delivery of goods or sending of invoices, authentication of identity for financial transactions, and financial services ο Member management Identification, personal identification, prevention of unauthorized use by rogue members and prevention of unauthorized use, confirmation of intention to join, confirmation of age, confirmation of consent of legal representative when collecting personal information of children under the age of 14, handling of complaints such as complaint handling, and delivery of notice ο Used for marketing and advertising to develop and specialize new services (products), deliver advertising information such as events, provide services and place advertisements according to demographic characteristics, identify access frequency or statistics on members' use of services The Company uses users' personal information within the scope notified in the "Personal Information Processing Policy," and does not use it beyond the scope or disclose users' personal information to others in principle without the prior consent of the user. However, the following cases are exceptions. - If users have given prior consent - Necessary to settle charges for the provision of services - Processed in a de-identified form for statistical compilations, academic research, or market research. - Pursuant to the provisions of laws and regulations, or when requested by an investigative agency in accordance with the procedures and methods prescribed by laws and regulations for the purpose of investigation. Retention and use period of personal information In principle, after the purpose of collecting and using personal information is achieved, the information is destroyed without delay. However, the Company will retain the following personal information to prevent unauthorized use in accordance with the Terms and Conditions and internal policies. Retained Information: Login ID, password, e-mail, service usage records, access logs, cookies, access IP information, payment records, and legal representative information. Grounds for retention: In case of termination of the use contract against the will of the user due to other parties or force majeure. Retention period: 3 months In addition, if it is necessary to preserve it in accordance with the provisions of related laws and regulations, the Company shall retain member information for a certain period of time prescribed by related laws and regulations as follows. Records of contract or subscription withdrawal: 5 years (Act on Consumer Protection in Electronic Commerce, etc.) Records of payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.) Records of consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.) Records of identification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection) Records of visits: 3 months (Act on the Protection of Communications Secrets) ■ Procedures and methods for destroying personal information In principle, the Company destroys the information without delay after the purpose of collecting and using personal information is achieved. The procedure and method of destruction are as follows ο Destruction procedures The information entered by the user for membership, etc. is transferred to a separate DB (separate filing cabinet in case of paper) after the purpose is fulfilled and is stored for a certain period of time (see Retention and Use Period) in accordance with the information protection reasons under the internal policy and other related laws and then destroyed. Personal information transferred to a separate DB will not be used for any purpose other than that for which it is retained, except as required by law. ο Destruction method - Personal information stored in electronic form is deleted using technical methods that make the records unrecoverable. - Personal information printed on paper is destroyed by shredding or incineration. Consent to provide personal information to third parties We do not provide your personal information to third parties without your consent, In order to provide smooth service, we may disclose minimum personal information to domestic and foreign third parties as stipulated in "Provision to Third Parties" of the "Basic Policy on Privacy". When you make a payment through DOSI Wallet, DOSI Wallet provides the information needed to make the payment, In this case, the relevant policies of DOSI Wallet will be followed. You may share user information with us through social media. For example, your information may be shared with A.PLA when you create or sign in to your A.PLA account through social media or other accounts (such as Facebook, Google, or Apple), or when you upload information, such as photos, to A.PLA from your social media account (such as Instagram or Spotify). Some of your personal information may be provided to the management agency (NGC) for smooth service operation, user inquiries, and events. Information you provide: IP, email address, phone number, and other information provided during registration or payment, app usage history, in-app chat history, etc. Additional information: contact information to deliver event prizes, shipping information, event participation information, winner information, etc. It may be passed to an event delivery agent, in which case the personal information passed will be destroyed after the event merchandise delivery is complete. For bad actors on A.PLA, we may provide user identification numbers, email addresses, phone numbers, profiles, customer support tickets, location information, and IP addresses to our affiliates. Retained until the purpose of processing is fulfilled. Consent to the transfer of personal information to international third parties By agreeing to this Policy, you acknowledge that the Collected Data set forth in this Policy may be transferred outside of your country or region and that the country or region to which the data is transferred may not have laws or regulations that impose obligations of protection equal to or greater than the laws or regulations governing the protection of personal and other private information in your country or region. You acknowledge that the Company will transfer the Collected Data set forth in this Policy to South Korea or its authorized subcontractors, media and/or advertising agencies. We also agree to disclose to authorized subcontractors, media or advertising agencies located in countries other than the EEA member state in which we established the Hub for the purposes of use set forth in this Policy. Receipt of personal information from third parties The Company receives and uses the following personal information from third parties. Providers What personal information you provide Purpose of use Retention and usage periods Apple, Inc. Apple ID for the app Login process When an individual requests deletion or when the purpose of use has been fulfilled (see "Procedures and Methods for Destruction of Personal Information ") Google LLC Google Account ID, Google Account Name, Google Account Email Address Login process LINE Corporation LINE ID, LINE account name Login process Rights of users and legal representatives and how to exercise them 1. Users and their legal representatives may view or modify the personal information of themselves or children under the age of 14 registered at any time, and may also request to cancel their membership. To view or modify the personal information of a user or a child under the age of 14, please use 'Change Personal Information' (or 'Modify Member Information', etc.) or contact the person in charge of personal information management in writing, by phone, or by e-mail, and after verifying the identity of the user, we will take necessary measures such as destroying the personal information, unless otherwise stipulated by laws and regulations. If a user requests correction of an error in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the result of the correction process will be notified to the third party without delay so that the correction can be made. Personal information that has been terminated or deleted at the request of a user or legal representative will be processed as specified in the "Retention and Use Period of Personal Information Collected by the Company" and will be processed so that it cannot be viewed or used for any other purpose. 2. review and agree to the Terms of Use and this Policy before using the App. If you do not agree to this Policy (including any revisions thereto), your use of the App (or, in the case of a revised Policy, your continued use of the App after the revision) constitutes your acceptance of this Policy. You must not use the App. Notwithstanding the foregoing, you have the right to withdraw your consent at any time without affecting the lawfulness of any processing based on your consent prior to its withdrawal. If you wish to withdraw your consent, please see "4. Disclosure Requests and Inquiries, Contact Customer Service" below and contact us. 3. You can stop the collection and transfer of information by deleting (uninstalling) the app from your mobile device. ■ Installation, operation, and rejection of automatic personal information collection devices. The Company uses "cookies" to store and retrieve user information from time to time. A cookie is a very small text file sent to the user's browser by the server used to operate the Company's website and stored on the user's computer hard disk. The Company uses cookies for the following purposes Purpose of using cookies, etc. - Providing targeted marketing and personalized services by analyzing the access frequency and visiting time of members and non-members, identifying users' tastes and interests and tracking their traces, and identifying the degree of participation in various events and the number of visits. You have a choice about the installation of cookies, so you can set options in your web browser to accept all cookies, confirm each time a cookie is stored, or refuse to store all cookies. Example of how to reject cookie settings: To refuse to set cookies, you can select the options in your web browser to accept all cookies, confirm each time a cookie is saved, or refuse to save all cookies. To set it up (for Internet Explorer): Tools > Internet Options > Privacy at the top of your web browser. However, if the user refuses to install cookies, there may be difficulties in providing the service. Technical and administrative measures related to personal information In handling users' personal information, the Company takes the following technical and administrative measures to ensure that personal information is not lost, stolen, leaked, altered or damaged and is safe. Users' personal information is strictly protected by passwords. Only you know the password for your user ID, and you can only view and change your personal information if you know your password. Therefore, you should not disclose your password to anyone. The Company shall not be liable for any problems caused by the leakage of personal information such as ID and password due to the user's own carelessness or Internet problems. To this end, we encourage users to LOG-OUT online and close their web browsers when they are finished on their PCs. This is especially true if you're sharing your PC with others or using it in a public place (such as a workplace, school, library, or internet game room) to prevent your personal information from being seen by others. The Company is committed to preventing the leakage or damage of users' personal information by hacking or computer viruses. In case of damage to personal information, we back up the data from time to time, use the latest antivirus programs to prevent leakage or damage to users' personal information or data, and securely transmit personal information on the network through encryption algorithms (SSL). We also use an intrusion prevention system to control unauthorized access from the outside, and we strive to have all possible technical measures in place to ensure systemic stability. The Company limits the handling of users' personal information to the person in charge and grants a separate password for this purpose, which is regularly updated, and always emphasizes compliance with the Privacy Policy through frequent training for the person in charge. Persons in charge of handling personal information are limited to those who perform personal information management tasks, such as the person in charge of personal information management and those who are inevitably required to handle personal information for other business purposes. ■ Civil service regarding personal information In order to protect users' personal information and handle complaints related to personal information, the Company has designated relevant departments and personal information managers as follows. Customer Service Departments: Customer Service e-mail: cs@apla.world Addendum (Oct. 1, 2023) This Privacy Policy is effective October 1, 2023.