Privacy Policy
Last updated: 2026-03-22
1. Purpose of Collecting and Using Personal Information
Famstagram (hereinafter “Service”) collects and uses the minimum necessary personal information for the following purposes.
1.1 Registration and Account Management
- User identification and authentication through social account integration
- Identity verification for service use and sanctions against fraudulent users
- Confirmation of account deletion requests and customer support (CS) processing
1.2 Service Provision
- Sharing and storing digital content (photos, videos, etc.) within family groups
- Personalized notification services and new feature announcements
2. Personal Information Collected
| Category | Items |
|---|---|
| Required | Sign-up channel identifier, email, profile name, profile photo |
| Optional | Device information, app push notification consent status |
| Auto-collected | Access logs, IP address, fraudulent use records, service usage records |
3. Retention and Use Period
Users’ personal information is, in principle, destroyed without delay once the purpose of collection and use has been achieved. However, the following information is retained for the specified period for the reasons stated below.
- Retention under internal policy: Retained for 30 days after account deletion for fraud prevention and CS processing, then destroyed
- Retention under applicable laws: In accordance with retention periods prescribed by laws such as the Protection of Communications Secrets Act (log records for 3 months) and the Electronic Commerce Act
4. Disclosure to Third Parties and Outsourcing
The Service does not, in principle, provide users’ personal information to external parties (third parties). However, when necessary for smooth service provision (such as cloud server hosting), contractors are specified and managed securely in accordance with applicable laws.
5. Procedures and Methods of Destruction
Users’ personal information is safely destroyed according to destruction procedures after the purpose has been achieved. Information in electronic file format is deleted using technical methods that make the records unrecoverable.
6. Rights of Users and Legal Representatives
- Users may view, modify, or delete (withdraw from) their personal information at any time.
- When a child under the age of 14 registers for the Service, consent from a legal representative is required, and the legal representative may exercise rights regarding the child’s personal information.
7. Security Measures
The Service implements the following technical and administrative measures to ensure the safety of personal information.
- Strong encryption applied to data transmission channels and storage servers (AES-256, etc.)
- Minimization and strict control of personal information access privileges
- Operation of security systems to protect against hacking and computer viruses
8. Privacy Officer
- Name: [Officer Name]
- Contact: [Email]
9. Changes to This Policy
This Privacy Policy is effective from the date of implementation. Any changes due to laws and policies will be announced in advance through in-app notices.