Liv-ay Privacy Policy

Effective date: July 14, 2026

1. General

CHO-FAM (the "Company") complies with the Personal Information Protection Act and other applicable laws, and processes users' personal information lawfully and safely. This Policy applies to "Liv-ay" (the "Service"), the interactive storytelling platform provided by the Company.

2. Items Collected and Collection Methods

CategoryItemsWhen collected
Sign-upEmail address, phone number, social account identifier (Google/Apple), nicknameAt sign-up and account linking
Identity verificationEmail verification records, phone verification records, adult verification statusAt each verification
PaymentsApp market payment receipt information (purchased product, payment identifier)When purchasing paid currency (Gems, etc.)
Creator settlementBank name (code), account number, account holder name, last digits of resident registration number (for withholding tax filing)When registering a payout account
Service usagePlay records, created/registered content, currency transaction history, device identifier, access logsGenerated automatically during use

The last digits of the resident registration number are collected only from creators who request cash-out, for withholding tax filing under the Income Tax Act.

3. Purposes of Use

  1. Member identification, sign-up confirmation, and account management
  2. Service provision: story play, AI content generation (story, image, music, voice), content registration and publication
  3. Paid currency payment processing and creator revenue settlement/payout (including withholding tax filing)
  4. Preventing fraudulent use, handling reports, and maintaining service order
  5. Delivering notices and responding to inquiries

4. Outsourcing and Overseas Transfer

The Company entrusts or transfers personal information as follows to provide the Service.

RecipientPurposeCountry
Google LLC (Firebase, Google Cloud, Vertex AI)Member authentication, data storage, AI story/image generationUnited States and other Google data center locations
ElevenLabs, fal.aiVoice (TTS)/media generation (limited to generation request text)United States
Toss Payments Co., Ltd.Creator payout agency (account verification and deposit)Republic of Korea
Email delivery agency (SMTP relay)Sending service emails such as verification codes (limited to email address)Location of the contractor

5. Retention Period

  1. Personal information is destroyed without delay upon account deletion, except records retained under applicable law:
    • Records on contracts or withdrawal of offers: 5 years (E-Commerce Act)
    • Records on payment and supply of goods: 5 years (E-Commerce Act)
    • Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
    • Withholding tax records: as required by tax law
    • Access logs: 3 months (Protection of Communications Secrets Act)
  2. Destruction proceeds after a 24-hour grace period following the withdrawal request.

6. Destruction Procedure and Method

Personal information whose retention period has elapsed or whose purpose has been achieved is destroyed immediately in an unrecoverable manner. Electronic files are deleted irreversibly.

7. User Rights

  1. Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information.
  2. Rights may be exercised via the in-service settings screen or the contact below; the Company will act without delay.

8. Security Measures

  1. Minimized access rights and access control for personal information
  2. Encryption in transit (TLS) and masking of sensitive information such as account numbers
  3. Incident response procedures and retention of access logs

9. Privacy Officer and Contact

For inquiries, complaints, or remedies regarding personal information processing, please contact:

10. Duty of Notice

Additions, deletions, or amendments to this Policy will be announced via in-service notices or this page at least 7 days before the effective date.

Addendum

This Policy takes effect on July 14, 2026.