Privacy Policy

1. Purpose of Personal Information Processing

Moca INC. (hereinafter referred to as "the Company") operates the MochaFace application and processes personal information for the following purposes. The processed personal information will not be used for purposes other than those stated below, and if the purpose of use changes, necessary measures such as obtaining separate consent will be implemented in accordance with Article 18 of the Personal Information Protection Act.

• Service Provision: Providing AI-based first impression analysis services through facial photo analysis
• Member Management: User registration, identity verification, and service usage management
• Marketing and Advertising: Provision of events and promotional information (with optional consent)
• Service Improvement: Enhancing service quality and developing new features
• Customer Support: Handling inquiries and complaints

2. Processing and Retention Period of Personal Information

The Company processes and retains personal information within the period of retention and use of personal information according to laws and regulations or the period agreed upon when collecting personal information from the data subject.

3. Personal Information Items Processed

Required Items

• Registration: Email address, password, nickname
• Service Use: Uploaded facial images (deleted immediately after analysis)
• Automatically Collected: IP address, cookies, service usage records, device information, app version

Optional Items

• Profile Information: Profile picture, self-introduction
• Marketing Consent: Phone number (for promotional messages)

4. Provision of Personal Information to Third Parties

The Company processes personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information), and provides personal information to third parties only in cases corresponding to Articles 17 and 18 of the Personal Information Protection Act, such as consent from the data subject or special provisions of the law.

5. Destruction Procedures and Methods

Destruction Procedures

1. Personal information is moved to a separate database after achieving its purpose and destroyed after a certain period according to internal policies.
2. Personal information moved to a separate database is not used for other purposes unless required by law.
3. Uploaded images are automatically deleted from all servers and backup systems immediately after AI analysis.

Destruction Methods

• Electronic Files: Deleted using technical methods that cannot reproduce records
• Paper Documents: Shredded or incinerated
• Image Files: Secure deletion with overwriting to prevent recovery

6. Rights and Obligations of Data Subjects

Data subjects may exercise the following privacy-related rights with the Company at any time:

• Request to view personal information
• Request for correction if there are errors
• Request for deletion
• Request to stop processing

Rights can be exercised through written documents, email, or fax in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

7. Security Measures for Personal Information

The Company takes the following measures to ensure the security of personal information:

• Administrative Measures: Establishment and implementation of internal management plans, regular employee training
• Technical Measures: Access control to personal information processing systems, installation of access control systems, encryption of unique identification information, SSL/TLS encryption for data transmission
• Physical Measures: Access control to computer rooms and data storage rooms
• App Security: Code obfuscation, certificate pinning, anti-tampering measures

8. Personal Information Protection Officer

The Company has designated the following Personal Information Protection Officer to oversee personal information processing, handle complaints, and provide remedies for damages related to personal information processing.

9. Data Collection in Mobile Application

The MochaFace mobile application collects the following information:

Permissions Required

• Camera/Gallery Access: To select and upload photos for analysis
• Internet Access: To communicate with AI analysis servers
• Storage Access (Optional): To save analysis results locally

Analytics and Tracking

• Google Analytics for Firebase: App usage statistics (anonymized)
• Crashlytics: Crash reporting and performance monitoring
• No advertising identifiers are collected

10. Children's Privacy

MochaFace does not knowingly collect personal information from children under 14 years of age. If we discover that we have collected personal information from a child under 14, we will delete it immediately.

11. International Data Transfers

For AI analysis services, data may be processed on servers located in South Korea. All data transfers are protected using industry-standard encryption protocols.

12. Changes to Privacy Policy

This Privacy Policy is effective from January 1, 2025. When there are additions, deletions, or corrections to the content due to changes in laws and policies, we will notify you through the app's notice feature 7 days before the implementation of the changes.

Version History:

• v1.0 - January 1, 2025: Initial privacy policy
• v1.1 - August 25, 2025: Added app-specific information for Google Play Store compliance

13. Additional Security Measures

• Uploaded images are transmitted via SSL encrypted communication
• Images are completely deleted from the server immediately after analysis
• Only analysis results are stored encrypted in the database
• Regular security audits and vulnerability assessments are conducted
• All personal data is encrypted at rest and in transit

14. Contact Information

For any questions or concerns regarding this Privacy Policy or the MochaFace application, please contact us: