Privacy Policy

1. Purpose of Processing Personal Information

<Flipwise> processes personal information for the following purposes and will not use it for any other purpose.

• Internet Access Permission: To receive data necessary for application operation such as card groups (Deck) and announcements from the server, and to provide Google services (advertising).
• Storage Access Permission: To add images when creating image cards, and to backup and export saved cards
• Camera & Photo Library Access Permission: To add images when creating image cards
• Unique Identifier (Android Advertising ID) Access Permission: Collection and transmission of advertising ID for AdMob personalized advertising

2. Rights and Obligations of Data Subjects and How to Exercise Them

Users can exercise the following rights as data subjects.

(1) Data subjects may exercise the following rights related to personal information protection with <Flipwise> at any time.

• a. Request to view personal information
• b. Request for correction in case of errors
• c. Request for deletion
• d. Request to stop processing

Since we do not collect any information, users can handle everything by deleting the app directly.

3. Items of Personal Information Processed

(1) <Flipwise> processes the following personal information items.

<Product or Service Provision>

• Unique identifier (Android Advertising ID) access permission (AdMob)

4. Destruction of Personal Information

('BrownOnyx') will destroy personal information without delay when the purpose of processing is achieved. The procedures, deadlines, and methods of destruction are as follows.

• We use only the minimum permissions necessary to provide app functionality.
• When the app is deleted, the above permissions are no longer used.

5. Measures to Ensure the Security of Personal Information

('BrownOnyx') takes the following technical, administrative, and physical measures necessary to ensure security in accordance with Article 29 of the Personal Information Protection Act.

1. Establishment and Implementation of Internal Management Plan
   We have established and implemented an internal management plan for the safe processing of personal information.
2. Access Control to Personal Information
   We take necessary measures for access control to personal information through granting, changing, and canceling access rights to database systems that process personal information, and control unauthorized access from outside using intrusion prevention systems.
3. Access Control for Unauthorized Persons
   We have a separate physical storage location for personal information and have established and operated access control procedures for it.

6. Personal Information Protection Officer

(1) ('BrownOnyx') has designated the following personal information protection officer to oversee personal information processing and handle complaints and remedies related to personal information processing.

(2) Data subjects can contact the personal information protection officer for all personal information protection-related inquiries, complaints, and remedies arising from using ('BrownOnyx') services (or business). ('BrownOnyx') will respond and process your inquiries without delay.

7. Changes to Privacy Policy

1. This privacy policy is effective from the implementation date, and any additions, deletions, or corrections due to changes in laws and policies will be notified through announcements 7 days before the implementation of changes.
2. This privacy policy is effective from July 23, 2025.