Seokgamoney Privacy Policy

Version 2.2 · Effective 6 October 2026

This revision takes effect on 6 October 2026. Until then, Version 2.0 applies. See the change history in Section 15 for what changed.

This is a translation. The Korean version is the governing text.

At a glance

We collect only your Google, Apple, Kakao or LINE login details, step counts, LUCK and items, Wish Lantern content and purchase records. No phone number, date of birth or precise location.

Photos you use for the moktak, mala beads or outfits stay on your phone and are never uploaded. Only a photo attached to a Wish Lantern is stored on our servers.

Wish Lantern text is processed by OpenAI to check for inappropriate content and to translate it.

Your conversations with the AI monk are processed by AI to write replies and are stored on our servers so the conversation can continue.

You can delete your account from App › Profile › Settings and more, and your data is erased. Ad tracking can be turned off in your phone settings.

Bug Hole Inc. ("the Company") operates the mobile application Seokgamoney ("the Service") and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy explains, in plain language, what personal information we collect and why, how long we keep it, who processes it on our behalf, and how you can exercise your rights.

1. Information we collect and how

We collect only the minimum information needed to run the Service. "Required" items in 1.1 to 1.3 are necessary to perform the service contract with you and are processed without separate consent under Article 15(1)(4) of the Personal Information Protection Act. Among the automatically collected items in 1.4, those used for service stability, fraud prevention and nonpersonalised ads rest on Article 15(1)(6) (legitimate interest), while the advertising identifier and behavioural data for personalised ads are used on iOS only if you allow tracking (ATT), in the EEA and UK only if you consent on the ad consent screen, and elsewhere (including Android in Korea) on the basis of the notice and opt out tools in Section 7 (resetting or deleting the advertising ID, opting out of ad personalisation), in line with the Korean Personal Information Protection Commission's Guidelines on Online Personalised Advertising. "Optional" items are collected only with your consent, and you can use every core feature without agreeing to them.

1.1. Signup and account (required)

1.2. Using the Service (required)

1.3. Paid purchases (required, when you pay)

We never collect or store card numbers, bank accounts or other payment method details. Apple and Google process those under their own privacy policies.

1.4. Automatically collected information (required)

• Usage records, access times, in app events (screens viewed, features used), device model, OS version, app version, approximate location at country or region level (estimated from IP address), app integrity token (Firebase App Check)
• Advertising identifier (iOS IDFA, Android Advertising ID). On iOS it is used for personalised ads only if you allow tracking through App Tracking Transparency. If you decline, you see nonpersonalised ads.
• Ad impressions, clicks and rewarded ad completion records

1.5. Optional items (only with your consent)

1.6. Information we do not collect or never send off your device

• Photos used for moktak, mala beads and Magic Tee and Magic Pants. Photos you pick from your library and the processed results are stored only on your device and are never uploaded. They are deleted when you delete the app.
• We do not collect phone numbers, dates of birth, gender, precise location, government ID numbers, or sensitive information such as religion or political views. However, anything you choose to write in an AI monk chat may be included in the chat record, so we recommend not sharing sensitive information there.
• A photo attached to a Wish Lantern is the one exception and is stored on our servers (see 1.2).

2. Why we use your information

3. How long we keep your information

We destroy personal information without delay once its purpose is fulfilled, except as follows.

Information we must keep by law after account deletion is stored separately and used only for that purpose. Information we keep under our own standards is erased on account deletion, except where the table above states its own retention period.

4. Sharing with third parties

We do not share your personal information with third parties, except in the following cases.

1. When you have given prior consent.
2. When required by law, or by an investigative agency or court following the procedures set by law.
3. Public Wish Lanterns. When you post a Wish Lantern, the wish text, display name, avatar look, attached photo (if any), the number of people who prayed together and translations are shown to other logged in users of the Service. This is a disclosure you choose by posting. Your account ID and email are never shown.
4. Behavioural data sent to advertising partners. The ad SDKs listed in Section 7 collect advertising identifiers and device information directly to serve ads.

5. Processors we entrust

We entrust the following processing to service providers and supervise them under Article 26 of the Personal Information Protection Act.

6. International transfers

Because the processors above process and store data outside Korea, we transfer personal information abroad under Article 28-8(1)(3) of the Personal Information Protection Act (outsourcing and storage necessary to perform the contract with you) and disclose the details here.

You can refuse the transfer of personalised advertising data to ad partners through iOS App Tracking Transparency or by deleting or resetting your Android Advertising ID. If you do not want any transfer, you may stop using the Service by deleting your account. The Service cannot be provided without these transfers.

7. Behavioural information for advertising and how to opt out

We do not collect behavioural information for personalised advertising from users we know to be under 14, and we never identify you from behavioural data alone. If you opt out, you still see ads, but they are not based on your interests.

Partner privacy policies are available from DARO · Google · AppLovin · Unity · Pangle

8. Destruction of personal information

1. Procedure. Information whose retention period has ended or purpose has been fulfilled is destroyed without delay (within 5 days). Information subject to a legal retention period is moved to separate storage and destroyed when that period ends.
2. Method. Electronic files are permanently deleted in a way that cannot be recovered. On account deletion, your Firebase authentication account and user document are deleted immediately. Your Wish Lantern posts and photos stop being shown immediately, are kept for 30 days, then deleted. Only payment and dispute records we must keep by law are stored separately for the periods in Section 3.
3. Inactive accounts. We do not convert accounts to a dormant state. You can delete a long unused account yourself at any time.

9. Your rights and how to exercise them

1. You may at any time request access, correction, deletion, suspension of processing, withdrawal of consent, and data portability for your personal information.
2. How
   • Delete account. App › Profile › Settings and more › Delete account. Processed immediately, and LUCK, items and purchase benefits are lost with it. Wish Lanterns stop being shown immediately and are deleted after 30 days.
   • Change notification consent. App › Profile › Settings and more › Notifications (service and marketing notifications are controlled separately).
   • Opt out of ad tracking. Device settings described in Section 7.
   • Revoke motion and fitness permission. Device Settings › Seokgamoney › Motion & Fitness (iOS), Physical activity and Health Connect (Android). Only walking rewards stop. Every other feature keeps working.
   • Delete a Wish Lantern or appeal a rejection. You can appeal a rejection on its result screen. To delete a posted wish, email the contact in Section 11.
   • Other access, correction or portability requests. Email the contact in Section 11. We respond within 10 days of receiving your request.
3. Requests may be made by you, your legal guardian, or an authorised representative. We may ask you to confirm your identity through your signup email.
4. Where the law limits access, correction or deletion, we will tell you why.
5. You are responsible for keeping your information accurate and for not posting other people's personal information in Wish Lanterns or elsewhere.

10. Children under 14

1. Only people aged 14 or older may use the Service. After login you must confirm on the consent screen that you are 14 or older. If you leave without confirming, you are logged out and no Service data is stored.
2. We do not currently offer signup for children under 14 with a legal guardian's consent. If we introduce it, we will first add to this policy how consent is verified under Article 22-2 of the Personal Information Protection Act and how guardian information is handled.
3. If we learn that we have collected personal information from a child under 14, we destroy it without delay. If a user tells us they are under 14, Service access stops at once, and the account and its personal information are deleted after a 7 day notice period. The user may delete the account at any time during that period, and a guardian may request deletion through the contact in Section 11.

11. Data protection officer and complaints

Contact us at the address above for any privacy question, complaint or remedy request. We will respond without delay.

You may also contact the following Korean authorities.

• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
• Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
• Supreme Prosecutors' Office Cybercrime Division (spo.go.kr / 1301)
• National Police Agency Cyber Bureau (ecrm.police.go.kr / 182)

12. Security measures

Under Article 29 of the Personal Information Protection Act we take the following measures.

1. Organisational. Only a minimum number of staff handle personal information. Moderation and operator tools are accessible only to approved operator accounts, and every operator action is logged. We maintain an internal management plan.
2. Technical. All traffic is encrypted with TLS. Database and file storage enforce access rules so that your data can be read or written only by you, by operators the Company authorises, and by server functions, and only Wish Lanterns you make public are shown to other users. App integrity checks (App Check) reduce the risk of tampered apps reaching our servers. Purchases are verified by our server directly with Apple and Google, and purchases are linked to accounts with one way encrypted tokens. Ad rewards are paid only through callbacks verified by our server.
3. Physical. Data is stored in Google Cloud and Amazon Web Services data centres holding security certifications such as ISO 27001. The Company operates no physical servers of its own.

13. Automatic data collection tools

The Service uses no web cookies. The following SDKs collect usage information automatically.

14. Notice of use and provision

If the Company comes to meet the thresholds of Article 20-2 of the Personal Information Protection Act and Article 15-3 of its Enforcement Decree (1,000,000 or more data subjects, or 50,000 or more data subjects' sensitive or unique-identifier data), we will notify you at least once a year, by email or app notification, of how your personal information has been used and provided.

15. Changes to this policy

1. We announce changes, with reasons, in the app and on this page at least 7 days before they take effect.
2. Changes that matter to your rights (items collected, purposes, third party sharing, retention) are announced 30 days in advance and notified individually by your signup email or app notification.
3. Change history

This policy takes effect on 6 October 2026.

16. Additional information for users in the EEA and UK

If you use the Service in the European Economic Area or the United Kingdom, the GDPR and UK GDPR also apply. Our legal bases are performance of the contract (1.1 to 1.3), legitimate interests (service stability, fraud prevention, nonpersonalised advertising) and consent (personalised advertising, marketing notifications, wish AI processing). In addition to the rights in Section 9, you have the right to object to processing and to lodge a complaint with the supervisory authority in your country. Your data is processed in the Republic of Korea, a country covered by an EU adequacy decision. Transfers to processors in the USA and other third countries rely on appropriate safeguards such as the Standard Contractual Clauses concluded with each processor. AI screening of Wish Lanterns is followed by human review and an appeal process, so it is not a solely automated decision with legal effect. The Company has not appointed an EEA or UK representative. Contact us through Section 11.