Privacy Policy
Version: 1.0.0
Last Updated: 2026-05-03
1. Purpose of Processing Personal Information
Nontick Co., Ltd. (the "Company"), which provides the Pluck service, processes personal information for the following purposes and does not use it for purposes other than those listed below.
- Member registration and management
- Provision and improvement of the Service
- Tarot card interpretation and personalized service provision
- AI-based interpretation generation and service quality improvement
- Provision of personalized advertisements
2. Processing and Retention Period of Personal Information
- The Company processes and retains personal information within the personal information retention and use period prescribed by law or within the period consented to by the data subject when the personal information is collected.
- The processing and retention periods for each type of personal information are as follows.
- Member registration and management: Until membership withdrawal
- Service usage records: Until termination of the Service
- Report, inquiry, and dispute handling records: 3 years after completion of handling
- Reasons for retaining personal information under applicable laws
If it is necessary to retain information under applicable laws, the Company keeps the information for the period prescribed by the relevant laws.
- Protection of Communications Secrets Act
- Service visit records (logs) and access IP: 3 months
- Act on Consumer Protection in Electronic Commerce
- Records on consumer complaints or dispute handling: 3 years
- Protection of Communications Secrets Act
3. Provision of Personal Information to Third Parties
- The Company provides personal information to third parties only in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, such as where the data subject has given consent or where there is a special provision of law.
- To use external services such as personalized advertising, the Company may provide personal information to third parties, including overseas corporations, as follows.
- Recipient: Google LLC (AdMob)
- Purpose of provision: Provision of personalized advertisements and measurement of advertising performance
- Items provided: Device identifiers (Advertising ID/IDFA), device information, app usage information
- Retention and use period: Until the user withdraws consent, withdraws from the Service, or the purpose of providing the relevant service is achieved
4. Entrustment of Personal Information Processing
- The Company entrusts personal information processing work to overseas corporations as follows for service improvement and smooth handling of personal information-related work.
- Entrusted party (processor): Google LLC (Firebase, Vertex AI)
- Entrusted work: Member registration and identity authentication (including Google/Apple login integration), database storage and management, server operation, app error analysis (Crashlytics), service usage statistics analysis (Analytics), AI-based tarot interpretation generation
- Personal information transferred: Email address, login identifier, nickname, service usage records, app error information, questions entered by users, selected card information, and profile information entered by users for personalized interpretation
- Country of transfer: United States and other regions where Google LLC provides its services
- Timing and method of transfer: Transmitted over the network when the user uses the Service
- Entrustment period: Until membership withdrawal or termination of the entrustment agreement
5. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them
- Data subjects may exercise rights against the Company at any time, including requests to access, correct, delete, or suspend processing of personal information.
- The rights under Paragraph 1 may be exercised against the Company in writing, by email, or by other methods in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.
- Data subjects may withdraw consent to the collection and use of personal information at any time through the "Delete Account" feature in the app.
6. Protection of Children's Personal Information
This Service restricts membership registration by children under the age of 14. The Company may perform age verification during the sign-up process or verify age information through social login. If the Company becomes aware that it has collected personal information from a child under the age of 14, it will delete such information without delay.
7. Items of Personal Information Processed
Pluck processes the following personal information items.
- When registering as a member and using the Service
- Required items: Email address, login identifier (Social ID), nickname, tarot consultation question content
- Optional items: Date of birth, gender, occupation, and other information directly entered by the user in the profile or input fields for personalized interpretation
- When using email sign-up: Password (stored in encrypted form)
- Automatically collected during use of the Service
- Device identifiers (ADID/IDFA), device information (OS, device name, etc.), app usage records, access logs, app error and crash records (Crashlytics)
8. Destruction of Personal Information
In principle, when the purpose of processing personal information has been achieved, the Company destroys the relevant personal information without delay.
9. Collection of Advertising Identifiers (ADID/IDFA) in Mobile Apps and How to Opt Out
- To provide users with appropriate personalized advertisements (Google AdMob), the Company may collect and use advertising identifiers (ADID/IDFA) from mobile devices.
- Users may opt out of collection of advertising identifiers by changing their mobile device settings.
Android: [Settings] -> [Google] -> [Ads] -> [Delete advertising ID] or [Opt out of Ads Personalization]
iOS: [Settings] -> [Privacy & Security] -> [Tracking] -> Turn off [Allow Apps to Request to Track], or [Settings] -> [Privacy & Security] -> [Apple Advertising] -> Turn off [Personalized Ads]
10. Restricted Service Regions (EU/EEA/UK)
This Service is not provided to residents of the EU/EEA or the United Kingdom, where the GDPR (General Data Protection Regulation) applies. Users are solely responsible for all legal and data-related responsibilities arising from access through VPNs or other circumvention methods in those regions.
11. Notice to California Residents (CCPA)
Under the California Consumer Privacy Act (CCPA), California residents are informed that they have the following rights.
- Do Not Sell My Personal Information
The Company does not sell users' personal information to third parties. However, information such as advertising identifiers may be shared with advertising partners, including Google AdMob, to provide personalized advertisements, and users may opt out through device settings.
- Right to Know and Right to Delete
California residents have the right to know the categories of personal information collected by the Company, the sources of such information, the purposes of collection, and the recipients with whom it is shared, and they have the right to request deletion of their personal information. Such requests may be made through the "Delete Account" feature in the app or by contacting the privacy officer by email.
- Right to Non-Discrimination
The Company does not discriminate against users for exercising their rights under the CCPA, such as by refusing service or imposing disadvantages.
12. Privacy Officer
- The Company designates a privacy officer as follows to take overall responsibility for personal information processing and to handle complaints and remedies for data subjects in connection with personal information processing.
Privacy Officer
- Name: Dawit Jung
- Position: Privacy Officer
- Contact: support@pluck.nontick.com
- Data subjects may contact the privacy officer for all privacy-related inquiries, complaints, and remedies that arise while using the Company's Service. The Company will respond to and process inquiries from data subjects without delay.
13. Changes to this Privacy Policy
This Privacy Policy applies from its effective date. If any additions, deletions, or corrections are made due to changes in laws or policies, the Company will notify users through in-app notices, pop-ups, or similar methods from seven days before the changes take effect.
14. Language
This Privacy Policy is written in Korean, and translations in other languages may be provided for users' convenience. If there is any discrepancy in meaning or interpretation between a translated version and the Korean original, the Korean original will prevail.