🎞️ MoMoAlbum

Privacy Policy

Effective date: July 6, 2026

MoMoAlbum (the “Company”) complies with the Personal Information Protection Act and other applicable laws and establishes and discloses this policy to safely process users’ personal information.

1. Categories and Methods of Collecting Personal Information

Category	Items	Collection time
Required	Social account identifiers (Kakao, Naver, Google, Apple), email, nickname, profile photo	At sign-up
Required	Device identifier (Device ID), push token, app version and OS information	Automatically collected while using the Service
Content	Photos and videos uploaded by the user, capture date and time (EXIF), comments	When a post is uploaded
Optional	Location information (location recorded with a post)	When location permission is granted
At order	Recipient name, contact information, postal code, address, payment-related records (payment instrument information is processed by the payment provider)	When ordering photo prints or a photobook

2. Purposes of Processing Personal Information

Identifying members, processing sign-up and withdrawal, and managing accounts
Providing the shared-album service (storing and displaying content, inviting members, and sending notifications)
Providing paid services (managing subscription entitlements and processing, producing, and delivering photo prints and photobooks)
Ensuring service stability, preventing misuse, and responding to customer inquiries

3. Retention and Use Period

When a member withdraws, the Company destroys the content uploaded by the user and personal information without delay.

However, under applicable laws, the following information is retained for the stated periods.

Retained item	Legal basis	Period
Contract and withdrawal records	Act on the Consumer Protection in Electronic Commerce, etc.	5 years
Payment and supply of goods records	Act on the Consumer Protection in Electronic Commerce, etc.	5 years
Consumer complaints and dispute-resolution records	Act on the Consumer Protection in Electronic Commerce, etc.	3 years
Service access records	Protection of Communications Secrets Act	3 months

4. Entrustment of Personal Information Processing

The Company entrusts the following parties with personal information processing to provide the Service.

Entrusted party	Entrusted work
PortOne V2 and connected payment providers	Payment and refund processing for photo prints and photobooks
Printing and production partner (SweetBook)	Photobook printing, production, and delivery (recipient name, contact information, address, and order photos)
Oracle Cloud	Service server operation and data storage

5. Transfer of Personal Information Abroad

Personal information is transferred abroad as follows for content storage and transmission, authentication, and notifications.

Recipient	Purpose	Transferred items	Destination
Cloudflare, Inc.	Photo and video storage and transmission (CDN)	Uploaded content	Global regions including the United States
Google LLC (Firebase)	Login authentication and push notifications	Account identifiers and push tokens	United States

The transfer occurs when the Service is used (uploading and logging in), and the information is protected under each entrusted party’s security policy.

6. Provision to Third Parties

The Company does not provide users’ personal information to third parties. An exception applies when the user has consented or there is a lawful request based on applicable law.

7. Destruction Procedures and Methods

Personal information is destroyed without delay when its retention period has expired or its processing purpose has been achieved.
Electronic files are deleted in a manner that makes recovery impossible, and printed materials are shredded or incinerated.

8. Users’ Rights

Users may view or correct their personal information at any time, or delete it (withdraw) through [Settings → Account Management → Delete Account] in the app.
Optional access permissions, such as location permission, may be withdrawn at any time in the device settings.
Requests to access, correct, delete, or suspend processing of personal information may be made using the contact information below, and the Company will take action without delay.

9. Measures to Ensure the Security of Personal Information

Encryption in transit (HTTPS/TLS) and access control based on authentication tokens
Minimization of personal-information access privileges and retention of access records
Private album content is displayed only to album members

10. Children’s Personal Information

The Company does not accept membership applications from children under 14 years of age and does not collect children’s personal information.

11. Person Responsible for Personal Information Protection

Category	Details
Person responsible	MoMoAlbum operator
Email	rambo.zzang@gmail.com

For advice on personal-information infringement: Personal Information Infringement Report Center (privacy.kisa.or.kr / 118), Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)

12. Changes to this Policy

If this policy changes, notice will be provided through an announcement in the Service or this page from 7 days before the effective date (30 days before for material changes).

Announcement date: June 29, 2026 · Effective date: July 6, 2026