Checkin Privacy Policy

Checkin (hereinafter "the Service") protects users' personal information in accordance with applicable privacy protection laws.

Article 1 (Purpose of Processing Personal Information)

• Member registration and management: identity verification, maintenance of membership status, prevention of fraudulent service use
• Service provision: attendance check-in service, group management, attendance record storage and synchronization, statistical analysis
• Location-based service: providing GPS-based attendance check-in functionality

Article 2 (Items of Personal Information Processed)

1. When signing up

• Required: email, password, name (nickname)
• Optional: profile picture, phone number

2. When using social login

• Google: email, name, profile picture
• Kakao: email, nickname, profile picture
• Apple: email, name (depending on user's choice)

3. Automatically collected during service use

• Location information: GPS coordinates (only during GPS-based attendance check-in)
• Push notifications: FCM token, device information
• Advertising service: advertising identifier (IDFA), ad interaction data
• App usage information: access time, usage history

4. Group and attendance management

• Group information: group name, invite code, group settings
• Attendance records: check-in date and time, check-in method (QR / verification code / GPS / manual), attendance status
• Member information: member name within the group, profile picture, notes

Article 3 (Period of Processing and Retention of Personal Information)

Category	Retention Period
Member information	Until membership withdrawal
Attendance records	Deleted immediately upon group host (administrator) withdrawal or group deletion
Location information	Deleted immediately upon completion of GPS-based check-in (check-in location settings are retained until the group is deleted)

Article 4 (Provision of Personal Information to Third Parties)

The Service does not provide users' personal information to third parties as a matter of principle. The following cases are exceptions:

• When the user has given prior consent
• When required by law or upon request from an investigative agency

Article 5 (Outsourcing of Personal Information Processing)

Consignee	Consigned Tasks
Supabase Inc.	Data storage and authentication services
Google LLC	Firebase push notifications (FCM), Google AdMob advertising service, Google Maps location service

Article 6 (Rights and Obligations of Information Subjects)

Users may exercise the following rights at any time:

• Request to view personal information
• Request for error correction
• Request for deletion
• Request to stop processing

Article 7 (Destruction of Personal Information)

When the purpose of processing personal information has been achieved, the relevant personal information is destroyed without delay. Information stored in electronic file form is deleted using technical methods that prevent the records from being reproduced.

• Upon membership withdrawal: the member's personal information (email, name, profile picture, etc.) is deleted immediately
• Upon group host (administrator) withdrawal: the groups they managed and all attendance records within those groups are deleted immediately
• Upon group deletion: all information for that group (group settings, member information, attendance records, location information, etc.) is deleted immediately

Article 8 (Ensuring the Security of Personal Information)

• Encryption of personal information
• Technical measures against hacking and similar threats
• Access control to personal information

Article 9 (Collection and Use of Location Information)

The Service collects location information to provide its GPS-based attendance check-in feature.

• Time of collection: location information is collected only when the user taps the GPS-based attendance check-in button
• Purpose of collection: verifying that the user is within the attendance radius configured by the group host
• Retention period: deleted immediately upon completion of the check-in (coordinates are not stored)
• Permission revocation: users may deny location permission in their device settings; in that case, only the GPS-based attendance check-in feature becomes unavailable

Article 10 (Advertising and Tracking)

The Service may collect the following information to improve user experience and provide relevant advertising:

• Advertising identifier (IDFA): used to deliver personalized ads on iOS devices
• App Tracking Transparency: on iOS 14.5 and later, tracking permission is requested; even if the user declines, all app features remain fully usable
• Google AdMob: ad delivery and ad performance measurement

Users can limit ad tracking in their device settings; in that case, ads will still be displayed but will not be personalized.

Article 11 (Personal Information Protection Officer)

Article 12 (Changes to the Privacy Policy)

This privacy policy is effective from the date stated below; any changes will be announced through in-app notices.