DOLOPLANETDOLOPLANET

Privacy Policy

Last updated: March 18, 2026

DoloLabs Inc. ("Company") operates the DOLOPLANET website and mobile applications (the "Service"). This Privacy Policy explains how the Company collects, uses, stores, and shares personal information.

1. Information We Collect

The Company may collect the following categories of personal information or information that may identify an individual.

Account and sign-in information

  • Email address, OAuth provider identifiers, nickname, profile image, language or country settings, and service account ID
  • Basic profile information made available by Google, Apple, or Kakao when you choose those sign-in methods

Identity verification and payment information

  • Name, date of birth, gender, mobile phone number, carrier, CI, DI, and other identity verification data
  • Payment method details, payment approval or order numbers, payment amount, receipt information, refund information, email address, and other payment-related data
  • Some information may be processed directly by Apple App Store, Google Play, KG Inicis, Nice Payments, or other identity verification or payment providers

User input and generated content

  • Content and related information that users enter, upload, or create while using the Service
  • Information provided during customer inquiries, reports, feedback, or other service interactions

Device and usage information

  • IP address, cookies or session information, access time, access logs, browser, OS, app version, device identifiers, country or language, page views, event records, and error or diagnostic logs

2. How We Collect Information

The Company may collect personal information in the following ways.

  • Directly from you when you sign up, sign in, make a payment, complete identity verification, contact support, write content, or upload files
  • From third-party providers such as Google, Apple, Kakao, KG Inicis, Nice Payments, Apple App Store, or Google Play when you use their services with the Service
  • Automatically through cookies, SDKs, pixels, logs, and analytics tools while you use the Service

3. Why We Use Personal Information

The Company uses collected personal information for the following purposes.

  • Infrastructure management for service delivery and analysis
  • Data processing for service improvement
  • Research and development for conversation features and service improvement
  • Customer support, operational management, payment processing, security response, and legal compliance

4. External AI Services and Data Sent to Them

When you use AI generation, recommendation, autocomplete, or safety review features, the Company may send the minimum information necessary to provide those features to external AI providers.

  • Data that may be sent: text, images, and other content submitted by users while using the Service
  • Main recipients: Google LLC, OpenAI, LLC, and xAI
  • Transfer purpose: infrastructure management for service delivery and analysis, data processing for service improvement, and research and development for conversation features and service improvement
  • Transfers are limited to the necessary scope when relevant features are used.
  • Where required by applicable law or platform policy, the app provides separate notice and requests consent before transfer.

5. Third-Party Service Providers, Outsourcing, and Cross-Border Processing

The Company may use the following providers to operate the Service and may outsource processing or transfer personal information to them when necessary. The Company manages these providers through contracts or internal controls so that they maintain the same or equivalent level of personal information protection.

  • Supabase, Inc.: infrastructure management for service delivery and analysis
  • Cloudflare, Inc.: infrastructure management for service delivery and analysis
  • Amazon Web Services, Inc.: infrastructure management for service delivery and analysis
  • Google LLC: infrastructure management for service delivery and analysis, and data processing for service improvement
  • OpenAI, LLC: research and development for conversation features and service improvement
  • xAI: research and development for conversation features and service improvement
  • Kakao Corp., Apple Inc., and other sign-in providers: infrastructure management for service delivery and analysis
  • KG Inicis, Nice Payments, Apple App Store, Google Play, and other payment or identity verification providers: infrastructure management for service delivery and analysis

These providers may process personal information outside the country where you reside depending on their infrastructure locations.

6. Destruction of Personal Information

The "Company" destroys personal information without delay when the purpose of personal information processing is achieved.

  • Destruction procedure: Information entered by users is moved to a separate DB after achieving the purpose and stored for a certain period before being destroyed. Personal information moved to the DB is not used for other purposes unless required by law.
  • Destruction deadline: Users' personal information is destroyed within 5 days from the end of the retention period.

7. Service Usage Record Collection and Refusal

The "Company" collects users' service usage records for service improvement. These records are used for service usage pattern analysis, service improvement, and personalized service provision.

  • Users can refuse service usage record collection in app settings. Refusal may result in limitations in personalized service usage.

8. Personal Information Protection Officer

The "Company" has designated a Personal Information Protection Officer as follows to take overall responsibility for personal information processing in accordance with the Personal Information Protection Act and to handle personal information protection-related inquiries and complaints:

  • Name: Kang Rahee
  • Contact: lahi@doloplanet.com

9. Changes to Privacy Policy

This Privacy Policy is effective from the implementation date, and if there are changes due to laws or company policies, we will notify you through announcements 7 days before implementation.

10. Security Measures for Personal Information

The "Company" takes the following measures in accordance with Article 29 of the Personal Information Protection Act:

  • Minimization and education of personal information handling staff
  • Technical measures to prepare for hacking and other threats
  • Personal information encryption
  • Storage and falsification prevention of access records
  • Access restriction to personal information

11. Remedy for Infringement of Data Subject Rights

To receive relief for damages caused by personal information infringement, you may contact the following institutions:

  • Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
  • Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972)
  • Supreme Prosecutors' Office Cyber Crime Investigation Unit (www.spo.go.kr / 02-3480-3573)
  • National Police Agency Cyber Safety Bureau (http://cyberbureau.police.go.kr / 182)