Privacy Policy

PlaySlimmingGo · Operated by SlimmingGo Group Co., Ltd.
Effective 18 September 2026 · Policy version 2026-09-18

SlimmingGo Group Co., Ltd. ("the Company") handles your personal information with care and complies with the Personal Information Protection Act of the Republic of Korea and related laws. This policy explains what the PlaySlimmingGo posture and body measurement service ("the Service") collects, why, how it is protected, and when it is deleted.

1. What we collect

a. When you create an account

b. When you take a measurement — sensitive information

The information below is health-related information and constitutes sensitive information under Article 23 of the Personal Information Protection Act. The Company obtains separate consent for it, apart from your consent to other personal information. If you do not consent, your account remains, but you cannot use the measurement feature.

This corresponds to the [Required] Collection and use of health data item on the sign-up screen, and the Company records that consent under the name sensitive. Every item listed in this section is covered by that single consent — a photo and the analysis computed from it are the source and the result of the same information, so they are not separated.

c. Collected automatically while you use the Service

d. What we do not collect

• We do not collect location data. The app does not request location permission.
• We do not collect resident registration numbers.
• We do not collect payment information.
• The only device permission the app requests is the camera, used solely to take measurement photographs.

2. How we use it

• Identity verification and sign-in — email, name, social login identifier
• Posture and body measurement, and delivering results — photographs, posture measurements, analysis results
• Keeping your measurement history and comparing changes over time — as above
• Service security and prevention of misuse — access records
• Notices about events and offers — email. This is optional consent; declining places no restriction on your use of the Service, and you may withdraw it at any time.

The Company does not use personal information for purposes other than those stated above. If a purpose changes, we will notify you in advance and obtain consent again.

3. How long we keep it

If you were measured at a partner store, that measurement remains part of the store's customer records. Deleting your account does not delete the records the store holds; please contact the store directly to have them removed.

4. Do we share it with third parties?

The Company does not provide your personal information to third parties. The only exception is a lawful request from an investigative authority following due process.

Processing entrusted to others

To the extent necessary to operate the Service, processing is entrusted as follows.

All personal information is stored within the Republic of Korea. During social login, however, we ask the provider you chose (Kakao, Naver, Google, or Apple) to verify the validity of your login token, which involves communication with that provider's servers — some of which are located outside Korea. No photographs or measurement results held by the Company are transmitted in that exchange.

5. How we protect it

• Encryption in transit — all communication between the app and the server is encrypted with HTTPS (TLS).
• Encryption at rest — identifying fields such as names, email addresses, and notes are stored as ciphertext in the database. A complete copy of the database cannot be read.
• Photograph encryption — each measurement photograph is encrypted with its own distinct key, and that key is itself encrypted by AWS KMS. Compromise of one photograph's key does not open any other photograph.
• Access control — the database itself refuses to return data belonging to a different organisation. A fault in the application cannot cause another person's records to be read.
• Access logging — we record who opened a measurement photograph, when, and why, and these records cannot be altered afterwards.
• Two-factor authentication for administrators — every account with access to the administration console must enter a one-time code from an authenticator app in addition to a password.

6. Your rights

• Access — you can view all of your measurement records and photographs in the app.
• Correction — you can edit your name and notes directly in the app.
• Deletion — individual measurements can be deleted in the app. To delete your entire account, use the app's settings or the Account and Data Deletion Request page.
• Suspension of processing and withdrawal of consent — you may withdraw your consent to the collection and use of sensitive information at any time by writing to info@slimminggogroup.com. On withdrawal, the measurement feature is suspended, and you may also request that the photographs and measurement results we hold be destroyed. To delete your account and all records immediately, use account deletion in the app.

We do not collect personal information from children under 14 without the consent of their legal guardian.

7. Destruction

Personal information whose retention period has expired, or whose purpose has been fulfilled, is destroyed without delay. Electronic files are deleted by means that make them unrecoverable, and the corresponding photograph files in storage are deleted with them. If a photograph cannot be deleted, account deletion is halted and the failure is recorded — so that an account never disappears while its data remains.

8. Data Protection Officer

You may contact us at the address above regarding enquiries, complaints, or remedies concerning personal information, and we will respond without delay.

Other bodies you may contact

• Personal Information Infringement Report Centre — privacy.kisa.or.kr / 118
• Personal Information Dispute Mediation Committee — www.kopico.go.kr / 1833-6972
• Supreme Prosecutors' Office, Cyber Investigation Division — www.spo.go.kr / 1301
• National Police Agency, Cyber Bureau — ecrm.police.go.kr / 182

9. Company information

10. Changes to this policy

The Company records which version of this policy you consented to, together with the policy version in effect at the time of your consent. When the policy changes, we obtain consent to the new version again.

When this policy changes, the changes and the effective date will be announced on this page. Changes unfavourable to users will be announced at least 30 days before they take effect, and consent will be obtained again where required.