이거얼마 / IGEOEOLMA
Privacy Policy
This policy explains how JJ Company handles information in Igeoeolma (이거얼마) and this website, including purposes, retention and your rights. Actual processing depends on available features and your consent.
1. Operator and contact
Operator: JJ Company (제이제이컴퍼니)
Privacy officer: Jinjoon Kim (김진준)
Privacy and support contact: support@jjworks.dev
2. Shopping searches and on-device information
Search terms and web requests are sent to the stores you choose. Search suggestions use Naver requests. Search history, favorites, selected stores and conversations are stored on your device; using the server features described below transmits the information needed for those features separately.
You sign in on the retailer’s own website. We do not collect shopping passwords, login cookies or sessions by sending them to Igeoeolma servers. Retailer visits, sign-in, purchases and payments are governed by that service’s privacy and cookie policies.
If you allow an external website’s location request, that website processes the location. Our own servers do not collect or store device coordinates. You may decline and enter a neighborhood manually.
3. Information and purposes
- Authentication and abuse prevention: Firebase anonymous service identifiers, app verification and connection information. Server features may create an identifier without real-name registration.
- AI shopping advice, with consent: Your question, limited context from the same conversation, selected product information and included displayed prices, responses, request identifiers and usage. Used to generate and deliver answers, manage free allowances and prevent misuse. Your text may be included in external searches; do not enter sensitive information.
- Optional diagnostics: Failed search terms, retailer, failure stage and time, app and search-module versions, login-state classification, missing-record counts and crash reports. Used to investigate failures and improve reliability. Search terms may contain personal information you enter.
- Optional usage analytics, when enabled: Random installation identifiers, app actions, counts and duration ranges, processed by our own system and Google Analytics. We do not send search terms, conversations, product URLs or our own installation identifier to Google. Filtered search terms are counted per term per day on our servers without linking those counts to account or device identifiers.
- Support: Subjects, messages, replies, case and service identifiers; email requests also include the sender’s address. Used for support, troubleshooting and privacy requests.
- Affiliate links, when enabled: A selected public Coupang product URL may be sent to our server and the affiliate service to generate a destination link. Purchases through affiliate links may earn the operator a commission.
We process information needed to deliver requested services and handle inquiries. Optional diagnostics, analytics and AI transmissions follow the relevant consent. Declining optional features does not prevent direct retailer searches.
4. Retention and disposal
The 365-day disposal rule for support and AI usage records will be implemented before public app release. These two record types currently have no automatic expiry. Privacy requests are accepted now; we explain the verifiable scope and processing schedule individually.
| Record | Retention rule |
|---|---|
| On-device history, favorites, chats and settings | Until deleted on the device. OS backups follow your device and account settings. |
| AI delivery responses and processing records | Responses are deleted after receipt acknowledgment. Unreceived responses expire for retrieval after 24 hours; processing records have a seven-day expiry from creation. Retrieval expiry and physical disposal may occur at different times. |
| Individual AI usage records | 365 days from recording; daily and monthly ledgers: 365 days from the end of the relevant period. |
| Our search and login diagnostics | 14 days after receipt, or until a verified deletion request is processed. |
| Our action events and duplicate markers | 30 days after receipt; search-term intake duplicate markers: one day. |
| Daily counts by search term | 365 days from the aggregation date. |
| Support messages and replies | 365 days after receipt or the last response, whichever is later. |
| Other personal operational records held by us | Disposed of when the purpose is fulfilled; a 365-day maximum applies where no separate period is specified. |
365 days is a retention limit, not a waiting period for deletion requests. When retention expires or the purpose is fulfilled, information is disposed of irreversibly. Legally required retention is separated, with the relevant data, basis and period explained. Non-identifying aggregate counts may be retained.
Google crash reports generally enter deletion after 90 days. Google Analytics user and event data follow the property’s two- or fourteen-month setting; aggregate reports are separate. External authentication, AI and backup retention also follow the provider policies below. Uninstalling does not delete external server records.
5. External services and overseas processing
When you use a service feature or consent to an optional feature, information may be sent over encrypted networks to the services below. Some processing occurs overseas, including the United States. A Korean server location does not mean all processing is limited to Korea.
- Google / Firebase: Anonymous authentication, app verification, server storage and processing, and optional diagnostics and analytics. Processes identifiers, technical information and data needed for each server feature. Authentication is processed in the US; some other services use Google’s global facilities. Authentication information is managed according to service use and deletion requests, with separate provider backup-deletion periods. Firebase privacy and retention; Google policy and contact.
- OpenAI and Google Gemini: Depending on the active AI route, processes questions, conversation context, product information and responses in provider facilities including the US. Default OpenAI API abuse-monitoring logs may be retained for up to 30 days, subject to legal and other exceptions; Gemini abuse-monitoring records have a 55-day period. These are separate from deletion of our conversation records. Additional feature-specific storage and logs follow provider policies. OpenAI data controls; OpenAI privacy contact; Gemini data policy.
- Cloudflare: IP addresses, requests and technical information needed to deliver and secure this website may be processed on its global network. Retention and contact details: Cloudflare policy.
You may decline overseas processing for an optional feature by not using it or withdrawing consent. Features requiring server authentication or processing may be unavailable; direct retailer searches are separate. Contact us for requests about external processing and deletion.
Retailers, search suggestions and affiliate services you use process web requests, sign-in and transactions under their own policies. Processing on our behalf is distinguished from external services you access directly.
6. Access, correction, deletion and restriction
You may request access, correction, deletion, restriction or withdrawal of consent through our data-request page or support email. Authorized representatives may also request this after appropriate verification. After verifying the requester and records, we act without undue delay under applicable law and reply with the outcome or reasons for any limitation.
Diagnostic settings let you stop transmission and request deletion of your diagnostics on our servers. This does not immediately delete previously sent Crashlytics or AI-provider records. If identifier links have been lost, we explain what can be verified and request only minimal additional information. We do not ask for passwords or verification codes.
7. Safeguards and website storage
Our server features use authentication, restricted access and encrypted transmission, and process information needed for the stated purposes. This website stores your theme preference in browser local storage, which you can clear. Retailer cookies can be managed through the respective site and browser settings.
The service is not directed at children under 14. If we learn that a child’s information was processed without appropriate consent, we work with the guardian to take necessary action.
8. Updates and complaints
Updates and revision dates will be posted here; new consent will be obtained when required. Contact us for privacy inquiries. In Korea, you may also contact the Personal Information Infringement Report Center at 118.