Privacy Policy

1. Information We Collect

The Company collects the following personal information to provide the Service:

2. Purpose of Collection and Use

• Member identification and account management
• K-POP photo card authenticity verification (watermark decoding)
• Order processing, shipping, and customer support
• Statistical analysis to improve and develop the Service
• Fraud prevention and Service stability

3. Camera and Photo Library Access

Real Poca requests camera access for the sole purpose of capturing photo card images for authenticity verification. Captured images are transmitted to the server only for watermark decoding and are automatically deleted from the server after verification is complete. The Company does not use captured images for marketing, advertising, or sharing with third parties.

Photo library access is requested only when the user chooses a profile picture or imports an image. You may revoke camera and photo permissions at any time in your device settings.

4. Retention Period

• Member information: until the member withdraws (deleted immediately upon withdrawal)
• Verification images: deleted immediately after verification
• Order & payment records: retained for 5 years (Korean E-Commerce Act)
• Access logs: retained for 3 months (Korean Communications Privacy Act)

5. Sharing With Third Parties

The Company does not, in principle, share your personal information with third parties. Exceptions are limited to the following cases:

• When the user has consented in advance
• To delivery carriers (CJ Logistics, DHL, etc.) for shipping purposes — recipient information only
• When required by law or by a lawful request from a court or investigative authority

6. Processing Entrusted to Service Providers

7. Data Destruction

When personal information is no longer needed (e.g., the retention period has expired or the purpose of processing has been achieved), the Company destroys it without delay.

• Electronic files: permanently deleted in a manner that prevents recovery
• Paper documents: shredded or incinerated

8. User Rights

You may exercise the following rights at any time:

• Request access, correction, or deletion of your personal information
• Request suspension of processing
• Withdraw your membership

You may exercise these rights through the in-app settings, or by emailing the Privacy Officer below.

9. Security Measures

• SSL/TLS encryption for all data in transit
• Restricted database access and encrypted storage
• Regular security audits and vulnerability management
• Minimization and training of personnel handling personal information

10. Privacy Officer

11. Changes to This Policy

This Privacy Policy may be updated to reflect changes in laws, policies, or the Service. Any changes will be announced through the app or website.