Skip to main content

Privacy Policy

What is the Privacy Policy?

H&H Corp. (hereinafter referred to as the “Company”) collects, uses, and provides personal information based on the user's consent, and actively guarantees user's basic rights to determine the way their personal information is used.

As with all information service providers, the Company adheres to and complies with all relevant laws as well as personal data protection regulations and guidelines of the Republic of Korea.

The ‘Privacy Policy’ outlines the guidelines that the Company must adhere to so that users can access the Company’s services with the confidence and knowledge that the Company, in good faith, will protect their valuable personal information.

This Privacy Policy applies to all H&H Services (hereinafter referred to as “H&H” or “Services”).

Collection of Personal Information

The Company strives to keep the collection of necessary personal information for the provision of its services to a minimum.

The Company collects the minimum personal information necessary to provide the following services through the website, individual applications, or programs during registration for membership or use of its services.

The list of collected information is as follows.

What is “required information”?- Information necessary to perform essential functions of the service

What is “optional information”?

  • Additional information collected to provide more specialized services
  • Should optional information not be provided, there is no restriction on service use

Required information: e-mail, password, login ID, personal authentication information (name, date of birth, gender, Korean and foreign information, mobile phone number, mobile carrier information, C and I), height, weight, service use record, access log, cookie, access IP information

Personal information (required) for use of the Squat Challenge app: Individual exercise history (duration of workout, frequency, accuracy, etc)

  • Camera

    • android.permission.CAMERA The purpose of the camera permission is to collect Skeleton Data (in text format) to mark the location of the user’s joints during exercise while using the app which the app’s primary function, and to generate a preview screen for the data. The app does not collect any photos, videos, or audio files during this process and only needs these permissions to take and save pictures when the user change’s their profile picture. Other than the aforementioned data, there are no other data that is collected or processed by the app through this permission.

  • Network Connection

    • android.permission.ACCESS_NETWORK_STATE

  • Internet Usage

    • android.permission.INTERNET

  • Notification

    • android.permission.WAKE_LOCK

  • Storage

    • android.permission.WRITE_EXTERNAL_STORAGE The app uses this permission to store Skeleton Data files to the device during exercise while using the app which is the app’s primary function.When the user changes profile picture inside the app, the app will use the photo file if the user has taken a photo with the app.

  • AD ID

    • com.google.android.gms.permission.AD_ID Ad ID access (used within the app to show personalized ads to users)

  • Read contacts

    • android.permission.READ_CONTACTS Use it to display a list of friends you can add to the walk together feature.

Optional information:

  • Personal information (optional) when doing squats in the Squat Challenge app: Skeleton information (location of joints during squats)

Use of Personal Information

Personal information is used for the management of membership, provision and improvement of services, and development of new services.

The Company collects the minimum personal information necessary to provide the following services through the website, individual applications, or programs during registration for membership or use of its services.

Member verification, confirmation of registration, verification of identity and age, prevention of abnormal use of the service

Confirmation of consent of legal representative when collecting personal information of children under 14 years of age, verification of identity for legal representatives if acting on behalf of children under 14 years of age

Notifying friends of usage history or providing functions such as user search and registration

Analysis of demographic characteristics and provision of personalized services

Development of new services, diversification of services, process inquiries or complaints, and notifications to users

When using paid services, content transmission, delivery, and fee settlement

Prevention and sanctions against acts that interfere with the stable operation of the service (including account theft and fraudulent uses, etc.)

Confirmation of participation in events and promotions, marketing and advertising, etc.

Service usage records, frequency of logins and statistics on service use, provision of personalized services, improvement of services

Consignment and Provision of Personal Information

Personal information may be entrusted to an external entity to perform some of the tasks necessary for the provision of services to users and the fulfillment of the contract. The provision of personal information is based from the time when the user confirms it, and when entrusted, the Company manages and supervises the external entity so that it does not violate relevant laws, regulations and policies.

The Company provides personal information to third parties after obtaining consent within the scope necessary to provide services to users. The Company does not provide users' personal information to third parties except when the user separately consents, or as stipulated by laws and regulations.

Destruction of Personal Information

Personal information is destroyed without delay when the purpose of collection and use has been achieved or when there is a request for withdrawal from membership on the part of the user, and the procedure and method are as follows.

In the case of electronic files, personal information contained within is to be safely and thoroughly deleted so that they cannot be recovered or reproduced. In the case of other records, printed materials, written documents, etc., the personal information is to be destroyed by shredding or incineration.

In addition, H&H separately stores or deletes the personal information of members who have not used the service for one year according to the 'validity period of personal information' method to notify users. Separately stored personal information is kept for 4 years and then destroyed without delay. However, if it is necessary to preserve the personal information in accordance with the provisions of relevant laws, the personal information is kept for the period stipulated by the relevant laws and regulations.

In addition, personal information that must be kept for a certain period in accordance with laws and regulations and the laws and regulations themselves are as follows.

Consumer protection laws pertaining to e-commerce or electronic transactions

Records on contract or subscription withdrawal: 5 years

Records on payment and supply of goods: 5 years

Records on consumer complaints or dispute resolution: 3 years

Records on displays / advertisements: 6 months

Framework Act on National Taxes

Bookkeeping and supporting documents for all transactions stipulated by tax law: 5 years

Electronic Financial Transactions Act

Records related to electronic finance: 5 years

Communication Secret Protection Act

Login history: 3 months

Other Matters

H&H strives to protect the rights of users.

You can view or modify your personal information (legal representative if you are under the age of 14) at any time, and you can also request to withdraw your consent to the collection and use of personal information or withdraw from membership at any time. More specifically, to change or cancel a subscription (withdraw consent) through the settings function in the service, click 'Delete Account' within the service. If you request correction of errors in your personal information, it will be updated promptly.

The Company makes the following efforts to protect the valuable personal information of its users.

The Company regards the protection of users’ personal information as a fundamental value and makes the following efforts in handling personal information.

Personal information kept by the Company is encrypted.

The Company transmits the user's personal information using encrypted communication, and keeps important information such as passwords encrypted.

The Company will do its best to protect its databases of encrypted information safe from hacking attempts and computer viruses.

To prevent leakage or damage of users’ personal information through hacking and computer viruses, the Company operates its databases in an area separated from the rest of the Company premises with blocked access from the outside.

In addition, the Company continuously researches the latest hacking prevention and security technologies to be applies to its services.

The Company limits the number of people who can access personal information of users to a minimum.

The Company limits the number of employees who handle personal information to a minimum.

In addition, the Company prepares systematic standards for the creation and change of passwords and the right to access the database system that stores personal information and the system that processes personal information, and conducts continuous audits on those systems.

The Company sometimes makes use of cookies to provide PC-based services.

Cookies are used to enable faster and more convenient use of the website and to provide customized services.

What are cookies?

Cookies are very small text files sent to the user's browser by the server used to operate the website and are stored on the user's computer.

Purpose of use

To provide personalized and customized services, cookies are used to store and retrieve user information from time to time. When a user visits the website, the website server reads the contents of the cookie stored on the user's device to maintain the user's preferences and provide customized services. Cookies help users to access and use the website conveniently when they visit the website. In addition, they are used to provide customized information such as advertisements optimized through the user's website visit record and types of use.

Accepting and opting out of cookies

Cookies do not inherently store personally identifiable information such as name and phone number, and the accepting of cookies is optional. Therefore, the user can accept all cookies by setting their options on the web browser, check each time a cookie is saved, or refuse to save all cookies. However, if you refuse to accept cookies on your browser, website use may become inconvenient and there may be difficulties in using some services that require logging in.

How to set cookies

For Internet Explorer

Tools menu at the top of the web browser > Internet Options > Privacy > Settings

For Chrome

Settings menu on the top right corner of the web browser > Show advanced settings at the bottom of the screen > Personal information settings for personal content > Cookies

Further questions about the protection of your personal information?

For all inquiries, complaints, advice, or other matters related to personal information protection that occur while using the service, please contact the person in charge of personal information protection and the department in charge. H&H strives to listen to your feedback and does its best to provide a prompt and sufficient response.

CPO: Youngjun Kim
Position: Director
Contact: +82-70-4269-3700 / Email: kyj@hnh.ai

Dial 118 (no area code)
https://privacy.kisa.or.kr

Dial 1833-6972 (no area code)
https://www.kopico.go.kr

Dial 1301 (no area code)
https://www.spo.go.kr

Dial 182 (no area code)
http://cyberbureau.police.go.kr

If there are revisions to the Privacy Policy, the Company may amend the Privacy Policy for the purpose of reflecting changes in relevant laws or services. If the Privacy Policy is changed, H&H will post the change, and the revised Privacy Policy will take effect 7 days after posting. However, the Company will notify you at least 30 days in advance when there is a significant change in user rights, such as changes in the items of personal information collected and the purpose of use.

Notice Date: August 1st 2024

Effective Date: August 12th 2024