Privacy Policy

Effective October 23, 2025

Orbit Studio (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws, and establishes and operates the following Privacy Policy to protect users’ personal information. This policy applies to the mobile application “Sliceup” (hereinafter referred to as the “Service”) operated by the Company.

1. Items and Methods of Personal Information Collection

The Company collects the following personal information during the sign-up process, service use, and customer inquiries.

Items Collected

  • Required: Name (nickname), email address
  • Optional: User input analysis data (data used to analyze user activity within the service)

Collection Methods

  • Direct input by users during registration
  • Data automatically generated during service use (for analytical purposes)
  • Social login: When you sign in with a third-party account (Google, Apple, Kakao, or LINE), we receive your name (nickname), email address, and a unique account identifier from that provider, with your consent. If you choose to hide your email with Sign in with Apple, we receive a private relay address instead. This information is used only to create and manage your account and to provide customer support.
  • [Optional] When auto-logging is enabled: payment amount and merchant name, extracted on-device from payment notifications. Collected only after the user enables the feature and grants the Android notification-access permission. Raw notification text is never sent to our servers.

2. Purpose of Personal Information Use

The Company uses collected personal information for the following purposes:

  • Member management and identity verification
  • Payment processing and purchase history management
  • Service improvement and provision of personalized content
  • Customer support and inquiry handling
  • Information on new services and marketing (only upon prior consent)
  • To automatically create expense records from payment notifications.

3. Retention and Use Period of Personal Information

If a user requests account deletion, the Company will immediately destroy the personal information unless otherwise required by law. However, in accordance with related laws, the following data may be retained for the specified periods:

  • Records related to contracts or subscription withdrawals: 5 years
  • Records related to payments and supply of goods: 5 years
  • Records related to consumer complaints or dispute resolution: 3 years

Raw notification text is stored only on the device and deleted once the expense is recorded or within 14 days. The extracted amount and merchant are stored as a transaction, the same as a manually entered one, and are deleted when the account is deleted.

4. Provision of Personal Information to Third Parties

The Company does not, in principle, provide users’ personal information to third parties. Exceptions are as follows:

  • When the user has given prior consent
  • When required by law or by request from an investigative authority

Information extracted from notifications is never provided or sold to third parties, and is not used for advertising.

5. Entrustment of Personal Information Processing

To enhance operational efficiency, the Company may entrust personal information processing to external service providers as follows:

Stripe, Inc.

  • Purpose of Entrustment: Payment processing and billing management
  • Retention and Use Period: Until account deletion or contract termination

OpenAI, Inc. (ChatGPT API)

  • Purpose of Entrustment: User input analysis and response generation
  • Retention and Use Period: Until account deletion or contract termination

The Company supervises and manages entrusted parties to ensure compliance with personal data protection regulations and implementation of security measures.

6. Destruction of Personal Information

Personal information that has fulfilled its purpose or whose retention period has expired will be destroyed without delay.

  • Destruction Procedure: Immediately deleted according to internal policy once the purpose is achieved
  • Destruction Method: Permanently deleted using technical methods that prevent recovery of electronic files

7. Rights of Users and Legal Representatives

Users may view or modify their personal information at any time, and may request its deletion through account withdrawal.

  • Requests can be made via the “Member Information” menu in the app or by contacting customer service.
  • The Company will take prompt action upon receiving the request.
  • Auto-logging is optional and can be disabled at any time in the device's notification-access settings.

8. Measures for Ensuring the Security of Personal Information

The Company takes the following measures to ensure secure handling of personal information:

  • Access control and minimization of authorized personnel
  • Data encryption and secure transmission (SSL)
  • Maintenance of access logs for personal information systems
  • Regular security inspections and technical safeguards

9. Personal Information Protection Officer

For any inquiries or concerns regarding personal information protection, users may contact the Company. The Company will respond promptly and sincerely to all inquiries.

Email: tailtaekm@gmail.com

10. Changes to the Privacy Policy

This Privacy Policy is effective from October 23, 2025.

The Company may amend this policy in accordance with changes in laws or service content. Any updates will be notified through the app’s announcements or by email.