Article 1 (Purpose) Buddyya (hereinafter referred to as the "Company") establishes this Privacy Policy (hereinafter referred to as the "Policy") to protect the personal information of individuals (hereinafter referred to as "Users" or "Individuals") who use the services provided by the Company (hereinafter referred to as the "Company Services"). The Company complies with applicable laws such as the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection (hereinafter referred to as the "Information and Communications Network Act"). This Policy is established to promptly and effectively address any concerns related to the protection of users' personal information.

Article 2 (Principles of Personal Information Processing) In accordance with relevant laws and this Policy, the Company may collect personal information from users. Collected personal information may be provided to third parties only with the user's consent. However, in cases where provision is required by law or regulation, the Company may provide the collected personal information to a third party without the user’s prior consent.

Article 3 (Disclosure of the Policy) The Company makes this Policy readily accessible to users by disclosing it through the homepage or a linked page from the homepage. When disclosing this Policy, the Company uses font size, color, and other means to ensure it is easily noticeable by users.

Article 4 (Amendments to the Policy) This Policy may be revised in accordance with changes in relevant laws, guidelines, notifications, or the Company's internal policies or the contents of the Company Services. In the event of revisions, the Company shall notify users through one or more of the following methods:

• Posting on the homepage or via a pop-up window
• Notification by letter, fax, email, or other similar means

The Company shall notify users of the revised Policy at least 7 days prior to its effective date. However, if the changes significantly affect user rights, the Company shall provide notice at least 30 days in advance.

Article 5 (Information Collected for Membership Registration) The Company collects the following personal information for user membership registration:

• Required: Mobile phone number, university, gender, nickname, major, nationality, interests

Article 6 (Information Collected for Identity Verification) The Company collects the following personal information to verify user identity:

• Required: Mobile phone number, university email address or an image verifying university student status

Article 7 (Information Collected to Monitor Use and Prevent Misuse) The Company collects the following information for statistical analysis and to detect fraudulent activity. (Fraudulent activity includes repeated registration after withdrawal, repeated cancellations after purchases, or other actions that unfairly take advantage of coupons or events offered by the Company.)

• Required: Service usage records, cookies, device information

Article 8 (Methods of Personal Information Collection) The Company collects personal information using the following methods:

• When the user inputs their information on the Company’s homepage
• When the user inputs their information through services provided outside of the homepage, such as mobile apps

Article 9 (Use of Personal Information) The Company uses collected personal information for the following purposes:

• Sending announcements and notices
• Responding to user inquiries and handling complaints
• Providing Company services