STEPIN Privacy Policy
This is a machine translation. If it differs from the original, the original prevails.
Sidewalk Entertainment Inc. (hereinafter “the Company”) complies with the 『Personal Information Protection Act』 and related laws and regulations, and through this Privacy Policy, sets forth the rules that the Company must comply with so that users can use the STEPIN app and related websites, including STEPIN Studio (hereinafter collectively referred to as “this App” or “App”), with confidence. The Company makes its best efforts to protect users' rights and interests and their valuable personal information.
By accessing or using this App, users are deemed to agree to the manner in which their personal information is consented to, processed, stored, and shared as specified in this Privacy Policy. If you do not agree to provide personal information to the Company or to have such information used in accordance with the rules of this Privacy Policy, you must not use this App.
1) Items and Methods of Collecting Personal Information
Items of Personal Information Collected
A. Registration Stage
| Registration/Sign-up Method | Personal Information Collected |
|---|---|
| All accounts | ID, nickname, password, date of birth, gender, email address |
| [Required] Email address, identity verification value (CI, DI) | |
| [Required] Facebook public profile information, name, nickname, and profile picture | |
| Apple | [Required] Apple token, private email relay [Optional] Apple account email |
| [Required] Google account username and profile picture |
B. Personal Information Collected Through Other Procedures
The following information is automatically generated and collected when using this App.
- Photos, videos, audio information, motion data, and related content that the user provides, captures, transmits, and uploads
- Short messages and comments written by the user, connecting device information based on the user's network access (serial number, model name, OS), first access date, membership status, geographic information (country, region, and city – detailed location is not collected)
- The date and time an error occurs and the feature and app status in use at the time of the error
- Advertising identifier, the user's app activity history, the user's item purchase and provision history, interactions between the user and other users such as the user's following of other users, the user's report history
- Device time zone, the app version used by the user, the locale country and language of the user's device, the location (region, country, city) at the time of the user's login, the user's virtual currency purchase history, payment information such as card information, information and history related to the purchase, use, and refund of paid in-app services, and the languages available to the user
- When using the “Challenge,” “RPD,” or “Tournament” features, the user's camera is used, and the Company recognizes the user's body coordinates and movements through motion-recognition artificial intelligence, generates motion-recognition content based on the recognized content, and stores the generated content on the Company's servers. The information collected by the Company through this process is used only for the purpose of performing the motion recognition function (it is not used to identify individuals) and is not shared with third parties.
- When a user applies effects to content that has been publicly uploaded through content created by play, the Company collects the original and effect-applied video of such content. The Company may collect information regarding objects, scenery, faces, bodies, and characteristics contained in such content.
- When participating in tournaments, events, promotions, reward programs, etc., this App may collect the user's copy of ID card, real name, resident registration number, ID card information, account information, and email address. * The Company collects the user's resident registration number and ID card information only pursuant to laws and regulations related to the Income Tax Act.
- When participating in AI video events, the video registered by the user and the resulting converted video, and device identification information for the prevention of fraudulent use
C. Business Accounts
| Category | Personal Information Collected |
|---|---|
| Business account creation | [Required] Mobile phone number (mobile verification) |
| Business account verification | [Required] Business or identity/activity verification documents, representative's name, business registration number, address |
| Settlement | [Required] Account holder name, bank name, account number, business registration number, or information necessary for tax processing (for individuals, resident registration number, etc.) |
2) Purposes of Collection and Use of Personal Information
Personal information is collected through the user's input during membership registration and use of the App.
The user's personal information is collected through the user's direct input and entries during membership registration and use of this service App. Content provided by the user in the process of inquiring with the Company's customer center is also collected.
The Company receives personal information from third parties through partnerships and linkages between services.
If a user registers for and accesses this App through another platform such as a Facebook, Apple, or Google account, the Company receives the public profile and related information that the user has uploaded to that platform. In this case, the relevant platform provides the user's information to the Company after obtaining the user's consent.
The user's information may be automatically collected during use of the App.
The Company may automatically generate and collect information about the user when the user uses the App. Information provided in this manner may or may not constitute personal information, depending on whether it is linked to personal information.
The user's content preference information may be collected.
The Company may collect information such as content you like, users you follow and interactions with users who follow each other, advertisements and videos you view, and problems you experience. In addition, in order to promote your content, the Company may use your videos, profile, and other content to provide viewing and discovery features to other users. Play records such as the user's nickname, score, and ranking may be displayed to other users, such as through in-service rankings.
The collected personal information is used for the following purposes.
- Membership Management: User identification, confirmation of intent to register, age verification, verification of identity information, prevention of fraudulent use and unauthorized use, restriction of use against users who violate fraud, laws, or the STEPIN Terms of Service, and prevention and sanctioning of acts that impede the smooth operation of the service, including fraudulent use
- Service Provision: Connecting users through customized services, processing payments related to service use, handling all inquiries related to service use, reports and complaints, delivery of notices, provision of customized services through estimation of demographic characteristics and user interests, preferences, and tendencies
- Service Improvement: Error analysis through log analysis, improvement of service features and performance including chatbot algorithms, development of new services and content including conversational algorithm services (e.g., development of event chatbots, customized chatbots, or marketing chatbots for the Company or the service), sanctioning of service usage behavior that violates the STEPIN Terms of Service and other separate policies, monitoring to create a healthy service environment, provision of various services such as customer benefit services, statistics on service use such as service usage records, access frequency, and interactions between users or with chatbots, and establishment of a service environment and service improvement utilizing such statistics
- Transmission of Advertising Information and Event Notices: Provision of information on various events and opportunities to participate, provision of advertising information such as notices of the Company's new products and new feature services, and use for marketing or promotions, using text messages, email, or app push notifications
- Operation of Business Accounts and Competitions: Identity verification and verification review of business accounts, payment of settlement funds and tax processing, operation of competitions, production of AI video event videos, and prevention of fraudulent use
- Business Partners: If you share content to other social media platforms using an in-app feature, videos, user ID, and text contained therein are shared with the relevant platform, and if shared to instant messenger apps such as KakaoTalk, Line, WhatsApp, Telegram, or Signal, a deep link connecting to the relevant content is shared.
Pursuant to the Personal Information Protection Act, the Company may use or provide personal information without the consent of the data subject within a scope that is logically related to the initial purpose of collection, taking into account the following matters.
- Whether there is a logical relevance to the initial purpose of collection
- Whether there is predictability regarding the additional use or provision of personal information in light of the circumstances under which the personal information was consented to or the processing practices
- Whether it unfairly infringes upon the interests of the data subject
- Whether necessary measures to ensure safety, such as pseudonymization or encryption, have been taken
3) Provision of Personal Information to Third Parties
Pursuant to Article 17, Paragraph 1, Item 1 of the Personal Information Protection Act, where the user's consent has been obtained, the Company may provide the user's ID, nickname, name, date of birth, contact information, email address, nationality, competition participation video, and legal representative's consent form (if applicable) to tournament organizers.
In principle, the Company does not provide the user's personal information to third parties, except in exceptional cases such as where the user has given prior consent, where there is a special provision in the law, where it is unavoidable in order to comply with a legal obligation, or where it is necessary for settlement of fees arising from the provision of information and communications services.
4) Outsourcing of Personal Information Processing
For the purpose of continuously providing services, providing convenience to users, and conducting marketing activities, the Company may review and outsource the processing of the user's personal information to third parties such as the Company's affiliates and business partners as follows.
*“Affiliate” means any company, enterprise, or organization in which the Company has a direct or indirect ownership relationship.
| Outsourced Company | Details of Outsourced Work |
|---|---|
| Google Marketing Platform | Phone number verification, service improvement, service usage behavior analysis, advertising analysis, information storage and system operation |
| Google Cloud Platform | Information storage and service operation |
| Google Firebase | Service usage behavior analysis |
| Google Ads | Advertising analysis |
| Channel Corporation | Customer center operation and customer consultation |
Video conversion for AI video events is processed within the Company's own system and is not outsourced to external parties.
5) International Transfer of Personal Information
For the purpose of continuously providing services, providing convenience to users, and conducting marketing activities, the Company may transfer the user's personal information to third parties, such as affiliates and business partners located overseas, or have such personal information processed overseas through such companies, as follows.
*“Affiliate” means any company, enterprise, or organization in which the Company has a direct or indirect ownership relationship.
| Recipient Company (Contact) | Country of Transfer | Items of Personal Information Transferred | Purpose, Retention/Use Period, Date/Time and Method of Transfer by the Recipient |
|---|---|---|---|
| Google Cloud Platform ( googlekrsupport@google.com ) | Singapore, Republic of Korea, USA, UK, EU | All information collected during the service provision process | Purpose: Information storage and system operation Period: Until the purpose of use is achieved Date/Method: Transferred from time to time via information and communications networks during the membership registration and service provision process |
| Google Marketing Platform ( googlekrsupport@google.com ) | USA | Device information, gender, age, IP information, location information, purchase history | Purpose: Service usage behavior analysis Period: Until the purpose of use is achieved Date/Method: Transferred from time to time via information and communications networks during the membership registration and service provision process |
| Google Firebase ( googlekrsupport@google.com ) | USA | Device information, gender, age, IP information, location information, purchase history | Purpose: Service usage behavior analysis Period: Until the purpose of use is achieved Date/Method: Transferred from time to time via information and communications networks during the membership registration and service provision process |
| Google Ads ( kr-lcs-game@google.com ) | USA | Device information, device language, advertising identifier information, IP information, location information, access records, purchase history, app activity history (including gender selection), carrier information | Purpose: Advertising analysis Period: Until the purpose of use is achieved Date/Method: Transferred from time to time via information and communications networks during the membership registration and service provision process |
The country in which personal information is stored via Google Cloud Platform may change, and if it changes, notice will be given through this Privacy Policy.
6) Retention/Use Period and Destruction of Personal Information
A. Retention and Use Period of Personal Information
- When the Company collects personal information from a user, it generally uses and retains the personal information within the scope of the period for which consent has been obtained from the user, and destroys the user's personal information once the purpose of use has been achieved.
- When a user withdraws membership, the Company immediately destroys the related personal information. However, information essential for preventing fraudulent use and re-registration is retained for 7 days and then destroyed.
- If a user has not used this App for 1 year or more, the relevant account is converted to a dormant status. A prior notice is sent to the user by email 30 days before the dormant status is scheduled to apply. If, even after receiving such prior notice, the user does not access or use this App within the specified period, the user's personal information is retained under dormant processing.
- If you wish to use an account that has been converted to dormant status again, the account will be automatically reactivated when you log in to this App.
- Where an investigation is underway or is likely to commence, the Company may retain the relevant personal information even after the user's withdrawal for the period specified by law or a logically necessary period for the investigation, in order to cooperate with requests from investigative agencies; and where personal information needs to be retained pursuant to relevant statutory provisions, the Company retains such personal information for the period specified by law as follows.
| Act on the Consumer Protection in Electronic Commerce, etc. | Records concerning labeling and advertising: 6 months Records concerning contracts or withdrawal of offers, etc.: 5 years Records concerning payment and supply of goods, etc.: 5 years Records concerning consumer complaints or dispute resolution: 3 years |
| Commercial Act | Information contained in slips or similar documents: 5 years Information contained in commercial books and important documents concerning business: 10 years |
| Protection of Communications Secrets Act | User's internet log records, access location tracking data: 3 months Other communication confirmation data: 12 months |
| Framework Act on National Taxes | Books and evidentiary documents concerning settlement and tax processing: 5 years |
The mobile phone number, verification documents, and settlement information of business accounts are retained for the period specified by relevant laws and regulations or until the purpose of processing is achieved. Original videos registered for AI video events are destroyed after 7 days, and resulting videos are destroyed after 90 days.
When the purpose of collection and use of the user's personal information has been achieved, the Company destroys your personal information without delay, except where separate consent has been obtained for the retention period of personal information or where retention for a period specified by law is required. Personal information stored in the form of electronic files is deleted using technical methods that prevent the record from being recovered or reproduced, and personal information printed on paper is destroyed by shredding or incineration.
B. Purchase of Virtual Goods
If you reside in a jurisdiction where the in-app virtual goods purchase feature is provided, please familiarize yourself with the Company's virtual goods policy. Your purchases are made through the relevant account of the payment method you use and select (app market, third-party payment services permitted by the Company), and the Company does not collect your financial information or payment information regarding such transactions. Please review the terms and notices of each payment service provider regarding the collection of your payment information. In this process, the Company may deposit the exact amount of virtual goods into your account, and records the associated purchase history, time of purchase, and amount used.
7) User Rights and Method of Exercise
Users may at any time, directly or through the Company's Personal Information Protection Officer, check, correct, delete, or request suspension of processing of their personal information via “Settings” within this platform. If exercising your rights through the Personal Information Protection Officer, you may contact us using the contact information or email address specified in Article 10 of this Privacy Policy. However, such user rights may be recognized only with respect to personal information within the scope of the Company's management and control. Users may at any time withdraw their consent to the collection and use of personal information or terminate their membership via “Withdrawal” under “Settings” within the App's settings function, and such requests are processed immediately. If the above measures are not smoothly available within the App, please request the Company and we will process it promptly.
8) Installation, Operation, and Refusal of Automatic Personal Information Collection Devices
The Company uses ‘cookies,’ which store users' information and retrieve it at any time, in order to automatically collect access logs, device information, and other information essential for providing the App. Cookies are small pieces of information sent from the server (HTTP) used to operate the App to the user's device browser, and may also be stored on the hard disk within the user's device.
A. Purpose of Using Cookies
Cookies are used to provide convenient communication features between users based on the user's login and recent access logs, to provide customized services through analysis of user behavior, and to supplement and improve the App.
B. Installation/Operation and Refusal of Cookies
Users have the option to choose whether to install cookies. Accordingly, users may, through settings in the browser of the device they use, allow all cookies, be prompted for confirmation each time a cookie is stored, or refuse the storage of all cookies. However, if you refuse the storage of cookies, you may experience difficulties in using the App.
C. Notice Regarding Customized Advertising
Customized advertising refers to online advertising that is provided in a customized manner to users by processing behavioral information to identify and infer the user's aptitude, preferences, hobbies, interests, and tastes. The Company collects and applies the user's advertising identifier in order to provide more useful services by reviewing the user's characteristics. The advertising identifier is a temporary, non-personal identifier, such as the Android Advertising ID or Apple's advertising ID, and is not used as information that distinguishes individuals. The Company does not combine behavioral information obtained through the advertising identifier with information that can identify individuals without the user's permission.
The Company permits the following advertising business operator to collect behavioral information for customized advertising.
- Advertising business operator that collects and processes behavioral information: Google Ads
- Method of collecting behavioral information: Automatically generated and transmitted during the user's use of the App
Users may at any time refuse to receive customized advertising, and once a user has refused, customized advertising will no longer be displayed. If you do not wish to have such customized advertising displayed within the App, you may disable the relevant settings according to the following setting methods for each OS.
1. Android: Settings > Google > Ads > Enable/Disable Ad Personalization
2. iOS: Settings menu > Privacy > Apple Advertising > Enable/Disable Personalized Ads
9) Measures to Ensure the Safety of Personal Information
In processing users' personal information, the Company takes safety measures required under the Personal Information Protection Act to prevent personal information from being lost, stolen, leaked, altered, or damaged, such as controlling unauthorized access from outside, retaining access records to personal information processing systems, and conducting regular in-house training for employees who handle personal information.
10) Personal Information Protection Officer
The Company designates the following Personal Information Protection Officer to handle the protection of users' personal information and related complaints. For any inquiries, complaints, suggestions, or other matters related to the processing of personal information arising from your use of the App, please contact the personal information protection department and officer at stepin.cs@sidewalkplay.com. The Company will promptly respond to your reports.
11) Miscellaneous
Notice
The Company may revise this Privacy Policy in accordance with changes in relevant laws, internal policies, etc., and in such cases, will announce the revised content through an in-app notice or the website, or via email or app push notification.
Outbound Links
If you access websites, products, or services provided by third parties by way of the App or the Company's website, such third parties may receive your personal information. Please review the privacy policy of the relevant third party regarding the processing of personal information in this manner. This Policy does not apply to the processing of your personal information in the relationship between you and such third parties.
Previous versions
- v6 · Effective September 23, 2026 · Current
- v5 · Effective July 9, 2024
- v4 · Effective April 25, 2024
- v3 · Effective February 25, 2024
- v2 · Effective December 13, 2023
- v1 · Effective April 28, 2023