Privacy Policy
Tenacious Inc. (the "Company") values customers' personal information and makes every effort to comply with the Personal Information Protection Act. This Privacy Policy sets forth matters relating to the processing of personal information collected in the course of using the Stocknow service (the "Service"), and clearly explains customers' rights and the protective measures in place.
The Company uses this Privacy Policy to explain the purposes of use, retention periods, and security measures applicable to the personal information it collects, and to guide customers on how they can manage their own personal information. The Company will continue to make ongoing efforts to ensure the safe protection of personal information.
This Policy takes effect as of July 6, 2026. In the event of any future changes, the Company will provide prior notice and post the revised policy.
1. Purposes of Processing Personal Information
The Company processes personal information for the following purposes. Personal information processed by the Company is not used for any purpose other than the following, and if the purpose of use changes, the Company will implement necessary measures, such as obtaining separate consent, in accordance with applicable laws and regulations.
- Membership registration and management: confirming a user's intent to register, identifying and authenticating users for the provision of membership services, confirming the consent of a legal representative when processing the personal information of a child under the age of 14, and maintaining and managing membership status
- Service provision: providing personalized services, confirming payment for Paid Services, managing Recurring Payments, providing content corresponding to each membership tier by identifying membership members, and operating community features
- Service improvement: analyzing service usage records for use in improving the Service
- Prevention of fraudulent use: records of fraudulent use by users who have materially violated the Terms while using the Service, and membership registration information (unique user ID, authentication token, email address, etc.)
- Marketing and advertising information: providing marketing and promotional information, and announcing new service launches
- Legal requirements: collecting and retaining personal information where required by applicable laws and regulations
- Other: handling customer inquiries, responses, and other grievances
2. Processing and Retention Period of Personal Information
As a general rule, the personal information of users and members is destroyed without delay once the purpose of collection and use has been achieved. However, the following information is retained for the period specified below, for reasons of preservation under the Company's internal policy or applicable laws and regulations.
| Purpose of Processing | Personal Information Items Processed | Processing and Retention Period |
|---|---|---|
| (Required) Membership registration and management | • Unique user ID, authentication token, email address (where the user has permitted sharing)<br>• Information linked upon Google/Apple simplified sign-up/login (as permitted) | Until membership withdrawal |
| (Required) Notices relating to service updates | • Email address (where the user has permitted sharing) | Until membership withdrawal |
| (Required) Transmission of payment information for payment processing | • Credit card number<br>• Card expiration date (year, month)<br>• Date of birth or business registration number<br>• First 2 digits of card password | Until transmitted to the payment gateway (PG) for payment processing |
| (Required) Verification of held card information | • Last 4 digits of credit card number | Until membership withdrawal or user deletion |
| (Required) Prevention of fraudulent use and cooperation with investigations by relevant authorities regarding illegal users | • Unique user ID, authentication token, email address (where the user has permitted sharing), nickname, event entry and winning history, address and delivery information, SNS linkage records | Retained for 2 years pursuant to applicable laws and regulations |
| (Required) Records of customer inquiries | • Records relating to consumer complaints or dispute resolution | Retained for 3 years pursuant to applicable laws and regulations |
| (Required) Records relating to electronic financial transactions | • Payment history information | Retained for 5 years pursuant to applicable laws and regulations |
| (Required) Records relating to contracts or withdrawal of subscription | • Payment history information | Retained for 5 years pursuant to applicable laws and regulations |
| (Required) Records relating to payment and supply of goods, etc. | • Payment history information | Retained for 5 years pursuant to applicable laws and regulations |
| (Required) Records relating to display and advertising | • Advertising history information | Retained for 6 months pursuant to applicable laws and regulations |
| (Required) Service usage records and access information | • IP address, device information, OS version, access date/time, app usage history, crash logs, network status, advertising identifier (ADID or IDFA), user event logs (tap/button clicks, etc.) | Retained for 3 months pursuant to applicable laws and regulations |
| (Optional) Marketing and advertising information | • Name, phone number, email address | Until membership withdrawal or withdrawal of consent to use |
| (Optional) Service quality improvement and feature development | • Information directly entered by the user into the AI Agent | Until membership withdrawal |
3. Provision of Personal Information to Third Parties
As a general rule, the Company does not provide users' personal information to third parties. However, the Company may provide personal information in the following exceptional cases:
- Where required by applicable laws and regulations
- Where consent has been obtained from the user or member
- Where, in connection with the payment process for Paid Services, transaction information (e.g., payment identifiers, subscription status) may be provided to or accessed by platforms such as the Apple App Store or Google Play Store, to the extent linked with such platforms
4. Outsourcing of Personal Information Processing
The Company outsources the processing of personal information to the following external specialized companies for the operation and improvement of the Service, and does not provide outsourced companies with personal information beyond the scope necessary. The Company also manages its outsourced partners to ensure they thoroughly implement personal information protection measures.
| Outsourced Company | Description of Outsourced Work |
|---|---|
| Amazon Web Services, Inc. | Data storage and IT system operation |
| Amplitude, Inc. | App usability analysis and improvement |
| Apple Inc. | Payment refund requests |
| Google LLC | Statistical analysis via Google Analytics; statistical analysis via Firebase Analytics; integration for AI feature provision |
| NICE Payments Co., Ltd. | Payment processing |
| Anthropic PBC | Integration for AI feature provision |
| OpenAI, L.L.C. | Integration for AI feature provision |
| Google LLC | Integration for AI feature provision |
5. Measures to Ensure the Security of Personal Information
- Cloud security measures: The Company stores and manages personal information through Amazon Web Services (AWS) cloud infrastructure. AWS complies with internationally certified security standards and applies various security measures, including data encryption, access control, and intrusion detection systems. Details of AWS's security measures can be found on the AWS Security Center.
- Encryption: Personal information is encrypted both at rest and in transit, and important information is protected through additional security measures.
- Access control: Access to personal information is granted only to the minimum necessary personnel, and all access is logged and regularly reviewed.
- Administrative measures: The Company regularly conducts security training for internal staff involved in the handling of personal information, and continuously strengthens its internal management system for personal information protection.
6. Protection of Children's Personal Information
Children under the age of 14 may not register for or use the Service without the consent of their legal representative, in accordance with applicable laws and regulations. Accordingly, the Company does not collect the personal information of children under the age of 14.
7. Procedures and Methods for Destruction of Personal Information
- Destruction procedure: Information for which the retention period has elapsed is destroyed without delay.
- Destruction method: Electronic files are technically deleted so that they cannot be recovered, and paper documents are destroyed by shredding or similar means.
8. Users' Rights and How to Exercise Them
- Checking member information: Users may check their login information and membership information through the "My Page" section of the Stocknow app.
- Modifying member information: Since the Service provides member authentication through Google Login and Apple Login, modification of membership information (e.g., email, password) is available through the respective service (Google or Apple). Users may modify their information through the account management page of the relevant service.
- Membership withdrawal and deletion requests: Users may delete their account at any time through the membership withdrawal function, in which case the relevant personal information held by the Service will be destroyed without delay.
- Requests to suspend processing of personal information: Users have the right to request suspension of the processing of their personal information, which may be requested via email at hello@stocknow.ai. The Company will review such requests upon receipt and process them without delay, and use of the Service will not be interrupted during this process.
- Requests to delete community posts: Prior to membership withdrawal, users may directly delete their own community posts (posts, comments, etc.) through the functions provided within the Service. Even after membership withdrawal, posts may be retained in accordance with the Company's operating policy, and if a user requests deletion, an identity verification process must be completed. The Company will process such requests within a reasonable scope where the request is legitimate.
9. Installation and Operation of Automatic Collection Technologies
The Company installs and operates automatic collection technologies (e.g., SDKs) within the app to ensure the stable operation of the Service, provide its features, and comply with applicable laws and regulations. As a result, the following information may be automatically collected.
- Items collected: IP address, device information, OS version, access date/time, app usage history, crash logs, network status, advertising identifier (ADID or IDFA), user event logs (tap/button clicks, etc.)
- Purpose of collection: ensuring service stability, error analysis, security enhancement, provision of personalized advertising, analysis of advertising performance, and compliance with legal obligations (e.g., retention of access records)
- Collection tools: SDKs and other automatic collection technologies used for service operation and analysis
For certain items (e.g., advertising ID), users may restrict collection through their device settings; however, collection of information essential to the provision of the Service (e.g., IP address, device information) cannot be refused.
10. Notice Regarding Collection of Information for Personalized Advertising
The Company may automatically collect de-identified advertising IDs and user behavior information through advertising network SDKs in order to provide personalized advertising. The information collected may be used for purposes such as controlling advertising frequency, providing interest-based advertising, and preventing fraudulent clicks.
If you do not wish to have such information collected, you may restrict ad personalization settings through the following methods:
- Android: Settings > Google > Ads > Opt out of Ads Personalization
- iOS: Settings > Privacy > Tracking > Turn off "Allow Apps to Request to Track"
Even after opting out, advertisements will still be displayed, but will be converted to non-personalized advertising (NPA), and the minimum information necessary for ad delivery (IP address, device identifier, etc.) may still be transmitted where legally or technically required.
11. Personal Information Protection Officer and Contact Information
- Personal Information Protection Officer: Choi Jun-hoe
- Email address: hello@stocknow.ai
- Person in charge of personal information protection: Choi Jun-hoe
(Note: The officer's name has been romanized from 최준회 as "Choi Jun-hoe"; please confirm the preferred official English spelling.)
12. Changes to This Privacy Policy
In the event of any change to this Privacy Policy, notice will be provided through in-service announcements. The revised policy shall take effect 7 days after the date of such notice.
13. Measures for the Destruction of Personal Information of Dormant Members
Dormant member information: The personal information of members who have not logged in to the Service for 1 year or more is separately segregated and stored. The Company will provide prior notice to the member's email before processing dormant status, and if the member logs in again, dormant status will be lifted and the personal information may be used again.
14. Remedies for Infringement of Data Subjects' Rights and Interests
Users may contact the following organizations for remedies relating to infringement of their personal information:
(1) Personal Information Infringement Report Center
- Website: http://privacy.kisa.or.kr
(2) Personal Information Dispute Mediation Committee
- Website: http://www.kopico.go.kr
(3) Supreme Prosecutors' Office Cyber Investigation Division
- Website: http://www.spo.go.kr
(4) National Police Agency Cyber Bureau
[Addendum]
This Policy shall take effect as of July 6, 2026. Amendments may be confirmed through the notices within the Service.