개인정보처리방침
Privacy Policy

1 General Provisions

MOMSOFT (the "Company") values your privacy and complies with the Personal Information Protection Act of the Republic of Korea and related laws. This Privacy Policy explains the general principles and per-service details of how personal information is processed on the Company's corporate website and across the solutions and services the Company builds and provides.

Where the Company's solutions (WIKI · VMS · PMS · GW, etc.) are delivered to and operated directly by a client, the client is the data controller and the Company acts as a data processor within the scope defined by contract.

2 Data We Collect & Purpose

The Company collects only the minimum personal information necessary to provide its services.

3 Per-Service Processing

Personal information processing for each service the Company operates or provides is outlined below. Specific items may vary by configuration and client policy.

3-1 Corporate Website (momsoft.co.kr)

• Data — Email address and message content when you contact us
• Purpose — Responding to inquiries and business consultation
• Notes — No advertising/analytics cookies or trackers. Settings such as theme, language and achievements are stored only in the browser and never sent to a server.

3-2 WIKI — Enterprise Knowledge Wiki

• Data — Account info (ID, name, affiliation), authored/edited documents and terms, access/change history
• Purpose — Knowledge management, access control, change history & audit
• Notes — AI summarization processes document content solely for summary purposes; results are stored within the organization.

3-3 VMS — Visitor Management System

• Data — Visitor name, contact, affiliation, purpose, host, access (QR) records
• Purpose — Visit request/approval, access control & security, visit-history management
• Notes — Data is disposed of after the retention period defined by law and the client's security policy.

3-4 PMS — Project Cost Management System

• Data — Staff accounts (ID, name, affiliation, title), project / staffing / man-hour data
• Purpose — Project cost & P&L management, staffing status, approvals

3-5 GW — Integrated Groupware

• Data — Employee accounts & HR info, attendance/calendar, e-approval / board / messenger / mail usage records
• Purpose — Internal operations such as e-approval, attendance and collaboration, and their history

3-6 Game Services — Mobile Games

The following applies additionally to mobile games the Company develops and publishes, in compliance with the Korean Personal Information Protection Act and Google Play policies. Because each title collects different data, the details are listed per title.

The Company's games are distributed through Google Play, and some titles may also be available on Apple devices (App Store). On Apple devices, App Store policies and App Tracking Transparency (ATT) also apply.

Third-party services — Google Firebase (Auth · Firestore · Crashlytics), Google AdMob, Google Play in-app billing, Google Sign-In.

Third-party services — Google Firebase (anonymous Auth · Firestore · Realtime Database), Google AdMob, Google Play in-app billing. Crashlytics and Google Sign-In are not used.

Third-party services — only in-app billing (Google Play / App Store); no other third-party service is used. Payment details are managed by the store and never accessed by the Company.

Third-party services — Google Firebase (anonymous Auth · leaderboard), Google AdMob (rewarded ads), Google Play in-app billing — all active only when you use the optional features. Crashlytics and Google Sign-In are not used.

3-7 Utilo — Web Utilities (util.momsoft.co.kr)

Utilo (유틸로) is a web service offering free tools for images, PDF, QR and more. Every tool runs 100% inside your browser — your files and content are never uploaded to or stored on a server, and there is no sign-up or account.

• Collected data — no server-side personal data collection. Only functional settings (e.g. theme) are kept in your browser's local storage.
• Ads · analytics — Kakao AdFit ads and Google Analytics (IP anonymized) are used; those providers may process advertising identifiers and cookies.

4 Retention & Disposal

• Personal information is disposed of without delay once its purpose is fulfilled or upon a deletion request.
• Website inquiries — disposed of within 1 year of completion (retained longer only where required by law)
• Solution data — follows the contract with the client and applicable law; returned or destroyed on contract termination.
• Game account & leaderboard records — retained until you request deletion, then destroyed immediately.
• Co-op room data — destroyed automatically as soon as the last participant leaves the room.
• Game settings & progress — stored only on your device and destroyed when the app is uninstalled.

5 Third-Party Provision & Delegation

The Company does not provide personal information to third parties without consent. It delegates the processing tasks below, with protective measures required by law set out in contracts with processors.

Delegated items marked "Game services" (auth · data storage · ads) do not apply to EggPet — EggPet runs with no server, no ads and no analytics, using only store in-app billing.

6 International Transfer of Personal Information

To provide its game services, the Company transfers personal information overseas as follows.

Recipient contact — Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · Privacy inquiries: policies.google.com/privacy

• Nickname · best record — not transmitted unless you submit a record to the leaderboard.
• Co-op room data — not transmitted unless you play co-op mode.
• Advertising ID (ADID) — deleting your advertising ID in device settings stops personalized ads (see Article 9).
• Destruction of already-transferred data — in MINDBLOCK, use [Settings › Data & Privacy › Delete my data]; for TDF: Neon Siege and MindDozer 3D, contact us at the address below. Note this is destruction after the fact, not a refusal of the transfer itself.
• If you do not want the transfer at all — please stop using the game and uninstall the app. If you also send us a deletion request, we will destroy any information remaining on the servers.

7 Children Under 14

The Company's game services are not directed to children under the age of 14, and the Company does not knowingly collect personal information from children under 14. The games do not include a separate age-verification step, so titles that collect personal data may not be used by children under 14. However, titles that collect no personal data at all — such as EggPet — are safe for users of all ages.

If we learn that personal information of a child under 14 has been collected, we destroy it without delay and stop serving personalized ads. If you believe a child's personal information has been collected, please notify us at the contact address below.

8 Security Measures

• Encryption in transit (HTTPS/TLS) and encrypted storage of passwords/credentials
• Least-privilege access, access control, and access/change logging
• Regular security reviews and vulnerability remediation

9 Your Rights & How to Exercise Them

You may request access, correction, deletion, or suspension of processing of your personal information at any time, and the Company will act without delay in accordance with the law. Where a solution is operated by a client, such requests may be handled through the client.

1. MINDBLOCK (in game) — choose [Settings › Data & Privacy › Delete my data]; your anonymous account and leaderboard records are deleted immediately.
2. EggPet — no data is stored on any server, so no deletion procedure is needed. Local data is removed when the app is uninstalled; iCloud backups are managed inside your own Apple account.
3. TDF: Neon Siege — please request deletion at the contact address below.
4. By email (both titles) — request deletion at the address below; we process it within 3 business days.

• Android — Settings › Privacy › Ads › Delete advertising ID
• iOS (if an iOS version is released) — Settings › Privacy & Security › Tracking › turn off "Allow Apps to Request to Track"

The Company's games use personalized ads by default. Deleting your advertising ID as described above stops personalized ads; ads themselves may continue to be shown in a non-personalized form.

10 Privacy Officer & Contact

For privacy inquiries, access or deletion requests, please contact us. We respond within 3 business days.

• Company — MOMSOFT
• Location — Siheung-si, Gyeonggi-do, South Korea
• Privacy Officer — Yun Soohyun (CEO)
• ysh@momsoft.co.kr

11 Changes to This Policy

This Policy may be revised due to changes in law, policy, or services, and any revision will be announced in advance on the website.