개인정보처리방침
Privacy Policy

1 General Provisions

MOMSOFT (the "Company") values your privacy and complies with the Personal Information Protection Act of the Republic of Korea and related laws. This Privacy Policy explains the general principles and per-service details of how personal information is processed on the Company's corporate website and across the solutions and services the Company builds and provides.

Where the Company's solutions (WIKI · VMS · PMS · GW, etc.) are delivered to and operated directly by a client, the client is the data controller and the Company acts as a data processor within the scope defined by contract.

2 Data We Collect & Purpose

The Company collects only the minimum personal information necessary to provide its services.

3 Per-Service Processing

Personal information processing for each service the Company operates or provides is outlined below. Specific items may vary by configuration and client policy.

3-1 Corporate Website (momsoft.co.kr)

• Data - Email address and message content when you contact us
• Purpose - Responding to inquiries and business consultation
• Notes - No analytics scripts that identify or track individual visitors. Settings such as theme, language and achievements are stored only in the browser and never sent to a server.
• Visit statistics - Cloudflare Web Analytics is used to understand site usage. It uses no cookies or advertising identifiers and does not identify individuals; only aggregate data such as page views, approximate country and browser type is processed. Standard access logs (including IP address) may also be recorded by Cloudflare, our web host and CDN, and if a connection fails, the visitor's browser may report the failed URL, error type and time to Cloudflare (Network Error Logging, NEL). Successful connections are not reported.
• Game page - The Lighthouse of the Heart page (/games/mindkeeper/) moved to the Mindkeeper brand site (mindkeeper.co.kr) on 4 October 2026. The old address now forwards to the new one, and that site's handling, including the trailer, is described in Article 3-9.
• Advertising - No advertising is shown on the corporate website. Advertising is served on Utilo (see Articles 3-7 and 5-1). Under no circumstances does the Company use for advertising purposes, or provide to any third party, the email address and inquiry content received through an inquiry (including any name or contact details you choose to write in the message).

3-2 WIKI - Enterprise Knowledge Wiki

• Data - Account info (ID, name, affiliation), authored/edited documents and terms, access/change history
• Purpose - Knowledge management, access control, change history & audit
• Notes - AI summarization processes document content solely for summary purposes; results are stored within the organization.

3-3 VMS - Visitor Management System

• Data - Visitor name, contact, affiliation, purpose, host, access (QR) records
• Purpose - Visit request/approval, access control & security, visit-history management
• Notes - Data is disposed of after the retention period defined by law and the client's security policy.

3-4 PMS - Project Cost Management System

• Data - Staff accounts (ID, name, affiliation, title), project / staffing / man-hour data
• Purpose - Project cost & P&L management, staffing status, approvals

3-5 GW - Integrated Groupware

• Data - Employee accounts & HR info, attendance/calendar, e-approval / board / messenger / mail usage records
• Purpose - Internal operations such as e-approval, attendance and collaboration, and their history

3-6 Game Services - Mobile Games

The following applies additionally to mobile games the Company develops and publishes, in compliance with the Korean Personal Information Protection Act and Google Play policies. Because each title collects different data, the details are listed per title.

The Company's games are distributed through Google Play, and some titles may also be available on Apple devices (App Store). On Apple devices, App Store policies and App Tracking Transparency (ATT) also apply.

Third-party services - Google Firebase (Auth · Firestore · Crashlytics), Google AdMob, Google Play in-app billing, Google Sign-In.

Third-party services - Google Firebase (anonymous Auth · Firestore · Realtime Database), Google AdMob, Google Play in-app billing. Crashlytics and Google Sign-In are not used.

Third-party services - only in-app billing (Google Play / App Store); no other third-party service is used. Payment details are managed by the store and never accessed by the Company.

Third-party services - Google Firebase (anonymous Auth · leaderboard), Google AdMob (rewarded ads), Google Play in-app billing - all active only when you use the optional features. Crashlytics and Google Sign-In are not used.

Effective: 7 October 2026 · Operator: MOMSOFT (맘소프트) · Contact: ysh@momsoft.co.kr

“Lighthouse of the Heart” (Korean title “마음의 등대 · 정령들의 모험”; the “Game”) is an offline game with no account sign-up. This document explains what information the Game handles.

1. Information the Game collects directly

None. The Game has no accounts, no chat, and no photo, contacts or location permission. Your progress (spirits, currency, settings, etc.) is stored only on your phone.

If Android Auto Backup is turned on for your phone, this progress (only the save file and its spare copy) may be included in your Google account backup.

After a parental check, tapping “백업 파일 저장” (Save backup file) saves a text file containing your progress to a place you choose (your phone's Files app, Google Drive, etc.). The Game never sends this file anywhere.

2. Advertising (Google AdMob)

Starting with version 1.0.1, the Game has a rewarded ad that you tap only when you want to (“광고 선물”, Ad gift; at most three times a day). The Game marks every ad request as child-directed and under the age of consent, does not use personalized ads, and sets the maximum ad content rating to General audiences (G). The related permission has been removed from the app so that the advertising ID and interest-based advertising are not used.

While ads are loaded and shown, Google may collect the following information: IP address (which may be used to estimate approximate location), interactions with ads, diagnostic information such as app launches and performance, and device identifiers such as the app set ID. This information is used for ad delivery, analytics and fraud prevention, and is encrypted in transit.

Google Privacy Policy: https://policies.google.com/privacy

How Google uses information from partner apps: https://policies.google.com/technologies/partner-sites

3. Payments (Google Play)

Purchases in the Game are processed by Google Play. The Game does not receive card or other payment details. The Game stores on your phone only the names of purchased items and a digest of the purchase information, so that the same purchase is never granted twice. Google Play's payment processing follows Google's policies.

4. Notifications and postcards

Notifications are off at first and turn on only if you choose “알림 받기” (Get notifications) when the Game asks once (you can turn them off in Settings at any time). Notifications are only news scheduled on the phone itself (garden visitors, tonight's story, etc.), at most twice a day, and are never sent between 9 p.m. and 8 a.m. No information is sent to any server for notifications.

A postcard turns the garden picture in the Game into a single image and, after a parental check question is solved, sends it through your phone's share screen to a place you choose. The Game never sends it anywhere by itself, and the postcard picture contains no personal information.

5. Children's personal information

The Game is made to be enjoyed by all ages. It does not directly collect personal information from anyone, including children. A parental check question must be solved before any purchase and before sending a postcard.

6. Retention and deletion

Progress on your phone is deleted together with the Game when you uninstall it (you may be asked whether to keep its data when uninstalling). The code created with “진행 옮기기” (Move progress) in Settings is kept by you, and the Game never sends that code anywhere.

7. Provision to third parties

Apart from the Google services in items 2 and 3, no information is provided to anyone.

8. Changes

If this policy changes, we will announce it, with a new effective date, in the Game and on the page where this document is posted.

9. Contact

Privacy inquiries: ysh@momsoft.co.kr

Effective: 19 October 2026 · Operator: MOMSOFT (맘소프트) · Contact: ysh@momsoft.co.kr

Hearts Move In (the "Game") is an offline game with no account registration. This document explains what information the Game handles.

1. Information Collected Directly by the Game

None. The Game has no accounts, chat or advertising, and does not request access to photos, contacts, location or the microphone. It also has no permission to access the internet.

Progress, including your home, friends, furniture, clothes, stories and settings, is stored only on your device. The Game does not use Android Auto Backup.

2. Records Kept Only on Your Device

Problem records: the Game records unexpected shutdowns, long pauses and errors locally for the most recent seven days. You can view and delete these records in Settings. They are not sent anywhere.

Gameplay trial records: these are kept on your device only when you enable recording in Two Gameplay Trials in Settings. Choosing Export Records saves a file to a location you select. The Game does not send it anywhere.

In development or playtest sessions, activities and elapsed time are saved to a specified local file only when recording is separately enabled. This measurement is not enabled during normal play, and measurement files are not sent automatically.

3. Sign-In and Saving Across Devices

The current version has no Google Play Games sign-in or progress sync across devices. Game progress is saved on the device you are using.

If online features are added later, we will update this policy with the information those features handle and how they work before announcing them.

4. Review Requests (Google Play)

After you complete a story, the Game may display Google Play's review dialog. Google Play receives ratings and comments; the Game does not receive their contents. Google's handling of that information follows its privacy policy: https://policies.google.com/privacy

5. Payments and Advertising

The Game has no real-money purchases or advertising.

6. Children's Personal Information

The Game is made for both children and adults. It does not directly collect personal information from anyone, including children, and does not send advertising IDs or device identifiers.

7. Retention and Deletion

Progress and records stored in the app are deleted when you uninstall the app or clear its data. Problem records and gameplay trial records can also be deleted separately in Settings. Files you export to another folder, or save separately during development or playtests, must be deleted directly from those locations.

8. Sharing with Third Parties

The Game does not automatically send progress records to other companies or people. Google Play directly handles the ratings and comments described in Section 4.

9. Changes to This Policy

If this policy changes, we will announce the updated policy and its effective date in the Game and on the page where this document is published.

10. Contact

Privacy inquiries: ysh@momsoft.co.kr

3-7 Utilo - Web Utilities (utilo.co.kr)

Utilo (유틸로) is a web service offering free tools for images, PDF, QR and more. Every tool runs 100% inside your browser - your files and content are never uploaded to or stored on a server, and there is no sign-up or account.

• Collected data - no server-side personal data collection. Only functional settings (e.g. theme) are kept in your browser's local storage.
• Ads · analytics - Kakao AdFit ads and Google Analytics (IP anonymized) are used; those providers may process advertising identifiers and cookies. Google AdSense ads have not been served since 24 August 2026; should they be reinstated, this policy will be revised and announced in advance. No advertising is shown to premium (paid) users. Utilo has no separate consent banner (consent management platform); for visitors in the EEA, the UK and Switzerland, Google Consent Mode defaults block the storage of analytics cookies set by Google tags. Cookie types and opt-out methods are listed in Article 5-1.

3-8 WiseWhisper (와이즈위스퍼) - Daily Quote Diary App

WiseWhisper (와이즈위스퍼) is a diary app where you open one sealed quote a day and keep that day’s mood and a one-line note. You can decorate cards and share them as images, send lucky notes and quote letters to friends over KakaoTalk, and turn on a daily notification if you like. There is no sign-up or login, and the app sends no user data to the Company’s servers.

• We do not collect contact or personal details such as email addresses, phone numbers or dates of birth.
• All user data - notification settings, saved quotes, diary records and decoration settings - is stored only on the device and is removed when the app is uninstalled; no separate deletion request is needed. The name you add to lucky notes and letters stays on the device and goes only into the messages you send; if the recipient opens a message without the app, it passes through the share page described below.
• The app does not access location, contacts, photos, or files. However, Google AdMob may infer an approximate region from the IP address when serving ads.
• No analytics or crash reporting tools are used.
• Quote data updates - the app checks a version file on our server and downloads the quote file only when a new version exists. Only a standard HTTP request is sent; it carries no identifiers and no usage history.
• Sending over KakaoTalk - you send lucky notes and quote letters yourself through KakaoTalk. The note or letter and the names you added (yours, and the recipient’s name you wrote on a letter) are delivered to the recipient, and Kakao Corp.’s service and privacy policy apply to the delivery.
• Share page (without the app) - if the recipient taps the card without the app (on iPhone or PC, or on Android without the app installed), the share page on our website (momsoft.co.kr/wisewhisper/open.html) opens. The note or letter and the names travel in the link address, and the page draws them only inside the recipient’s browser. The page takes no input, stores nothing and uses no cookies, visit analytics, ads or external fonts. The link address may, however, be recorded in the standard access logs of our web host and CDN, Cloudflare, and of the Company’s server. The Company uses these logs only to deliver the service and keep it secure, and the Company’s server deletes them automatically after about five weeks (Cloudflare follows the retention policy noted in Article 6). The link to the Play Store carries only the referral source (KakaoTalk sharing), never the note, the letter or any name.
• When you share a quote or a monthly recap card as an image, the generated file is stored in the device's temporary folder and passed only to the app you choose.

Third-party services - Google AdMob (regular and rewarded ads), Google Play Billing, KakaoTalk sharing (Kakao Corp., only when you send). No Firebase, social login, or analytics.

Opting out of personalized ads - You can reset or delete your advertising ID in [Settings › Google › Ads]; see Article 5-1 (Cookies & Online Advertising) for details.

Age - The app is not directed to children under 14, and the Company does not knowingly collect personal information from children.

View WiseWhisper on Google Play →

3-9 Mindkeeper Brand Site (mindkeeper.co.kr)

Mindkeeper (맘지기) is the Company's game brand, and mindkeeper.co.kr is the website that presents its first title, “Lighthouse of the Heart” (마음의 등대 · 정령들의 모험), together with a parents' guide, help and a press kit. There is no sign-up, login or input form.

• Data - The site itself collects no personal information. It uses no cookies, visit analytics, advertising, external fonts or external scripts.
• Access logs - Standard access logs such as IP address, access time, requested URL and browser information may be recorded by Cloudflare, our web host and CDN, and by the Company's server, and are used only to deliver the service and keep it secure.
• Network error reports - If a connection fails, the visitor's browser may report the failed URL, error type and time to Cloudflare (NEL). Successful connections are not reported, and the browser keeps this reporting setting for 7 days.
• Trailer - The trailer opens on YouTube (Google LLC) in a new window only when a visitor presses it. No information is sent to YouTube before that, and once it opens, the Google Privacy Policy applies. Fonts and images are served from the Company's own server.
• Contact - Inquiries are received by email (ysh@momsoft.co.kr); the email address and message are handled under Article 2 (inquiries) and Article 4 (retention and disposal).
• The game - Personal data handling in the game “Lighthouse of the Heart” follows its section in Article 3-6.

3-10 Matgyeo Bogoseo (bogo.momsoft.co.kr)

Matgyeo Bogoseo (맘소프트 맡겨보고서, “Delegate to AI, verify by report”) is a website that shows leaders who hand development, documents or workflow automation to AI how to get reports backed by evidence. There is no sign-up or login, and the site sends nothing you enter to a server.

• 1-minute check & checklist - Answers chosen in the 1-minute check are used only on the screen and are never sent anywhere. Items you tick in ‘시작하는 순서’ (Getting started) are stored only in your device’s browser (localStorage) and can be cleared with ‘체크 기록 지우기’ (Clear checks).
• Report review & hand-off development consultations - received by email or KakaoTalk Open Chat. We then process your email address or KakaoTalk profile name and the materials you send (conversations with AI, AI’s reports, screenshots, etc.) to write and send a decision memo and to discuss development quotes. What you send is never used as a case study without your consent. We ask you to mask real customer information and passwords, and on request we sign a non-disclosure agreement before receiving materials.
• Retention - destroyed within one year after handling is complete (Article 4); if it leads to a contract, the period set in the contract applies.
• KakaoTalk Open Chat - if you contact us via KakaoTalk, the conversation runs on Kakao Corp.’s service and Kakao’s privacy policy also applies.
• Fonts - the site loads its fonts (Pretendard, Wanted Sans) from jsDelivr, a public CDN, so standard connection data such as your IP address may be passed to jsDelivr when a page opens.
• Access logs - standard access logs may be recorded by Cloudflare, our web host and CDN, and by the Company’s server; if a connection fails, your browser may report the failed URL, error type and time to Cloudflare (Network Error Logging, NEL). Successful connections are not reported.

4 Retention & Disposal

• Personal information is disposed of without delay once its purpose is fulfilled or upon a deletion request.
• Website inquiries - disposed of within 1 year of completion (retained longer only where required by law)
• Matgyeo Bogoseo report-review materials & consultations - disposed of within 1 year of completion (the contract period applies if it leads to a contract; retained longer only where required by law)
• Solution data - follows the contract with the client and applicable law; returned or destroyed on contract termination.
• Game account & leaderboard records - retained until you request deletion, then destroyed immediately.
• Co-op room data - destroyed automatically as soon as the last participant leaves the room.
• Game settings & progress - stored only on your device and destroyed when the app is uninstalled.

5 Third-Party Provision & Delegation

The Company does not provide personal information to third parties without consent. It delegates the processing tasks below, with protective measures required by law set out in contracts with processors.

Delegated items marked "Game services" (auth · data storage · ads) do not apply to EggPet - EggPet runs with no server, no ads and no analytics, using only store in-app billing. Lighthouse of the Heart runs with no server; of the items above, ad delivery (AdMob; optional rewarded ads only, every request marked child-directed, no personalized ads) and Google Play in-app billing apply to it. Hearts Move In (마음의 집) runs with no server, ads, payments or sign-in, so none of the delegated items above apply to it. Ratings and comments in the Google Play review dialog it may show after a story are handled directly by Google Play. For the Mindkeeper site (mindkeeper.co.kr), only Cloudflare's web hosting · CDN · security (access logs · network error reports) applies; no visit analytics are used.

5-1 Cookies & Online Advertising

The Company shows advertising to cover the operating cost of the web services it provides free of charge. Advertising is served on Utilo (utilo.co.kr); the corporate website (momsoft.co.kr) carries no advertising. Because third-party ad vendors use cookies and similar technologies to serve those ads, the details and your opt-out options are set out below.

• Third-party vendor cookies - Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and to other websites.
• Data that may be collected - IP address, browser and device information (User-Agent), access time, pages viewed, ad impressions and clicks. Directly identifying information such as your name, email address or phone number is never collected or shared for advertising purposes.
• Opting out of personalized ads (Google) - You can turn off personalized advertising at myadcenter.google.com or adssettings.google.com.
• Opting out across third-party vendors - You can opt out of personalized advertising from participating vendors at www.aboutads.info/choices or optout.networkadvertising.org.
• Blocking cookies in your browser - You can refuse or delete cookies in your browser settings (Settings › Privacy and security › Cookies). Note that blocking functional storage as well may prevent your theme, language and tool settings from persisting.
• Ads still appear after opting out - Opting out stops interest-based advertising; ads themselves may continue to be shown in a non-personalized form.
• Users in the EEA, UK and Switzerland - In these regions Google Consent Mode v2 is set to denied by default, so Google tags store no advertising or analytics cookies and no personalized advertising is served. The Company does not currently operate a consent management platform (CMP), so this default remains in effect. Advertising cookies that Consent Mode does not cover can be refused using the browser cookie blocking method described above. If a consent management platform is introduced, this policy will be revised and notice given in advance.
• Not directed to children - The web service that shows advertising (Utilo) is not directed to children under 14, and the Company does not request child-directed personalized advertising. The Mindkeeper site (mindkeeper.co.kr), which children and parents view together, has no advertising and no cookies (see Articles 3-9 and 7).

6 International Transfer of Personal Information

To provide its game services, app services and web services (including advertising and analytics), the Company transfers personal information overseas as follows.

Recipient contact - Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA · Privacy inquiries: policies.google.com/privacy

• Nickname · best record - not transmitted unless you submit a record to the leaderboard.
• Co-op room data - not transmitted unless you play co-op mode.
• Advertising ID (ADID) - deleting your advertising ID in device settings stops personalized ads (see Article 9).
• Destruction of already-transferred data - in MINDBLOCK, use [Settings › Data & Privacy › Delete my data]; for TDF: Neon Siege and MindDozer 3D, contact us at the address below. Note this is destruction after the fact, not a refusal of the transfer itself.
• If you do not want the transfer at all - please stop using the game and uninstall the app. If you also send us a deletion request, we will destroy any information remaining on the servers.

7 Children Under 14

The Company's game services are not directed to children under the age of 14, and the Company does not knowingly collect personal information from children under 14. The games do not include a separate age-verification step, so titles that collect personal data may not be used by children under 14. However, titles that collect no personal data at all, such as EggPet, are safe for users of all ages. Lighthouse of the Heart is also made for all ages: the Game does not directly collect personal data, every request for its optional rewarded ads is marked child-directed and under the age of consent, so ads are shown without personalization or the advertising ID at a maximum rating of G, and a parental check must be solved before any purchase and before sending a postcard. Hearts Move In (마음의 집) is made for both children and adults: it does not directly collect personal data, sends neither the advertising ID nor device identifiers, and has no ads or cash payments. The Mindkeeper brand site (mindkeeper.co.kr) has no sign-up, input forms, cookies or visit analytics, and processes no personal data beyond standard access logs and network error reports (Article 3-9), so it can be viewed at any age.

If we learn that personal information of a child under 14 has been collected, we destroy it without delay and stop serving personalized ads. If you believe a child's personal information has been collected, please notify us at the contact address below.

8 Security Measures

• Encryption in transit (HTTPS/TLS) and encrypted storage of passwords/credentials
• Least-privilege access, access control, and access/change logging
• Regular security reviews and vulnerability remediation

9 Your Rights & How to Exercise Them

You may request access, correction, deletion, or suspension of processing of your personal information at any time, and the Company will act without delay in accordance with the law. Where a solution is operated by a client, such requests may be handled through the client.

1. MINDBLOCK (in game) - choose [Settings › Data & Privacy › Delete my data]; your anonymous account and leaderboard records are deleted immediately.
2. TDF: Neon Siege · MindDozer 3D - please request deletion at the contact address below. (MindDozer 3D's local data is removed from the device when the app is uninstalled.)
3. EggPet - no data is stored on any server, so no deletion procedure is needed. Local data is removed from the device when the app is uninstalled. (If you use an Apple-device version, iCloud backups are managed inside your own Apple account, which the Company cannot access.)
4. Lighthouse of the Heart - no data is stored on any server, so no deletion procedure is needed. Your progress is deleted when you uninstall the game (Android may ask whether to keep the app's data). You keep and delete progress codes and backup files yourself, and Android Auto Backup copies are managed inside your own Google account, which the Company cannot access.
5. Hearts Move In (마음의 집) - no data is stored on any server, so no deletion procedure is needed. Progress and records in the app are deleted when you uninstall the app or clear its data, and problem records and gameplay trial records can also be deleted separately in Settings. Files you export to another folder must be deleted directly from that location.
6. Utilo (utilo.co.kr) - there is no sign-up or account and every tool runs inside your browser, so no user data is stored on the Company's servers and no deletion request is needed. Settings kept in browser local storage (theme and the like) can be cleared by deleting the site's data in your browser; see Article 5-1 for how to refuse advertising and analytics cookies.
7. By email (common channel) - request deletion at the address below; we process it within 3 business days.

• Android - Settings › Privacy › Ads › Delete advertising ID
• iOS (if an iOS version is released) - Settings › Privacy & Security › Tracking › turn off "Allow Apps to Request to Track"

The Company's games use personalized ads by default. Deleting your advertising ID as described above stops personalized ads; ads themselves may continue to be shown in a non-personalized form.

10 Privacy Officer & Contact

For privacy inquiries, access or deletion requests, please contact us. We respond within 3 business days.

• Company - MOMSOFT
• Location - Siheung-si, Gyeonggi-do, South Korea
• Privacy Officer - Yun Soohyun (CEO)
• ysh@momsoft.co.kr

11 Changes to This Policy

This Policy may be revised due to changes in law, policy, or services, and any revision will be announced in advance on the website.