Privacy Policy
Last Updated: November 10, 2025
1. Information We Collect
Upvy collects the following information through social login (OAuth 2.0):
- Email address (required)
- Profile information (nickname, profile picture - optional)
- Social login provider (Google, Naver, Kakao)
- Service usage records (content views, likes, comments, saves)
- Device information (OS version, app version, device identifier)
2. Purpose of Use
The collected information is used only for the following purposes:
- User registration and login authentication
- Service provision and personalized content recommendations
- Service improvement and new feature development
- Customer inquiries and support
- Prevention of fraudulent use and service security
3. Retention Period
| Information Item | Retention Period |
|---|---|
| Account information | Until account deletion |
| Service usage records | 3 years |
| Log data | 1 year |
All personal information is immediately deleted upon account deletion, except as required by law.
4. Third-Party Disclosure
Upvy does not provide personal information to third parties without user consent. However, the following cases are exceptions:
- When required by law
- When requested through legal procedures for investigation purposes
- When necessary for service provision (AWS, Kafka, and other infrastructure providers)
5. OAuth Social Login
Upvy does not store passwords and uses OAuth 2.0 protocol from Google, Naver, and Kakao.
- Google: Email address, profile information
- Naver: Email address, nickname, profile picture
- Kakao: Email address, nickname, profile picture
The privacy policies of each social login provider follow their respective service policies.
6. Cookies and Tracking Technologies
Upvy uses the following technologies:
- JWT tokens: Maintain login status (Access Token 1 hour, Refresh Token 14 days)
- Local storage: App settings and cache data
- Behavioral tracking: Analyze viewing patterns for content recommendations (anonymized)
7. Children’s Privacy
Upvy does not collect personal information from children under 14 years of age. If parents or guardians believe their child has provided personal information, please contact us immediately.
8. User Rights
Users can exercise the following rights:
- View: Check your personal information
- Edit: Change profile information
- Delete: Delete account (Settings > Delete Account)
- Stop processing: Request temporary account suspension
9. Security
Upvy takes the following measures to safely protect personal information:
- TLS 1.3 encrypted communication
- Password bcrypt hashing (passwords not stored due to OAuth usage)
- AWS security infrastructure utilization
- Regular security checks and updates
10. Policy Changes
This privacy policy may be revised according to laws or service changes. Important changes will be announced at least 30 days in advance through in-service notifications.
11. Contact
For inquiries regarding privacy protection:
- GitHub Issues: https://github.com/12OneTwo12/upvy
- In-app: Settings > Help & Support