YakdoYakdo team (“we”) operates Yakdo (the “Site”, including the Yakdo app) and protects users’ personal information under the Personal Information Protection Act of Korea. This policy explains what we process and how you can exercise your rights.
1. Information we process and why
| Category | Items | Purpose | Retention |
|---|---|---|---|
| Account (optional) | ID, e-mail, nickname, password (stored with one-way hashing), sign-up and last sign-in time and IP | Identifying members, sign-in, preventing abuse | Until you delete your account (destroyed without delay afterwards) |
| Health information (sensitive — separate consent on first use) | Sex, age, pregnancy or breastfeeding, conditions, medicines, allergies, lifestyle and similar choices in “Check for my body”, “My supplements” and the full analysis | Calculating suitable nutrients and products to watch | Not stored — processed only while calculating and then discarded (your choices and results stay on your own device) |
| Social sign-in | Provider (Kakao, Naver, Google, Apple, Facebook), provider member number, e-mail, display name, (Apple) token used to revoke the link | Easy sign-in | Until you disconnect or delete your account |
| App sign-in | Sign-in token (hashed), device name, IP, time of use | Keeping you signed in to the app | Invalidated on expiry or sign-out, destroyed when you delete your account |
| App push notifications (optional — only if you allow them on your phone) | Device notification token, device type (Android/iPhone), app language and version, whether notifications are allowed, (if signed in) member number | Sending recall notices, new products and service notices | Destroyed without delay when you delete the app or the token changes (as soon as delivery fails) |
| Ask AI | Question text (personal details removed, not linked to who asked), the generated answer | Answering similar questions again, checking answer quality | Until deleted by an administrator (cannot identify anyone) |
| Contact form | Type and content, e-mail for a reply (optional), page address, a hash of the IP address for the daily limit (the IP itself is not stored) | Replying, correcting information, preventing abuse | 1 year after handling (longer only if a dispute or law requires it) |
| Collected automatically | IP address, browser information, access time, requested address | Security, troubleshooting | 14 days (server access logs) |
We do not store health information. We ask for your consent once on first use (“Agree and continue” in the app, a checkbox on the web); without it you can still use product search, comparison and other features. What you enter is sent with POST so it is not left in addresses or logs, used only to calculate the result, and never saved on our servers. Values remembered for recalculation (product numbers, sex, age, pregnancy) are kept only in your device or browser storage, and you can clear them at any time.
2. Cookies and browser storage
hf_sid— session cookie for sign-in and security (protection against forged requests); expires when the browser closes or after a period of timehf_lang— the language you last chose (1 year)- Browser storage
hf_my_ids,hf_my_p— products added to “My supplements” and calculation settings (sex, age, pregnancy); never sent to our servers
If we start showing ads, we will update this policy first with the cookies used and how to refuse them.
3. Sharing, outsourcing and transfers abroad
We do not provide or sell personal information to third parties. The Site and its database run on servers we manage in Korea; only the tasks below are entrusted to others.
Ask AI: the question you type is sent to the provider below to create an answer. To answer similar questions faster and check quality, we keep the question and answer without linking them to you (no member number or IP address) and with anything that looks like a phone number or e-mail removed. Daily usage is counted with a value that cannot identify you (a hash of your member number or IP address) for one day only. Please do not put personal details in your questions.
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Anthropic, PBC | USA (over the network when sent) | Question text (only when no similar answer exists in our database), related public data | Generating Ask AI answers | Per the provider’s API data policy (not used for training) |
| Google LLC (Firebase Cloud Messaging) | USA | Device notification token, notification title and text | Delivering app push notifications | While delivering |
| Cloudflare, Inc. | USA and other countries (through the Cloudflare data center nearest to you) | IP address, requested address, browser information | Faster delivery and security (blocking DDoS and malicious traffic) | While delivering and protecting (short-term logs under Cloudflare’s policy) |
These transfers happen over the network while you use the Site or app. If you do not want them, you can stop using the feature (Ask AI; for push, turn notifications off in your phone settings) or delete your account; access to the Site itself always passes through Cloudflare. If new outsourcing or transfers are added, we will list the recipient, items, purpose and period here first and obtain any consent required.
4. Destruction
Personal information is destroyed without delay once its retention period ends or its purpose is achieved. Electronic files are erased so they cannot be recovered, and backups are deleted when their retention cycle (up to 12 weeks) ends.
5. Your rights
You may at any time ask to see, correct, delete or stop processing your personal information, or delete your account. You can delete your account yourself in the app (More > Delete account) or on the web (Account) — see Data deletion. For other requests use the contact form (type: privacy request); we act without delay (within the legal limit of 10 days). We may confirm your identity through your account or sign-up e-mail. Children under 14 cannot create an account.
6. Security measures
- Passwords are stored with one-way hashing
- Administrator functions are limited to authorized accounts, with limits on sign-in attempts
- Database accounts are separated by role (read/write vs. schema changes) with minimum privileges
- Backups are kept on a separate disk with restricted access
7. Privacy officer
Operator (also privacy officer) · [email protected] · Contact form (type: privacy request)
You can also report or seek advice on privacy violations to the Korea Internet & Security Agency Privacy Center (privacy.kisa.or.kr, +82-118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr).
8. Changes
We announce changes on the Site 7 days before they take effect (30 days for changes important to your rights).
Operator: Yakdo team · [email protected] · Contact