Privacy Policy

Effective 1 September 2026

yaholab Inc. (the “Company”) establishes and discloses this Privacy Policy in accordance with the Korean Personal Information Protection Act, in order to protect users’ personal information and to handle related concerns promptly.

1. Personal information collected

a. On sign-up

  • Required. Email address, name or nickname, and the identifier passed by the social login provider
  • Collected through social login (Google, Kakao). We do not collect passwords. Where Kakao does not supply an email address, the account is created without one.

b. During use, entered by the user

  • Student school history: country, school name, enrolment period, school system
  • Entry and exit records: departure and arrival dates
  • Parent employment: employment type, employer, period of service
  • Target universities and document status
  • Scanned copies of documents uploaded by the user

We do not collect or extract resident registration numbers or passport numbers. Where an uploaded document contains such numbers, the file is stored as provided and its contents are not parsed.

c. Collected automatically

  • Access log, IP address, browser and device information, cookies

2. Purposes of use

  • Member identification and account management
  • Calculating applicant eligibility and providing document guidance
  • Processing payments for paid services and issuing invoices
  • Responding to enquiries and handling complaints
  • Improving the Service and analysing usage in aggregate

3. Retention period

  • Account information: until the account is deleted
  • Data entered by the user: until the account is deleted, or until the user deletes it
  • Records required by law: records of contracts and withdrawal of subscription, 5 years; records of payment and supply, 5 years; records of consumer complaints or dispute handling, 3 years; access logs, 3 months

4. Provision to third parties

The Company does not provide personal information to third parties, except where required by law and for payment processing as set out below.

RecipientPurposeItems
Paddle.com Market Ltd.Payment processing, tax filing, invoicingEmail, payment details, country
Google LLCServing advertisements and measuring performanceCookie identifiers, IP address, browser information

Paddle acts as merchant of record and is the seller in the payment transaction. Card details are never stored on the Company’s servers.

5. Processors

ProcessorTask
Vercel Inc.Web hosting
Supabase Inc.Account authentication, database and file storage
Paddle.com Market Ltd.Payment processing and settlement

6. Transfer outside Korea

Personal information may be stored outside Korea in order to operate the Service.

RecipientCountryItems and purpose
Vercel Inc.United StatesService usage information · hosting
Paddle.com Market Ltd.United KingdomEmail and payment details · payment processing
Google LLCUnited StatesCookie identifiers and access information · advertising

Account and document data is held on servers located in Seoul, Republic of Korea. Transfers take place over the network at the time the Service is used. A user may refuse transfer outside Korea, in which case use of the Service will be limited.

7. Your rights

  • You may request access to, correction of, deletion of, or suspension of processing of your personal information at any time.
  • Most items can be viewed and edited directly from your profile page.
  • Requests may also be sent to support@tudy.im and are answered without delay.

8. Destruction

Once the retention period has expired or the purpose of processing has been achieved, the information is destroyed without delay. Electronic files are deleted by a method that prevents recovery.

9. Security measures

  • Access to personal information is limited to the minimum number of staff
  • Encryption in transit (HTTPS) and access control on stored files
  • Uploaded documents are held in a private bucket. Only the account owner can open them, and viewing links expire after one hour

10. Cookies and advertising

The Company uses cookies to maintain login sessions and to remember settings. You may refuse cookies through your browser settings, though some features may then be unavailable.

The Service may display advertisements through Google AdSense. Google may use cookies to serve advertisements based on your prior visits to this and other sites. You can opt out of personalised advertising at Google’s Ads Settings.

11. Privacy officer

yaholab Inc. · Kwon Youngwook · support@tudy.im · +82 70-8888-8287
30 Songdomirae-ro, Yeonsu-gu, Incheon, Republic of Korea

12. Changes to this policy

Where this policy is added to, deleted from or amended, notice is given within the Service at least 7 days before the change takes effect.

This English text is provided for convenience. If it differs from the Korean version, the Korean version governs.