Privacy Policy

Effective: August 6, 2026 · Last updated: August 6, 2026

Bium ("we", "us") takes the privacy of its users seriously and complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. This policy applies to the Bium mobile application and the website at bium.us (together, the "Service").

1. Information we collect

We collect only what the Service needs to work. We do not collect your national ID number, phone number, or precise location. If you use social sign-in, the provider may pass us a name; we use it only to identify your account and never display it to other users.

Information received through social sign-in is used solely to identify your account and keep you signed in. We do not access any other data in your Google or Apple account, such as contacts, calendar, files, or photos, and we never use sign-in data for advertising, profiling, or sale to third parties. Our use of Google user data complies with the Limited Use requirements of the Google API Services User Data Policy. To disconnect a social sign-in, delete your account or write to dnjsvltmp@naver.com.

What you write in a journal entry or post may include sensitive content such as how you are feeling or details about your health. We treat that content solely as your own record. We do not use it for profiling or advertising, do not combine it with advertising identifiers, and do not sell it to third parties.

2. How we use your information

• Identifying your account and keeping you signed in, including authentication through social sign-in
• Providing features such as the emotion journal, community, and ChanceBot
• Protecting users through harmful-content filtering and handling reports and blocks
• Responding to enquiries and delivering service notices
• Diagnosing errors and improving quality
• Meeting legal obligations and responding to disputes

3. Retention periods

When you request account deletion, your account is scheduled for deletion immediately: access is suspended at once and your content stops being visible to other users. Your personal data and content are then permanently erased after a 7-day cancellation period.

If you sign in again within those 7 days and cancel the request, your account and data are restored in full. After 7 days the deletion cannot be cancelled and nothing can be recovered.

• Account deletion: suspended and hidden immediately → permanently erased after 7 days → fully removed from backup storage within a further 30 days
• Individual journal entries and posts you delete: removed immediately with no 7-day period, and fully removed from backup storage within 30 days
• Where retention is required by law: access logs for 3 months under the Protection of Communications Secrets Act; records of contracts, payments, and consumer complaints for up to 5 years under the Act on Consumer Protection in Electronic Commerce
• Where records are needed to resolve a report, block, or dispute: until that matter is closed

4. Processors and international transfers

We rely on the following processors to run the Service. Their servers are located outside Korea, so your data is transferred internationally.

You may refuse international transfer, but in that case you will not be able to use all or part of the Service. To refuse, write to dnjsvltmp@naver.com.

5. Sharing with third parties

We do not share your personal data with third parties, except:

• Where you have given prior consent
• Where required by law, or where an investigative authority requests it under the procedures set out in law
• Where there is an urgent risk to the life or physical safety of you or another person, and disclosure is necessary to prevent it

6. Your rights

• You may request access to, correction of, deletion of, or suspension of processing of your personal data at any time.
• Profile information such as your nickname can be edited directly in the app's settings.
• You can request account deletion yourself using the Delete Account menu at the bottom of the Settings screen. The account is scheduled for deletion at once, and after 7 days your journal entries, posts, comments, uploaded files, and ChanceBot history are permanently erased. You can cancel by signing in again within those 7 days.
• If you do not have the app installed, or have already removed it, you can still request deletion by email from the account deletion request page. You do not need to reinstall the app.
• Any other request can be sent to dnjsvltmp@naver.com and will be handled within 10 days of receipt.

7. Users under 18

Bium is available only to people aged 18 and over, and we do not accept sign-ups from anyone under 18. Age is confirmed at registration.

If we learn that we have collected data from someone under 18, we delete that data and the account without delay. Guardians who find an account belonging to a minor can write to dnjsvltmp@naver.com and we will act immediately.

8. How we destroy data

Personal data is destroyed without delay once its retention period ends or its purpose is fulfilled. Electronic files are deleted using methods that prevent recovery; printed material, if any, is shredded or incinerated.

9. Security measures

• Passwords are stored using one-way encryption, so we cannot read them.
• All traffic is encrypted in transit using TLS.
• Row-level security policies in the database restrict access so that each account can reach only its own data.
• Access to personal data is limited to the minimum number of people whose work requires it.

10. Cookies and tracking

The bium.us website does not use advertising identifiers or third-party analytics, and sets no tracking cookies. Your language preference is stored only in your own browser's local storage and is never sent to our servers.

11. Privacy officer

• Name: Chanmi Ki (Owner)
• Email: dnjsvltmp@naver.com
• Address: 209, 87 Oksan-ro, Buk-gu, Daegu, Republic of Korea

12. Filing a complaint

If you need to report or discuss a privacy concern, you may contact the following Korean authorities:

• Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
• Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office, Cyber Investigation Division: 1301 (www.spo.go.kr)
• Korean National Police Agency, Cyber Bureau: 182 (ecrm.police.go.kr)

13. Changes to this policy

If this policy changes, we will post notice on the website and in the app at least 7 days before the change takes effect, or at least 30 days in advance where the change is unfavourable to users.