Privacy Policy

1. Personal Information Collected

The Service collects the minimum necessary information as follows. [Account Registration] • Email/Password: Email address, password (encrypted) • Social login (Google, Kakao): Email address, profile nickname (per respective provider policy) [Morning brief email] • Email address (entered by the user) • Purpose: Pre-market briefing and related reference emails • Retention: Until unsubscribe or deletion request [Investment Education Application] • Name, contact (phone number), investment experience level, investable amount (optional), inquiry (optional) • Purpose: Course guidance and enrollment confirmation contact • Retention: 1 year after application processing is complete [Automatically Collected] • Usage records, access logs, device identifiers (advertising ID), app version Personal information is collected directly by the user or automatically generated during service use.

2. Purpose of Collection and Use

Collected personal information is used solely for the following purposes: • Member identification and service use management • Providing personalized investment information and alerts (push and morning brief email) • Preventing unauthorized use and enhancing security • Statistics and analysis for service improvement • Compliance with legal obligations

3. Retention and Use Period

The Service destroys personal information without delay when a member withdraws or when the collection purpose is achieved. However, information required to be retained by law will be kept for the legally specified period. • Records related to contracts or withdrawal of offers: 5 years (E-Commerce Act) • Login records: 3 months (Protection of Communications Secrets Act)

4. Third-Party Disclosure and Cross-Border Transfer

The Service does not, in principle, share personal information with third parties. Exceptions include: • Cases where the user has given prior consent • Cases required by law or requested by investigative authorities [Advertising — Google AdSense] The Service may display ads via Google AdSense. Google and third-party vendors may use cookies or similar technologies to serve interest-based ads. • Recipient: Google LLC • Countries: United States and other countries where Google operates • Purpose: Ad serving, measurement, and fraud prevention • Policy: https://policies.google.com/technologies/ads • Opt out of personalized ads: https://adssettings.google.com [Cross-Border Transfer — Email Notifications] When you subscribe to the morning brief or apply for creator verification, minimal information (email, nickname, self-introduction) is sent for email delivery: • Recipient: Resend • Country: United States • Purpose: Briefing and operational email delivery • Retention: Deleted immediately after sending (subscription emails are kept until unsubscribe) If you do not consent to the above, email subscription or creator verification applications may be restricted.

5. Data Processing Delegation

The Service delegates personal information processing to the following entities: • Vercel Inc. (USA) — Service hosting and server operations • Supabase Inc. (USA) — Member authentication and database storage • Upstash Inc. (USA) — Rate limiting • Resend (USA) — Operational email notifications • PortOne Co., Ltd. (Korea) — Payment processing (card/simple pay), billing key issuance and management • Google LLC (USA) — Google AdSense ad serving and measurement • Kakao Corp. (Korea) — Kakao AdFit ad serving All entities are contractually required to comply with data protection requirements.

6. User Rights and How to Exercise Them

Users may exercise the following rights at any time: • Request to access or correct personal information • Request to suspend personal information processing • Request to delete personal information (right to be forgotten) • Account withdrawal and complete deletion Upon account deletion, all posts, comments, and creator verification data will be deleted. Requests may be submitted via email (sunryupatners@gmail.com), and the Service will respond within 10 business days.

7. Technical and Managerial Protection Measures

The Service takes the following measures to protect personal information: • Encrypted password storage • Minimized access rights and access log management • Regular security vulnerability assessments • Internal management plans and implementation

8. Cookies and Similar Technologies

The Service may use cookies, localStorage, and similar technologies for convenience, improvement, and advertising. [App features] • localStorage: portfolio and watchlist settings (not sent to servers) • locale cookie: language preference [Advertising — Google AdSense / Kakao AdFit] • Google and third-party ad partners may use cookies or similar technologies based on prior website visits to serve ads. • Users can turn off personalized ads at https://adssettings.google.com or opt out of interest-based ads at www.aboutads.info. • Blocking cookies may limit some features.

9. Changes to Privacy Policy

If this policy changes, advance notice will be provided at least 7 days prior through in-app announcements or pop-ups. Additional consent may be requested for significant changes.

10. Privacy Officer

For inquiries, complaints, or remedies related to personal information: • Officer: Hyunwoo Ryu (Sunryu Partners Co., Ltd.) • Email: sunryupatners@gmail.com • Phone: +82-10-3461-2916 • Response time: Within 10 business days of receipt

Supplementary Provisions

This policy takes effect as of August 12, 2026 (updated September 10, 2026 for morning brief email collection).