Privacy Policy

Qevit Privacy Policy

The Operator, NINEROOT (hereinafter the "Operator"), values users' personal information and complies with applicable laws including the Personal Information Protection Act. This Policy applies to the service Qevit (qevit.app).

1. Items of Personal Information Collected
A. Membership Registration and Login
- Email address, password (stored in one-way encryption)
- When using simple login (social login): minimal information such as the email and identifier value received from the relevant provider
- Optional information: nickname, exams of interest, consent to receive marketing, and screen settings (theme, language, etc.)
B. Information automatically generated and collected in the course of using the Service
- Access logs, access date and time, usage records (test-taking, learning, bookmarks, reports, etc.), cookie and session information, device and browser information, IP address, and the like
C. Non-members: session keys for temporary identification and usage records (retained for a certain period)

2. Methods of Collecting Personal Information
Personal information is collected through the user's input during membership registration, login, and use of the Service, or through automatic collection tools (cookies, logs, etc.) during use of the Service.

3. Purposes of Using Personal Information
- Providing the Service and identifying and authenticating members, and linking non-member records to an account
- Storing and synchronizing learning and test-taking records and providing user convenience such as resuming
- Improving service quality and functions, developing new features, and analyzing and debugging errors
- Operating the Service through usage statistics analysis, identifying popular content, and the like
- Security, prevention of fraudulent use and abuse, and responding to violations of the Terms of Service
- Delivering announcements and notices and responding to inquiries and reports
- (Where consented) providing marketing information such as events and benefits
* Access and usage logs are used for the above purposes (in particular, providing user convenience and improving the Service, statistics, and security).

4. Retention and Use Period of Personal Information
- Member information: until membership withdrawal. Upon withdrawal it is destroyed without delay, except that information for which applicable law requires preservation shall be retained for the relevant period.
- Non-member records: may be retained for a certain period and then destroyed.
- Preservation under applicable law (example): the relevant information may be retained for the period prescribed by applicable law.

5. Provision of Personal Information to Third Parties
The Operator does not, as a rule, provide users' personal information to outside parties. However, it may be provided only where the user has consented or where required by applicable law.

6. Entrustment of Personal Information Processing
The Operator may entrust part of its operations, such as hosting, infrastructure, authentication, and analytics, to outside parties for stable provision of the Service; where such entrustment occurs, the Operator shall give notice of the trustee and the entrusted operations through this Policy and shall manage and supervise them in accordance with applicable law.

7. Destruction of Personal Information
Personal information for which the retention period has elapsed or the processing purpose has been achieved is destroyed without delay. Electronic files are deleted by means that render them unrecoverable.

8. Rights of Users and Legal Representatives
Users may at any time request to access, correct, delete, or suspend the processing of their personal information and to withdraw their consent. Such rights may be exercised through functions within the Service or via the contact below.

9. Operation of Cookies and Logs
The Operator uses cookies and logs to provide user convenience, maintain settings, and analyze usage and improve the Service. Users may refuse the storage of cookies through their browser settings, but in such case the use of some functions may be restricted.

10. Children Under the Age of 14
The Operator does not collect the personal information of children under the age of 14 without the consent of a legal representative. The relevant policy follows applicable law and the Service's operating policies.

11. Measures to Ensure the Security of Personal Information
The Operator takes security assurance measures in accordance with applicable law, including password encryption, access authority management, and retention of access records.

12. Personal Information Protection Officer and Contact
- Personal Information Protection Officer: the Operator, NINEROOT
- Contact: it.nineroot@gmail.com
Users may direct inquiries, complaints, and requests for remedy relating to personal information to the contact above.

13. Duty to Notify
If there is any addition, deletion, or modification to the contents of this Policy, it shall be announced within the Service together with the effective date.

Effective date: 2026-06-24