ChatCar 앱의 개인정보 처리방침 및 이용약관
Effective date: May 11, 2026 Last revised: September 2, 2026
ChatCar (the “Company” or “Service”) complies with the personal-information protection provisions of applicable laws, including the Personal Information Protection Act, and does its utmost to protect users’ personal information safely. This Privacy Policy applies to the ChatCar mobile application (the “App”) and related services provided by the Company.
| Item | Collection method | Notes |
|---|---|---|
| Email address | Entered by the user, or via Kakao account | Member identification, notifications |
| Nickname | Kakao account (optional consent) | Displayed as the in-app username |
| Kakao user identifier (user_id) | Kakao OAuth integration | Member identification |
| Password | Entered by the user (for email sign-up) | Stored encrypted |
| Item | Collection method | Notes |
|---|---|---|
| Vehicle information (make/model/year) | User input or OBD auto-detection | Providing the diagnosis service |
| Vehicle Identification Number (VIN) | OBD auto-detection or user input | Vehicle identification |
| License plate | User input | Vehicle identification |
| OBD sensor data | Collected automatically when an OBD adapter is connected | Real-time diagnosis, AI analysis |
| AI diagnosis questions/answers | User input + AI-generated | Diagnosis-history management |
| Item | Collection method | Notes |
|---|---|---|
| Receipt photos | Taken/uploaded by the user | Deleted immediately after OCR processing |
| Maintenance items and amounts | OCR extraction + user edits | Stored as maintenance history |
| Repair-shop information | Extracted from the receipt | Stored as maintenance history |
| Item | Collection method | Notes |
|---|---|---|
| Device information (OS, app version) | Collected automatically | Compatibility, error analysis |
| App usage logs | Collected automatically | Service improvement |
| IP address | Collected automatically | Security, anomalous-access detection |
Payments are processed through the in-app purchase and payment infrastructure of each app marketplace (App Store · Google Play) and RevenueCat. The Company retains only payment records (payment date, amount, product name) and Point accrual/deduction/balance records. The Company does not directly collect payment-method information such as card numbers or CVC.
The Company uses the collected personal information for the following purposes:
A member’s personal information is retained and used for the following periods:
| Item | Retention period | Basis |
|---|---|---|
| Member information (email, nickname, etc.) | Until membership withdrawal | Company policy |
| Vehicle information, diagnosis history | Until membership withdrawal | Service provision |
| Maintenance-receipt data | Until membership withdrawal | Service provision |
| Payment records | 5 years | Act on Consumer Protection in Electronic Commerce, Art. 6 |
| Records of contracts or withdrawal of subscription | 5 years | Act on Consumer Protection in Electronic Commerce, Art. 6 |
| Records of consumer complaints and dispute handling | 3 years | Act on Consumer Protection in Electronic Commerce, Art. 6 |
| Access logs, IP information | 3 months | Protection of Communications Secrets Act |
| Fraudulent-use records | 1 year | Company policy |
Upon a withdrawal request, information is destroyed immediately; however, information that must be retained under the law is stored separately for the relevant period and then destroyed.
As a rule, the Company does not provide users’ personal information to outside parties. The following are exceptions:
The Company outsources personal-information processing tasks as follows for smooth service provision:
| Processor | Outsourced task | Information provided |
|---|---|---|
| Supabase Inc. (USA) | Member authentication, database management | Email, nickname, vehicle information, etc. |
| OpenAI, LLC (USA) | AI vehicle-diagnosis analysis | Diagnosis questions, vehicle/sensor data (excluding personally identifiable information) |
| Google LLC (USA) | OCR (Document AI), Gemini AI | Receipt images (deleted immediately after processing) |
| Kakao Corp. (Republic of Korea) | Social login (OAuth) | Kakao user_id, nickname, email |
| RevenueCat, Inc. (USA) | In-app purchase / Point-purchase management | App user identifier, purchase events (excluding payment-method information) |
The Company enters into contracts with processors for safe processing in accordance with the Personal Information Protection Act, and will announce any change of outsourced tasks through this Policy.
Some processors (Supabase, OpenAI, Google, RevenueCat) store data overseas. A user’s personal information is transferred abroad, and this is deemed consented to upon sign-up or upon agreeing to this Policy.
Users may exercise the following rights at any time:
For children under the age of 14, a legal representative may exercise these rights.
Upon membership withdrawal or expiration of the retention period, the Company destroys personal information according to the following:
The Company takes the following measures to protect personal information:
The Company may use cookies or similar technologies to analyze user information.
The Company designates a Privacy Officer as below to oversee personal-information processing and to handle user complaints and remedy damages:
Privacy Officer
Users may direct all inquiries, complaints, and damage-remedy matters related to personal-information protection arising from use of the Company’s Service to the contact above.
To obtain relief for personal-information infringement, users may apply for dispute resolution or counseling to the following organizations (Republic of Korea):
If this Privacy Policy changes, the Company will notify users through an in-app announcement or email at least 7 days before the change takes effect. However, where there is a material change to users’ rights or obligations, notice will be given at least 30 days in advance.
As a rule, the Company deletes all personal information upon membership withdrawal. However, to prevent repeated receipt of free sign-up Points (abuse) and to restore data upon re-registration (service continuity), the Company retains the following information for 6 months and automatically destroys it after the retention period. (Consent to this retention and restoration is deemed given by agreeing to this Policy at sign-up.)
| Item | Retention form | Purpose |
|---|---|---|
| Kakao user identifier | SHA-256 hash | Identifying the same user upon re-registration |
| Email address | SHA-256 hash (after normalization) | Identifying the same user upon re-registration |
| Point balance | Plaintext | Restoring the Point balance upon re-registration |
| Vehicle information (make, model, year, VIN, mileage, etc.) | Plaintext (personal information) | Restoring vehicle information upon re-registration |
| Diagnosis history | Plaintext (personal information) | Restoring diagnosis history upon re-registration |
Addendum
This Privacy Policy applies from June 16, 2026; the amended Policy (addition of RevenueCat as a processor, etc.) applies from July 10, 2026. The amended Policy resulting from the transition from subscription to Point-based payment (payment information, purposes of use, outsourcing, retained items, etc.) applies from September 2, 2026.