Seri Privacy Policy

Effective Date: April 1, 2026

---

cornyLabs ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

---

1. Information We Collect

Information You Provide

Category	Data	Purpose
Required	Phone number, display name	Account identification, service delivery
Required	Device ID	Account creation, security
Optional	Contacts (name, phone)	Building your connection network

Information Collected Automatically

Category	Data	Purpose
Automatic	Push token	Sending notifications
Automatic	IP address	Security, fraud prevention
Automatic	Access logs, device info	Service stability, error analysis

We collect only what is necessary to provide the Service. We do not collect email addresses, physical addresses, birthdays, or other contact fields beyond name and phone number.

---

2. How We Use Your Information

• Account management: Identifying users, preventing unauthorized access
• Service delivery: Building connection networks, processing connection path searches
• Notifications: Sending alerts for connections, messages, and announcements
• Security: Detecting abnormal access via IP, protecting accounts
• Service improvement: Usage analytics, error analysis, quality improvement

---

3. How We Store and Protect Your Information

Your phone number is never stored in plain text. We apply the following encryption:

Data	Method	Notes
Phone number (search)	HMAC-SHA256 hash	One-way; original cannot be recovered
Phone number (display)	AES-256-GCM	Recoverable only with the encryption key
Display name	AES-256-GCM	Shown only to mutually connected users

Additional security measures include HTTPS for all data in transit, access controls, and server infrastructure managed through Naver Cloud Platform.

---

4. Data Retention

When you delete your account, all your personal data is immediately and permanently deleted. We retain certain records as required by applicable law:

Record	Retention Period	Legal Basis
Contract / withdrawal records	5 years	E-Commerce Consumer Protection
Payment / supply records	5 years	E-Commerce Consumer Protection
Consumer complaint records	3 years	E-Commerce Consumer Protection
Access logs	3 months	Protection of Communications

---

5. Sharing Your Information

We do not sell your personal information. We do not share your information with third parties except in the following cases:

• With your consent: When you have explicitly agreed
• Service providers: We share push tokens with Google LLC (Firebase Cloud Messaging) solely to deliver notifications
• Legal requirements: When required by law or valid legal process

Google LLC (Firebase Cloud Messaging)

Item	Details
Data transferred	Push token
Transfer country	United States
Purpose	Delivering push notifications
Retention	Until you disable notifications or delete your account

Google's Privacy Policy: https://policies.google.com/privacy

---

6. Contact Information from Your Address Book

When you grant contact access, we collect only names and phone numbers from your contacts. This data is used exclusively to build your connection network within Seri.

• We do not collect email addresses, physical addresses, or other contact fields.
• Contacts who are not Seri users will not appear as intermediate nodes in connection searches.
• Non-users may request deletion of their data at any time (see Section 8).

---

7. Your Rights

You have the right to:

• Access: Request a summary of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Delete your account at any time through Settings; all data is immediately removed
• Opt-out of notifications: Disable push notifications through device settings at any time

To exercise these rights, use the in-app customer support menu or contact our Privacy Officer (see Section 10).

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, disclose, or sell
• The right to delete your personal information
• The right to opt out of the sale of personal information — We do not sell your personal information
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, contact us through the in-app support menu.

---

8. Rights of Non-Users

If you are not a Seri user but your contact information has been synced by another user, you are protected as follows:

• Your information will not be used as an intermediate node in any connection path.
• You may request deletion of your data at any time. Upon request, your phone number will be added to a blocklist and permanently excluded from future syncs.

To submit a deletion request, contact us through the in-app support menu or reach our Privacy Officer directly.

---

9. Children's Privacy

The Service is not directed to children under 14. We do not knowingly collect personal information from children under 14. If we become aware that we have collected such information, we will delete it immediately.

---

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes at least 7 days before they take effect (30 days for changes materially adverse to you) via in-app notice.

---

11. Privacy Officer & Contact

Item	Details
Name	Yongsik Lee
Contact	corny2000@gmail.com

For privacy-related inquiries, please use the in-app customer support menu or contact our Privacy Officer directly.

---

cornyLabs
Representative: Yongsik Lee