hpl-sweat-science-policy

Privacy Policy (HPL Sweat Science)

Effective Date: December 16, 2025

Geonwoo Yang (Individual Operator, hereinafter “Operator”) complies with applicable privacy laws, including the Korean Personal Information Protection Act, in providing the mobile application HPL Sweat Science (hereinafter “Service”). This Privacy Policy describes how personal information is collected, used, and protected.

1. Personal Information Collected

The Service may collect and use the following information:

1) Account / Login Information (Required)

• Information provided through Google Sign-In (Firebase Authentication): email address, display name

2) Profile Information (Optional, entered by the user)

• Name
• Date of birth
• Height
• Weight

3) Measurement / Record Data (for service functionality)

• Test type
• Measured values and results (metrics)
• Creation timestamp (createdAt)
• Device-generated time string (deviceTS)

2. Purpose of Processing

The Operator processes personal information for the following purposes:

• Providing the Service and identifying users (login)
• Managing user profiles
• Storing, retrieving, and visualizing measurement results
• Responding to inquiries and improving the Service

3. Retention Period

1) Account / Profile Information

• Deleted without delay upon account deletion by the user.

2) Measurement / Record Data (Anonymized Retention Policy)

• When a user deletes their account through the in-app account deletion feature, the Operator deletes personal profile information.
• However, measurement records may be retained in an anonymized form (with personally identifiable information removed) for the purposes of service quality improvement and research/AI development, and are generally not deleted.
• If a user wishes to request deletion of anonymized measurement records, please contact us at the address below.

4. Third-Party Disclosure and Processing Delegation

The Operator does not, in principle, provide personal information to third parties. However, the following external services may be used for service provision:

• Google Firebase (Authentication, Cloud Firestore)

5. International Data Transfer

The Service uses Google Firebase, and data may be processed on servers located outside Korea (e.g., in the United States). International data transfers are governed by Google/Firebase’s policies and terms.

6. User Rights

Users may exercise their rights to access, correct, delete, or suspend the processing of their personal information in accordance with applicable laws. To exercise these rights, please contact us at the address below.

7. Security Measures

The Operator implements the following measures to ensure the security of personal information:

• Access control allowing only authenticated users (Firebase Authentication)
• Per-user data access restrictions (Firestore Security Rules)
• App Check for monitoring and reducing unauthorized requests

8. Contact

• Operator: Geonwoo Yang (Individual)
• Email: y00devx@gmail.com
• Address: 222 Yatap-dong, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea

9. Changes to This Policy

The Operator may revise this Privacy Policy in response to changes in laws, policies, or the Service. Any revisions will be announced through in-app notices or the public URL.

This policy is effective from December 16, 2025.