European Privacy Notice

This notice supplements the Korean Privacy Policy for people in the EEA, the United Kingdom, and Switzerland. The controller is Lee Eun-hyeong (이은형), the operator of Chakchak Dividend, located in the Republic of Korea.

Chakchak Dividend is a local-first dividend and portfolio application. The operator does not receive your locally stored portfolio records unless you enable cloud synchronization, submit feedback, or otherwise choose to transmit them.

• OCR images are processed on the device and are not uploaded to our servers.
• Private feedback is not published and is stored with a receipt number for operator review.
• Payment card details are handled by the app store and are not stored by the operator.

Where consent is the legal basis, you may refuse or withdraw consent at any time without losing the app's core local portfolio functions. Withdrawal does not affect processing that was lawful before withdrawal.

The app may use an advertising identifier, installation identifiers, SDK local storage, and similar device technologies for advertising, consent records, analytics, and crash diagnosis. Google's consent message identifies the advertising purposes and vendors applicable to your device and region.

This privacy-policy page does not contain advertising tags or scripts that require advertising consent. The app requests only notification permission, used for dividend schedules, goals, and other alerts you request.

We use providers only to operate features you use, deliver advertising in enabled app versions, measure service performance, or maintain reliability. We do not sell personal data for money.

The controller is established in the Republic of Korea. The Republic of Korea is covered by an EU adequacy decision, which permits personal data to flow from the EU to covered Korean recipients without additional transfer authorization.

Google, RevenueCat, Neon, Resend, social-login providers, and their subprocessors may process data in the United States or other locations. Depending on the provider and destination, transfers may rely on an applicable adequacy decision, the EU-US Data Privacy Framework, the UK extension, Swiss-US framework, Standard Contractual Clauses, or another lawful safeguard. Provider details are available in the Google Privacy Policy, RevenueCat Privacy Policy, Neon Privacy Policy, and Resend Privacy Policy.

We retain personal data only for the periods described above or as long as necessary for the stated purpose. Local records remain on your device until you delete them or uninstall the app. Synced records are deleted after account deletion, sync removal, or a verified deletion request, subject to legal obligations and limited backup cycles.

Subject to applicable law, you may request:

• access to and a copy of your personal data;
• correction of inaccurate or incomplete data;
• erasure of data that is no longer needed or is processed unlawfully;
• restriction of processing in qualifying circumstances;
• data portability for data processed by automated means under consent or contract;
• an objection to processing based on legitimate interests; and
• withdrawal of consent at any time.

Chakchak Dividend does not make decisions based solely on automated processing that produce legal or similarly significant effects. We normally respond to a verified request within one month, subject to lawful extensions.

In regions where consent is required, Google User Messaging Platform (UMP) may ask for advertising and related choices before ads are requested. When privacy controls are available in the app, you can use them to review or change those choices. You may also contact us to withdraw consent or object to processing.

Refusing personalized advertising does not disable core local functions. You may still receive contextual or limited ads, and essential processing for security, fraud prevention, or consent records may continue where lawful.

Portfolio records are stored in an encrypted local SQLite database, with the key held in the operating system's secure storage. Network transfers use TLS. When cloud synchronization is available, access controls and row-level security are applied to synchronized data. Device biometric checks remain on the device; we do not receive or store biometric templates.

Chakchak Dividend is not directed to children. We do not knowingly collect a child's personal data without the authorization required by the law of the child's country. If we learn that such data was collected, we will delete or restrict it promptly.

Send privacy requests in English or Korean to the address below. We may ask for information necessary to verify your identity.

You also have the right to lodge a complaint with your local data protection authority. EEA authorities are listed by the European Data Protection Board. UK residents may contact the Information Commissioner's Office, and Swiss residents may contact the Federal Data Protection and Information Commissioner.

This notice is effective on July 29, 2026. We will update it when data flows, SDK settings, legal requirements, hosting regions, or store disclosures materially change and will provide additional notice where required.