United States Privacy Notice

This notice supplements the Korean Privacy Policy for residents of the United States. It describes practices that may be relevant under state privacy laws, including the California Consumer Privacy Act as amended. The availability of a specific right depends on your state and whether the law applies to our processing.

Even where a particular state law does not apply, we aim to respond reasonably to verified access, correction, and deletion requests. Chakchak Dividend is local-first: the operator does not receive local portfolio records unless you choose a feature that transmits them.

The table describes categories of personal information collected or expected to be collected depending on the features you use, along with the reason for collection and the applicable retention rule.

We do not use or disclose sensitive personal information to infer characteristics about you. Financial and portfolio records are stored locally by default and are not used for advertising personalization by the operator.

We collect personal information from these sources:

• directly from you when you create records, sign in, subscribe, or send feedback;
• automatically from the app, device, and enabled SDKs when events, ads, or errors occur;
• from social-login providers when you approve a login connection; and
• from Google Play, Apple, and RevenueCat when a subscription or purchase is verified.

We use this information to provide requested features, authenticate accounts, synchronize selected records, maintain subscriptions, deliver and measure advertising, analyze service use, diagnose errors, prevent fraud and abuse, answer requests, and comply with law.

We disclose information to service providers and advertising partners only for the purposes described in this notice, when you use the related feature, or when an enabled SDK operates subject to your region and choices.

We may also disclose information when required by law, to protect users and the service, or as part of a business transfer subject to appropriate notice and safeguards.

We do not sell personal information for money.

AdMob may process advertising identifiers, device/app information, and ad interactions to deliver or measure ads. Depending on your state, personalized advertising through an advertising network may be considered "sharing" or targeted advertising even when no money is exchanged for personal information.

Where applicable, use the Google UMP privacy choices presented in the app to opt out or request restricted ad data processing. You may also send a request with the subject "US Privacy Choice" to the contact below. Device-level ad privacy settings can further limit use of your advertising identifier. Contextual or limited ads may still appear.

Subject to applicable state law, you may have the following rights:

• Right to know and access: request the categories or specific pieces of personal information we hold.
• Right to delete: request deletion, subject to legal exceptions.
• Right to correct: request correction of inaccurate information.
• Right to portability: obtain eligible information in a portable format.
• Right to opt out: opt out of sale, sharing, targeted advertising, or qualifying profiling.
• Right to limit: limit certain uses of sensitive personal information where the law provides this right.

We will not discriminate against you for exercising an applicable privacy right. We do not currently use personal information for profiling that produces legal or similarly significant decisions.

Email beboojax@gmail.comwith the subject "US Privacy Request" and describe the right you want to exercise. Include only the information reasonably needed to locate your account or feedback receipt. We may verify your identity before fulfilling access, correction, deletion, or portability requests.

Where state law permits, an authorized agent may submit a request on your behalf. We may request proof of authority and direct confirmation from you. If we deny a request, you may appeal our decision by replying with the subject "Privacy Appeal". We will respond within the period required by applicable law.

We retain each category only for the period stated in the notice-at-collection table or as required to complete a request, protect the service, resolve disputes, or meet legal obligations. When a purpose ends, information is deleted or de-identified. Local records remain on your device until you delete them or uninstall the app.

The app requests only notification permission, used for dividend schedules, goals, and alerts you ask to receive. Refusing notifications does not disable core functions. Enabled AdMob and Firebase SDKs may automatically create or receive advertising identifiers, installation identifiers, device/app information, app events, ad interactions, and crash data.

OCR images are processed on the device and are not uploaded to our servers.

Portfolio records are stored in an encrypted local SQLite database, with the key held in operating-system secure storage. Network transfers use TLS. Cloud-synchronized data uses access controls and row-level security. Device biometric checks remain on the device; we do not receive or store biometric templates.

Chakchak Dividend is not directed to children under 13, and we do not knowingly collect their personal information. We do not knowingly sell or share the personal information of consumers under 16. Contact us if you believe a child provided personal information so we can delete or restrict it.

This notice is effective on July 29, 2026. We will update it when data flows, SDK settings, state-law obligations, hosting regions, or store disclosures materially change and will provide additional notice where required.