Odyssey365
Try it on the web Download

Odyssey365 Privacy Policy

Odyssey365 (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with relevant laws such as the 「Personal Information Protection Act」 and the 「Act on the Protection, Use, Etc. of Location Information」 to protect the personal information and rights of users and to smoothly handle user complaints related to personal information.

Article 1 (Purpose of Processing Personal Information) The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」, will be implemented.

  1. Website Membership and Management: To confirm the intention to join, identify and authenticate for member-based services, maintain and manage membership status, prevent fraudulent use of services, verify the consent of legal representatives when processing personal information of children under 14, provide various notices and notifications, and handle complaints.
  2. Provision of Goods or Services: To provide paid services, content, customized services, identity verification, age verification, and payment/settlement.
  3. New Service Development and Marketing/Advertising: To develop new services and provide customized services, provide event and advertising information and participation opportunities, provide services and display advertisements based on demographic characteristics, verify service validity, and analyze access frequency or statistics on members' service use.
  4. Provision of Location-Based Services: To process personal location information for the purpose of providing services that utilize location information, such as recording and viewing locations for 'To-Do' items.

Article 2 (Items and Retention Period of Personal Information Processed) The Company processes and retains personal information within the retention period stipulated by law or the period consented to by the data subject at the time of collection.

Category Items Collected Purpose of Processing Retention Period
Membership Registration Required: Email, Password
Optional: Name, Nickname, Gender, Date of Birth, Mobile Phone Number, Profile Picture		 Member identification and management Until membership withdrawal
Paid Service Use Credit card information, bank account information, telecom provider information, payment records, etc. Fee payment and settlement 5 years after membership withdrawal or service termination (Act on Consumer Protection in Electronic Commerce, Etc.)
Service Use Service usage history, access logs, cookies, access IP information, device information Service quality improvement, prevention of fraudulent use 3 months (Protection of Communications Secrets Act)
Location-Based Service Personal location information (coordinates collected via device GPS, user-selected location) Location recording and viewing Immediately upon deletion of the relevant item or membership withdrawal
Customer Support Email, mobile phone number, inquiry details Responding to customer inquiries and resolving disputes 3 years (Act on Consumer Protection in Electronic Commerce, Etc.)

Article 3 (Processing and Protection of Location Information) The Company processes location information as follows to provide location-based services.

  1. Purpose and Retention Period of Location Information: As stated in the table in Article 2.
  2. Retention of Location Information Use/Provision Confirmation Data: In accordance with Article 16, Paragraph 2 of the 「Act on the Protection, Use, Etc. of Location Information」, the Company automatically records and retains confirmation data of the use and provision of the user's location information in the location information system for at least 6 months.
  3. Provision of Personal Location Information to Third Parties: The Company does not provide personal location information to third parties without the prior consent of the user. If third-party provision is necessary, the recipient, purpose, and items of personal location information to be provided will be clearly notified, and separate consent will be obtained.
  4. Rights of Guardians of Children Aged 8 or Under: If the guardian of a specific person, such as a child aged 8 or under, consents to the use or provision of personal location information for the protection of the life or body of that person, it is considered that the person themselves has consented. In this case, the guardian may exercise all the rights of the personal location information subject.

Article 4 (Provision of Personal Information to Third Parties) The Company processes the data subject's personal information only within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only in cases that fall under Article 17 and Article 18 of the 「Personal Information Protection Act」, such as with the data subject's consent or special provisions in the law.

Article 5 (Entrustment of Personal Information Processing) ① The Company may entrust the processing of personal information as follows for smooth personal information processing.

Trustee Entrusted Tasks
Google Cloud Platform (GCP) Data storage and server management
Google LLC (Gemini API / Firebase AI Logic) Processing of conversation content and queried data to generate AI Companion responses

② When concluding an entrustment contract, the Company, in accordance with Article 26 of the 「Personal Information Protection Act」, specifies in the contract documents matters concerning the prohibition of processing personal information for purposes other than the entrusted task, technical and administrative protection measures, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages, and supervises whether the trustee processes personal information safely.

③ If the content of the entrusted task or the trustee changes, we will disclose it through this Privacy Policy without delay.

Article 6 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them) ① The data subject may exercise the following personal information protection rights with respect to the Company at any time:

  1. Request to access personal information.
  2. Request for correction in case of errors.
  3. Request for deletion.
  4. Request to suspend processing.
  5. Request to withdraw consent. ② The rights under Paragraph 1 may be exercised by submitting a written request, or via phone, email, or fax to the Company, and the Company will take action without delay. ③ If a data subject requests the correction or deletion of personal information due to errors, the Company will not use or provide the personal information until the correction or deletion is complete. ④ The rights under Paragraph 1 may be exercised through a legal representative or an agent of the data subject. In this case, a power of attorney in accordance with Annex No. 11 of the "Notification on Personal Information Processing Methods" must be submitted. ⑤ The data subject shall not infringe on the personal information and privacy of themselves or others processed by the Company in violation of relevant laws such as the 「Personal Information Protection Act」.

Article 7 (Destruction of Personal Information) ① The Company shall destroy the personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or the achievement of the processing purpose. ② If personal information must be retained in accordance with other laws despite the expiration of the retention period consented to by the data subject or the achievement of the processing purpose, the personal information will be transferred to a separate database (DB) or stored in a different location. ③ The procedure and method of destroying personal information are as follows:

  1. Destruction Procedure: The Company selects the personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the Company's Chief Privacy Officer.
  2. Destruction Method: The Company destroys personal information recorded and stored in electronic file format in a way that the record cannot be reproduced, and personal information recorded and stored on paper documents is shredded or incinerated.

Article 8 (Measures to Ensure the Safety of Personal Information) The Company takes the following measures to ensure the safety of personal information:

  1. Administrative Measures: Establishment and implementation of an internal management plan, regular employee training, etc.
  2. Technical Measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs.
  3. Physical Measures: Access control to data centers, data storage rooms, etc.

Article 9 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices) ① The Company uses 'cookies' that store and frequently retrieve usage information to provide individualized customized services to users. ② A cookie is a small piece of information that the server (http) used to operate a website sends to the user's computer browser and is sometimes stored on the hard disk of the user's PC.

  1. Purpose of using cookies: To identify the user's visit and usage patterns for each service and website, popular search terms, security access status, etc., to provide optimized information to the user.
  2. Installation, operation, and refusal of cookies: You can refuse to store cookies through the option settings in the Tools > Internet Options > Privacy menu at the top of the web browser. (e.g., for Chrome: Settings > Privacy and security > Cookies and other site data).
  3. Refusing to store cookies may cause difficulties in using customized services.

Article 10 (App Access Permissions) The Company requires the following access permissions to provide the service. All access permissions are optional, and you can use the basic functions of the service without agreeing to them.

Category Access Permission Reason for Access
Optional Location To record the current location when creating an item.
Optional Calendar To sync schedules with the device's calendar when creating an item.
Optional Storage To attach photos, files, etc., when creating an item.
Optional Camera To take and attach photos when creating an item.
Optional Contact To find friend

Article 11 (Chief Privacy Officer) ① The Company has designated a Chief Privacy Officer to be responsible for overall personal information processing and to handle complaints and remedy damages from data subjects related to personal information processing.

  • Name: Taehyun Kim
  • Position: CEO
  • Contact: support@odyssey365.app ② Data subjects can inquire about all personal information protection-related inquiries, complaint handling, and damage relief that occurred while using the Company's service (or business) to the Chief Privacy Officer and the responsible department. The Company will respond to and process the inquiries of data subjects without delay.

Article 12 (Remedies for Infringement of Rights) Data subjects can inquire about damage relief, consultation, etc., for personal information infringement to the following organizations.

  • Personal Information Infringement Report Center (operated by Korea Internet & Security Agency): (No area code) 118 (privacy.kisa.or.kr)
  • Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
  • Supreme Prosecutors' Office: (No area code) 1301 (www.spo.go.kr)
  • National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)

Article 13 (Changes to the Privacy Policy) ① This Privacy Policy will be effective from July 26, 2026. ② Revision history: Established July 15, 2025 / Revised July 26, 2026 (added provisions on the processing of health data) / Revised August 7, 2026 (removed health-data provisions following the discontinuation of the health integration). ③ If there are any additions, deletions, or modifications to the current Privacy Policy, they will be announced through the 'Notice' section of the service at least 7 days before the amendment. However, in the case of significant changes to user rights, such as changes in the items of personal information collected or the purpose of use, they will be announced at least 30 days in advance, and user consent may be obtained again if necessary