BigEar Privacy Policy

Effective date: 5 October 2026

Volt Software Inc. (the “Company”) establishes and discloses this Privacy Policy in order to protect users’ personal information and to handle related concerns promptly and smoothly, in accordance with the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and other applicable laws of the Republic of Korea.

Article 1 (What we collect and how)

1. Collected at sign-up

2. Collected while using the service

3. How we collect it

• Entered by you in the BigEar application, or provided with your consent
• Generated and collected automatically while you use the service

Article 2 (Retention and use period)

The Company retains and uses personal information until you delete your account, and destroys it without delay once the purpose is achieved. The following are kept for the periods stated.

Article 3 (Destruction of personal information)

1. The Company destroys personal information without delay once the retention period has passed or the purpose of processing has been achieved and the information is no longer needed.
2. Where other laws require continued retention, the information is moved to a separate database or stored in a different location, and is not used for any purpose other than that retention.
3. Procedure — the Company selects the personal information for which grounds for destruction have arisen and destroys it with the approval of the Chief Privacy Officer.
4. Method — personal information stored as electronic files is deleted by means that make it unrecoverable.

Article 4 (Provision to third parties)

The Company does not provide your personal information to third parties beyond the purposes stated in Article 1, except in the following cases.

• Where you have given prior consent
• Where required by law, or where an investigative agency so requests for investigative purposes following the procedures and methods prescribed by law

Article 5 (Outsourcing of processing)

The Company outsources the processing of personal information as set out below. In the outsourcing contract, matters concerning the safe management of personal information are set out in writing, and the Company supervises compliance.

Article 6 (Transfer of personal information overseas)

You may refuse the overseas transfer; if you do, sign-up and use of the service may be restricted.

Article 7 (Behavioural data: collection, use and how to refuse)

The Company collects and uses behavioural data for personalised advertising as follows.

• Items collected — advertising identifier (ADID / IDFA), in-app activity history, advertising impression and click history
• How — collected automatically when you launch or use the app
• Purpose — serving advertising based on your interests and measuring advertising performance
• Retention — up to 1 year from collection

How to refuse

• Android — Settings > Privacy > Ads > ‘Delete advertising ID’ or ‘Reset advertising ID’
• iOS — Settings > Privacy & Security > Tracking > turn off ‘Allow Apps to Request to Track’

Menu paths may differ by operating system version. Refusing does not affect your use of the service; advertising may simply be shown without regard to your interests.

Article 8 (Your rights and how to exercise them)

1. You may at any time request access, correction, deletion or suspension of processing of your personal information.
2. What you can do directly in the app
   • View and edit profile information — My Info > Edit
   • Withdraw marketing consent — My Info > App settings
   • Withdraw location consent and delete the stored address — My Info > App settings
   • Notification settings — My Info > App settings
   • Delete your account — My Info > Delete account
3. Other requests may be made by email to the Chief Privacy Officer in Article 11. The Company will act within 10 days of receiving the request and inform you of the outcome.
4. You may exercise these rights through a representative such as a legal guardian or an authorised agent. In that case, documents proving the representation must be submitted.

Article 9 (Children under 14)

The Company does not accept members under the age of 14. The service is available only to those aged 14 and over.

If the Company becomes aware that it has collected personal information from a child under 14, it destroys the information without delay and terminates the membership.

Article 10 (Safeguards)

• Administrative — establishing and implementing an internal management plan, minimising and training staff who handle personal information
• Technical — access control for the personal information processing system, one-way encryption of passwords, encryption in transit (HTTPS/TLS), access control rules
• Physical — access control for systems holding personal information

Article 11 (Chief Privacy Officer)

Chief Privacy Officer

Name: Woojin Shin

Email: voltsoftdev@gmail.com

You may contact the Chief Privacy Officer about any privacy enquiry, complaint or remedy arising from your use of the service. The Company will respond and act without delay.

Article 12 (Remedies for infringement)

You may apply to the following bodies for dispute resolution or consultation regarding personal information infringement. These bodies are separate from the Company; please contact them if you are not satisfied with the Company’s own handling or need further assistance.

Article 13 (Changes to this policy)

1. When adding to, deleting from or amending this Privacy Policy, the Company will give notice in the app at least 7 days before the effective date.
2. Where there is a material change to your rights — such as the items collected, the purposes of use, or provision to third parties — notice will be given at least 30 days before the effective date.