Privacy Policy
Mobile edition · 2026.10.31
01 Controller and contact
The Irum (더 이룸) operates Spotysum and determines how personal information is processed for the Service. Representative and privacy officer: Geon Young Choi (최건영). Business registration number: 448-79-00533. Mail-order registration number: 2026-서울서초-3291. Address: 3F, S77, 28 Hyoryeong-ro 31-gil, Seocho-gu, Seoul 06686, Republic of Korea.
For access, correction, deletion, restriction, consent withdrawal or privacy complaints, use Profile → Support & appeals, email theirum.official@gmail.com, call +82 10-4219-2567 or write to the address. You may contact us without account access.
02 Information and purposes
We process information necessary to enter into and perform the Service contract, including under Article 15(1)(4) of the Korean Personal Information Protection Act where applicable. Consent or another lawful basis is used for processing that requires it. Optional information is not necessary for basic access.
Account authentication: provider account identifier, email, display name, provider, email verification, registration and last-sign-in times, authentication status and security tokens. Purposes: identity within the Service, account management, authentication and notices. Available providers may include Google, Apple, Kakao, Naver and email/password. Provider passwords and authentication codes are handled by the provider or Firebase Authentication and are not stored as readable passwords by us.
Eligibility and profiles: date of birth and adult confirmation, registered country, nickname, age, gender, activity regions or places, travel range, current and preferred sports, experience, level, frequency, style, activity preferences, availability, smoking, preferred partner gender/age/exercise/smoking conditions, relationship and meeting preferences, introduction text and 1–20 selected photographs. Purposes: adult eligibility, review, mutual compatibility, selection and permitted profile disclosure. Date of birth is not shown to an introduction. MBTI, extra exercise notes and photographs beyond the required first photograph are optional.
Introductions, conversations and points: participation or pause state, introductions, responses, matches, chat text, timestamps, sequence and read state, point grants, reservations, deductions, consent versions and times. Purposes: introductions, messaging, balances, recovery and consent evidence.
Purchases: store platform, product and transaction/order identifiers, verification or purchase token, purchase/refund/revocation status and entitlement ledger. Purposes: verify purchases, prevent duplicate credit, deliver points, reconcile refunds and resolve disputes. Store payment details, bank/card numbers and the store's financial account information are handled by Apple or Google rather than collected by the app.
Support, safety and review: member identifier, contact email where provided, request type and content, correspondence, reports and blocks, review decisions and moderation history. Purposes: support, appeals, safety and abuse prevention. Email addresses submitted to block people you know are normalized and converted to protected matching identifiers on the server; we do not upload your device address book.
Device and technical data: app/OS version, device and installation identifiers, IP/network and security signals, screen/event times, errors, crashes, ANR and performance measurements. Push registration stores a token, platform, installation identifier, selected app language, authentication context and expiry. Purposes: security, session maintenance, requested notifications, reliability, diagnosis and product usage analysis. Notification settings can disable push messages.
We use only photographs you choose and do not collect device GPS or an address book for this registration flow. We do not request national identity numbers or identity documents as profile fields and do not perform biometric face identification. Do not put unnecessary sensitive information or another person's private information in profiles, chats or support requests.
03 Retention and deletion
Account, profile, photographs and Service history are processed while necessary to provide the Service. Upon deletion or the end of a purpose, unnecessary information is deleted without undue delay, subject to applicable lawful retention. Superseded drafts and unnecessary temporary uploads are also cleaned up. Visit history maintained by the Service is limited to the latest 20 entries per member, where that feature is used.
Where Korean electronic-commerce retention duties apply: advertising records, six months; contract and withdrawal records, five years; payment and supply records, five years; consumer complaints and dispute records, three years. These periods apply to the legally covered records, not a blanket retention of all profiles, photographs or chats. Required evidence is separated from general profile data and access is restricted to the relevant purpose. An active legal dispute may require preservation of necessary records on a documented basis.
Electronic records are deleted using methods intended to prevent recovery; paper is shredded or otherwise destroyed. Provider backup remnants follow provider deletion cycles. Firebase Authentication deletion can take up to 180 days to propagate through backup systems, as described by the provider. Provider security/diagnostic retention follows the applicable service settings and terms; it is not a promise that every copy is removed immediately.
Push device registrations expire after 30 days unless renewed, at most three active devices are retained per account, and notification inbox events are configured with a seven-day expiry. Expiry fields restrict use; physical cleanup can follow asynchronously. Legal or security exceptions are limited to their purpose. A copy already received by another person cannot be remotely erased by us, and the recipient must not keep or share it outside the permitted purpose.
04 Disclosure to an introduction
Profiles are not published as a public searchable member directory. Approval alone does not send a profile to another member. After participation and disclosure consent, an introduction may disclose information before mutual acceptance, so that both members can decide whether to meet.
Recipient: the specific member connected through that introduction, identified in the introduction view. Purpose: understand exercise interests and lifestyle, decide on interest, and converse after mutual acceptance or a direct-chat request. Information: nickname, age, gender, activity regions/places and travel range, sports, lifestyle and meeting information, availability, optional MBTI and exercise notes, introduction text, the permitted number of photographs and Service identifiers needed to respond. If email introductions are enabled, their content can include nickname, age, sport, region, availability, an excerpt of the introduction and an authorized introduction link.
Not automatically disclosed: login email, date of birth, desired partner conditions, support/report contents, internal review records or private contact details. A contact detail you type in a conversation is visible to the recipient.
Use and retention are limited to the introduction/conversation purpose. Photo access ends according to eligibility and resource state. Recipients must delete separately saved information when its authorized purpose ends or a valid deletion request applies. You may refuse disclosure, in which case matching is unavailable; pause new introductions in the Service, and contact support about withdrawal or deletion of information already disclosed. Other third-party disclosures require consent or an applicable lawful basis.
05 Processors and providers
Google LLC / Firebase and Google Cloud: authentication, database and photo storage, hosting, server processing, notifications, logs and app diagnostics. Necessary account, profile, photograph, conversation, support, purchase-verification, device and technical information is processed for those functions.
Google Analytics for Firebase / GA4: app use events, screens, app/installation and device information, and approximate region derived by the provider from network information for usage analysis. Firebase Crashlytics and Performance Monitoring: crashes, ANR, error codes, code locations, app/OS version, device and performance data for reliability. Collection starts automatically when the app runs; there is no diagnostics on/off switch in the app. Advertising-ID collection and advertising personalization are disabled in the app configuration. We do not intentionally attach photographs, biographies, chat text, email addresses or access tokens to analytics/crash events. These settings do not mean the SDK processes no device/network identifiers.
Apple App Store and Google Play: in-app billing and transaction/refund processing. The relevant store handles its own account, financial and tax information under its terms and privacy policy; we receive the transaction information needed to validate entitlements. Kakao and Naver, where chosen, process their login and consent flow and return the identifiers/scopes requested on that screen. Apple and Google do the same for their sign-in methods.
Google Firebase AI Logic / Gemini API, where the optional feature is offered: the notes and selected sports needed to suggest an introduction, its result and request-related information. App Check or reCAPTCHA, where used, handles security signals and tokens to prevent abuse. A new email or payment provider is identified with its work and data scope before use where required. We manage provider access and settings to the extent necessary for their work.
06 International processing
The primary profile database and photograph storage are in the Seoul region of the Republic of Korea. This does not mean every authentication, network delivery, store, diagnostic, security or optional AI operation stays in Korea.
Firebase Authentication is processed by Google LLC in the United States. Account identifiers, email/display name, authentication state and relevant IP/device signals are transmitted over encrypted networks when you authenticate. Account information is maintained for account use until deletion; backup deletion can take longer as described above.
Google's global hosting, notification, analytics, diagnostic, security and AI infrastructure and Apple, Kakao, Naver or store infrastructure can process necessary information in the countries where those providers and their processors operate, including the United States. We do not claim one fixed processing country for every global provider operation. Transfers occur over networks as the corresponding feature runs. Purposes and data categories are those in sections 02 and 05; retention depends on the purpose, provider terms/settings and legal requirements.
Where applicable law requires transfer notice, consent, contractual safeguards or another transfer mechanism, the relevant process must be applied; this paragraph alone is not a claim that every country's legal requirements have been satisfied. Avoid the optional AI feature by writing directly. To stop necessary account processing, request restriction or deletion; authenticated Service features may then be unavailable. Provider privacy and data-processing information is available from the providers' official privacy pages, and support can help identify the relevant service.
07 Optional AI introduction assistance
Requesting AI writing sends your notes, current sports and sports you would like to share to Google Gemini through the offered feature. Profile photographs, login email and chat history are not intentionally attached to that request. Personal information you write in the notes is nevertheless transmitted, so omit contacts and sensitive data.
AI Logic itself is not a profile archive of the generated text, but the API provider may retain requests/responses for security or abuse monitoring under its applicable terms. Do not assume zero retention or that all processing occurs in Korea. You review and edit generated wording before saving it as a profile. AI use is optional; registration and matching do not require it.
08 Local storage, automatic collection and notifications
On mobile, authentication state, selected language and the push installation identifier can be held in the device's app storage or protected keychain/keystore. The app restores sign-in automatically, subject to a 12-hour authenticated-session limit and earlier suspension, revocation or deletion. Server-stored profile drafts support recovery; temporary selected files and in-memory state can be used during upload. Signing out and deleting an account have different effects.
Analytics, crash and performance SDKs initialize on app execution as described in section 05. Error/diagnostic payloads are designed to exclude profile photographs, biography, chat content, email and tokens, although an SDK processes its documented device and technical data. Collection or upload can fail or be delayed offline. Disable push in Profile → Notification settings or the operating system settings; this stops push permission/delivery, not account processing or diagnostics. App language is used to select Korean or English push copy on each registered device.
The website may use browser storage for authentication and session drafts, and security tokens for request protection. Browser cookie/site-data controls can affect sign-in or draft recovery. This mobile notice does not claim that website storage and native app SDK behavior are identical.
09 Your rights
You may request access, correction, deletion, restriction, withdrawal of consent and other rights available under applicable law. Edit profile information in the app and use Delete account or the public account-deletion page for deletion. Contact support for other requests or if you cannot sign in or are suspended; an authorized representative may act for you.
We verify identity/authority using no more information than necessary and respond under applicable deadlines and procedures. If law, another person's rights or another valid ground limits a request, we explain the reason and applicable review/appeal route. Signing out or pausing matching is not deletion or recall of already disclosed information.
10 Recommendations and human review
The Service uses compatibility calculations based on sports, region, availability and mutual preferences to select introductions. Operators review profiles, reports and enforcement. A recommendation is not a promise of a match or a public certification of another person.
You can update relevant inputs, pause matching, and ask support for an explanation or review. Rights concerning automated decisions under applicable law are handled through that request process where their conditions apply.
11 Security and complaints
We apply account/role-based access controls, operator authorization checks, encrypted network communication, database/storage access rules and photo entitlement checks. Operator access is limited to the work required. No technical system can promise absolute security; contact support about a suspected incident.
Raise privacy concerns with the privacy officer or support. You may also use the relevant supervisory authority or dispute-resolution process available under applicable law, including the Korean Personal Information Protection Commission's privacy portal at https://www.privacy.go.kr. This does not restrict other available statutory remedies.
12 Versions and changes
Mobile policy edition: 31 October 2026. It is presented in Korean and English in the mobile registration flow and on the app policy page. Changes identify the applicable date and scope; processing that requires separate consent is not authorized merely by posting a notice. Previous consent versions remain in the consent record. This mobile edition does not silently replace a separate website privacy notice or claim completed legal review for every country.
13 Mobile processing supplement
The mobile-specific purchase, push, local-storage, automatic diagnostics and international processing described in sections 02, 03, 05, 06 and 08 supplement the original website notice. The two language editions cover the same mobile data categories and purposes; no optional AI use, advertising personalization, or blanket retention of all profiles is authorized by this supplement.
14 Photo uploads and conversation modes
Before photo selection or upload, members accept the Terms and privacy processing for account storage and review; document versions and server acceptance times are recorded. Profile disclosure consent is confirmed separately at submission. Introductions may be basic free introductions or paid additional introductions. In addition to mutual acceptance, an introduced member may spend 5 points to open a direct conversation before the recipient accepts interest. That introduced member receives the profile identifiers, nickname, sent messages and delivery/read states required for the conversation; the recipient may be notified and may end, report or block it without replying. Phone numbers and emails are not automatically disclosed. The disclosure notice presented at submission includes this mode; earlier consent is not retroactively treated as acceptance of the new mode.