Privacy Policy

SoundStock (the "Service") is operated by an individual developer (the "Developer"), who complies with applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea, and has established and publishes this Privacy Policy to handle users' personal information safely.

Effective date: September 10, 2026

1. Personal information we collect and how we collect it

(1) Information collected at sign-up and login

(2) Information generated and collected automatically while you use the Service

• App usage records, access logs, and error (crash) logs
• Device information (OS type and version, device model, etc.)
• Advertising identifier (IDFA / advertising ID). On iOS it is collected only if you agree to the App Tracking Transparency (ATT) prompt. If you decline, it is not collected and only non-personalized ads are shown.
• A device push token for sending push notifications (if you agree to receive notifications)

(3) Information you create while using the Service

• Your in-app nickname (company name) and profile visibility settings
• Your in-game currency (cash) balance, holdings of stocks, gold, and real estate, and trade (buy/sell) history
• Comments, chat messages, friend lists, and invitation history
• Report and block history (when a report is filed: the reporter, the reported target, and the reason)

The Service does not sell in-game currency to users through real payments (card payments, in-app purchases, etc.), so it does not collect payment or card information.

(4) How we collect

• Directly entered by you through sign-up, login, profile settings, and writing posts (comments, chat)
• Generated and collected automatically while you use the Service

2. Purposes of collection and use

1. Identifying members and providing member-based services (login, identity verification)
2. Providing the Service (operating core features such as stock trading simulation, the shop, chat, friends, and rankings)
3. Preventing misuse and operating the Service reliably (detecting abnormal use, handling reports and blocks, restricting use)
4. Responding to inquiries and delivering announcements
5. Providing personalized or non-personalized ads (personalized only if you agree to the collection of the advertising identifier)
6. Statistical analysis to improve the Service (such as analyzing error logs)

3. Retention and use period

As a rule, when you request to delete your account, we destroy your personal information without delay. However, in the following cases we retain it for the period stated:

• Where retention is required by law, for the period set by that law
• For the minimum scope necessary to prevent misuse and respond to disputes, for up to 30 days after account deletion, after which it is destroyed

4. Destruction procedure and method

• Procedure: After the purpose has been fulfilled (for example, account deletion), information is destroyed after being kept for a set period under our internal policy and applicable law, either after being moved to a separate database or immediately.
• Method: Information stored as electronic files is deleted using technical methods that make the records unrecoverable.

5. Provision to third parties

The Developer does not provide your personal information to third parties beyond the scope stated in this policy. The following are exceptions:

• When you have given prior consent
• When required by law, or when requested by an investigative agency following the procedures and methods set by law for investigative purposes

6. Entrusted processing of personal information

To operate the Service and process personal information smoothly, we entrust the processing as follows:

Processors' servers may be located overseas, in which case this constitutes a cross-border transfer under the Personal Information Protection Act. When entering into these agreements, the Developer specifies what is necessary for personal information to be managed safely.

Note: The Service uses external APIs such as Spotify and YouTube (Google) to look up song search and playback information. This is only for retrieving content, and your personal information is not provided to those providers.

7. Your rights and how to exercise them

You may exercise the following rights at any time:

• Requests to view or correct your information: You can view and edit your nickname, password, language, and profile visibility directly in the app under [Portfolio > Settings].
• Other inquiries: Contact the person in charge listed in "11. Privacy officer" below, and we will act without delay.

How to request deletion of your account and data

(1) If the app is installed Open the app and go to [Portfolio > Settings > Delete Account]. After identity verification, your account is deleted immediately.

(2) If you have uninstalled the app or cannot log in Send an email to the address below with the email address you used to sign up and the words "Account deletion request." After verifying your identity, we process it within 7 business days.

• Email: soundstockapp@gmail.com

Data that is deleted: All personal information and service usage data linked to your account is deleted, including your email, login information, nickname (company name), in-game currency, holdings and trade history, comments and chat messages, friend list, badges, and push token.

Data that is retained (exceptions): Information that must be kept under law, or the minimum information needed to prevent misuse and respond to disputes (such as report-handling records), is stored separately for the period stated in "3. Retention and use period" and then destroyed.

8. Measures to ensure security

• Passwords are stored and managed encrypted, and important data is protected with encryption in transit (TLS/HTTPS).
• Access to the database is limited to the minimum necessary, and Row Level Security is applied so that you can view and edit only your own information.
• Report and block features are provided to minimize exposure to inappropriate content from other users.

9. Advertising identifier and App Tracking Transparency (ATT)

The Service uses Google AdMob to serve ads. iOS users see the App Tracking Transparency (ATT) permission prompt the first time they open the app.

• If you allow tracking: personalized ads that use the advertising identifier (IDFA) may be shown.
• If you decline tracking: the advertising identifier is not collected, and only non-personalized ads are shown.

You can change this at any time in your device settings (Settings > Privacy & Security > Tracking).

10. Children under 14

The Service is not primarily intended for children under 14, and does not knowingly collect personal information from children under 14 at sign-up. If we learn that personal information of a child under 14 has been collected, we will take necessary measures, such as deleting it without delay, in accordance with applicable law.

11. Privacy officer

You may direct inquiries, complaints, and requests for remedies regarding personal information while using the Service to the contact below.

• Contact: SoundStock Operations Team
• Email: soundstockapp@gmail.com

12. Changes to this Privacy Policy

If content is added, removed, or revised due to changes in law, policy, or the Service, we will announce it in an in-app notice or on this page at least 7 days before it takes effect (30 days before for significant changes to users' rights).

• Announcement date: September 10, 2026
• Effective date: September 10, 2026
• Last updated: September 25, 2026 (wording updated to reflect changes to the features offered)