Privacy Policy
ABC Circle Co., Ltd. (the “Company”) values the privacy of users of its website and the TerraLog app and complies with applicable privacy laws. This policy explains what information we process, why we process it, and how we protect it.
Effective date: September 2, 2026
1. Information we process and why
- Member accounts
For password signup, we process your login ID, name, mobile-phone number, member type (individual or agricultural-institution worker), and the privacy-policy consent version and time to create the account, identify you, authenticate you, and provide the service. Passwords are stored as non-reversible hashes.
For social signup, we process the provider-scoped user identifier, provider-supplied name, email, and profile picture when available, the name, mobile-phone number, and member type you enter, and the privacy-policy consent version and time for the same purposes.
- AI diagnosis
We process the diagnostic-kit photo, inspection date and location, crop category and name, sample part, kit name, and notes to provide AI analysis and conduct diagnostic-quality research.
We store the result, per-attempt readings and any majority-vote result, location-assignment information, and images generated during analysis together.
- One-to-one inquiries
We process your name, email address or phone number, inquiry content, and attachments to review and respond to your inquiry.
The inquiry password is stored as a non-reversible hash rather than in plain text.
- Information stored on your device
TerraLog stores the address, crop category, crop, sample part, and kit selection on your device to make a future diagnosis easier to enter.
When you request a diagnosis, the entered inspection information is sent to the Company server and stored with the diagnosis record. On-device information is removed when you uninstall the app or clear its data through your operating system.
- Information generated through use
Access logs, IP address, browser or device information, and essential cookies may be generated for security, troubleshooting, and reliable service delivery.
2. App permissions
- Camera and photos
Used to photograph a diagnostic kit or select a diagnostic image stored on your device.
- Location
Used to convert your current location into an address for the sample-location field. You can enter an address manually without granting location permission.
Current coordinates are not stored in the diagnosis record. The converted or manually entered address is stored in the diagnosis record on the Company server.
3. Retention
- Member account information
We retain member account information and privacy-policy consent records until account withdrawal, unless applicable law requires separate retention for a specified period.
Incomplete social-signup information and OAuth authorization state remain valid for 15 minutes and 10 minutes respectively and are deleted during cleanup on a subsequent authentication request after expiry.
- Diagnosis information
The Company does not apply a scheduled automatic-deletion period to diagnosis information and analysis materials and retains them while they are needed for research and diagnostic-quality improvement. You may request deletion from the Company.
The AI provider's abuse-monitoring logs may include submitted content and may be retained for up to 30 days under default controls, unless longer retention is legally required.
- Inquiry information
We retain inquiry information until the purpose of responding and any necessary follow-up is complete, then delete it without undue delay.
Where applicable law requires retention, we isolate and retain the information for the legally required period.
- On-device information
Retained until you uninstall the app or clear its data through your operating system.
4. Service providers
We use the following providers only as necessary to deliver the service.
- Gabia
Website, API server, and database operations
- Amazon Web Services (AWS)
Storage of diagnosis photos, generated analysis images, and inquiry attachments in the Republic of Korea region
- OpenAI OpCo, LLC
AI analysis of diagnostic-kit photos
5. International data transfers
When you use TerraLog's AI diagnosis, the diagnostic-kit photo may be sent over an encrypted connection to OpenAI OpCo, LLC and overseas processing facilities used by its subprocessors. The transfer occurs when you request a diagnosis and is necessary to provide the AI result.
Data sent to the OpenAI API is not used to train models by default, and the Company disables response storage. Abuse-monitoring logs may nevertheless be retained for up to 30 days. You may refuse the transfer by not submitting a diagnosis, but the AI diagnosis result will then be unavailable.
6. Disclosures to third parties
We do not sell personal data or disclose it to third parties except with your consent or where required by law. Service-provider processing and international transfers are described above.
7. Deletion
We delete personal data without undue delay when its retention period expires or its purpose has been fulfilled. Electronic files are securely deleted, paper records are shredded or incinerated, and legally retained records are kept separately.
8. Your rights
You may request access, correction, deletion, restriction of processing, or withdrawal of consent. You can request account deletion directly from the Account screen in the app or at /account/delete on the website; member and authentication information is deleted when withdrawal completes. Anonymous diagnosis information that is not linked to the account follows the retention policy above and may be deleted through a separate request. You may also contact the privacy officer below by email or phone. We will verify your identity and respond as required by applicable law. A legal representative may exercise these rights for a child under 14.
9. Security
We use measures such as encryption in transit, one-way hashing of member and inquiry passwords, access controls, system safeguards, and periodic administrative reviews to protect personal data.
10. Privacy officer
- Officer
Su-won Kwak
teddy@abccircle.co.kr
- Phone
+82-10-3298-6590
- Address
ABC Circle Co., Ltd., 43 Seongpyeong-gil, Iwol-myeon, Jincheon-gun, Chungcheongbuk-do, Republic of Korea
11. Changes to this policy
We will announce changes to this policy on the website before they take effect. Material changes affecting user rights will be announced in the manner and within the period required by applicable law.