Sephrus Service
The Sephrus service values users' personal information and complies with applicable laws, including Korea's Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
This Privacy Policy explains the personal information collected by the company, the purposes of collection and use, retention periods, and users' rights.
1. Data Controller
- Company: Sonolux Healthtech Co., Ltd.
- Address: Room 605, 55 Hanyangdaehak-ro, Sangnok-gu, Ansan-si, Gyeonggi-do, Korea
- Contact: contact@sonolux.co.kr
2. Personal Information We Collect
2.1 Information collected during sign-up
- Required: Email address, password
- Optional: Name, phone number, organization name
2.2 Information automatically collected during service use
- Device information: Device UUID, app version information
- Notification service: FCM (Firebase Cloud Messaging) token
- Access information: IP address, access time, service usage records
- IoT device connection information: Device identifier, connection status, measurement data
3. Purpose of Collection and Use
The company uses collected personal information for the following purposes.
3.1 Member management
- Member registration, identification, and authentication
- Maintaining and managing membership status
- Checking duplicate registrations and preventing unauthorized use
3.2 Service provision
- Remote control and monitoring of IoT devices (virus detectors)
- Providing real-time air quality and virus detection data
- Health risk prediction and personalized health management services
- Notifications of measurement results and status through push alerts
- Customer support and inquiry handling
3.3 Service improvement
- Service usage statistics and analysis
- Development of new services and improvement of existing services
- Service failure response and technical issue resolution
4. Retention Period
4.1 Member information
- Retention period: Until membership withdrawal
- Exception: Retained for a certain period where required by applicable laws
4.2 Service usage records
- Measurement data: Retained for 3 years for health management history purposes
- Access logs: Retained for 3 months for security and service improvement purposes
- FCM token and UUID: Deleted immediately upon membership withdrawal or app deletion
4.3 Retention under applicable laws
- Records on contracts or withdrawal of subscription: 5 years (E-Commerce Act)
- Records on payment and supply of goods: 5 years (E-Commerce Act)
- Records on consumer complaints or dispute resolution: 3 years (E-Commerce Act)
- Access records: 3 months (Protection of Communications Secrets Act)
5. Provision of Personal Information to Third Parties
In principle, the company does not provide users' personal information to third parties. Exceptions may apply in the following cases.
- When the user has given prior consent
- When requested by an investigative agency pursuant to applicable laws
- When urgently necessary due to an imminent risk to the user's life or safety
6. User Rights and How to Exercise Them
Users may exercise the following rights regarding their personal information at any time.
6.1 Rights
- Request access to personal information
- Request correction or deletion if errors exist
- Request suspension of processing
- Claim damages
6.2 How to exercise rights
- Contact: contact@sonolux.co.kr
- Processing period: Within 10 days from the request date
7. Refusal of Collection and Account Deletion
The company automatically collects only the minimum information necessary to provide the service. Users may refuse certain automatic collection, such as push notifications, in the app settings, but service use may be limited in that case.
Users may delete their account upon request. Account deletion is available in the app through [Settings > Account > Delete] and is processed immediately.
- Deleted items: Email, UUID, FCM token, and other account-linked information
- Some data may be retained for a certain period pursuant to applicable laws.
8. Privacy Officer
Privacy Officer
- Name: Seung Hwa Song
- Contact: contact@sonolux.co.kr
- Responsible department: Development Team
9. Changes to This Privacy Policy
This Privacy Policy may be changed in accordance with applicable laws or company policy. Changes will be announced through in-app notices 7 days before they take effect.
Effective date June 1, 2025