# KMath Student Privacy Policy Effective Date: 2026-06-01 ## 1. General Provisions ClassCube ("Company") values users' personal information and processes it lawfully and securely in accordance with applicable laws and regulations. ## 2. Categories of Personal Information Collected The Company may collect or process the following personal information in order to provide the Service. ### A. Information provided directly by the user or through social login - Name or nickname - Email address - Identifier provided by the social login provider ### B. Information automatically generated or collected during service use - Access logs - IP address - Device and browser information - Cookie and session information - Service usage history - Error logs - Language in use ### C. Information generated or processed in the course of providing learning services - Learning records - Question-solving history - Records of correct answers, incorrect answers, and submissions - Progress information - Records of using incorrect-answer review and supplementary learning - Records of using in-service guidance features such as notices and FAQs ### D. Information processed when using paid services - Payment status information - Transaction identifiers - Subscription status information As a general rule, the Company does not directly store full payment method information (for example, a full card number), and payments may be processed through relevant payment service providers. ## 3. Purposes of Processing Personal Information The Company processes personal information for the following purposes: 1. Membership registration and user identification 2. Social login-based account linking and management 3. Providing learning services, maintaining learning flow, providing questions, grading, and providing hints and concept explanations 4. Managing learning records, reviewing incorrect answers, providing supplementary learning, and offering a personalized learning experience 5. Providing paid subscription services, checking payment status, and customer support 6. Preventing misuse and ensuring security and stability 7. Improving the Service and responding to incidents 8. Fulfilling legal obligations and responding to disputes ## 4. Retention and Use Period of Personal Information When the purpose of processing has been achieved or when the user requests account deletion, the account is immediately changed to withdrawal-pending status and retained for 3 days to prevent accidental processing and respond to recovery requests, after which it is destroyed. Where retention is required by applicable law, the following periods apply: | Category | Legal Basis | Retention Period | |----------|------------|-----------------| | E-commerce contracts and payment records | E-Commerce Act | 5 years | | Consumer complaints and dispute records | E-Commerce Act | 3 years | | Access logs and security records | Communications Secrets Act | 3 months | | Records of abuse restrictions | Internal Policy | 1 year | ## 5. Provision of Personal Information to Third Parties As a general rule, the Company does not provide users' personal information to external parties. However, exceptions apply in the following cases: 1. Where the user has given prior consent 2. Where disclosure is required by law 3. Where there is a lawful request from investigative or other competent authorities ## 6. Procedures and Methods for Destruction of Personal Information 1. The Company will destroy personal information without delay when it is no longer needed, such as when the retention period has expired or the purpose of processing has been achieved. 2. Information in electronic file form will be deleted using secure technical methods so that it cannot be recovered or restored. 3. Information in paper document form will be destroyed by shredding, incineration, or other appropriate methods. ## 7. Rights of Data Subjects and How to Exercise Them 1. Users may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent for their personal information at any time. 2. Inquiries regarding personal information and requests to exercise rights may be made via **notice@classcube.co.kr**. 3. The Company will faithfully respond to users' requests in accordance with applicable laws. ## 8. Processing of Children's Personal Information The Company **does not intentionally collect personal information from children under the age of 14.** If it is confirmed that a child under the age of 14 has signed up, the Company may take necessary measures such as restricting or deleting the account. ## 9. Security Measures for Personal Information The Company may implement reasonable security measures to protect personal information, including access control management, security updates, access log management, and internal management planning. ## 10. Cookies and Similar Technologies The Company may use cookies or similar technologies to maintain login sessions, improve convenience, enhance security, and improve service quality. ## 11. Privacy Officer and Contact Information - Privacy Officer: Seongchan Ahn - Email: notice@classcube.co.kr - General inquiries: Inquiry board within the Service For privacy complaints or consultation, you may also contact the following Korean privacy authorities: - Personal Information Infringement Report Center: privacy.go.kr / Phone 182 (Korea) - Personal Information Dispute Mediation Committee: www.kopico.go.kr (Korea) ## 12. Changes to This Policy The Company may amend this Privacy Policy in accordance with changes in applicable laws, service policies, or security operations, and will provide prior notice of any material changes. # KMath Teacher Privacy Policy Effective Date: 2026-06-01 --- ClassCube (hereinafter "Company") protects the personal information of Teacher Members in operating the KMath Teacher service (hereinafter "Service") in accordance with the Personal Information Protection Act and other applicable laws and regulations. --- ## 1. Personal Information Collected and Collection Methods **Teacher Member Information** - Required: Name (or nickname), email address, social login identifier, language used - Optional: Profile photo **Academy and Class Management Information** - Academy name, class, curriculum, student assignment and management records **Student Information (directly entered by Teacher Member)** - Student name, student code, invitation email, class and curriculum information **Learning and Assessment Information** - Exam creation, distribution, and PDF export records; question-solving, grading, and analysis results **Payment Information** - Subscription status, plan, payment amount, transaction identifier (provided by PG) - Complete payment method information such as full card numbers is not directly stored. **Automatically Collected Information** - Access logs, IP address, browser and device information, cookies and sessions Collection methods: Direct input upon registration and use of service, social login integration, automatic generation during service use --- ## 2. Purposes of Processing 1. Member registration, identity verification, and account management 2. Academy, class, and student management features 3. Exam creation, homework assignment, grading, and analysis features 4. Sending invitation emails and linking student accounts 5. Paid subscription processing and payment customer support 6. Prevention of unauthorized use and maintenance of security 7. Service improvement and incident response 8. Fulfillment of legal obligations and dispute resolution --- ## 3. Retention and Use Period Personal information is destroyed without delay upon achievement of the processing purpose. Where retention is required by law, the following periods apply: | Item | Legal Basis | Retention Period | |------|------------|----------------| | E-commerce contracts and payment records | E-Commerce Act | 5 years | | Consumer complaints and dispute records | E-Commerce Act | 3 years | | Access logs and security records | Communications Secrets Protection Act | 3 months | | Unauthorized use restriction records | Internal Policy | 1 year | --- ## 4. Provision to Third Parties In principle, personal information is not provided to outside parties. Exceptions are limited to the following: 1. When the Teacher Member has given prior consent 2. When provision is required by law to investigative agencies or similar 3. When information is displayed between teachers and students within the scope necessary for service provision, such as exam distribution and learning result sharing --- ## 5. Processing of Student Information 1. Teacher Members may enter and manage student information within the scope necessary for class operations. 2. Information requiring consent from students or guardians must be lawfully obtained by Teacher Members in accordance with applicable laws and regulations. 3. The Company processes student information registered by Teacher Members only within the scope of service provision purposes. 4. If a student registers with a separate account, a separate privacy policy applies to the student account. --- ## 6. Destruction Personal information is destroyed without delay upon expiration of the retention period or achievement of the processing purpose. - Electronic files: Securely deleted so that recovery is impossible - Paper documents: Shredded or incinerated --- ## 7. Rights of Data Subjects Teacher Members may request access to, correction of, deletion of, suspension of processing of, or withdrawal of consent regarding their personal information. Requests sent to **notice@classcube.co.kr** will be processed within 10 business days. --- ## 8. Cookies Cookies and session tokens are used for maintaining login sessions, security, and usage management. Cookies may be refused through browser settings; however, some service features may be restricted as a result. --- ## 9. Privacy Officer and Contact - Name: Seongchan Ahn - Email: notice@classcube.co.kr - General Inquiries: In-service inquiry board For reports or consultations regarding personal information infringement, you may contact the following Korean agencies: - Personal Information Infringement Report Center: privacy.go.kr / Phone 182 (Korea) - Personal Information Dispute Mediation Committee: www.kopico.go.kr (Korea) --- ## 10. Policy Changes This policy may be amended in accordance with changes to applicable laws, service policies, or security operations. Important changes will be notified at least 7 days in advance (30 days in advance for changes with significant impact on data subjects' rights) via in-service notice or email.