Privacy Policy

Last updated: March 12, 2025

This privacy notice for hemogry ("we," "us," or "our") explains how and why we collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://www.hemogry.com, or any website that links to this privacy notice
• Interact with us through sales, marketing, or events

Questions or concerns?

Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, feel free to contact us at support@vivivava.co.kr.

Summary of Key Points

This summary highlights the key information from our privacy notice. You can learn more by following the links in each section or by reviewing the full policy below.

What personal information do we process?

We may collect personal information depending on how you interact with our Services, the choices you make, and the features you use.

Do we process sensitive personal information?

No, we do not process sensitive personal information.

Do we receive data from third parties?

No, we do not receive information from third parties.

How do we use your data?

We process your data to operate, improve, and secure our Services, communicate with you, prevent fraud, and comply with the law. We may also process your data for other purposes with your consent.

When and with whom do we share data?

We may share data in specific cases and only with certain types of third parties.

How do we protect your data?

We use technical and organizational safeguards to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute protection against unauthorized access.

What are your rights?

Depending on your location, you may have certain rights under applicable privacy laws.

How can you exercise your rights?

The easiest way is to contact us at support@vivivava.co.kr. We will review and respond to your request as required by applicable law.

Want to learn more?

Read the full privacy notice below.

1. What Information Do We Collect?

Personal information you disclose to us

In short: We collect personal information you provide through Google login.

We collect personal information that you voluntarily provide when signing in to the Services using your Google account. This may include:

• Name or nickname
• Email address

We do not collect passwords or sensitive personal information.

Payment Data

If you make a purchase, we may collect the data necessary to process your payment, such as your payment method details. All payment data is processed and stored securely by Stripe. You can review their privacy policy here: https://stripe.com/privacy

Google Login Data

We allow users to sign in using their Google account. When you choose this method, we collect the information shared by Google as part of the login process. See the section “How Do We Handle Your Social Logins?” for more.

All personal information you provide must be true, complete, and accurate. You must notify us of any changes to such information.

Information Automatically Collected

In short: We automatically collect some information—such as your IP address and browser or device characteristics—when you use our Services.

When you visit, use, or navigate the Services, we may automatically collect technical data that does not directly identify you. This may include IP address, browser type, device information, operating system, language preferences, referring URLs, general location, and usage patterns. This information helps us maintain the security, performance, and analytics of our Services.

Like many other services, we also use cookies and similar technologies to gather data.

What we collect includes:

• Log and Usage Data: This includes diagnostic and performance data such as IP address, browser settings, pages viewed, features used, and error reports (e.g., crash logs).
• Device Data: Information about your computer, phone, or tablet, including device ID, browser type, operating system, internet service provider, and system configuration.
• Location Data: We may collect approximate or precise location data using technologies such as GPS or IP address-based tracking. You can disable location access via your device settings, though some features may not work properly if location data is turned off.

2. How Do We Process Your Information?

In short: We process your information to operate, improve, and secure our Services, communicate with you, and comply with legal obligations. With your consent, we may also use it for other purposes.

We process your personal data for a variety of reasons, depending on how you use our Services, including:

• To manage accounts and authentication: To enable account creation, login, and general account management.
• To provide and deliver services: To fulfill your requests and offer the core functionality of our platform.
• To send administrative updates: To notify you about terms, policy changes, service updates, or similar matters.
• To request feedback: To contact you for feedback about your experience with our Services.
• To provide personalized content or advertising: To tailor content, offers, or ads based on your preferences and location.
• To maintain security: To detect and prevent fraud or other harmful activities within the Services.
• To understand usage trends: To analyze how users engage with our Services so we can improve the experience.
• To evaluate marketing efforts: To measure the effectiveness of campaigns and adjust strategies accordingly.
• To protect vital interests: When necessary, to safeguard the health, safety, or legal rights of individuals.

3. What Legal Bases Do We Rely On to Process Your Information?

In short: We process your personal information only when we have a valid legal reason to do so, such as your consent, to fulfill a contract, comply with legal obligations, protect rights, or support our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

Under the General Data Protection Regulation (GDPR) and UK GDPR, we rely on the following legal bases:

• Consent: We may process your information with your permission for a specific purpose. You can withdraw your consent at any time.
• Contractual Necessity: We may process your data to provide our Services or fulfill contractual obligations, including pre-contract steps at your request.
• Legitimate Interests: We may process data for legitimate business purposes if they do not override your rights and freedoms, such as:
  • Delivering relevant and personalized content or ads
  • Analyzing service usage to improve features
  • Supporting marketing and communication strategies
  • Detecting fraud and diagnosing technical issues
  • Understanding user behavior to enhance experience
• Legal Obligations: We may process data to comply with applicable laws or legal requests.
• Vital Interests: We may process data to protect your life, safety, or the vital interests of others.

4. When and With Whom Do We Share Your Personal Information?

In short: We may share your personal data in specific circumstances, and only with trusted third-party providers.

Third-Party Service Providers:

We may share your information with vendors, consultants, and service providers (“third parties”) who help us operate our Services. These include:

• Cloud hosting providers
• Payment processors
• Analytics platforms

All third parties we work with are bound by contracts that require them to:

• Use your data only under our instructions
• Not share your data with anyone else
• Keep your information secure and delete it when no longer needed

Business Transfers:

We may transfer your data during a business transaction (like a merger, acquisition, or asset sale) or related negotiations.

5. Do We Use Cookies and Other Tracking Technologies?

In short: Yes — we may use cookies and similar technologies to collect and store information.

We may use cookies, web beacons, pixels, and other tracking technologies to access or store certain data.

For more details on how we use these tools and how you can control or disable cookies, please see our Cookie Notice.

6. How Do We Handle Your Social Logins?

In short: If you log in using your Google account, we may receive limited information such as your name and email address.

Our Services allow users to sign in using their Google account. When you choose this option, we receive basic profile information that Google shares with us — typically your name and email address.

We only use this data for the purposes described in this Privacy Policy or otherwise clearly stated in the Services. Please note that we do not control how Google handles your personal data. We recommend reviewing Google’s Privacy Policy to understand how your information is collected, used, and managed, and how to control your privacy settings.

7. How Long Do We Keep Your Information?

In short: We retain your personal data only as long as needed to fulfill the purposes outlined in this Privacy Policy, unless the law requires us to keep it longer.

We will retain your personal information only for as long as it is necessary to provide our Services and meet legal or business requirements — such as for tax, accounting, or compliance purposes. No information will be kept longer than the duration of your account with us unless legally required.

When there is no ongoing business need to retain your data, we will delete or anonymize it. If immediate deletion isn’t possible (e.g., stored in backup systems), we will securely isolate your data until it can be properly erased.

8. How Do We Keep Your Information Safe?

In short: We use both technical and organizational safeguards to protect your personal data.

We have implemented reasonable security measures to protect the personal information we collect and process. However, no method of data transmission over the Internet or storage system is completely secure. While we work hard to safeguard your data, we cannot guarantee that unauthorized third parties (such as hackers or cybercriminals) will never be able to bypass our security measures.

You are responsible for accessing our Services in a secure environment. Please take precautions when sharing or transmitting personal data online.

9. Do We Collect Information From Minors?

In short: Our Services are not intended for children under the age of 14. We do not knowingly collect or market to users below this age.

We do not knowingly collect personal information from individuals under 14 years old. By using the Services, you confirm that you are at least 14 years of age or that you are the parent or legal guardian of a minor who has your consent to use the Services.

If we become aware that personal information from a user under 14 has been collected without verified parental consent, we will take reasonable steps to delete that data and deactivate the account.

If you believe we may have collected information from a child under 14, please contact us immediately at support@vivivava.co.kr.

10. What Are Your Privacy Rights?

In short: Depending on where you live, you may have rights over your personal data, including accessing, correcting, or deleting it.

If you are located in certain regions like the European Economic Area (EEA), United Kingdom (UK), or Switzerland, applicable data protection laws may grant you the right to:

• Request access to the personal data we hold about you
• Ask us to correct or delete your information
• Restrict how we process your data
• Object to certain types of processing
• Request a copy of your data in a portable format
• Not be subject to automated decision-making

If you want to exercise any of these rights, please contact us using the details in the “How Can You Contact Us About This Notice?” section below. We will handle your request in accordance with relevant laws.

If you are in the EEA or UK and believe your data is being processed unlawfully, you have the right to lodge a complaint with your local data protection authority.

If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

Withdrawing your consent:

If we rely on your consent to process your personal information, you may withdraw that consent at any time. To do so, contact us using the details below.

Please note: this will not affect the lawfulness of processing before your consent was withdrawn.

Account Information

If you wish to review or update your account information, or request account deletion, you can:

• Contact us at support@vivivava.co.kr

Upon receiving your request to delete your account, we will deactivate or remove your information from our active systems. However, some data may be retained in our records for purposes such as preventing fraud, resolving technical issues, assisting with investigations, enforcing our legal terms, or complying with legal obligations.

Cookies and Similar Technologies

Most web browsers accept cookies by default. If you prefer, you can modify your browser settings to remove or reject cookies. Please note that doing so may affect certain features or functionality of our Services.

If you have questions or comments regarding your privacy rights, please contact us at support@vivivava.co.kr.

11. Controls for Do-Not-Track (DNT) Features

Most web browsers and some mobile devices include a Do-Not-Track (“DNT”) setting, which lets you signal that you don’t want your browsing behavior tracked online.

Currently, there is no consistent standard for how websites should respond to DNT signals. As a result, our Services do not respond to DNT signals or similar mechanisms at this time.

If a recognized standard is adopted in the future and we are required to support it, we will update this Privacy Policy to reflect that change.

12. Do United States Residents Have Specific Privacy Rights?

In short: If you are a resident of California, Virginia, Utah, Colorado, or Connecticut, you may have certain rights regarding access to and control over your personal information.

Personal Information We Have Collected (Past 12 Months)

We have collected the following categories of personal information:

Category	Examples	Collected
A. Identifiers	Name, alias, email address, account name, IP address, and other online identifiers	✅ Yes
B. Customer Record Data	Name, email address, and other contact information	✅ Yes
C. Protected Characteristics	Gender, date of birth	❌ No
D. Commercial Information	Purchase history, transaction records, or payment data	❌ No
E. Biometric Data	Fingerprints, voiceprints	❌ No
F. Internet Activity	Browsing/search history, online behavior	❌ No
G. Geolocation Data	Approximate device location	✅ Yes
H. Sensory Data	Audio or video recordings	❌ No
I. Professional Data	Job title, work history, employer info	❌ No
J. Education Records	Student info or transcripts	❌ No
K. Inference Data	Profiles based on preferences or characteristics	❌ No
L. Sensitive Personal Information	e.g., government IDs, financial account info	❌ No

How long do we retain it?

We retain the collected data only as long as necessary to provide our Services:

• Category A, B, G – For as long as the user maintains an active account with us

We may also collect limited additional personal information when you:

• Contact our customer support
• Participate in surveys or events
• Interact with us in person, online, or via email

How Do We Use and Share Your Personal Information?

We use your personal information as described in the section "How Do We Process Your Information?" to operate, improve, and maintain our Services.

We may share personal information with trusted service providers under written agreements. Details are provided in the section "When and With Whom Do We Share Your Personal Information?"

We may also use your information for internal business purposes, such as product development or analytics. This is not considered a “sale” of your personal data.

In the past twelve (12) months, we have not sold or shared your personal information with third parties for commercial purposes.

However, we have disclosed the following categories of personal information to service providers for operational reasons:

• Category A: Identifiers (e.g., name, email, IP address)
• Category G: Geolocation data (e.g., approximate device location)

The types of service providers we share data with are listed in "When and With Whom Do We Share Your Personal Information?"

1) California Residents

Shine the Light Law

California Civil Code Section 1798.83 allows California residents to request, once per year and free of charge, details about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of such third parties. If you are a California resident and would like to make such a request, please contact us in writing at: support@vivivava.co.kr.

If you are under the age of 18, reside in California, and have a registered account with our Services, you may request the removal of content or information that you have publicly posted. To request removal, contact us at support@vivivava.co.kr, and include your account's email address and confirmation that you reside in California. Please note that while we will make reasonable efforts to remove such content from public view, we cannot guarantee complete removal from all our systems (e.g., backups).

CCPA Privacy Notice

This section applies only to California residents. Under the California Consumer Privacy Act (CCPA), you are entitled to the following rights:

● Right to Know and Access

You have the right to request that we disclose:

• The categories of personal information we collect
• The sources from which it is collected
• The purposes for collecting or sharing it
• The categories of third parties with whom we share it
• The specific personal information we have collected about you

● Right to Delete

You have the right to request the deletion of your personal information, subject to certain legal exceptions.

● Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

● Right to Opt-Out of Selling or Sharing

While we do not sell your personal information, you still have the right to request that your data not be sold or shared in the future.

● Right to Limit Use of Sensitive Personal Information

We do not collect or use sensitive personal information.

Verification Process

To verify your identity, we may ask for information that matches what we have on file, or contact you through a previously provided method (email, etc.). We will only use this information to verify your identity and process your request, and will delete it once the request is resolved.

Additional Rights

• You may object to the processing of your personal information
• You may request correction of incorrect or outdated data
• You may authorize an agent to make a request on your behalf

To exercise any of these rights, please contact us at:

📧 support@vivivava.co.kr

2) Colorado Residents

This section applies specifically to individuals residing in Colorado. Under the Colorado Privacy Act (CPA), you may be entitled to the following rights. Please note that these rights are not absolute, and we may decline certain requests where permitted by law.

As a Colorado resident, you have the right to:

• Know whether we are processing your personal data
• Access the personal data we hold about you
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Receive a copy of the personal data you have previously provided
• Opt out of processing your data for:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or similarly significant effects

To exercise any of these rights, please contact us at support@vivivava.co.kr.

Appeals

If we decline your request and you would like to appeal our decision, please email us at support@vivivava.co.kr.

We will respond in writing within forty-five (45) days of receiving your appeal, including an explanation of any action taken or the reasons for denying your appeal.

3) Connecticut Residents

This section applies to residents of Connecticut. Under the Connecticut Data Privacy Act (CTDPA), you may be entitled to certain privacy rights. Please note that these rights are subject to exceptions, and in some cases we may lawfully deny your request.

As a Connecticut resident, you have the right to:

• Confirm whether we are processing your personal data
• Access the personal data we hold about you
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Obtain a copy of personal data you previously provided to us
• Opt out of:
  • Targeted advertising
  • Sale of your personal data
  • Profiling that produces legal or similarly significant effects

To exercise any of these rights, you can contact us at support@vivivava.co.kr.

Appeals

If we deny your request and you wish to appeal our decision, please contact us at support@vivivava.co.kr.

We will provide a written response within sixty (60) days, including the outcome of the appeal and an explanation of our decision.

4) Utah Residents

This section applies to residents of Utah. Under the Utah Consumer Privacy Act (UCPA), you may be entitled to the rights listed below. These rights are not absolute, and we may decline your request where allowed by law.

As a Utah resident, you have the right to:

• Confirm whether we are processing your personal data
• Access your personal data
• Request the deletion of your personal data
• Receive a copy of personal data you have previously provided to us
• Opt out of:
  • Targeted advertising
  • Sale of your personal data

To exercise any of these rights, please contact us at support@vivivava.co.kr.

15) Virginia Residents

This section applies to individuals residing in Virginia, under the Virginia Consumer Data Protection Act (VCDPA).

Under VCDPA:

• "Consumer" refers to a Virginia resident acting in a personal or household context, not in a commercial or employment capacity.
• "Personal data" means information that is reasonably linkable to an identified or identifiable individual. It does not include publicly available or de-identified data.
• "Sale of personal data" means the exchange of personal data for monetary consideration.

If you meet this definition, you may be entitled to the following rights under the VCDPA:

Your rights include the right to:

• Confirm whether we are processing your personal data
• Access the personal data we hold about you
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Obtain a copy of the personal data you previously provided
• Opt out of the processing of your personal data for:
  • Targeted advertising
  • Sale of personal data
  • Profiling in connection with decisions that produce legal or similarly significant effects

To exercise your rights, contact us by email at support@vivivava.co.kr.

Using an Authorized Agent

If an authorized agent is making a request on your behalf, we may require proof of their legal authority to act for you before proceeding.

Verification

To protect your privacy, we may ask for additional information to verify your identity before processing your request. If a request is submitted through an agent, we may also verify the agent’s authorization and your identity before fulfilling the request.

We will respond to verified requests within forty-five (45) days, and we may extend this period once for an additional forty-five (45) days, if reasonably necessary. In such cases, we will notify you within the initial response window.

Appeals

If we deny your request, you have the right to appeal. Please send your appeal to support@vivivava.co.kr, and we will respond in writing within sixty (60) days. If your appeal is unsuccessful, you may file a complaint with the Virginia Attorney General.

13. Do Other Regions Have Specific Privacy Rights?

In Short: Yes — depending on your location, you may be entitled to additional rights regarding your personal information.

1) Australia and New Zealand

If you are a resident of Australia or New Zealand, we handle your personal information in accordance with the requirements of:

• Australia’s Privacy Act 1988
• New Zealand’s Privacy Act 2020

This privacy notice satisfies the notification obligations under both laws, including details about:

• What personal information we collect
• The sources from which we collect it
• Why we collect it
• Who else might receive it

Please note:

If you choose not to provide certain personal information that we require to operate our Services, this may limit our ability to:

• Offer you specific features or services
• Respond to your requests
• Manage your account
• Verify your identity and protect your account security

Your Rights

You have the right to request access to or correction of your personal information at any time.

To submit such a request, please contact us at support@vivivava.co.kr.

Complaints

If you believe your personal information has been handled in breach of the applicable privacy principles, you may file a complaint with:

• Office of the Australian Information Commissioner (OAIC) https://www.oaic.gov.au
• Office of the New Zealand Privacy Commissioner https://www.privacy.org.nz

2) South Africa Residents

If you are a resident of the Republic of South Africa, you have specific rights under the Protection of Personal Information Act (POPIA).

Your Rights

You may request access to, or correction of, your personal information at any time.

To submit a request, please contact us at support@vivivava.co.kr.

Complaints

If you are not satisfied with how we handle your personal information or respond to your requests, you may contact the South African Information Regulator using the details below:

The Information Regulator (South Africa)

• General enquiries: enquiries@inforegulator.org.za
• Complaints (Form 5 under POPIA/PAIA):
  • PAIAComplaints@inforegulator.org.za
  • POPIAComplaints@inforegulator.org.za

14. Do We Make Updates to This Notice?

In Short: Yes — we may update this Privacy Policy as needed to comply with relevant laws and reflect any changes to our practices.

We may revise this Privacy Policy from time to time. Any updated version will be indicated by a new “Last updated” date and will become effective as soon as it is published. If we make significant changes, we may notify you by posting a prominent notice on our website or contacting you directly.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

15. How Can You Contact Us About This Notice?

If you have any questions or comments about this Privacy Policy, you may contact us by email or postal mail at:

vivivava, Inc.

Attn: hemogry Privacy Team

21, Daewangpangyo-ro 645beon-gil

Bundang-gu, Seongnam-si, Gyeonggi-do 13487

Republic of Korea

Email: support@vivivava.co.kr

16. How Can You Review, Update, or Delete the Data We Collect From You?

Depending on the laws applicable in your country, you may have the right to request access to, correction of, or deletion of the personal data we have collected from you.

To submit such a request, please contact us at support@vivivava.co.kr.

We will respond in accordance with applicable data protection laws.