Privacy Policy
This English version is a translation provided for reference. If it differs from the Korean version, the Korean version prevails.
Leeboom (the “Company”) operates HAMO, a motion game service for seniors that includes the Android and Windows apps and the admin web (the “Service”). In doing so, the Company complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and sets out this Privacy Policy as follows to process users’ personal information safely.
1. The Service and How It Is Used
HAMO is an exercise and cognitive game service that organizations such as senior welfare centers, day care centers, and care facilities (“centers”) introduce and use together with older adults (“members”). A center manager signs in with the center account, registers members, and then runs games and functional measurements in front of a camera. A center either signs up directly in the app or receives a center account when it signs an adoption contract. Individual members do not create their own accounts.
2. Personal Information We Process
| Category | Items | How it is collected |
|---|---|---|
| Center account | Center name, manager’s name, manager’s contact number, email address (sign-in ID), password (stored encrypted), and the time of agreement to the Terms of Service and to the collection and use of personal information | When a center signs up directly in the app (by confirming an email verification code), or when an adoption contract is signed and an account is issued |
| Member information | Name, mobile phone number, date of birth, sex, height and weight (optional), member number, profile photo (optional) | Entered by the center manager in the app or the admin web |
| Facial feature information (biometric information) | Facial feature values (numerical data) for face recognition login. Face photos and videos are not stored. | Generated in the app only for members who choose face registration, after separate consent |
| Exercise and measurement records | Game scores and results, movement measurements such as reaction time and range of motion, body joint coordinate records, and dates and times of use | Generated in the app during games and measurements |
| Exhibition and trial users | Mobile phone number, sex and year of birth (optional), trial results | Entered after consent on the trial start screen |
| Use of the Service | App version, device type, error logs | Generated automatically while the app is used |
3. Purposes of Use
- Center account sign-up and sign-in, sign-up email verification, and management of members for each center
- Identifying members (member number and face recognition login) and saving game and measurement records
- Analyzing results such as reaction speed, attention, coordination, and upper- and lower-body function, and providing reports
- Providing exhibition and trial result screens and result links (QR codes)
- Checking service errors, improving quality, and responding to inquiries
4. Retention Period
- Center account information: kept until a center account deletion request is processed (or until the center’s service agreement ends), and destroyed without delay once the account is deleted.
- Member information and exercise and measurement records: destroyed without delay when the center deletes the member, when the center account is deleted, or when the center’s service agreement ends.
- Facial feature information: destroyed immediately when the member’s face registration is turned off or the member is deleted.
- Exhibition and trial user information: kept for one year from the trial date and then destroyed.
- Where applicable laws require it to be kept, it is kept for the required period.
Electronic files are deleted in a way that cannot be recovered, and paper documents are shredded or incinerated.
5. Provision to Third Parties
The Company does not sell personal information or provide it to third parties. A member’s records can be viewed only by the center that registered the member. Exceptions apply where there is a legal basis or where an investigative agency makes a request following procedures set by law.
6. Outsourcing of Personal Information Processing
| Contractor | Outsourced work | Processing location |
|---|---|---|
| Supabase Inc. | Database and file storage, sign-in and sign-up processing | Servers in the Republic of Korea (Seoul) region |
| Resend, Inc. | Sending email (guidance emails such as sign-up verification codes; recipient email addresses) | Servers in the United States and other countries |
| Vercel Inc. | Hosting of the website and the admin web | Servers in the United States and other countries (transmitted when accessed) |
| Google LLC | Distribution of the Android app (Google Play) | Servers in the United States and other countries |
When you access the admin web or the website, information shown on the screen may be transmitted through Vercel’s servers. The Company sets out the matters necessary for protecting personal information in its outsourcing contracts and manages and supervises its contractors.
7. Rights of Data Subjects and Legal Representatives
Members (or their legal representatives or guardians) may at any time request access to, correction or deletion of, or suspension of the processing of their personal information. Please ask the center that registered the member, or email the Chief Privacy Officer below, and the request will be handled without delay. Face recognition login can be turned off at any time, and when it is turned off, the facial feature information is deleted immediately.
Center account deletion requests
A center may at any time request deletion of its center account and the account’s data (center information, member information, measurement and game records, facial feature information, and so on). In the app, sign in as the center, tap “Log Out” at the bottom left of the first screen, and then tap “Request center account deletion” below the confirmation window. If you do not have the app, you can send a request to contact@hamocare.com from the center’s registered email address. The details and the data that will be deleted are on the center account deletion request page (in Korean).
8. Security Measures
- All data transmission is encrypted with HTTPS.
- Data access is separated by center account so that one center cannot see another center’s member information.
- Passwords are stored encrypted, and administrative privileges are granted only to those who need them.
- Face photos and camera video are not stored, and face recognition uses only irreversible feature values.
9. Children’s Personal Information
The Service is intended for adults (mainly older adults) and center managers and is not directed at children under the age of 14.
10. Automatic Collection and Advertising
The app contains no advertising and does not use advertising identifiers (advertising IDs). The website may use browser storage (such as cookies) for convenience, which you can refuse in your browser settings.
11. Chief Privacy Officer
- Chief Privacy Officer: Seungheon Lee (CEO)
- Email: contact@hamocare.com
- Address: Room 204, 15, Mangu-ro 10ga-gil, Dongdaemun-gu, Seoul, Republic of Korea
For reports or consultations about infringement of personal information in Korea, you can contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 within Korea), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301 within Korea), or the Korean National Police Agency (ecrm.police.go.kr, 182 within Korea).
12. Changes to This Privacy Policy
This Privacy Policy applies from October 29, 2026. If it changes, the change is announced on this page at least 7 days before it takes effect.
Previous Privacy Policy: effective October 17, 2026
