Privacy Policy

Ttagcall (operated by Dream & Company, hereinafter “the Company”) handles users’ personal information with care and complies with applicable laws, including the Personal Information Protection Act of Korea. This policy explains the categories, purposes, and retention periods of the personal information collected when you use the Ttagcall app and website (ttagcall.com), and your rights as a user.

1. Personal information collected and how it is collected

On sign-up and login

Phone number (for identity verification, login, and SMS verification)

Ttagcall does not separately ask for your name. Other people’s names are shown as saved in your own phone’s address book, or as a phone number if they are not in your address book.

When using contacts (address book)

Ttagcall requests address book permission to build groups and to “find Ttagcall users among your contacts”.
Your contacts’ phone numbers are sent to the server and checked to determine whether they are Ttagcall members.
Of these, only the names and phone numbers of contacts you add to a group yourself are stored on the server; other contacts are not stored on the server.

When using push notifications

The device push token used to send notifications (such as “it’s your turn”)

When using chat (team chat and group chat)

Messages (text) and photos exchanged in a matched team’s chat and in group chats are stored on the server. Stored messages and photos are automatically deleted 30 days after they are sent, and a chat room with no activity for 30 days is itself deleted automatically. In addition, when the recruitment (session) is deleted or your account is deleted upon withdrawal, the related chat content is deleted as well.

When using personal events (calendar notes)

The title and memo of personal events you add directly to the Ttagcall calendar, unrelated to any recruitment/match, are stored on the server. Only you can view, edit, or delete these events, and deleting one removes it immediately.
To add a confirmed recruitment date to your phone’s calendar (Google, Samsung, etc.), the app may request calendar access. This only happens on your device, and the event content added is not sent to the Company’s servers.

Generated automatically during use of the service

Recruitment (session) records (date, message, number of people needed, etc.), sending order, responses (accept/decline/no reply) and their timestamps, and cancellation reasons
Minimal usage logs for improving the service (the type and time of key actions such as creating a group, starting a recruitment, responding, and cancelling). These logs contain no personally identifying information such as names or phone numbers, and when your account is deleted upon withdrawal, the link to the individual is removed as well.

The Company does not collect personal information beyond the items above without the user’s consent.

2. Purpose of collecting and using personal information

Identity verification, member identification, and prevention of misuse
Providing the priority-based sequential contact feature (matching and sending within group contacts)
Informing you of recruitment progress and processing responses
Sending push notifications (your turn, response results, etc.)
Responding to inquiries
Analyzing service usage statistics and improving quality

3. Processing and retention period

When you request withdrawal via “Delete account” in the app, re-login is blocked immediately, and 30 days after the request your personal information is permanently deleted. This grace period accounts for accidental withdrawals and for wrapping up recruitments already in progress.
Where retention is required by relevant laws, the information is stored separately for the period set by those laws and then destroyed.
Verification codes (OTP) are destroyed immediately once their purpose is fulfilled or their validity period expires.

4. Provision of personal information to third parties

As a rule, the Company does not provide users’ personal information to outside parties. Exceptions apply where there are special provisions in law, or where an investigative agency requests it through lawful procedures.

5. Outsourcing of personal information processing

The Company outsources the following tasks to provide the service.

Sending SMS messages (verification codes, etc.) — SENS by NAVER Cloud Platform: the phone number required for sending is provided.
Sending push notifications — Google (Firebase Cloud Messaging) and Expo: the device push token required to deliver notifications is provided.
Server infrastructure — Amazon Web Services (AWS): service data is stored and processed on AWS servers.

The Company manages and supervises these providers so they cannot process personal information beyond the outsourced purpose.

6. Rights of data subjects and how to exercise them

Users may exercise the following rights at any time.

Request access to, correction of, or deletion of personal information
Request suspension of processing
Request withdrawal (revocation of consent) — you can apply directly via “Delete account” in the settings on the app’s home screen.

Rights other than withdrawal can be requested at the email below, and the Company will act without delay from the date the request is received.

7. Measures to ensure security

User authentication uses only phone verification (OTP) instead of passwords, fundamentally removing the risk of password leaks.
Communication between users and the server is encrypted with HTTPS (TLS).
Server access is limited to a minimal number of people.

8. Automatic collection tools such as cookies

The Company does not use separate advertising/tracking cookies or analytics tools (for example, Google Analytics).

9. Personal information protection officer

For inquiries, complaints, or remedies related to personal information, please contact us below.

Business name: Dream & Company
Email: hbss0417@gmail.com

10. Remedies for infringement of rights

If you need to report or seek advice about personal information infringement, you can contact the following Korean agencies.

Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
Supreme Prosecutors’ Office Cybercrime Investigation (spo.go.kr / 1301)
National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)

11. Duty of notification

If the content of this policy changes, we will announce it in advance on the website.

Operator: Dream & Company · Representative: Yang Hong-beom · Business address: Room 306, 78 Jungang-ro, Gwangju-si, Gyeonggi-do, Republic of Korea
Effective date: July 7, 2026 · Last revised: August 26, 2026
This English version is a translation provided for convenience. In case of any discrepancy, the Korean version prevails.