Privacy Policy

Ttagcall (operated by Dream & Company, hereinafter “the Company”) handles users’ personal information with care and complies with applicable laws, including the Personal Information Protection Act of Korea. This policy explains the categories, purposes, and retention periods of the personal information collected when you use the Ttagcall app and website (ttagcall.com), and your rights as a user.

1. Personal information collected and how it is collected

On sign-up and login

Phone number (for identity verification, login, and SMS verification)

Ttagcall does not separately ask for your name. Other people’s names are shown as saved in your own phone’s address book, or as a phone number if they are not in your address book.

When using contacts (address book)

Ttagcall requests address book permission to build groups and to “find Ttagcall users among your contacts”.
Your contacts’ phone numbers are sent to the server and checked to determine whether they are Ttagcall members.
Of these, only the names and phone numbers of contacts you add to a group yourself are stored on the server; other contacts are not stored on the server.

When using push notifications

The device push token used to send notifications (such as “it’s your turn”)

When using chat (team chat and group chat)

Messages (text), photos, and videos exchanged in a matched team’s chat and in group chats are stored (photos and videos are stored on NAVER Cloud Platform’s Object Storage). Stored messages, photos, and videos are automatically deleted 30 days after they are sent, and a chat room with no activity for 30 days is itself deleted automatically. In addition, when the recruitment (session) is deleted or your account is deleted upon withdrawal, the related chat content is deleted as well.
To let you save chat photos and videos to your phone, the app may request storage (photos and media) access on Android 10 and earlier. Saving happens on your device only when you tap save yourself; the app does not read the photos and videos already on your phone or send them to our servers.

When using personal events (calendar notes)

The title and memo of personal events you add directly to the Ttagcall calendar, unrelated to any recruitment/match, are stored on the server. Only you can view, edit, or delete these events, and deleting one removes it immediately.
To add a confirmed recruitment date to your phone’s calendar (Google, Samsung, etc.), the app may request calendar access. This only happens on your device, and the event content added is not sent to the Company’s servers.

When using voice search (voice commands)

To let you create a recruitment request quickly by speaking, the app may request microphone and speech recognition access. It works only when you tap the microphone button yourself and never listens continuously.
Your voice is converted to text on the device (or by the speech recognition feature provided by the OS), and only the converted text is used to prefill the recruitment request screen. The original audio is never sent to or stored on Ttagcall’s servers, and the recognized text is only shown on screen for you to confirm and is not stored.

When a request is sent by text to contacts who don’t use the app

Contacts you added to a group who have not signed up for Ttagcall receive the recruitment request by SMS. The message contains the date and message set by the requester and a link for replying.
When the recipient taps accept or decline on that link, the response and its time are stored in that recruitment’s record. Recipients are not asked to sign up, log in, or enter any additional information.
The recipient’s name and phone number used here are the information the requester saved in their group, and they are deleted when the requester deletes that recruitment or withdraws. If you no longer wish to receive these messages, email the personal information protection officer below and we will act without delay.

App error information (collected automatically)

When the app hits an error or crashes, the error details, app version, device model and OS version, time of occurrence, and IP address are sent to an error analysis service (Sentry) so we can find the cause. Names, phone numbers, and chat content are not sent, and the transmitted information is deleted automatically after 30 days.

Generated automatically during use of the service

Recruitment (session) records (date, message, number of people needed, etc.), sending order, responses (accept/decline/no reply) and their timestamps, and cancellation reasons
Minimal usage logs for improving the service (the type and time of key actions such as creating a group, starting a recruitment, responding, and cancelling). These logs contain no personally identifying information such as names or phone numbers, and when your account is deleted upon withdrawal, the link to the individual is removed as well.

The Company does not collect personal information beyond the items above without the user’s consent.

2. Purpose of collecting and using personal information

Identity verification, member identification, and prevention of misuse
Providing the priority-based sequential contact feature (matching and sending within group contacts)
Informing you of recruitment progress and processing responses
Sending requests by text to contacts who have not signed up for Ttagcall and processing their responses
Sending push notifications (your turn, response results, etc.)
Analyzing app errors and improving stability
Responding to inquiries
Analyzing service usage statistics and improving quality

3. Processing and retention period

When you request withdrawal via “Delete account” in the app, re-login is blocked immediately, and 30 days after the request your personal information is permanently deleted. This grace period accounts for accidental withdrawals and for wrapping up recruitments already in progress.
Where retention is required by relevant laws, the information is stored separately for the period set by those laws and then destroyed.
Verification codes (OTP) are destroyed immediately once their purpose is fulfilled or their validity period expires.

4. Provision of personal information to third parties

As a rule, the Company does not provide users’ personal information to outside parties. Exceptions apply where there are special provisions in law, or where an investigative agency requests it through lawful procedures.

5. Outsourcing of personal information processing

The Company outsources the following tasks to provide the service.

Sending SMS messages (verification codes, and recruitment requests to contacts who have not signed up for Ttagcall) — SENS by NAVER Cloud Platform: the phone number and message content required for sending are provided.
Storing chat photos and videos — Object Storage by NAVER Cloud Platform: photo and video files sent in chat are stored here.
Sending push notifications — Google (Firebase Cloud Messaging) and Expo: the device push token and notification content (title and body) required to deliver notifications are provided.
App error analysis — Functional Software, Inc. (Sentry): app error information (error details, app version, device model and OS version, IP address) is provided.
Server infrastructure — Amazon Web Services (AWS): service data is stored and processed on AWS servers.

The Company manages and supervises these providers so they cannot process personal information beyond the outsourced purpose.

6. Cross-border transfer of personal information

Some of the outsourced tasks above are handled by overseas companies, so personal information is transferred abroad as follows. Transfers take place over the network when the relevant feature runs (sending a notification, or when an app error occurs).

Functional Software, Inc. (Sentry) — Country: United States · Items: app error details, app version, device model and OS version, IP address · Purpose: app error analysis · Retention: 30 days · Privacy contact: sentry.io/privacy
650 Industries, Inc. (Expo) — Country: United States · Items: device push token, notification content (title and body) · Purpose: sending push notifications · Retention: deleted after delivery according to the provider’s policy · Privacy contact: expo.dev/privacy
Google LLC (Firebase Cloud Messaging) — Country: United States · Items: device push token, notification content · Purpose: delivering Android push notifications · Retention: according to the provider’s policy · Privacy contact: policies.google.com/privacy

If you do not want your information transferred abroad, you can turn off Ttagcall notifications in your device settings or withdraw. In that case, some features such as notifications will not be available.

7. Rights of data subjects and how to exercise them

Users may exercise the following rights at any time.

Request access to, correction of, or deletion of personal information
Request suspension of processing
Request withdrawal (revocation of consent) — you can apply directly via “Delete account” in the settings on the app’s home screen.

Rights other than withdrawal can be requested at the email below, and the Company will act without delay from the date the request is received.

8. Measures to ensure security

User authentication uses only phone verification (OTP) instead of passwords, fundamentally removing the risk of password leaks.
Communication between users and the server is encrypted with HTTPS (TLS).
Server access is limited to a minimal number of people.

9. Automatic collection tools such as cookies

The Company does not use separate advertising/tracking cookies or analytics tools (for example, Google Analytics).

However, some information pages on the website (such as the page for crew leaders) record only the referral value and time of each visit (for example, a poster QR code or a KakaoTalk share) to count which channel visitors came from. No cookies or identifying information such as names or phone numbers are used for this.

10. Personal information protection officer

For inquiries, complaints, or remedies related to personal information, please contact us below.

Business name: Dream & Company
Email: hbss0417@gmail.com

11. Remedies for infringement of rights

If you need to report or seek advice about personal information infringement, you can contact the following Korean agencies.

Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
Supreme Prosecutors’ Office Cybercrime Investigation (spo.go.kr / 1301)
National Police Agency Cyber Investigation Bureau (ecrm.police.go.kr / 182)

12. Duty of notification

If the content of this policy changes, we will announce it in advance on the website.

Operator: Dream & Company · Representative: Yang Hong-beom · Business address: Room 306, 78 Jungang-ro, Gwangju-si, Gyeonggi-do, Republic of Korea
Effective date: July 7, 2026 · Last revised: October 11, 2026
This English version is a translation provided for convenience. In case of any discrepancy, the Korean version prevails.