Advance publication of the revised policy · Scheduled revision notice: November 1, 2026 · Effective: December 1, 2026
The September 21, 2026 policy applies until the effective date.
DxTerra, a sole proprietorship operated by Sejin Kim, explains below how personal information is processed in connection with its company website and SANDOBARO Pro and Plus services. App-specific descriptions apply when the relevant app and feature are used.
Email and location information are not required from every user. The information processed depends on the login method and features used. A UID is an identifier used to distinguish a user.
Browser or device permissions for camera, photos, location, and notifications are feature settings and are distinct from privacy notices and processing consent. Refusing or withdrawing a permission may limit the features that require it.
We distinguish processing necessary to perform the service contract, processing based on separate user consent, and processing required by law. Personal-location processing requires the advance notices and consent required by Korean location-information law. Publishing or displaying this policy alone does not constitute consent. Notices and any required consent for optional photos, notes, and statistical use must match the actual feature and applicable law.
The following describes the functions of external services. Authentication handled by a login provider is distinct from measurement storage on the Company's server.
Loading a page may communicate with external map, font, or script providers. Authentication by a provider, processing on our behalf, and third-party disclosure are distinguished according to the actual relationship and contract. Use of an external service does not automatically make all its processing a processor relationship.
Loading external maps, push, fonts, or scripts may transmit IP addresses, browser or device information, and request-related information directly to the provider. A provider's own policy also applies to information it directly processes, including through Google Maps. For the Company's international provision, outsourcing, or storage of personal information, the recipient and contact, items, countries, timing and methods, purpose and retention, and refusal method and consequences are disclosed before use in this policy or a separate feature notice, and the required consent or other lawful procedures are obtained. Reading this policy alone does not constitute separate international-transfer consent where required.
For eligible shared measurements, external regional statistics omit UIDs, field names, and original measurement points. Coordinates are grouped into 0.02-degree cells (about 2 km north–south, with east–west distances varying by latitude), only cells with at least three distinct contributors are provided, and times are reduced to the month. These thresholds do not by themselves establish anonymity. External provision and longer-term use are limited to a form that does not identify a person, following assessment of combination risks and any additional processing needed. Aggregation may be broadened or disclosure restricted.
A statistical purpose does not justify indefinite retention of the original account-linked GPS information or imply separate personal-location consent from general acceptance of terms. Disclosure of identifiable information requires the applicable notice of recipient, items, purpose, and period, and the necessary separate consent or other lawful basis and procedures.
Account information: Retained during service use to support sign-in and records, and deleted without undue delay on account deletion, withdrawal of the relevant consent, or completion of the processing purpose.
Measurements, photos, and care records: Retained from saving a record for the period necessary to provide record storage, retrieval, and comparison. They are deleted at the earliest of deletion of that record, withdrawal of the relevant consent, account deletion, or completion of the purpose, including termination of the relevant record-management service. Pro histories may be maintained over the long term for comparison by location and session, but an account's existence does not justify indefinite retention after the purpose ends.
Partner evidence: Stored privately during review and deleted immediately after approval or rejection. Push subscriptions are removed when the subscription or account is deleted. Inquiry and rights-request information is retained only as needed to resolve the inquiry or request. Any separate statutory retention basis and period must be identified separately.
Locations linked to measurements are retained while necessary for the ongoing service of storing, retrieving, and comparing location-based history. The relevant scope is deleted without undue delay on record deletion, withdrawal of consent, account deletion, or completion of the purpose. Post-purpose retention requires a separate lawful basis and must remain within statutory limits.
Location-use and disclosure confirmation records under Article 16(2) of Korea's Act on the Protection and Use of Location Information are automatically recorded and retained for six months, then deleted. On withdrawal under Article 24(4), personal location information and related confirmation records within the withdrawn scope are deleted without undue delay.
When a deletion trigger occurs, the relevant information is identified and deleted without undue delay. Electronic information is deleted so it cannot be recovered or reproduced; paper records are shredded or incinerated. Records required by law are separately retained with their legal basis, scope, and period identified, then deleted. A recycle bin, snapshot, or backup does not by itself extend the permitted retention of personal location information due for deletion.
Access to backups is restricted to recovery purposes. Deletion requests and their scope must be reflected during restoration so that personal information due for deletion is not reused after a restore. Applicable deletion duties also cover personal-location backup copies unless a separate lawful retention basis applies.
Guests can also request deletion using available record-deletion functions or the contact email. Uninstalling the app or clearing browser data is not the same as deleting data on the server. Before losing a guest identifier, check any records or deletion requests you need. Disabling notifications in the app requests deletion of the relevant subscription; changing device permission alone may not immediately remove the server subscription.
Cookies, localStorage, IndexedDB, and app caches support language settings, login and guest identification, temporary records and photos, and the notification inbox. You can remove browser-stored data in browser settings, but doing so may remove sign-in state or local records. Server data requires a separate deletion process.
Access to measurement and photo records on the Company's server is subject to identity and ownership checks. Partner evidence is stored separately from public paths. External statistics exclude original individual points and identifiers. Access controls, encrypted communications, and responses to errors and misuse are applied and reviewed for the actual operating environment.
Members and guests may request access, correction, deletion, restriction of processing, or withdrawal of consent as provided by applicable law. Use the relevant app functions or contact info@dx-terra.com. Requests may also be submitted through a legal representative or duly authorized agent.
Please provide only the minimum information needed to identify the request, such as the app (Pro or Plus), request type, and account or guest identifier. We may ask you to verify your identity to avoid disclosing or deleting another person's records. Do not send passwords or verification codes. If a request is restricted because of a legal retention requirement or another lawful reason, we will explain why.
In-app account deletion allows users to withdraw collection and use consent and delete active-service data. Withdrawing a device permission is separate from deleting records already stored on the server.
For personal location information, users may withdraw all or part of consent, request a temporary suspension of collection, use, or disclosure, and request access to location-use and disclosure confirmation records and correction of errors. Device permission changes are separate from requests to suspend use of, or delete, existing server information. Features that require location may be limited without consent, but unrelated features are not restricted solely for that reason.
If you are a California resident, you have specific privacy rights under the California Consumer Privacy Act (CCPA):
Business: DxTerra (sole proprietorship)
Privacy contact and proprietor: Sejin Kim
Questions and rights requests: info@dx-terra.com
Telephone: +82-31-8023-9449
Address: Room 402, 14 Dunchon-daero 457beon-gil, Jungwon-gu, Seongnam-si, Gyeonggi-do, Republic of Korea