Privacy Policy

Effective October 1, 2026 · Revised October 15, 2026 (partner benefit applications; optional birth year and grade, reading goals)

NexBiz Co., Ltd. (Korean: 주식회사 넥스비즈, the “Company”) operates BookBini (bookbini.com, the “Service”), a children's English storybook service. In accordance with the Personal Information Protection Act of Korea, the Company has this Privacy Policy to protect users' personal information and to handle related concerns promptly.

1. Information We Collect and Why

When paid service begins, payment information (payment method type, approval number, amount and time) will be handled through a payment service provider. The Company does not store card numbers or other payment method details itself. The Company will revise this Policy and announce it in advance.

2. Information Received by Login Method

• Kakao — Kakao member number, nickname, Kakao account (email)
• Naver — Naver member ID and name. We do not receive email.
• Google — Google account ID, name, email address
• Email login — email address. No password is created; each time you log in, a 6-digit one-time code is sent to that address. The code itself is not stored.

Information received is used only for login and account identification. The Company never knows your passwords for these services.

Linking a child's phone — device type (e.g. Android · Chrome) and time linked and last used. This is used only to manage links and is deleted when the parent unlinks the phone or closes the account. We do not collect the child's name or phone number.

3. Personal Information of Children Under 14

The Service is for children to read, but only parents or guardians aged 14 or older can create an account. Child profiles are created and managed by the parent inside their own account, and the Company does not collect information that can identify a child (real name, date of birth, contact details, photo or voice). The birth year is collected as a year only, and only if the parent chooses to enter it. We recommend using a nickname rather than the child's real name.

Parents can view, change or delete their child's profile and reading records at any time. If the Company learns that a child under 14 created an account, it deletes that account's information without delay.

4. Retention and Deletion

• Account, profiles and reading records: until the account is closed. They are deleted without delay when the account is closed, and this cannot be undone. Deleting a child profile also deletes that profile's reading records.
• Access logs: 3 months (Protection of Communications Secrets Act)
• Email login code sending records (email address and time sent, not the code itself): 1 day
• Partner / event benefit application records: 1 year after the benefit period ends (to check duplicate grants). Responses left in the application form (Google Forms) are deleted once the benefits have been granted.
• After paid service begins, records kept by law: contract and withdrawal records 5 years, payment and supply records 5 years, consumer complaint and dispute records 3 years (Act on the Consumer Protection in Electronic Commerce)

Electronic files are deleted so that they cannot be recovered, and paper documents are shredded or incinerated.

5. Sharing with Third Parties

The Company does not provide or sell users' personal information to third parties, except where the user has agreed in advance or where the law specifically requires it.

6. Processors and Transfers Abroad

The Company entrusts the processing of personal information to the following companies to run the Service.

Transfers abroad — Because we use Cloudflare, Resend and Google Forms, personal information may be stored and processed outside Korea.

If you do not want your information transferred abroad, you may close your account. However, the Service cannot be provided without these transfers. If we add processors such as a payment provider, we will add them to this table and announce it.

7. Information Stored on Your Device (Cookies, etc.)

We use browser cookies and local storage to keep you logged in and to remember screen settings (highlight style, meaning language, where you last read, etc.). We do not use advertising or tracking cookies. You can delete them in your browser settings, but you will be logged out and some settings will reset.

8. Rights of Users and Legal Representatives

Users (parents) can at any time view, correct or delete their own and their child profiles' personal information, ask us to stop processing it, or close their account. You can do this in the settings screen or by contacting us below, and we will act without delay. Requests can also be made through a representative.

9. Security Measures

• All communication is encrypted (HTTPS).
• We keep the number of administrators with access to personal information to a minimum and log access to the admin screen and important actions.
• Administrators see only account usage (passes, number of profiles, etc.) and do not view individual reading records except when helping a user.

10. Privacy Officer

Privacy Officer: Kim Yoon-hyun
Contact: nexbiz.co.kr@gmail.com

You can also contact the following Korean organizations about privacy violations.

• Personal Information Dispute Mediation Committee 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office 1301 (www.spo.go.kr)
• Korean National Police Agency 182 (ecrm.police.go.kr)

11. Changes to This Policy

If this Policy changes, we will announce it on the Service at least 7 days before it takes effect (30 days for changes unfavorable to users).

Addendum — This Policy takes effect on October 1, 2026. Revised October 1, 2026 (linking a child's phone) October 2, 2026 (email login added) and October 15, 2026 (partner / event benefit applications; optional birth year and grade, reading goals and reports).