Privacy policy

Wecho Privacy Policy

Last Updated: November 25, 2025 Effective Date: December 1, 2025


The independent developer ("Operator") operating Wecho ("Service") values users' personal information and complies with relevant laws and regulations including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection. This Privacy Policy explains how your personal information is collected, used, and managed.


1. Personal Information We Collect

1.1 Required Information

Information
Collection Method

Social login information (Google/Apple account unique ID)

Upon registration

Email address

Upon registration

Nickname

Upon registration/profile setup

Profile image

Upon profile setup (optional)

1.2 Information Collected During Service Use

Information
Collection Timing

Voice message files

When creating Message Echo

Voice response files

When responding to Echo

Voice chat recording files

When user uses recording feature (optional)

Text message content

When creating Message Echo

Diary content and images

When writing diary

Comment content

When writing comments

Echo settings (time, volume, vibration, etc.)

When creating Echo

1.3 Automatically Collected Information

Information
Purpose

Device information (model, OS version)

Service optimization

App usage information, feature usage records

Service improvement

Error and crash logs

Stability improvement

Advertising identifier (IDFA/GAID)

Personalized advertising

Service usage statistics

Statistical analysis


2. Purpose of Collection and Use of Personal Information

2.1 Service Provision

  • User identification and authentication

  • Message Echo service provision (text/voice message delivery)

  • Community Echo service provision (real-time voice chat)

  • Diary service provision

  • Premium subscription management

  • Push notification delivery

2.2 Service Improvement and Development

  • Service quality improvement and new feature development

  • User behavior analysis and statistics (Firebase Analytics)

  • Error and crash analysis for stability improvement (Firebase Crashlytics)

  • Performance monitoring and optimization

2.3 Marketing and Advertising

  • Personalized advertising (Google Mobile Ads)

  • Service usage statistical analysis

  • Ad viewing management for penalty release


3. Retention and Use Period of Personal Information

Item
Retention Period
Basis

Member information

Until membership withdrawal

Service provision

Voice message files

Until withdrawal or message deletion

Service provision

Voice response files

Until withdrawal or response deletion

Service provision

Voice chat recording files

Until membership withdrawal

Service provision

Diary content and images

Until membership withdrawal

Service provision

Service usage records

5 years after withdrawal

Protection of Communications Secrets Act

Records of contracts or subscription withdrawal

5 years

Act on Consumer Protection in Electronic Commerce

Records of payment and supply of goods

5 years

Act on Consumer Protection in Electronic Commerce

Records of consumer complaints or dispute resolution

3 years

Act on Consumer Protection in Electronic Commerce


4. Provision of Personal Information to Third Parties

The Operator does not provide users' personal information to third parties in principle. However, exceptions are made in the following cases:

  • Required by law: When required by legitimate legal procedures such as court warrants or requests from investigative authorities

  • With user consent: When separate consent is obtained


5. Entrustment of Personal Information Processing

The following personal information processing tasks are entrusted for service provision:

5.1 Firebase (Google LLC)

Item
Details

Entrusted Tasks

Data storage (Firestore), file storage (Storage), user authentication (Auth), service analytics (Analytics), crash reporting (Crashlytics), remote config (Remote Config), push notifications (Cloud Messaging)

Entrustment Period

Duration of service provision

Purpose

User authentication and account management, user data and file storage, service usage analysis and statistics, app stability monitoring and improvement, push notification delivery

5.2 Agora (Agora.io)

Item
Details

Entrusted Tasks

Voice chat service provision

Entrustment Period

Duration of voice chat service use

Purpose

Real-time voice call service provision

Personal Information

Voice data (real-time transmission only, not stored on servers)

Special Note

Voice data during voice chat is transmitted in real-time only and is not stored on Agora servers. However, if users optionally record, those recording files are stored in Firebase Storage.

5.3 Google Mobile Ads (Google LLC)

Item
Details

Entrusted Tasks

Advertising service provision

Entrustment Period

Duration of advertising service use

Purpose

Personalized advertising

Collected Information

Advertising identifier, device information, ad viewing records


6. Users' Rights and How to Exercise Them

Users may exercise the following rights at any time:

  • Request to access personal information: You can request access to your personal information.

  • Request to correct or delete personal information: You can request correction or deletion of incorrect personal information.

  • Request to suspend processing: You can request suspension of personal information processing.

  • Membership withdrawal: You can withdraw through the settings menu within the Service.

To exercise these rights, please contact us through the contact information below, and we will take action without delay.


7. Destruction of Personal Information

When personal information becomes unnecessary due to expiration of the retention period or achievement of processing purposes, we will destroy the personal information without delay.

7.1 Destruction Methods

Data Type
Destruction Method

Electronic files

Deleted using technical methods that prevent record reproduction

Firebase Storage files

Deleted through Firebase Console

Documents, printouts, written materials

Shredded or incinerated


8. Technical and Administrative Measures for Personal Information Protection

We take the following measures to protect users' personal information:

8.1 Technical Measures

  • Encryption of personal information: Important personal information is encrypted for storage and transmission

  • Access restriction: Access to personal information is minimized

  • Security program installation: Security programs installed to prevent personal information leakage and damage from hacking or viruses

  • Firebase security rules: Access to Firestore and Storage is strictly restricted

  • HTTPS communication: Encrypted communication used for all data transmission

8.2 Administrative Measures

  • Establishment and implementation of internal management plans

  • Regular security inspections


9. Cookies and Automatically Collected Information

The following information may be automatically collected for service provision:

Collected Information
Purpose

App execution information, feature usage records

Service improvement

Screen view records

User experience analysis

Error and crash logs

Stability improvement (Firebase Crashlytics)

Device information (model, OS version)

Service optimization

Service usage statistics

Service improvement

This information is used only for service improvement and stability enhancement.


10. Special Provisions Regarding Voice Data Processing

10.1 Voice Data Collection

Data Type
Collection Timing

Voice message recording files

When creating Message Echo

Voice response files

When responding to Echo

Voice chat recording files

When user uses recording feature (optional)

10.2 Voice Data Processing

Data Type
Processing Method

Voice messages

Stored in Firebase Storage and may be delivered to other users

Voice responses

Stored in Firebase Storage and delivered to message authors

Voice chat recordings

Stored in Firebase Storage only when users optionally record

Real-time voice chat

Transmitted in real-time through Agora service, not stored on servers

10.3 Voice Data Retention Period

Data Type
Retention Period

Voice messages

Until membership withdrawal or message deletion

Voice responses

Until membership withdrawal or response deletion

Voice chat recordings

Until membership withdrawal

Real-time voice chat

Not stored on servers


11. Processing of Personal Information of Children Under 14

This Service does not accept membership registration from children under 14 years of age and does not collect personal information from children under 14.


12. Personal Information Protection Officer

The following Personal Information Protection Officer is designated to oversee personal information processing and handle user complaints and damage relief related to personal information processing.

Item
Details

Representative

Wecho Operator

Email

chcggang@gmail.com


13. Changes to Privacy Policy

If there are additions, deletions, or modifications to this Privacy Policy due to changes in laws, policies, or security technology, we will notify users through in-app announcements at least 7 days before the implementation of changes.


14. Remedies for Rights Infringement

Users may apply for dispute resolution or consultation with the following organizations for relief from personal information infringement.

Organization
Contact
Website

Personal Information Dispute Mediation Committee

1833-6972

www.kopico.go.kr

Personal Information Infringement Report Center

118

privacy.kisa.or.kr

Supreme Prosecutors' Office Cyber Investigation Division

1301

www.spo.go.kr

National Police Agency Cyber Bureau

182

cyberbureau.police.go.kr


Supplementary Provisions

This Privacy Policy is effective from December 1, 2025.


Wecho Operator Contact: chcggang@gmail.com

Last updated