Roothub Inc. ("Company", "we") complies with the Personal Information Protection Act of Korea and other applicable laws, and protects your personal information as described below.
1. Information We Collect
At signup: email address, mobile phone number (SMS check that you control the number), password (stored encrypted), date of birth, nickname, language
If you sign up or link with Google: the email address and account identifier Google provides setting
Profile (optional): profile image, bio
While using the Service: room participation history (join/leave time, role), text chat messages, friend/block/report records
Audio spoken in rooms: held temporarily in server memory, per speaker, for up to 60 seconds and then discarded automatically; when a report is filed, the reported user's last 60 seconds are kept as report evidence (see Terms §8)
If you enable notifications: a device token used to deliver push notifications
Automatically: device information (model, OS, app version), access logs, error records
2. Purposes
Account creation, confirming you control the phone number, and confirming users are 14 or older
Providing voice rooms, managing speakers and listeners, host controls
Handling reports, preventing abuse, protecting users and resolving disputes
Improving the Service, analyzing errors, delivering notices
Complying with legal obligations
3. Retention
Account information: 30 days after account deletion (to allow cancellation and handle disputes), then deleted
Text chat: 90 days from posting
Temporarily held audio: 60 seconds after it is spoken (discarded automatically). A copy taken when report is tapped is discarded within 15 minutes if the report is not submitted
Report evidence (including up to 60 seconds of audio): 1 year from receipt
Access logs: 3 months under the Protection of Communications Secrets Act
Information that must be retained under other laws: for the period those laws require
4. Sharing
We do not share personal information with third parties except with your consent or where required by law.
5. Processors
We use the following processors to operate the Service. Personal information they handle is stored in Korea (Seoul).
Supabase Inc.: storing account information (email, phone number, password) and service data
Amazon Web Services, Inc.: storing profile images and report audio files, and running our audio relay servers
5-1. International Transfers
To send verification messages and push notifications and to protect the website, the personal information below is processed in the United States. We do not have these companies retain it on our behalf.
Google LLC (Firebase), USA, contact firebase.google.com/support/troubleshooter/contact. Items: phone number, device token for push notifications, app crash records, Google account identifier (if you sign up with Google). Purpose: SMS phone verification, Google sign-in, push notifications, crash diagnostics. Retention: phone number deleted right after verification, device token until account deletion, crash records up to 90 days.
Plus Five Five, Inc. (Resend), USA, contact [email protected]. Items: email address. Purpose: sending verification code emails. Retention: until the email is delivered.
Cloudflare, Inc., USA, contact [email protected]. Items: IP address, request records. Purpose: protecting and delivering website traffic. Retention: until the request is handled.
When and how: transferred over encrypted connections at the moment you use the relevant feature.
How to refuse and the effect: you may refuse international transfer by contacting [email protected]. If you do, you will not be able to use the affected features such as sign-up, sign-in and notifications.
5-2. Automatic Data Collection and How to Refuse It
We do not use cookies for advertising or behavioral tracking.
On the web we use browser storage to keep you signed in and to remember language and theme. These values stay in your browser and are not sent to our servers.
You can refuse or clear this storage in your browser settings. If you do, you will not stay signed in and some features may not work.
The app uses on-device storage for the same purposes; removing the app removes it.
6. Your Rights
You may access, correct or delete your personal information, or request that processing be suspended, at any time through the app settings or [email protected].
You may delete your account yourself from the app settings.
You may withdraw consent; withdrawing consent for required information means ending your use of the Service.
7. Deletion
We delete personal information without delay once the retention period ends or the purpose is fulfilled. Electronic files are erased irrecoverably; printed material is shredded or incinerated.
8. Security
Passwords are stored using irreversible hashing.
Raw phone numbers are kept only in the authentication system and never in the service database or logs.
Encryption in transit (TLS), row-level access control and access logging are applied.
Access to personal information is limited to the minimum necessary staff and reviewed regularly.
9. Children Under 14
We do not collect personal information from children under 14. We verify age with the date of birth at signup and delete accounts found to belong to anyone under 14.
You may direct any privacy inquiry, complaint or remedy request to the contact above. You may also contact the Korea Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
11. Changes
Changes to this Policy are announced in the app at least 7 days before they take effect (30 days for material changes).
12. Company
Company: Roothub Inc. · Representative: Kim Hyun-soo
Address: 509-216A, 5F, 81 Convensia-daero, Yeonsu-gu, Incheon, Republic of Korea
Addendum
This Policy takes effect on 1 October 2026. (Established 14 September 2026.)
The Korean version is the authoritative text; this English translation is provided for convenience and the Korean version prevails in case of conflict.