Privacy Policy

Weking (the 'Company') values users' (each a 'member') personal information, complies with privacy regulations under applicable laws including the Personal Information Protection Act, and maintains this privacy policy to protect user rights. This privacy policy applies to Gly Log and all related services provided by the Company, and covers the following.

1. Data Collected and Collection Methods

The Company collects only the minimum personal information necessary for its processing purposes. [Collected at sign-up] Google sign-in: email address, account identifier Guest use: anonymous account identifier [Automatically generated] Device information (OS version, device language/country settings), service access times, push notification token [Optional] Marketing consent status [Entered directly by users during use] Blood sugar values and time slots, weight and condition, meals, and notes — health records processed with separate consent as sensitive information [Collection methods] Entered directly by users during sign-up and service use, or generated automatically in the course of using the service.

2. Purposes of Use

Collected personal information is used for the following purposes. 1. Member identification, sign-up confirmation, and account management 2. Storing records, syncing across devices, and backup 3. Receiving and responding to customer inquiries 4. Usage analysis and service improvement (in non-identifying statistical form) 5. Notices and other communications necessary for operating the service 6. (With marketing consent) Delivery of marketing information such as new features and events

3. Retention Period

Personal information is destroyed without delay upon account deletion or once the purpose of collection is fulfilled, except where retention is required by law. 1. Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce) 2. Service access records: 3 months (Protection of Communications Secrets Act)

4. Provision to Third Parties

The Company processes personal information only within the scope stated in 'Purposes of Use' and does not provide it to third parties without prior consent, except as required by law or upon lawful requests from investigative agencies.

5. Processing Delegation

The Company delegates certain processing for stable service delivery as follows. Processor: Google LLC (Firebase) Delegated work: member authentication, data storage and sync, push notification delivery Retention: until account deletion or termination of the delegation agreement

6. Sensitive Health Information

Health records entered by users — blood sugar values, measurement times, weight, meals, and notes — are sensitive information under the Personal Information Protection Act and are processed with separate consent. Health records are used only for viewing personal records, checking trends, generating reports, and syncing across devices, and are never used for ad targeting. PDF reports are generated and shared entirely on your device.

7. User Rights

Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information, and may withdraw consent. You can delete your account directly via MY > Delete Account in the app; other requests can be submitted to the contact below.

8. Destruction of Personal Information

Personal information subject to destruction is destroyed without delay. Electronic files are deleted using technical methods that prevent recovery.

9. Security Measures

The Company takes the following measures for safe processing. 1. Access control so that only your own account can access your records 2. Encryption in transit (HTTPS/TLS) 3. Minimized administrator access privileges

10. Privacy Officer and Contact

For privacy inquiries, complaints, or remedies, please contact: Officer: Weking Operations Email: cs@wekingcorp.com

Addendum

This privacy policy takes effect on July 10, 2026.