Privacy Policy
Effective date: January 19, 2026
Last revised: October 6, 2026
Previous version: revision of September 19, 2026 (in effect from September 19, 2026 to October 5, 2026)
1. Personal information we collect
ElSeeker (the "Service") collects only the minimum information needed to provide the Service smoothly.
- 👤 When you sign up (social login):
- Google · Naver: email address, profile name, profile image
- Kakao: profile nickname, profile image, email address (only if you have given separate consent)
- Apple: email address (if you choose "Hide My Email", we collect the private relay address issued by Apple instead) — Apple does not provide a profile name or profile image.
- The unique identifier of each social service (used to identify members)
- 📧 When you sign up (email):
- Email address, nickname
- Password (stored with one-way encryption; the original is never kept)
- Email verification code (kept only in encrypted form and destroyed when verification is completed or the code expires)
- ✍️ Information created while you use the Service: community posts and comments, Bible meditations (passage, date of meditation, title, content), study records (notes, highlights, reading progress, quiz and game records), community reaction, report, and block records, 1:1 inquiries (title, content)
- 📨 When you contact us without an account: email address, name (optional), inquiry title and content
- 🖥 Information collected automatically: access logs, IP address, device information, Referer (where you came from), pages visited, visitor identification cookie (
es_visitor_id, up to 12 months), authentication cookies (ACCESS_TOKEN·REFRESH_TOKEN, HttpOnly)
※ You can choose whether to accept cookies and can refuse to store them through your web browser's settings. However, if you refuse the essential cookies needed to operate the Service, such as those that keep you logged in, some features may not be available.
※ Bible meditations may contain your thoughts about your faith, that is, sensitive information such as your religious beliefs. For this reason, the meditation feature is provided only if you give separate consent (see "Processing of sensitive information" below). By default, only you can see your meditations, and they are shown to other users only if you choose to publish them.
※ While you are writing, the text in progress may be kept temporarily in your browser's storage on your device. This information is not sent to our servers and is deleted when you finish saving. Text last edited more than 30 days ago is deleted the next time you open a meditation screen, and clearing your browser's site data deletes it at any time.
2. Purposes of collecting and using personal information
We use the personal information we collect only for the following purposes.
- Identifying members, verifying identity, and keeping you logged in
- Providing the Service, such as community and study features, and operating personalized features
- Answering 1:1 inquiries and inquiries from people without an account
- Storing, viewing, and editing Bible meditations and, if you choose, publishing them in the community
- Preventing fraudulent and unauthorized use
- Handling disputes and verifying the identity of people who make requests
- Statistical analysis to improve the Service and resolving technical problems
3. Processing of sensitive information
In principle, the Service does not collect sensitive information. However, Bible meditations may contain information about your beliefs and convictions, such as your religious beliefs (sensitive information under Article 23 of Korea's Personal Information Protection Act). The meditation feature is therefore provided only if you give consent on the meditation screen, separately from your consent to the processing of other personal information.
| Purpose | Storing, viewing, and editing meditations and, if you choose, publishing them in the community |
|---|---|
| Information processed | Sensitive information contained in meditations (passage, date of meditation, title, content) |
| Retention period | Until you delete the meditation, withdraw your consent, or delete your account. However, published meditations may remain after you delete your account (see "Retention and destruction of personal information" below). |
| Right to refuse | You may refuse to consent. If you do, only the meditation feature is unavailable; your use of the rest of the Service is not affected. |
You can withdraw your consent at any time. If you do, all of your meditations are deleted and any meditations you published are taken down.
Possibility of sensitive information becoming public, and how to keep it private
| Service | Sensitive information | Possibility of becoming public | How to keep it private |
|---|---|---|---|
| Publishing Bible meditations | Information about beliefs and convictions, such as religious beliefs | Meditations you choose to publish can be seen by anyone and may appear in search engines. | Meditations are private by default. Before publishing, you choose whether to publish in a confirmation dialog. After publishing, you can delete the meditation or ask us through our contact address to stop publishing it. |
4. Retention and destruction of personal information
In principle, your personal information is destroyed without delay when you delete your account. However, in the cases listed below and where applicable laws require it to be retained, it is kept for the stated period.
- Member information, study records, private meditations, 1:1 inquiries, and community reaction, report, and block records: destroyed immediately when you delete your account (reaction counts go down accordingly; a post's report count remains)
- Published content (community posts and comments, and meditations you have published): not deleted when you delete your account; it remains with the author shown as "Deleted user". Anything you posted anonymously stays anonymous. If you want it removed, you can delete it yourself before deleting your account, or select "Also delete my published meditations" on the account deletion screen. After you delete your account, you can no longer delete it yourself, so please send your request to our contact address (see "Your rights" below).
- Deleted posts (including the comments on them) and deleted comments: kept for 30 days after deletion to handle reports and allow recovery, then their content is destroyed. This applies whether you deleted them or we took them down, before or after you delete your account. 1:1 inquiries you delete are also destroyed 30 days after deletion
- Inquiries from people without an account (email address, name, inquiry title and content, our reply): kept for one year after we receive them to respond and handle disputes, then destroyed
- Account deletion records (member identifier, email address, nickname, date and time of deletion): kept for one year after you delete your account to prevent fraudulent use, handle disputes, and verify the identity of people who ask us to delete posts after deleting their account, then destroyed. Posts and comments that remain after you delete your account are linked to this record for that verification, and the link is deleted when the record is destroyed
- Consent records (member identifier, the item consented to and the document version, whether you consented and when, IP address, document language): kept for one year after you delete your account as evidence of consent and to handle disputes, then destroyed
- Automatically collected records such as access and visit logs: kept for statistical analysis and to prevent fraudulent use, then destroyed; where applicable laws set a retention period, that period applies
- Sign-up requests whose email verification was not completed (email address, nickname, password): automatically destroyed 24 hours after the verification code expires
Data storage and destruction
The Service's personal information is encrypted and stored securely in Supabase's database (Amazon Web Services, Asia Pacific (Seoul) region), and the Service's application servers run on Google Cloud (Seoul region, Korea). For transfers abroad, see "Transfer of personal information abroad" below.
When data is destroyed, it is permanently deleted using technical methods that make recovery impossible.
About published content. Posts and meditations you publish can be seen by other users and may be indexed by search engines. A published meditation cannot be made private again on the screen; to take it down, delete the meditation or ask us through our contact address to stop publishing it. Deleted posts stop being visible on the Service immediately, but copies remaining in search engines disappear according to each search engine's update cycle.
Anonymous publishing. Posts you publish anonymously do not show your nickname or profile image. However, the Service operator can identify the author in order to handle reports and prevent fraudulent use.
5. Provision to third parties and outsourcing
The Service does not provide personal information to outside parties without your consent. However, to manage the infrastructure needed to operate the Service, it outsources the processing of personal information to specialized cloud companies as follows.
| Service provider | Outsourced work | Storage location |
|---|---|---|
| Google LLC (Google Cloud) | Operating the Service's servers, storing access records (logs) | Servers: Seoul region, Korea Access records: global storage with no specified location |
| Supabase Pte. Ltd. | Database storage and operation | Amazon Web Services, Asia Pacific (Seoul) region |
6. Transfer of personal information abroad
In outsourcing the processing and storage of personal information to the service providers above, the Service transfers personal information abroad (Article 28-8(1)(iii)(a) of Korea's Personal Information Protection Act). The database and servers are in the Seoul region, but because the service providers and their sub-processors may access or store personal information outside Korea, we describe this as a transfer abroad.
| Item | Google LLC | Supabase Pte. Ltd. |
|---|---|---|
| Recipient's contact details | 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Google Cloud Data Protection Team: support.google.com/cloud/contact/dpo |
65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 privacy@supabase.com |
| Information transferred | Member information, information created while you use the Service (including Bible meditations and posts), inquiries from people without an account, access records | |
| Countries of transfer | The United States, the countries where the Google data centers storing access records are located, and the countries listed in Google's published list of sub-processors (cloud.google.com/terms/subprocessors) | Singapore, the United States, and the countries where the companies in Supabase's published list of sub-processors process data (supabase.com/legal/customer-resources/subprocessor-list) |
| When and how | Sent and stored over the network whenever you use the Service, including when the service provider accesses it remotely. | |
| Purpose of use | Operating the Service's servers, storing access records (logs) | Database storage and operation |
| Retention period | Until the outsourcing contract ends or you delete your account. The retention period of each item follows "Retention and destruction of personal information". | |
How to refuse, and the effect. The transfer abroad is essential to providing the Service, so it cannot be refused on its own. To refuse it, delete your account or ask us through our contact address to delete it. Once your account is deleted, you can no longer use the Service.
7. Your rights
You can view or modify your personal information at any time, ask us to delete it or to stop processing it, and withdraw your consent. You can withdraw your consent to the use of your personal information by deleting your account; for other requests, write to our contact address (hello@elseeker.com) and we will handle them without delay.
- Stopping the publication of a meditation. A published meditation cannot be made private again on the screen, but if you want to keep the meditation and only stop publishing it, please ask us through our contact address. We will take the post down and keep the meditation visible only to you.
- Deleting posts left after you delete your account. After you delete your account, you can no longer delete your posts yourself. Send the post's address (URL), the email address you used to sign up, and the reason for your request to our contact address (hello@elseeker.com). We check the account deletion records to confirm that you wrote the post, and then take it down. Posts we take down are removed from the sitemap, and their addresses return a "page not found" (404) error. If the retention period for account deletion records (one year) has passed or your identity is hard to confirm, we may ask for additional material showing that you are the author.
8. Measures to keep personal information secure
The Service takes the following measures to keep your personal information safe.
- Protecting data with encryption in transit (HTTPS)
- Minimizing the risk of theft by encrypting authentication tokens and cookies and marking them HttpOnly
- Storing passwords with one-way encryption (hashing) — original passwords are never kept and cannot be decrypted
- Minimizing and managing access rights to personal information
- Managing data on secure cloud infrastructure (Google Cloud, Supabase)
- Encrypting data stored in the database and backups (AES-256)
9. Personal information of children
The Service is intended for users aged 14 or older (16 or older if you sign up in a language other than Korean) and does not collect the personal information of anyone below that age. If we find that someone below that age has signed up, that information is destroyed without delay.
10. Changes to this Privacy Policy
This Privacy Policy may be revised due to changes in laws, policies, or the Service. When it is revised, the changes and their effective date are announced in advance on the Service. Previous versions and the periods they were in effect are listed at the top of this document.
11. Remedies for infringement of your rights
If you need to report or get advice about an infringement of your personal information, you can contact the following organizations in Korea.
- Personal Information Dispute Mediation Committee: 1833-1130 (from within Korea, no area code) / www.kopico.go.kr
- Personal Information Infringement Report Center: 118 (from within Korea, no area code) / privacy.kisa.or.kr
- Supreme Prosecutors' Office, Cyber Investigation Division: 1301 (from within Korea, no area code) / www.spo.go.kr
- Korean National Police Agency, Cyber Investigation Bureau: 182 (from within Korea, no area code) / ecrm.police.go.kr
12. Chief Privacy Officer and contact
For questions or complaints about personal information, please contact us below.