Chodaedam

Privacy policy

Effective date: September 19, 2026

IBRDOS Inc. (the “Company”) handles information for the Chodaedam app and its public invitation pages as described below. Privacy and support contact: dev@ibrdos.com.

1. Information stored on your device

The app stores the title, description, date and time, place, fee and bank details you enter, a device copy of an optional photo, style and language choices, publication status and appearance settings. You can create and edit drafts offline. Saving a draft alone does not publish its text or photo to our server.

To recover from storage errors, the app may retain the previous valid data and a recovery copy of a damaged original on your device. Deleting a draft or replacing or removing a photo also updates the valid backup to reflect that change. App-managed photos no longer referenced by a draft or valid backup are cleaned up; failed cleanup is retried on a later load or save. Photos referenced by another duplicate draft are retained. A separately preserved damaged original may contain earlier text or photo paths and is affected by app-data removal. Copies you separately save or share are managed at their destination.

Each invitation's management key is stored separately in the device's secure storage, outside the ordinary draft list. We do not provide accounts, account-based draft synchronization or automatic key recovery. Android app auto backup is disabled. Ordinary iOS app data may be affected by system backup or device migration settings; management keys use device-only secure storage. Losing app data or a key may mean losing the ability to manage a published invitation.

2. Information sent when you publish

When you publish or republish, the app sends the invitation fields, style, language and optional photo. The server also stores a public-link identifier, creation and update times, and a revision number to provide the same link, handle edits and deletion, and prevent duplicate requests. Selected photos are checked, orientation-corrected, resized and converted to WebP; EXIF metadata is removed during this processing.

For management requests, the app sends the management key in an HTTPS request header. The server stores a hash instead of the original key, and the key is not included in the public URL or invitation content. Duplicating a published photo requires the source invitation's management key and creates a separate invitation and photo copy.

Anyone with an invitation or image link can view it without signing in. Contact details, faces, event locations and bank details you include become part of the public content. Links can be forwarded, previewed by messaging services, indexed, captured or saved by others. Do not include information you do not want public or another person's information without the necessary authority.

Fees, bank names and account numbers are text entered by the author. The app does not connect financial accounts, check balances, process payments or transfers, or collect attendance responses or attendee lists. It does not automatically import your contacts, precise location or other photos.

3. Server retention and deletion

The Company uses Amazon Web Services infrastructure in the Seoul region of South Korea to store and serve public invitations and photos. The following information is retained for service operation, recovery and security.

When deletion through the new management feature completes, public access stops and the content and photo are removed from the operational store. Existing backups may retain them for up to 7 days; recovery procedures apply deletion status. If a network or other error prevents deletion from completing, the public link may remain accessible, so the app shows the result. Uninstalling the app does not delete published invitations from the server.

Public links created with the earlier “초대장 만들기 - SUPEREASY PROJECT” app are preserved. Earlier creation history and management rights are not automatically restored in the new app. To request deletion or report a rights issue for an earlier link, or an invitation whose key you have lost, send the link and reason to dev@ibrdos.com. We may verify the necessary authority to prevent unauthorized deletion.

Information subject to a legal retention requirement or a valid need to address a dispute or infringement is retained separately only for the necessary scope and period. Copies and caches already stored by other people, messaging services or search services are outside our deletion control.

4. Advertising and privacy choices

The app displays banner ads using Google AdMob's Google Mobile Ads SDK. We do not attach invitation text, photos, bank details or management keys to ad requests, and we do not use a separate usage-analytics SDK.

Google's advertising services may process IP addresses and approximate location derived from them, app- and device-related identifiers, ad impressions and responses, app interactions, and diagnostic and performance information for ad delivery and measurement, analytics and fraud prevention. Ad requests and permission handling differ by the installed app version.

Chodaedam 2.0 requests non-personalized ads. On iOS, it requests App Tracking Transparency (ATT) permission before starting the advertising SDK. Only after authorization does it run advertising consent and the advertising SDK; Google may use device and advertising information to deliver ads and measure their effectiveness. If permission is denied or restricted, no ads are requested and all invitation features remain available. The app checks permission again when it becomes active after a change in system settings. Android is configured not to use the advertising ID. These choices do not eliminate all information processing by the advertising SDK after authorization.

Version 1.0.4 of ‘초대장 만들기 - SUPEREASY PROJECT’ requests iOS tracking permission to use the advertising identifier and does not force all ad requests to be non-personalized. Where the user consents and device settings and applicable requirements permit, Google's advertising SDK may use advertising identifiers and related information for personalized ads and ad measurement. Denying tracking permission restricts IDFA access on iOS; it does not stop every other form of information processing by the advertising SDK. Advertising-identifier and tracking choices for that version can be managed in the operating system's privacy and advertising settings.

In Chodaedam 2.0, Google User Messaging Platform (UMP) displays privacy choices where required by region and applicable rules. UMP processes device and regional information and interactions with privacy choices to present and manage them. Where available, you can review or change choices through Advertising privacy in Settings. Ads are not requested when requests are not permitted. Clicking an ad or agreeing to advertising privacy choices is not a condition for creating an invitation.

Relevant information is transmitted to Google services and may be processed internationally. See the Google Privacy Policy and How Google uses information from apps using its services for processing and deletion information. Uninstalling the app does not delete advertising data already transmitted.

5. Sharing, external services and support

The app may check Expo's update service for updates to its execution code and bundled resources. This communication uses the IP address, operating-system platform, a randomly generated client identifier, runtime and update information, and related error information. Invitation text, photos and management keys are not attached to update requests. The Expo Privacy Policy applies to its update-delivery and troubleshooting processing, which may take place internationally.

The operating system's share sheet sends the public link to the messaging, email or other service you choose. New public invitation pages display content without separate web advertising or visitor analytics tools. Opening an external service, such as View on map, is subject to that service's terms. Saving a calendar file or copying a link does not send an attendance response to the Company.

If you contact dev@ibrdos.com, we use your sender address, message, voluntarily attached material and replies to provide support and protect rights. The app does not automatically attach invitations or management keys. Examples can replace real personal information; do not send passwords, management keys or a complete identity document with an initial inquiry. Support information is deleted when its purpose is fulfilled, except where a legal retention obligation applies.

6. Safeguards and your rights

We use HTTPS, device secure storage, server-side management-key hash checks, request and photo validation, and access restrictions. Access to support and operational information is limited to business needs, and backup and log retention is limited. Device locks and the access settings of sharing destinations can also help protect your information.

You may contact dev@ibrdos.com to exercise applicable rights to access, correct, delete or restrict processing of personal information held by the Company, or withdraw consent. An authorized representative may also make a request. We verify only the information needed to handle the request and respond under applicable law. For drafts held only on your device and externally shared copies, we can explain how to manage them at the relevant location.

Privacy assistance is also available from Korea's Privacy Infringement Report Center and Personal Information Dispute Mediation Committee. Chodaedam is not designed or marketed primarily for children. A parent or guardian who believes a child's information has been provided to the Company may contact us to request deletion or other assistance.

7. Changes

Changes to information processing and the effective date will be announced in the app or on its information pages. Where new consent is legally required, we will follow the applicable process.