The following is the general principle of Norinotes’ privacy policy.

• "Personal information" refers to information about an individual that can identify the individual by such identifiers as name, connecting information (CI), and duplicate verification information (DI), including but not limited to signs, characters, voice, sound, image, and biometric information (even if the information alone cannot identify a specific individual but can easily be combined with other information).
• Norinotes places great importance on protecting your personal information and complies with the personal information protection regulations under the "Act on Promotion of Information and Communication Network Utilization and Information Protection, Etc." and the "Personal Information Protection Guidelines" established by the Korea Communications Commission. Furthermore, we inform you that we always strive to use the personal information you provide for appropriate purposes and in appropriate ways and make constant efforts to effectively and actively protect your personal information through our privacy policy.
• Norinotes makes its privacy policy readily available within the app so that you can access it conveniently at any time.
• Norinotes establishes procedures necessary to revise the privacy policy for continuous improvement and assigns version numbers and effective dates to the revised policy so that you can verify the changes.
• In case of significant changes to Norinotes's privacy policy, we will announce the reasons and details of the changes to customers through our website or other channels before implementing the revised privacy policy.

Article 1. Purpose of Collection and Use of Personal Information

Norinotes will not use the personal information of users beyond the scope notified in this article unless there is consent from the user or it is permitted by law. The purposes of using the collected personal information are as follows:

• Member Management: Verification of identity for the use of membership services, personal identification, prevention of unauthorized or fraudulent use by malicious members, confirmation of intent to join, limitation on the number of registrations and frequency of registration, verification of legal representative for future reference, record preservation for dispute resolution, age verification, handling of complaints and consultations, notification of important information, etc.
• Provision of Customized Member Services: Development and customization of new services (language education content), improvement of advertising information such as events, satisfaction surveys, provision of services and advertisement according to demographic characteristics, analysis of access frequency or extraction of statistics on user service usage, development and provision of discount benefits according to payment types.
• Provision of Customized Advertising: Encouraging advertisement tailored to the customer's preferences through third-party advertising services based on behavioral information classification.
• Pseudonymization for Statistical Analysis, Scientific Research, and Public Record Preservation: Processing collected personal information into unidentifiable statistical data for use and provision.

Article 2. Items and Methods of Collecting Personal Information

1. Items and Purposes of Collected Personal Information

   Norinotes collects both essential information required for users to use the service and optional information based on user preferences.

   [During Membership Registration]

   ① When registering:

   Name, email (ID), mobile phone number, nationality, encrypted user identification value (CI), duplicate registration verification information (DI), nickname

• Norinotes does not collect sensitive personal information that may infringe upon the basic human rights of users (such as race and ethnicity, beliefs and religion, birthplace and domicile, political tendencies and criminal records, health status and sexual life, etc.).
• Norinotes may collect automatically generated information (such as log records generated automatically during the process of service contract fulfillment) without consent as permitted by law, within the scope of purposes specified in the mandatory consent items. (If the customer agrees to individual optional consent, the information may also be collected and used for the specified purpose.)
• Norinotes may process and utilize the collected personal information into unidentifiable statistical data and other forms for use or provision.

1. Methods of Personal Information Collection

   Norinotes collects personal information through the following methods:

   ① Collection through website registration process

   ② Automatic collection during service usage

   ③ Complaints or reports from individuals or third parties

   ④ Automatic collection through generated information collection tools

   • Registering on Norinotes is considered as consenting to the collection of personal information for Norinotes's services.