Privacy Policy

Crave@SFS Mobile Account Manager
Effective Date: January 7, 2026

1. Introduction
Crave Food Co., Ltd. (herein “Crave,” “we,” “us,” or “our”) values your privacy and is committed to protecting personal information in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA) and other applicable laws. This Privacy Policy explains how personal information is collected, used, stored, and protected in connection with the Crave@SFS mobile application (the “App”).

2. Scope of This Policy
This Privacy Policy applies solely to the Crave App, which is provided exclusively to members of the Seoul Foreign School community for the purpose of account management.

3. Personal Information We Collect
We collect only the minimum personal information necessary to provide our services. Information collected includes the user’s email address used for login and account identification, a user account identifier associated with Seoul Foreign School, and information generated through use of the App, such as account balance, transaction history, menu viewing activity, and basic app usage records for service operation and troubleshooting. We do not collect sensitive personal information such as resident registration numbers, financial account numbers, or biometric data.

4. Purpose of Collection and Use
Personal information is collected and used solely for the purposes of user authentication and account access, displaying account balances and transaction history, displaying active menus, providing information regarding payment methods and account support, operating and maintaining the App, responding to user inquiries, improving service quality, and complying with applicable laws and regulations.

5. Legal Basis for Processing
Personal information is processed based on user consent and where necessary for the performance of a service contract, as permitted under PIPA.

6. Retention and Storage Period
Personal information is retained only for as long as necessary to provide services or as required by law. Account information is retained while the user account remains active, transaction records are retained in accordance with applicable accounting and tax laws, and access logs are retained for up to three months in accordance with Korean law.

7. Destruction of Personal Information
Once the retention period expires, personal information is destroyed without delay. Electronic data is securely deleted or irreversibly anonymized, and any printed materials are shredded or otherwise destroyed.

8. Provision to Third Parties
Crave does not sell, rent, or disclose personal information to third parties except where required by law, necessary to comply with lawful requests by authorities, or where explicit consent has been obtained from the user.

9. Outsourcing and Data Processing
Where personal information processing is outsourced, such as for cloud hosting or system maintenance, Crave ensures that appropriate safeguards are in place through written agreements and that all processors comply with PIPA.

10. User Rights
Users have the right to access their personal information, request correction or deletion, request suspension of processing, and withdraw consent in accordance with applicable law. Requests may be submitted using the contact information below, and Crave will respond without delay as required by law.

11. Data Security Measures
Crave implements reasonable administrative, technical, and physical security measures to protect personal information, including access controls, authentication systems, encryption where appropriate, and regular system monitoring.

12. Children’s Privacy
The App is intended for members of the Seoul Foreign School community, and where required by law, parental or legal guardian consent is obtained for users under the age of 14.

13. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in law or service operations, and any material changes will be communicated through the App or the Crave website.

14. Contact Information
If you have any questions or requests regarding this Privacy Policy or the handling of personal information, please contact us.