Privacy Policy

Effective Date: March 11, 2026 | Version 1.0

Merge4 ("Company") values the privacy of Nonstop ("Service") users and complies with applicable data protection laws. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and with whom we share it.

1. Personal Data We Collect

We collect the following personal data to provide and improve the Service:

1.1 Data Collected at Registration

Data	Purpose	Required
Email address	Account creation, login, identity verification	Yes
Password (stored encrypted)	Account security	Yes (email signup)
Nickname	Display name within the Service	Yes
University	University community assignment	Yes

1.2 Data Collected via Social Login

Login Method	Data Collected
Google Sign-In	Email, name, profile image
Apple Sign-In	Email (may be limited by user preference)

1.3 Data Collected Automatically

Data	Purpose
Device information (model, OS version)	Service optimization and error analysis
App usage data	Service improvement and analytics
Crash reports	App stability improvement
Push notification token	Sending notifications

1.4 Data Provided by Users

Data	Purpose
Profile image	Profile display
Timetable data (courses, times, locations)	Timetable management feature
Posts (text, images)	Community features
Chat messages and images	Messaging feature

2. How We Use Your Data

We use the collected personal data for the following purposes:

• Account Management: Registration, identity verification, account maintenance, account deletion
• Service Delivery: Timetable management, bulletin boards, messaging, friend networking, and other core features
• Service Improvement: Usage analytics, error diagnosis and fixes, user experience improvement
• Notifications: Service announcements and activity alerts
• Safety and Security: Preventing abuse and enforcing Terms of Service

3. Data Retention Period

1. Personal data is retained until account deletion. When you request account deletion, your data is destroyed without delay.
2. Exceptions where data may be retained longer:
   • Service usage records: Destroyed within 30 days after account deletion
   • Abuse prevention records: Retained for up to 1 year after account deletion
3. If a User has been inactive for more than 1 year, the Company may separately store or destroy personal data after prior notice.

4. Sharing Data with Third Parties

We do not share your personal data with third parties, except in the following cases:

• When you have given prior consent
• When required by applicable law

5. Data Processing Partners

We use the following third-party services to operate the Service:

Partner	Service Provided	Retention Period
Supabase Inc.	Authentication, database management, file storage	Until account deletion
Google LLC (Firebase)	App analytics, crash reporting, push notifications	Auto-expires after collection
Google LLC (Sign-In)	Social login authentication	At time of authentication
Apple Inc. (Sign-In)	Social login authentication	At time of authentication

6. Data Destruction

1. When the retention period expires or the processing purpose is fulfilled, personal data is destroyed without delay.
2. Destruction methods:
   • Electronic files: Permanently deleted using methods that prevent recovery
   • Physical records: Shredded or incinerated

7. Your Rights

You have the following rights regarding your personal data:

• Right of Access: You may request to view how your personal data is being processed.
• Right of Rectification: You may request correction of inaccurate personal data.
• Right of Deletion: You may request deletion of your personal data.
• Right to Restrict Processing: You may request that processing of your data be suspended.
• Right to Withdraw Consent: You may withdraw your consent to data collection and use at any time.

To exercise these rights, use the settings within the Service or contact us at hongdroid94@gmail.com. We will take action without delay.

8. Data Security Measures

We implement the following measures to protect your personal data:

• Passwords are stored encrypted (hashed)
• SSL/TLS encryption for all data transmission
• Database access control via Row Level Security (RLS)
• Regular security reviews

9. Cookies and Tracking

This Service is a mobile application and does not use web cookies. However, we collect anonymized usage statistics through Firebase Analytics within the app. You may limit analytics data collection through your device settings.

10. Data Protection Officer

The Company has designated the following person responsible for personal data protection:

• Company: Merge4
• Email: hongdroid94@gmail.com

For any questions, concerns, or complaints regarding your personal data, please contact us using the information above.

11. Changes to This Policy

If this Privacy Policy is updated, changes will be announced within the Service at least 7 days before taking effect. For significant changes, we will provide separate notification via push notifications.