Related services

  • Screen Settings

Policy

Various policies are developed to ensure that all users can use Kakao services safely.

Kakao Privacy Protection Policy

1. Kakao Privacy Policy Labeling

Kakao believes that the first step of guaranteeing the right to self-determination of personal information is to provide easy-to-understand information about what kinds of personal information are collected by Kakao, and the procedure and method of processing them.

Kakao disclose its personal data processing policy transparently so that users can check information related to Kakao’s personal data processing at any time. In particular, we understand that the personal data processing policy prepared in accordance with applicable laws can still be complicated and difficult to understand for users, and try very hard to provide a processing policy that anyone can easily understand.

The Kakao Privacy Policy uses easy words and sentences so that users can easily understand them, and applies self-developed labeling images so that users can intuitively accept them.

Privacy Policy Video with Labeling
Video without sound, a screen showing labeling designs applied to the website.
Check Kakao’s Privacy PolicyNew Window
Check our labeling design philosophy and storyNew Window
2. Personal Data Processing Procedure

Kakao collects, uses, and provides personal information based on user consent and actively protects users' informational autonomy. For secured service use, Kakao is committed to protecting privacy.

When does Kakao collect personal information?
During sign-up Kakao collects personal information required for subscription upon a user’s consent.
During service use Kakao may also collect personal information to provide additional services and personalized content upon user’s consent.
During access to services When a user accesses Internet services, access history automatically generated in the process of service use may be collected.
What information does Kakao collect?
Required Information Minimum information required to provide services or comply with legal requirements are collected.
Optional Information Additional personal information are collected to provide specialized services. Even with a refusal to consent, users can still use essential functions in the service.
Automatically Generated Information Any information automatically generated in the process of using PC web, mobile web or app, such as device information, IP address, cookies, visit date, poor usage record and service usage history, may be collected.
How does Kakao use personal information?
Provision of essential service functions Personal information is used to identify users within the service, provide services, handle user inquiries or complaints, and guide services.
Provision of additional functions Personal information is used to provide paid services, used in marketing and advertising, used to develop or improve services, and provide personalized content.
User protection Personal information is used to limit any acts harmful to service, such as sending spams, distributing malicious codes, or violating the terms of use and service policies.
To whom does Kakao provide personal information?
Entrusted handling of personal information Kakao may entrust parts of personal information processing works necessary for service provision to external vendors. In this case, Kakao manages and supervises the vendors to ensure that entrusted personal information is processed safely.
Provision of personal information to third-parties If a user uses the Kakao Account login service or services provided by external partners, personal information is provided to third-parties after the user’s consent is obtained.
How does Kakao destroy personal information?
Destruction of Personal Information Kakao destroys personal information without delay when there is a reason for such destruction, such as fulfillment of the purpose of collection or a user’s account deletion. However, it will be retained for certain period of time if retention is required by relevant laws and regulations or internal policies.
Method of Destruction When there is a reason for destruction, the method of destruction will be decided based on the type of personal information. Electronic files are deleted by technical methods making it unrestorable and unrecoverable. Records, printed copies and other documents are shredded or incinerated for deletion.
3. Privacy by Design

Kakao applies ‘Privacy by Design’ as a basic principle.

We embrace Privacy by Design (PbD) as the overarching principle for data privacy, and protect users’ personal data based on this principle.

Privacy by Design means ‘design considering privacy issues at every stage’. Rather than responding to privacy violation after it occurs, we predict and anticipate privacy violation risks or prepare against such risks from the planning and design stages, to eliminate risk factors in advance. Operating a PbD-based privacy protection policy is suitable for a business environment with fast technological development because it can comprehensively review not only legal violations but also possible infringements on user privacy.

Based on the following seven Privacy by Design principles, Kakao ensures that personal data protection principles are internalized into its services by reviewing the application of laws, policies, and technologies that consider personal data protection through privacy impact assessments across all stages of service planning, operation, and termination.

Kakao 'Privacy by Design' Principle
1. 사후 조치가 아닌 사전에 예측하고 예방하기 Proactive not Reactive; Preventative not Remedial
2. 초기 설정부터 프라이버시 보호 조치하기 Privacy as the Default Setting
3. 프라이버시 보호를 내재한 설계하기 Privacy Embedded into Design
4. 프라이버시 보호와 사업 기능의 균형 잡기 Full Functionality - Positive-Sum, not Zero-Sum
5. 개인정보 생애주기 전체 보호하기 End-to-End Security - Full Lifecycle Protection
6. 가시성과 투명성 확보하기 Visibility and Transparency
7. 이용자 프라이버시를 존중하여 이용자 중심의 설계 및 운영하기 Respect for User Privacy - Keep it User-Centric

Personal Information Processing Policy for Children and Youth

1. Easy-to-Understand Personal Data Processing Policy

Kakao provides “Easy-to-Understand Personal Data Processing Policy” to help users who are 14 years or younger check and understand Kakao’s Privacy Policy. A children’s advisory group consisting of children under the age of 14 participated in the production of this easy-to-understand policy. It is in the form of KakaoTalk chats between Ryan and Choonsik, so even children who are not familiar with long text can easily read it.

How Kakao handles personal data
How Kakao handles personal data
Ryan
Hi, everyone! I’m Ryan.
Choonsik
I am Choonsik. We want to talk to you about Kakao’s Privacy Policy. We will explain how Kakao handles your personal data.
Hi, Ryan! Hi, Choonsik!
By the way, what is personal data?
Ryan
‘Personal data’ is information which can identify a person. It includes your name, birthday, home address, phone number and email.
Also, the name of your school, your grade, class, and student number can be considered personal information because they can identify you!
Choonsik
Personal data is valuable information about you, so Kakao will do its best to protect it!
Ryan
Alright, shall we talk about Kakao’s personal data processing steps?
Yes~
Choonsik
You are using Kakao’s various services as its ‘user’. And your personal data is managed in four steps: Collection > use > provision > deletion (destruction).
Let’s take a look at each step.
OK!
Collection of Personal Data
Collection of Personal Data
Ryan
Step 1! During collection, Kakao collects only the minimum information necessary for providing services.
When and how does Kakao collect them?
Ryan
First, they are collected during the sign-up process.
When you sign up for Kakao’s services such as KakaoTalk and Daum, Kakao collects necessary information upon your agreement.
Oh! I remember giving my agreement when I created my ID for KakaoTalk.
Ryan
That’s correct. During the sign-up process, we collect the minimum information necessary such as email, password, name (nickname), profile photo, friend list and contact information.
Do you also remember that you were asked if you are older than 14?
Yes, my parents gave consent.
Why do you need a parent’s consent?
Ryan
It is required by the Personal Information Protection Act to protect the personal information of users under the age of 14.
If you’re under the age of 14, it is required by law to get a guardian’s (a parent or a legal representative) consent for the collection of personal data. For this, we also collect the guardian’s information.
I see. Is personal information collected any other time?
Choonsik
While you are using services.
More personal information is collected to provide paid services, process Customer Service consults, and provide personalized services and information.
And in some cases, Kakao collects personal data additionally to provide functions to some services, or receives users’ personal data from other services. In this case, we obtain users’ agreements.
So you are saying that you need to get my permission to collect my personal data additionally?
Choonsik
Exactly!
Also, while you are using Kakao’s services, some information are created automatically and collected such as the device information of your computer or smartphone, IP address, date and time of visit, service usage history. In addition, cookie information is collected for better services.
Ryan
An IP address is the Internet address information of a computer or a smartphone connected to the internet.
Then, what is cookie information?
Ryan
A cookie is a very small text file sent from Kakao’s server to the user’s web browser.
It is saved on the user’s computer, and you can set your web browsers such as Explorer or Chrome to refuse cookie files.
Use of Personal Data
Use of Personal Data
Ryan
Step 2! Kakao uses personal data only for the purposes agreed upon by the user.
How do you use personal data?
Choonsik
Kakao uses personal data to provide services to users and to manage membership.
For example, we use your personal information when you create a profile photo and nickname in KakaoTalk, and to help your friends recognize you while you have chats with them. We also use personal data to verify a user’s identity when obtaining an agreement from the user’s guardian, and to perform membership management including user classification.
So you use my personal data when I use your services or become a member.
Ryan
That is correct. Plus, we sometimes use personal data to provide additional services.
What are the additional services?
Ryan
Personal information is used to provide paid services, handle Customer Service consults, and provide personalized services and information.
We also collect additional personal data to provide functions to some services, or receive users’ personal data from other services. In this case, we obtain users’ agreements.
Aha! What else are they used for?
Choonsik
To communicate with users!
Kakao uses personal data to send notices about Kakao services or event information, as well as to communicate with users for questions and complaints.
Oh! Then you will need to use contact information like a phone number.
Choonsik
You are right!
Ryan
Lastly, Kakao uses personal data to protect users.
Your personal data is used to protect you from another person attempting to steal your Kakao Account information (ID, password, etc).
Oh my God! Isn’t that bad?
Ryan
Yes, it is illegal!
In addition, Kakao uses your personal data to prevent damages resulting from the violation of Kakao’s Terms of Service or Service Policy, or the misuse of its services.
Provision of Personal Data
Provision of Personal Data
Ryan
And sometimes Kakao provides personal data to other companies.
Who do you provide it to?
Choonsik
Companies which are entrusted to handle personal data.
Ryan
That is correct. Entrustment is having other companies process personal data.
To provide smooth services, Kakao may ask other companies to perform some of its work.
For example, Kakao entrusts the handling of users’ questions and requests, and product delivery.
In case of entrustment, Kakao monitors and supervises those companies to make sure that they follow the laws and process personal data safely.
Can you think of other cases?
I am not sure..
Choonsik
Providing personal information to a third party other than the user or Kakao?
Ryan
Right. Users’ personal data collected by Kakao may be provided to other companies so that they can be used for services offered by the companies connected to Kakao. In this case, we obtain users’ agreements.
OK. Can you give me some examples?
Ryan
Personal data is provided when you use another company’s service using the quick login feature of Kakao Account.
And please be reminded that Kakao does not provide personal data to outside parties without the user’s consent unless it is required by law.
Deletion of Personal Data
Deletion of Personal Data
Ryan
Last but not least! Kakao deletes a user’s personal data quickly and safely when it is time to delete them.
When it is time to delete them?
Ryan
Yes. When Kakao deletes personal data, Kakao deletes a user’s personal data quickly and safely when the use period agreed by the user ends, or when the user requests data deletion to stop using Kakao’s services (e.g. unregistration).
However, some data are stored separately because they are needed to protect the rights of a user, like giving a refund before the user unregisters from our service, or because they are required by law to be stored for a certain period of time.
I get it!
Any other reasons to keep personal data separately?
Ryan
Yes. Kakao stores or deletes the personal data of users who have not used Kakao services over one year after keeping them separately. Personal data that are separately stored are safely retained for four years and then deleted immediately.
Personal data that are separately stored are never used for other purposes.
Then how do you delete them?
Choonsik
I know! I know!
Personal data in the form of electronic files stored on computers and other devices are completely deleted so that they can never be recovered.
And personal data contained in paper documents will be burned or shredded to pieces.
Protection of Users’ Rights
Protection of Users’ Rights
Ryan
So far, we explained how Kakao safely processes personal data by each step.
You remember that personal data is all information about you, right? For this reason, you have rights to your personal data.
Kakao is doing its very best to protect your rights.
How do you do that?
Choonsik
You can view and edit your personal data at any time. And you can also cancel the agreements you gave when Kakao collected your personal data, or unregister from a service.
You can find detailed information in the Privacy menu of Kakao Privacy Site. Visit the Privacy menu
Ryan
Choonsik and I just explained how Kakao handles your personal data. Do you find the information helpful?
Yes, I do!
Ryan
Kakao will continue to make efforts to keep your personal data safe.
If you want to learn more about how Kakao handles personal data, please read the Privacy Policy at the bottom of the homepage. Go to Kakao Privacy PolicyNew Window
Choonsik
Oh! I am going to check it out right now! Bye, everyone!
Ryan
See you again!
Thanks. Bye~
Developing the Easy-to-Understand Personal Data Processing Policy with the Children’s Advisory Group

A personal data processing policy contains important information that informs users of the process of handling valuable personal information, but it is often long and written with difficult terms, which may make it difficult for children to understand. After contemplating how to make it easy for young users to understand Kakao's personal data processing procedures, we came to the conclusion that the best way is to have children participate in its creation.

With this thought in mind, the creation of the Easy-to-Understand Personal Data Processing Policy began with a children’s advisory group consisting of children under the age of 14. The Children’s Advisory Group spared no effort and advice to help us write a personal data processing policy that they could understand. They read the processing policy carefully and made suggestions so that difficult words could be expressed differently or replaced with easier words. In addition, through questions from the Children’s Advisory Group, we were able to identify and reflect information that children are curious about, such as types of personal information and reasons for requiring parental consent.

Making the the Easy-to-Understand Personal Data Processing Policy
Video with sound, a screen showing the production story of the Easy-to-Understand Personal Data Processing Policy for Children which was applied to the website.
See the production background and the activities of the Children’s Advisory GroupNew Window
2. Privacy Protection Guide for Youth

The Privacy Protection Guidelines for Teenagers, which explains how children and teenagers can safely use Kakao's services through various privacy protection features provided by Kakao, was created with the help of a youth advisory group consisting of middle and high school students.

In this Guidelines, teen-friendly language was used instead of difficult terms to make teenagers feel more comfortable, and real Kakao Service screens and virtual KakaoTalk chats were used to help them use security features without any difficulty.

Kakao provides the Privacy Protection Guidelines to help children and teenagers using Kakao’s services protect their own privacy in everyday life.

Take more responsibility for your personal information

Personal information refers to all information that can identify you, including your name, phone number, home address, school, photos, ID and password for websites you have signed up for, etc. You should manage your personal information carefully because they can include many information related to the privacy (name, school, etc) of yourself, family and friends. In particular, personal information should be managed even more carefully for users aged 14 and over because they can decide whether or not allow the use of their own personal information.

You should keep your personal information safe and not disclose it to other people because they can be used for fraud, crimes, etc. once leaked.

Any child under 14 need parental consent for using service.

Children under the age of 14 are deemed unable to fully understand the risks and consequences of personal information processing, and the rights of a user. Thus, a consent of a legal representative (guardian) is required by law when their personal information is collected. A legal representative is a person who can protect a child or a teenager. A parent or a guardian designated by law (a relative, an attorney, etc) can be a legal representative.

Kakao Services requires the consent of a legal representative when collecting, using and providing the personal information of children or teenagers under the age of 14 for their service use.

Roles of a legal representative (guardian)

A legal representative (guardian) is advised to carefully examine the types of personal information to be collected and used before giving consent so that the personal information of a child can be protected.

Kakao provides a family account service connecting a guardian to a child to protect the child's privacy. The main user managing a family account must be 19 years old or over, and may create a family account after completing user identification using Kakao Certificate.

Check family accountNew Window
Carefully read the agreement to personal information processing and the Privacy Policy

The Privacy Policy explains how the Service processes personal information, such as collection, use and provision. Please read carefully the agreement and the Privacy Policy when signing up for a service or providing your information. You may choose to agree or not agree to optional items for additional services.

Please read the details carefully and decide whether you need the service or not.

Check the Privacy PolicyNew Window
Check my agreement detailsNew Window
Manage your password safely

Protect your password by creating a password that is difficult to guess or crack. Here are some tips for creating a safe password. You can change your password for Kakao Account as follows.

- KakaoTalk : Settings > Kakao Account > Change Password
- Web : Manage PasswordNew Window

How to create a secure password
  • 1. Do not repeat the same letters or numbers, and use a combination of letters, numbers and special characters.
  • 2. Do not use your ID, birthday, phone number, etc. in your password.
  • 3. Set different passwords for each service.
  • 4. Please change your password on a regular basis.
  • 5. Use biometrics (fingerprint, etc) or patterns along with a password to secure your account.
Set 2-step verification

2-step verification is a feature that adds an extra layer of security, requiring users to completing a pre-set second verification step when logging in. Once the 2-step verification is set, another person cannot log into your account even if the person knows your account and password.

The 2-step verification can be set through KakaoTalk or phone number verification, and you can also set an email for emergency contact purposes just in case that you cannot access your mobile phone. You can set 2-step verification as follows.

- KakaoTalk : Settings > Kakao Account > 2-Step Verification
- Web : Set 2-step verificationNew Window

Take caution when logging into shared devices

When you log into your Kakao Account or KakaoTalk using a public device (devices used by many people such as computers in schools or Internet cafes), do not check 'Keep me signed in' or 'Auto-Login'. If you select 'Keep me signed in' or 'Auto-Login', you stay signed in until you log out or delete cookies in the browser. In this case, your personal information is more likely to be leaked if you are not using a personal device. Cookies are small text files tracking information about all the sites you visit. They are called 'cookies' because the trails of data are like cookie crumbs that you have left across the internet.

Make sure to log out when you are done using a public device. After you log out remotely, please double-check that the device has been removed from 'Registered Devices'.

If you forget to log out of KakaoTalk from a public device, you can log out using the following methods.

- KakaoTalk : Settings > Privacy > Manage Devices > Remove the device you want to log out from.
- Web : Remote loginNew Window

Check your login history and login information

You may check your Kakao Account login history for the past 90 days and the information of devices currently logged into your Kakao Account from the Kakao Account management site. If you find any login or device record which has not been created by you, you must reset your password. Also You can check your login history and device information as shown below.

- KakaoTalk : Settings > Kakao Account > Login Management
- Web : Manage LoginNew Window

Be careful when you give your information to someone else
Conversation with Suspicious Frodo, Suspicious Frodo: Hi! Are you Choon-Sik from Kakao Middle School?, Me: I am. Who are you?, Suspicious Frodo: I also go to Kakao Middle School, Let's play an online game together. I want to add you as my friend. Can you give me your Kakao ID and mobile phone number?
Conversation with Suspicious Frodo, Suspicious Frodo: Hi! Are you Choon-Sik from Kakao Middle School?, Me: I am. Who are you?, Suspicious Frodo: I also go to Kakao Middle School, Let's play an online game together. I want to add you as my friend. Can you give me your Kakao ID and mobile phone number?

You should never share or send your personal information to a person you don't know because personal information disclosed to a wrong person can be used for illegal activities such as fraud and other crimes.

Even when your friend asks for your personal information, you must check if that person is really your friend. Sometimes a person can hack into your friend's account and pretend to be your friend in order to steal your personal information. When a non-friend tries to have a chat with you on KakaoTalk, an orange-colored profile image and a warning message will be shown.

When you send photos and files via KakaoTalk, send them to a person who really need them in a private chatroom. Be careful when using a group chatroom because your information can be shared to other people who do not need to know it.

You may restrict access to your KakaoTalk information by blocking the KakaoTalk ID search, using the multi-profile feature, or choosing "Hide My Profile" against blocked friends.

Delete suspicious emails and links without opening them
Conversation with Suspicious Frodo, Suspicious Frodo: Congratulations, Ryan! You won a gift voucher!, Me: Wow!!!!!! Really???, Suspicious Frodo: Yes, click the link below and we'll send you a gift voucher, [OO Coupon] Information for gift voucher winners http://go*.gl/xxx*xx
Conversation with Suspicious Frodo, Suspicious Frodo: Congratulations, Ryan! You won a gift voucher!, Me: Wow!!!!!! Really???, Suspicious Frodo: Yes, click the link below and we'll send you a gift voucher, [OO Coupon] Information for gift voucher winners http://go*.gl/xxx*xx

You should not click URLs included in suspicious KakaoTalk messages, emails and texts and just delete them because they could be phishing attempts or malicious codes. Phishing is a technology used to steal the information of a user or a company through an email or a messenger.

When you enter personal or financial information from an online screen, always check the URL of a homepage or the sender of an email to see if it is a phishing attempt.

Check the privacy settings when posting articles and photos

Always check the privacy settings of your posts because photos and articles posted on the Internet can be copied without your permission and used by someone else for undesirable purposes. Make sure that the personal information of yourself, family and friends is not included in your posts.

You should avoid setting the privacy setting to public unless it is absolutely necessary because posts and photos with "Public" settings can be captured or copied by anyone.

In Kakao Services, you can set and manage the privacy settings for posts, photos, etc. for each service.

Properly address the breach of privacy

In the case of the breach of privacy, your personal information can be used in crimes. Thus, privacy violation must be prevented in advance. Breach of privacy: Collection, use and provision of personal information without permission, leakage of personal information, misuse, illegal distribution, etc.

If you discover that your information is disclosed in posts, files, etc. which are available online, or that someone you don't know has your personal photos and videos, please ask your guardian for help.

You should never leak or illegally distribute someone else's information because you may be held legally responsible. If any breach of privacy occurs while using Kakao Services, you should report it immediately to prevent additional damages.

- KakaoTalk : Settings > Support > Contact Us
- Web : Reporting the breach of privacyNew Window

Kakao is taking actions against the breach of privacy which can occur online though 'A Safe Digital World made by Kakao'New Window 

Manage your information in the Kakao Privacy

Kakao account members can check and manage my information directly on the Kakao privacy site or on the account management menu.

Managing my informationNew Window
Developing Privacy Protection Guidelines with the Youth Advisory Group

To develop privacy protection guidelines, a youth advisory group consisting of middle and high school students participated directly in the production process and shared valuable opinions from the perspective of youth. Kakao reflected the opinions of the Youth Advisory Group and published the ‘Privacy Protection Guidelines’, which allows children and teenagers to safely use Kakao’s services through various privacy protection features provided by Kakao, based on situations related to personal information that children and teenagers face in real life.

Kakao Friends characters were used to make teenagers feel more comfortable, and teen-friendly language was used instead of difficult terms. In addition, real Kakao Service screens and virtual KakaoTalk chats were used to help them use security features without any difficulty.

Video with sound, a screen showing the Personal Data Exploration Journal by the Youth Advisory Group which was applied to the website.
Check the production story of the Privacy Protection GuidelinesNew Window
3. Agreement to the Collection of Personal Information for Children's Accounts

For children under the age of 14, we explain the Agreement to the Collection and Use of Personal Information, which is required for them to create a Kakao Account, in an easy-to-understand version.

[Required] Agreement to the Collection and Use of Personal Information

The Agreement contains important information that you must know to sign up for Kakao Services. Please read the following information carefully.

There are personal information items that you are required to provide to create a Kakao Account.

  • 1. We collect your email, password, nickname and profile picture to identify you from your friends, manage your membership and link your profile information.
  • 2. We collect your friend list to add and recommend friends, or to send notifications to your friends.
  • 3. We need to collect your contact information to perform user verification and find your ID and password in case you forget your ID or password, to deliver notices regarding Kakao Services or event related information, and to give you an answer in case you send a question to Kakao. We must have at least one of your contact information: email or phone number.
  • 4. We also collect your email, password, nickname, profile picture, friend list, contact information, service usage history and purchase/payment made through the service, in order to prevent actions which may cause harm to others while using the service and to provide services and information related to you. However, we will not use your information to recommend personalized content until you are 14 years old.

All personal information collected by Kakao is deleted immediately after you close your account.

In addition, in the process of using the service, information such as computer or mobile phone device information, IP address, date and time of visit, and service usage history may be automatically created and collected. Also, cookies are collected to provide better services. Here, an IP address is the Internet address information of a device connected to the Internet, such as a computer or mobile phone. If you do not agree to the collection and use of such personal information, you cannot create a Kakao Account. If your guardian agrees to the above, you can conveniently use various services with your Kakao Account.

For more information, please read [Easy-to-Understand Personal Data Processing Policy] 

[Optional] Agreement to the Collection of Profile Information

When you create a Kakao Account, you may consent to the collection of your date of birth and gender information. The collected profile information will be used to recommend friends or provide services and information (ads) related to you.

The collected information will be deleted immediately if you close your Kakao Account or withdraw your consent.

The collection of profile information is not required. You may still create a Kakao Account, even if you do not consent to the collection of your personal information.

Privacy Protection Guide for Senior Citizens

Kakao provides the Privacy Protection Guide for Senior Citizens for seniors who have difficulty managing personal information in a digital environment. To develop this guide, we consulted Professor Mun-Jeong Choi and doctoral students of the Aging and Technology Policy Lab at KAIST for contents and delivery methods, and created a video which can help senior citizens living in a digital environment. This guide consists of three videos explaining the concept and importance of personal information, how to prevent personal information infringement such as phishing, and how seniors can manage personal information on their own.

<The Aging & Technology Policy Lab> is the first lab at KAIST with a focus on aging, social welfare, and technology policy. For more information, please check the lab's website

Check the Aging & Technology Policy Lab websiteNew Window
#1. Concept and Importance of Personal Information

Unlike the past when the Internet or smartphones were not developed, various types of personal information are now used online in many fields such as medical care, finance, and shopping. Therefore, it is important to manage your personal information safely to prevent prevent leakage or misuse. This video explains easily the concept and type of personal information, as well as why it is important to manage personal information safely.

Video with sound, a screen showing the Privacy Protection Guide for Senior Citizens - #1. Concept and Importance of Personal Information, which was applied to the website.
#2. What is phishing and how do you provent it?

Today, we see many phishing attacks targeting users' personal information or money by impersonating family members, acquaintances, or trusted organizations. This video will teach you how you can prevent phishing schemes through examples. If you would like to know more about how KakaoTalk users can keep themselves safe, check out the ‘KakaoTalk Safety Guide’

Video with sound, a screen showing the Privacy Protection Guide for Senior Citizens - #2.What is phishing and how do you prevent it?, which was applied to the website.
the KakaoTalk Safety Guide > Be on Alert for PhishingNew Window
#3: Preventing personal information infringement

This video provides information on major personal information infringement cases that have frequently occurred recently, and offers guidance on how senior users can manage personal information on their own.

Video with sound, a screen showing the Privacy Protection Guide for Senior Citizens - #3.Preventing personal information infringement, which was applied to the website.

Service-Related Policies

1. Right to be forgotten

The right to be forgotten (RTBF) is discussed in the context of giving users a right to control information about themselves in the digital environment. This is because, unlike in the past where distribution of information was naturally restricted or reduced over time after it was created, information can be distributed in the digital environment without restrictions regardless of the will of an information subject or public interest, and accessibility to information has also increased.

However, if excessive protection allows a user to request unlimited deletion of information that is unfavorable to him or her, information which need to be shared within a society may also be deleted, and public interests such as the public’s right to know or the freedom of expression could also be violated.

In the end, how to guarantee the right to be forgotten requires a balance between the rights of information subjects and public interests, social consensus, and the revision of laws and policies accordingly.

Presently, the domestic laws of Korea do not guarantee the right to be forgotten itself because it is not a right guaranteed in itself. Thus, the RTBF can be interpreted as a right to self-determination of personal information of an information subject. It can also be defined as a user’s right to request the deletion of his or her personal information (the right of erasure) to a personal information processing personnel (controller) pursuant to Article 171) of EU’s General Data Protection Regulation (GDPR). Another interpretation is that the RTBF includes a right to be deleted from the list of search results of search engine providers which results from a decision by the Court of Justice of the European Union in 20142) which became the trigger for the RTBF.

Kakao strives to guarantee users' right to be forgotten by considering the domestic laws of Korea including the Personal Information Protection Act, global standards including EU’s GDPR, and the balance between user rights protection and social interests.

Kakao respects the exercise of the right to self-determination of personal information by users.

If a user requests the deletion of his or her personal information or the withdrawal of consent therefor in accordance with the Personal Information Protection Act, such a request will be carried out without delay.

Kakao guarantees the right to control contents created by users.

Users can check posts that they have created while using our services, such as writings (including comments), photos and videos, and delete them if they do not want them. If the posts cannot be deleted due to the special nature of a service or internal policies, we will notify such reasons in advance and take necessary protection measures.

Kakao operates procedures for a request for the exclusion of access to one’s own posts and rights infringement reporting.

Users may request to exclude other people’s access to their own posts (exclusion from search results) in accordance with the Act on the Promotion of Information and Communications Network Utilization and Information Protection, in the event that users are unable to directly delete their own posts due to unregistration from the service or an account, or that they have uploaded posting in another company’s service but the operation of the website has been discontinued by the administrator of the concerned service bulletin board due to business closure or other reasons.

If there is a violation of rights, such as invasion of privacy or defamation, due to another person's posting, you can report the infringement cases in accordance with the Act on the Promotion of Information and Communications Network Utilization and Information Protection.

Check information on the exclusion of access to one’s own posts and rights infringement reportingNew Window
1) The personal information subject shall have the right to obtain from the personal information processing personnel (controller) the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay. However, this provision may not apply to the extent that processing is necessary for exercising the right of freedom of expression, etc. 2) Mario Gonzalez, a Spanish attorney, filed a complaint that an article regarding his bankruptcy which had happened about 20 years prior could be easily found through Google Search. He claimed that it was an invasion of privacy and requested Google Inc. to remove or conceal the article. When this claim was rejected, the case was referred to the Court of Justice of the European Union (CJEU) for a legal judgment. The CJEU finally upheld the complaint against Google and ordered the company to remove the article from search results.
2. Privacy protection for the deceased

Kakao gives a lot of thoughts to digital legacy which consider the privacy of the deceased and their bereaved families.

Users have rights to manage not only their personal information, but also their online data including account information, emails, posts, etc. However, there are no clear requirements for how to process a user’s digital data including account information when he or she passes away. Since the Personal Information Protection Act protects “information related to a living individual”, it does not regulate the deceased, and there is no clear provision as to whether the digital information of the deceased is subject to inheritance. However, the prevailing opinion is that account information, private information, non-public information, etc. subject to exclusive belongingness rights1) cannot be inherited.

Kakao protects the deceased's digital information as follows, taking into account the privacy of the deceased and bereaved families.

Kakao does not provide the account information and non-public information of the deceased.

As a principle, Kakao does not provide private information of deceased users, such as Kakao Account information, KakaoTalk chats, or friend history. If requested by the bereaved family, the deceased user's account will be closed after certain verification procedures are completed.

This policy is based on a consideration that in the event that the account information of a deceased user is provided, other people may access his or her privacy information or non-public information. In particular, in the case of KakaoTalk, the privacy of not only the deceased but also the parties that the deceased has exchanged chats with may also be infringed.

Kakao strives to guarantee the rights of the bereaved family regarding digital information which do not belong to the exclusive belongingness rights.

We strive to guarantee the rights of the surviving family who have legitimate authority over digital information that has no or low risk of infringing on the deceased's privacy.

If the surviving family wishes, they can receive a refund for rights that can be converted into money, such as unused mobile vouchers in the deceased's account and the remaining balance of a prepaid electronic payment method (paid). As for public bulletin services, data backup for public posts may be provided upon the request of the surviving family2). However, out of respect for the deceased, we do not provide backup for private posts that were not made public during his or her lifetime.

Kakao provides a KakaoTalk memorial profile.

Kakao provides a KakaoTalk memorial profile to help friends and family members remember the deceased longer and convey their condolences.

Once an account is switched to a memorial profile, the KakaoTalk profile will not be changed to “(Unknown)” even if the mobile phone of the deceased is canceled or deactivated. The memorial profile has a chrysanthemum icon next to the person's profile photo, and friends and acquaintances can post messages in tribute to the deceased via a 1-on-1 chatroom. The messages sent to the deceased can be checked by the sender only, allowing the sender to use the chatroom as his/her personal chamber of tribute.

The personal information or chat history of the deceased will not be provided to other people including the surviving family during the process of switching the existing account to a memorial account in order to protect posthumous privacy. Multi-profiles set by the deceased before the account is switched to a memorial profile will also be maintained.

Kakao will continue to pay attention to and think about digital legacy policies in consideration of privacy protection of the deceased, related laws, and social responsibility.

1) The exclusive belongingness right refers to a right which belongs to a person and cannot be transferred to another person. 2) Data backup for public posts may be difficult depending on the service environment, and technical and economic circumstances.
3. Personalized Advertising and Privacy Protection

Online personalized advertising (hereinafter “personalized advertising”) refers to ‘online advertising that is personalized to a user after processing the user’s online behavioral information and analyzing and estimating the user’s interests, preferences and inclinations.’ Here, the ‘behavioral information’ of a user means online user activity information that can identify or analyze the user’s behavior such as website visit history, app usage history, purchase and search history, etc.

There are various types of personalized advertising depending on the form through which they are provided as shown below, and users naturally encounter advertisements in the course of using a service.

  • 1. Display advertising: Like Kakao’s Bizboard shown at the very top of the chat list tab in KakaoTalk, an ad is displayed on a website or in an app, and when a user clicks the advertisement, a page related to the product or service is provided.
  • 2. Search advertising: When a user searches a specific keyword in a search engine such as Daum portal, related advertisements are shown on the screen along with the search result.
  • 3. Message advertising: Various forms of advertisement messages such as text and images are sent to users through online message transmission methods including KakaoTalk channel messages, email and text messages.

Personalized advertising has the advantage of providing more useful and relevant advertising to users. For example, it can provide helpful information to users, such as sending advertisements for newly launched cosmetic products to female users who frequently purchase cosmetics online, or showing discount advertisements for airline tickets to a young person in his 20s who likes to travel.

On the other hand, there are also concerns that user privacy can be violated in the process of analyzing collected behavioral information to provide personalized advertising and predicting user's interests. To this end, Kakao makes the following efforts to provide personalized advertising in safe manners while securing users’ privacy.

  • 1. Kakao discloses the status of collection, use and provision of user behavior information.
  • 2. Kakao’s personalized advertising can be easily controlled (allowed/blocked) by users at any time.
  • 3. Information collected and used for personalized advertising is safely managed, and destroyed without delay once the retention period notified to users is achieved.
  • 4. Kakao does not collect sensitive information which may potentially violate users’ privacy.
  • 5. Kakao does not provide personalized advertising to children under the age of 14.

Kakao transparently discloses contents on user behavior information that are collected, used and provided for personalized advertising, as well as how users can refuse personalized advertising through Kakao Personalized Advertising. By using methods described in this page, users may choose to receive or refuse personalized advertising at any time.

Learn more about Kakao Personalized AdvertisingNew Window

Support for privacy protection activities of small business owners

1. Distribution of Personal Information Processing Labeling

Kakao has applied labeling images to the Kakao Privacy Policy so that users can easily understand the personal information processing policy, which includes important matters regarding personal information processing, and manage their personal information safely.

The labeling images developed by Kakao were created with design principles of (1) Universality of information, (2) Identification of Information, and (3) Adaptability to Various Environments, so that users can intuitively understand and accept them. They are disclosed and distributed for small and medium-sized business owners who are concerned about how to create an easy-to-understand privacy policy. Business owners who are required to process personal information can apply and utilize the labeling images disclosed by Kakao in their personal information processing policies.

Personal data processing labeling ai file download (Online)New Window
Personal data processing labeling ai file download (Offline)New Window
Personal data processing labeling PDF file download (Online)New Window
Personal data processing labeling PDF file download (Offline)New Window

The labeling images may be used in various ways, not only for personal information processing policies for business owners, but also for occasions involving personal information handling such as offline documents and delivery boxes.

Business owners may download and use a file according to the company’s style based on the business purpose and the environment (online/offline) in which personal information is processed.

The labeling image files are distributed by Kakao for the purpose of helping businesses. Please use them only to increase transparency related to the personal information processing policy or personal information processing in accordance with the purpose of disclosure. In addition, when using the original file, it is recommended that the original image be used without any alteration or damage. All rights, including copyright and ownership, belong to Kakao. Selling original files or modified or altered copies of original files for a fee, and using them for antisocial or illegal purposes are prohibited.

Check labeling design philosophy and storyNew Window
Check Kakao’s Personal Data Processing PolicyNew Window
2. Privacy protection education

Kakao has created two educational videos containing information on "Precautions for Handling Personal Information of Customers" so that sellers who sell products through online shopping platforms can enhance their sense of responsibility for personal information protection, and freely utilize the videos for personal information protection training for their employees.

Personal information protection education for online sellers

Kakao has created two educational videos containing information on "Precautions for Handling Personal Information of Customers" so that sellers who sell products through online shopping platforms can enhance their sense of responsibility for personal information protection, and freely utilize the videos for personal information protection training for their employees.

#1. Personal Information Protection Principles to be Followed by Sellers
#2. Technical and Managerial Protection Measures for Personal Information that Sellers Must Know
Personal information protection education for small business owners Kakao and Korea Internet & Security Agency distribute personal information protection education materials for small and medium-sized businesses. Kakao & KISA Joint Privacy Protection Education PDF file downloadNew Window