Privacy Policy

Qassob Bola mobile application · Effective date: 11 September 2026

1. Who we are

This policy covers the Qassob Bola mobile application for iPhone and Android, and the shop behind it. The shop sells halal meat to customers in the Republic of Korea and delivers by parcel.

2. What we collect

We collect only what an order needs. There is no advertising and no tracking.

What we do not collect

• We do not collect your location. The app never asks for it.
• We do not collect your card number, your bank account number, or your banking password. You transfer the money in your own banking application. We never see it.
• We do not collect an email address.
• We do not use a password. Sign-in is a six-digit code sent to your telephone.
• We do not read your contacts, your calendar, your messages, or the rest of your photo library. The app opens the photo picker so you can choose one picture. Nothing else is read.
• We do not use advertising libraries. We do not read an advertising identifier and we do not follow you across other companies' apps or websites.
• We do use one analytics tool, PostHog, to count how the app is used and to receive fault reports. Section 4 explains what it receives and how to stop it.

3. Who else sees your data

Given to a third party

Handled on our behalf

These companies process data for us under contract. They do not use it for their own purposes.

Google, Amazon Web Services, Cloudflare and PostHog are companies outside the Republic of Korea. Firebase and the Cloudflare edge network may handle data outside Korea. PostHog holds the usage events on servers in the United States. Our database, our stored pictures and our servers are in Seoul.

We do not sell your data. We do not give it to advertisers.

4. Analytics and error reports

We use PostHog, Inc., a company in the United States, to understand how the app is used and to find faults. PostHog acts for us under contract. It does not use the data for its own purposes.

What is sent

What is never sent

• Your telephone number, your name, your delivery address, and the recipient name and number.
• Your address photograph and your bank transfer receipt photograph.
• Any advertising identifier. There is none in the app.

Why we do it

To see which parts of the shop are used, to find the steps where an order fails, and to repair faults quickly. Nothing else. We do not sell this data. We do not use it for advertising. We do not follow you into other companies' apps or websites, so the app never shows an app tracking permission window.

How it reaches PostHog, and for how long

The app sends each event over the internet at the moment it happens, over an encrypted HTTPS connection, to PostHog servers in the United States (us.i.posthog.com). PostHog keeps this data for one year, then deletes it. We do not keep it longer than one year.

How to stop it

Delete your account in the app. The link between your account number and the events is broken at once and the app stops sending events for you. You can also write to [email protected] and ask us to delete the events we hold about you.

5. How long we keep it

• Your account — while the account exists. When you delete the account, your name, your telephone number and your saved addresses are removed. Section 6 says exactly what is deleted and what stays.
• Bank transfer receipts and order records — five years, because Korean law on electronic commerce requires records of contracts, of withdrawal of an order, and of payment and supply of goods to be kept for five years.
• Records of complaints and disputes — three years, for the same reason.
• Address photographs — an address photograph is kept while the address is saved in your account. It is deleted when you delete the address or your account.
• Notification token — until you turn notifications off, sign out, or delete the app.
• Usage events and fault reports held by PostHog — one year. PostHog deletes the data after one year. Section 4 explains this.

6. Account deletion and how long we keep data

You can delete your account yourself, inside the app. Open the Profile tab, tap Delete account, read the screen, tap Delete my account, and confirm. The deletion happens at once and cannot be undone. There is no waiting period.

The page qassobbola.com/delete-account gives the same steps, and an email path for a person who cannot open the app.

What is deleted

• Your name and your telephone number.
• Your saved delivery addresses, and every address photograph.
• Your bank transfer receipt pictures.
• Your sign-in, and the notification token of every signed-in device.

What is kept, and why

Korean law makes a shop keep some order records after the customer leaves. Your name, your telephone number and your address are removed from those records first. What is left is the order number, the goods, the amounts and the dates. The records are used for nothing else and are deleted when the period ends.

When we cannot delete the account yet

We refuse the deletion while an order is still running. An order is still running when it waits for your payment, when it is confirmed and being packed, or when it is in delivery. The app names the order that blocks the deletion. Cancel that order, or wait until the parcel arrives, then delete the account.

7. How we protect it

• Every connection between the app and our servers uses HTTPS.
• Bank transfer receipts and address photographs are kept in private storage. They are not on the open internet. Each read is a link that expires.
• The sign-in token on your telephone is kept in the operating system keychain, not in ordinary storage.
• Only shop staff who need it can open the administration site, and that site is behind an identity check.

8. Your rights

You can ask us to do any of the following:

• Tell you what data we hold about you.
• Correct data that is wrong. You can also correct your name and your addresses inside the app.
• Delete your account and your data.
• Stop processing, or withdraw consent. Note that we cannot deliver an order without your name, telephone number and address.

Write to [email protected]. We answer within 10 days, as Korean law requires. We may ask you to confirm the telephone number of the account before we act, so that nobody else can ask on your behalf.

Records that Korean law requires us to keep, such as payment records for five years, stay until that period ends even after the account is deleted. They are kept apart and are used for nothing else.

9. Children

The app is for people 18 years old and over. We do not knowingly collect data from a child under 14. If you believe a child under 14 has an account, write to [email protected] and we will delete it.

10. Changes to this policy

If we change this policy we will publish the new text on this page at least seven days before it takes effect. An important change gets 30 days' notice.

개인정보처리방침

Qassob Bola 모바일 애플리케이션 · 시행일자: 2026년 9월 11일