Pharm Check

Privacy Policy

Effective date: 2026-10-13

Plustonic Inc. ("we") operates Pharm Check and processes your personal information in accordance with the Personal Information Protection Act of Korea and related laws. This policy explains what we collect, why, and for how long.

1. Information we collect

  • Account: email address, password (stored in a form that cannot be reversed), and, if you sign in with Google, your Google account identifier and name.
  • Survey: name, age group, gender, email address, and your health and skin survey answers (concerns, sleep and exercise habits, medications and supplements, allergies, pregnancy or breastfeeding, skin type, concerns and treatment history, and free-text answers). Health information is sensitive information and we ask for separate consent.
  • Booking: location, date and time, booking number.
  • Pharmacy partner applications: pharmacy name, business registration number, contact person's name and phone number, email address, password, and, if a social account is linked, its identifier and email.
  • While you use the service: cookies that keep you signed in, and records of sign-in attempts (such as IP address) for security.

2. How we use it

  • To verify your account, sign you in, verify your email and reset your password.
  • To receive your survey and booking and send booking emails.
  • To let the pharmacist at the location you booked prepare for and give your consultation.
  • To prevent misuse and keep the service secure.
  • Only if you agree, to send offers and event news. We never use your health survey answers for marketing.

3. How long we keep it

  • We keep your account, survey answers and bookings until you delete your account, and delete them without delay when you do. Upcoming bookings are cancelled when you delete your account.
  • We keep pharmacy partner information until the partner account is closed.
  • We keep records of your consent, disconnected from your account, to prove consent was given.
  • Verification codes are valid for a short time and deleted one day after they expire.
  • If a law requires us to keep certain information, we keep it separately for the period the law requires and then delete it.

4. Sharing with third parties

  • We do not share your personal information without your consent.
  • When you book, with your consent, we share your name, age group, gender, email address, booking time and health survey answers with the pharmacy you booked, so that they can prepare for and give your consultation. The pharmacy views this only in the Pharm Check partner screens. It is kept until you delete your account.
  • We record who viewed your survey and when.

5. Service providers and transfers abroad

  • We use the following providers to run the service. Some are companies outside Korea.
  • Vercel Inc. (USA): web hosting. Our servers run in the Seoul region. All information sent while you use the service is processed.
  • Supabase Inc. (USA): database. Data is stored in the Seoul region (Amazon Web Services). Account, survey and booking information is processed; survey answers are additionally encrypted by us.
  • Resend, Inc. (USA): email delivery from servers in Japan (Tokyo). Your email address and email content (verification codes, booking details) are processed.
  • Google LLC (USA): only if you sign in with Google, to complete the sign-in.
  • Information is transferred over the network while you use the service and deleted when the contract ends or you delete your account. If you do not want your information transferred abroad, you can stop using the service and delete your account.

6. Deletion

When the retention period ends or the purpose is fulfilled, we delete the information from our database without delay, in a way that cannot be recovered.

7. Your rights

  • You can ask to see, correct or delete your personal information, or to stop its processing, at any time.
  • You can change your password and delete your account in My account. For other requests, contact us below and we will act without delay.
  • You can withdraw optional consent (marketing, promotional emails) at any time.

8. How we protect it

  • Survey answers and pharmacist notes are encrypted (AES-256-GCM).
  • Passwords are stored in a form that cannot be reversed (scrypt).
  • Traffic between the service and the database is encrypted, and public access to the database is blocked.
  • Pharmacies can see only their own bookings, and their access is logged. Sign-in and verification attempts are limited.

9. Cookies

We use only cookies needed to keep you signed in, remember your language, and track sign-up and sign-in steps. We do not use advertising or analytics cookies. You can block cookies in your browser, but you will not be able to use features that need sign-in.

10. Contact

  • Plustonic Inc. · support@plustonic.com
  • Send any privacy question, complaint or request to this address.

11. Remedies

You can also contact the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr).

12. Changes

We will announce changes on the service at least 7 days before they take effect, or 30 days before for important changes to your rights.

Back to home