DIBPWork tracking that shows where every task standsAbout DIBP

DIBP Privacy Policy

Document version 2026-09-26Effective date: 2026-09-27

Lulu Labs (the "Operator") provides the DIBP service and maintains this privacy policy under the Korean Personal Information Protection Act to protect users' personal information and handle related concerns. Shared account information used to sign up and sign in is covered by the Account Privacy Policy.

This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.

1. Information we process and how we collect it

Starting DIBP
Your shared account's email address, name, and authentication identifier (copied into a DIBP user record when you first open DIBP after approval)
Using the Service
Work records you enter, such as tasks, projects, schedules, and notes; DIBP consent records (agreed version and time); language and display settings
Generated automatically
IP address, access logs, browser information, and current workspace and language cookies

We receive this from your shared account when you first use DIBP after approval, through in-app input, and through automatic generation while you use the Service.

2. Purposes

  • Identifying DIBP users and confirming approval
  • Providing the Service, including storing and displaying the work records you enter
  • Preventing abuse, responding to security incidents, and finding and fixing errors
  • Announcing changes and answering inquiries

3. Retention and deletion

  • We keep DIBP information until you leave DIBP and destroy it without delay afterward.
  • Leaving DIBP immediately removes your DIBP work records and DIBP consent records; electronic files are deleted so they cannot be recovered. Information remaining in backups is deleted as the backup retention period expires.
  • Shared account information is kept until the account is deleted, under the Account Privacy Policy.
  • Information that applicable law requires us to keep is stored separately for the required period and then destroyed.

4. Disclosure to third parties

The Operator does not provide personal information to third parties except with your consent or as required by law.

5. Processors

Supabase, Inc.
DIBP database storage and operation
Hostinger
Web hosting
Supabase
Sending notice emails

The Operator sets data protection obligations in its processing agreements and supervises processors to ensure they handle personal information safely.

6. International transfer

Recipient
Supabase, Inc. (https://supabase.com)
Country
Australia
When and how
Transmitted over the network when you use the Service
Information
All information listed in section 1
Purpose
DIBP data storage
Retention
Until you leave DIBP
Recipient
Hostinger (https://www.hostinger.com)
Country
Malaysia
When and how
Transmitted over the network when you use the Service
Information
Personal information and access logs, including sign-in requests, that pass through the server while handling your requests
Purpose
Operating the web service
Retention
Deleted once the request is handled; access logs kept up to 90 days for security

If you do not want your information transferred abroad, you can choose not to use DIBP or leave it. In that case you cannot use DIBP.

7. Your rights

  • You may request access to, correction, deletion, or suspension of processing of your personal information at any time.
  • You can view, edit, and delete your work records in the Service, and delete all DIBP data by leaving DIBP in Settings. Requests about shared account information follow the Account Privacy Policy.
  • Send any other request to datasynalyst@gmail.com and we will act on it without delay.

8. Cookies

We use authentication cookies to keep you signed in and cookies for your current workspace and language. We do not use advertising or tracking cookies. You can refuse cookies in your browser, but you will not be able to use features that require signing in.

9. Security measures

  • Passwords are stored in a non-reversible encrypted form.
  • All traffic is encrypted with HTTPS.
  • Database access is limited to a server-only account, and every request checks your workspace permissions.
  • We keep access logs and apply security updates.

10. Children under 14

Children under 14 cannot sign up, and the Operator does not collect their personal information.

11. Privacy officer

In charge
Lulu Labs
Contact
datasynalyst@gmail.com

12. Remedies

For advice or dispute resolution about privacy violations, you can contact the following Korean agencies.

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

13. Changes to this policy

This policy applies from 2026-09-27. We announce changes in the Service at least 7 days before they take effect, or 30 days for significant changes, and ask for your consent again.