Summary in English

This is a short English summary for app reviewers. The Korean version above is the governing text.

• Who we are: Thaipang (ไทยปัง, 타이팡) is a purchasing-agent service in South Korea. It buys products on Coupang and Olive Young for Thai people living in Korea and has them delivered to their Korean address. Contact: kmjune1535@gmail.com.
• Data we collect: from Facebook, Google or Apple sign-in: account ID, name, email address and profile photo URL (never the passwords of those accounts; operator-issued beta email accounts have a one-way hashed password). Entered by users: depositor (bank account holder) name, refund bank account, recipient name, phone number, delivery address, optional building entrance information, and 1:1 chat messages and images. Generated by the service: order, payment, refund and delivery records (including the time the user consented to sharing with Coupang or Olive Young); push token; in-app usage and search logs; a random per-install identifier that links usage logs from the same device, including logs made before sign-in; server access logs.
• How we use it: to sign users in, fulfil and deliver orders, confirm bank transfers and issue refunds, send order notifications, answer support chats, prevent abuse, and improve search and recommendations. No advertising use and no ad or analytics SDKs.
• Sharing: only with the user's separate consent, asked at checkout for every order, the recipient name, phone number, delivery address and entrance information are given to Coupang Corp. or CJ Olive Young Corp. (the store the order is from) to buy and deliver the order. The user may refuse, but the order cannot be placed without this consent; the consent time is stored with the order. Service providers: Supabase, Google Cloud and the Gemini API, Cloudflare, Vercel and Expo (push via Apple and Google). We do not sell personal data.
• Google user data: Thaipang's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google sign-in is used only to sign in and identify the user's account.
• Retention and deletion: account data, 1:1 chat messages and attached images, and usage history linked to the account are kept until the account is deleted and are deleted with it (chat history is not kept). Usage logs made before sign-in are kept for up to 365 days and search logs for up to 180 days; when an account is deleted, those from the devices used with the account (matched by the per-install identifier) are deleted too. Order, payment, refund and delivery records are unlinked from the account and kept for 5 years, as Korean e-commerce law requires; the hold, cancellation and refund handling recorded with the orders serves as the complaint and dispute record (3 years by law, kept with the order records). Users can delete their account in the app (My page ของฉัน → Delete account ลบบัญชี) or by email; see the data deletion instructions. Email requests are completed within 10 days. Users who signed in with Apple can also remove the Sign in with Apple connection in iPhone Settings after deleting the account.