Last Updated: December 30, 2025
Muabe Motion (hereinafter referred to as "Company") values the personal information of users and complies with relevant laws including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
This Privacy Policy explains the types of personal information collected, the purposes of collection and use, retention and use periods, destruction procedures and methods during the use of the Vibble service (hereinafter referred to as "Service") provided by the Company.
The Company collects and uses personal information for the following purposes:
| Category | Items Collected | Purpose | Retention Period |
|---|---|---|---|
| Required | Email address, password | Membership registration and identity verification | Until account deletion |
| Required | Date of birth | Age verification (confirming eligibility for users 19 and over) | Until account deletion |
| Required | Nickname | Service use and member identification | Until account deletion |
| Optional | Profile image | Service use and personalization | Until account deletion or deletion request |
| Category | Items Collected | Purpose | Retention Period |
|---|---|---|---|
| Content | Videos uploaded by users, interactive information (interaction data) | Creation and provision of interactive content | Until content deletion or account deletion |
| Activity Information | Spark (likes), sharing records, Stardust balance | Community features and upload management | Until account deletion |
| Follow Information | Orbita/Stella relationships | Follow functionality | Until account deletion |
| Push Notifications | FCM token, device identifier | Sending push notifications | Until account deletion |
| Analytics Information | App usage statistics, event logs | Service improvement and statistical analysis | 2 years after collection |
| Report Information | Report history, sanction records | Ensuring service safety and preventing policy violations | As required by law |
| Official Account Verification | Verification documents (business registration, ID, etc.) | Official account identity verification | Destroyed immediately after verification is complete |
The following information may be automatically recorded by the server infrastructure (Supabase) used by the Company for service operation and security.
This information is used only for service security and prevention of unauthorized use, and is not separately collected or analyzed by the Company.
The Company processes and retains personal information within the legally mandated retention period or the retention period agreed upon when collecting personal information from the data subject.
Retained until account deletion and destroyed immediately upon deletion. However, in the following cases, it is retained for the applicable period:
Retained until deleted by the user or account deletion. However, exceptions apply in the following cases:
Personal information is retained for certain periods according to relevant laws:
In principle, the Company does not provide users' personal information to third parties. However, exceptions are made in the following cases:
The Company may outsource personal information processing to external professional companies for smooth service provision. When outsourcing, we enter into an outsourcing contract in accordance with relevant laws and manage and supervise the processing company to ensure safe handling of personal information.
Currently, the Company outsources the following tasks:
| Contractor | Outsourced Tasks | Retention and Use Period |
|---|---|---|
| Supabase (Seoul, Korea) | Database management and authentication services | Until account deletion or termination of contract |
| Cloudflare (Asia Pacific) | Storage of interactive content videos and thumbnails | Until content deletion or account deletion |
| Google LLC (Firebase) | Push notification delivery, app usage analytics (Firebase Analytics) | Until account deletion or contract termination |
Users' personal information is destroyed immediately after the purpose is achieved. However, when required by law, it is stored separately for the applicable period and then destroyed.
Users can exercise the following rights:
These rights can be exercised through the settings menu within the service or by contacting the Personal Information Protection Officer in writing, by phone, or by email. The Company will take action without delay.
The Company takes the following measures to ensure the security of personal information:
This service is provided as a mobile application and does not use cookies unlike web services. However, authentication tokens required for service operation are stored in secure storage within the device.
The Company designates the following Personal Information Protection Officer to be responsible for personal information processing and handle complaints and damage relief related to personal information processing.
This service is only available to adults aged 19 and over.
The Company does not collect personal information from minors under the age of 19. If it is discovered that a minor has registered for the service, the account will be immediately deleted and all collected personal information will be destroyed immediately.
The Company transfers users' personal information overseas as follows for service provision:
| Recipient | Country | Purpose | Items Transferred | Retention Period |
|---|---|---|---|---|
| Cloudflare Inc. | Asia Pacific (APAC) | Storage of interactive content videos and thumbnails | Interactive content videos, thumbnail images | Until content deletion or account deletion |
While the country has not received an adequacy decision from the EU GDPR, Cloudflare has obtained an international standard personal information protection certification (SOC 2 Type II) to ensure safe personal information processing.
The Company processes information related to reports and sanctions as follows to create a healthy service environment:
The Company operates an official account verification system to prevent impersonation and processes related information as follows:
This Privacy Policy is effective from the effective date and when there are additions, deletions, or corrections due to changes in laws and policies, we will notify you through the in-service notice 7 days before implementation. However, for significant changes affecting users' rights such as collection and use of personal information and provision to third parties, we will notify you at least 30 days in advance.
If you need to report or consult about personal information infringement, please contact the following organizations: