Bullet Investment ("the Company") takes the privacy of Zenith AI ("the Service") users seriously and complies with the Personal Information Protection Act and other applicable laws of the Republic of Korea. This policy explains how your personal information is collected, used, stored and destroyed.

1. Information We Collect

• a. Collected at registration and verification
• - Email address, password (stored encrypted)
• - For social sign-in: the email address and unique identifier provided by your Google or Apple account
• - Phone number (for identity verification, collected through Firebase Phone Auth)

• b. Collected automatically while you use the Service
• - Usage records (AI analyses, AI chat conversations, analysis history)
• - Activity logs (IP address, access time, type of action performed)
• - Device information (device token for push notifications, device platform)
• - Payment records (in-app product ID, payment platform, transaction ID)
• - Alarm settings (exchange, coin symbol, condition, alarm mode)

• c. Collected when you contact us
• - The content of your inquiry (category, subject, body)

• d. Used when we send email
• - Your email address is used to send service emails, such as the welcome email sent after registration.

2. Why We Collect and Use It

• a. Managing membership
• - Registration, phone number verification, prevention of fraudulent use, account security

• b. Providing the Service
• - Providing AI cryptocurrency analysis and storing analysis results
• - Providing AI chat and managing conversation history
• - Providing live market information
• - Setting price alarms and sending push notifications when conditions are met
• - Managing analysis history
• - Receiving and answering inquiries

• c. Paid services
• - Processing in-app purchases and managing credit top-ups

• d. Email
• - Sending the registration welcome email

• e. Improving the Service and security
• - Analyzing access frequency and usage statistics
• - Detecting and blocking malicious users and unauthorized access through activity logs (IP address, action type)

3. How Long We Keep It

• - We keep your information until you close your account, and destroy it immediately on request.
• - However, the following records are retained for the periods required by law:
• - Records of contracts and withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce)
• - Records of payment and supply of goods: 5 years (same Act)
• - Records of consumer complaints or dispute handling: 3 years (same Act)
• - Access logs: 3 months (Protection of Communications Secrets Act)

4. Sharing with Third Parties

As a rule, the Company does not provide your personal information to third parties. Exceptions:

• - Where you have given prior consent
• - Where required by law

5. Processors and External Services

The Company uses the following external services to operate the Service, and a minimum of information may be processed in doing so:

• - Cloud service provider (Google): authentication, data storage, push notifications, email delivery
• - AI service provider (Anthropic): generating AI chat and analysis responses (no personally identifying information is transmitted)

6. Transfer Outside Korea

Service data is stored primarily on cloud servers located in Seoul, Republic of Korea. When you use AI features, conversation and analysis data may be transmitted to servers of the AI service provider located in the United States. That data is used only to generate a response and is not stored permanently.

7. How We Destroy It

• - Procedure: when you request account closure, all of that member's personal information is destroyed immediately.
• - Method: electronic files are deleted by technical means so that they cannot be recovered.

8. Your Rights

• - You may view your personal information at any time from the settings within the Service.
• - You may withdraw your consent to the collection and use of your personal information at any time by closing your account.
• - For questions or complaints about personal information, please contact the officer named below.

9. Children Under 14

The Company does not accept registrations from children under the age of 14 and does not collect their personal information.

10. Personal Information Protection Officer

• - Name: Park Min-sung (박민성)
• - Position: Team Lead, IT Service Team
• - Contact: support@zenithproai.com

11. Changes to This Policy

If this policy changes, we will announce it through in-service notices at least 7 days before the change takes effect.

Addendum

This Privacy Policy takes effect on 28 February 2026.

Language

This English text is provided for your convenience. The Service is operated under the laws of the Republic of Korea, and the Korean version of this policy governs. If the two versions differ, the Korean version prevails.