Privacy policy

UNFOLD ("we") processes personal information to provide GoSam (https://www.gosam.io, the "Service") for the purposes below. If a purpose changes, we take the steps Korean law requires, such as asking for new consent.

• Sign-up, identity check, keeping you signed in, account management and closing accounts, preventing abuse
• Searching, saving and comparing schools; tailoring schools and guides to the family situation you enter
• Answers from our AI advisor Sam; receiving and passing on school enquiries and tour requests
• Settling-in readiness checks (bridge check) and their reports
• Publishing and moderating community questions and answers (blocking harmful posts and exposed personal data)
• School portal (verifying school staff, managing school information), company workspaces (invitations, members, aggregate status) and the local partner network (applications, checks, introductions)
• Contacting you about requests you send (remittance quotes, service interest, company enquiries and similar)
• Calling you back when you request a phone consultation (only for that consultation, at the number you enter)
• Usage statistics, quality improvement and error analysis
• Only with your separate consent: news about new guides and information sessions (marketing)

We collect only what the Service needs. We do not collect resident registration or passport numbers, or sensitive data such as health information.

How we collect it: what you enter on sign-up and in the Service, what social sign-in providers share, messenger conversations, and records created automatically while you use the Service.

We delete personal information without delay once its purpose is met. Retention by area:

Where a law requires us to keep something longer, we keep only that information, separately, for that period.

Only people aged 14 or over can create an account; we ask you to confirm this at sign-up. We do not collect personal information directly from children under 14.

Children's birth year, grade, curriculum and check answers are processed only when a parent or legal guardian who is a member enters them, on the guardian's consent (Personal Information Protection Act, Article 22-2). We never ask for a child's name, contact details or photo.

If we learn that a child under 14 signed up or entered information without a guardian's consent, we delete it without delay. Guardians can ask to see, correct or delete information about their child at any time.

We share personal information only with your consent or where the law specifically allows it.

In company workspaces, HR sees only totals for employees who agreed to share, and only when at least 3 families agreed; never individual answers or details about children.

We use the providers below. Our contracts with them limit processing to our purposes and require security measures, limits on sub-processing, supervision and liability, as Article 26 of the Personal Information Protection Act requires.

An email delivery provider (such as Resend) will be added once our official domain and mailbox exist; we will update this policy before that.

Photo services (Shutterstock, Unsplash), map tiles (OpenFreeMap) and address lookup (OpenStreetMap Nominatim) receive no member information. Unsplash photos and map tiles load directly from those servers in your browser, so ordinary connection data (such as your IP address) can reach them.

To run the Service we transfer personal information abroad (to providers outside Korea) as below. We ask for separate consent at sign-up under Article 28-8 of the Personal Information Protection Act.

Refusing and its effect: you may refuse. Because our servers and sign-in run on these providers, without this consent you cannot create an account or sign in; you can still browse school information without signing in. If you only want to avoid AI processing, simply do not use the AI features.

Messenger channels (KakaoTalk, WhatsApp, Telegram, LINE) and social sign-in (Kakao, Google, Apple) are services you choose to use; their own privacy policies apply.

The vault is an optional feature for keeping your child's school documents and, if you want, handing them to a verified 행정사 (licensed administrative agent in Korea). It asks for its own consent the first time (storing children's school records and the transfer abroad for automatic sorting). The free route check works without it.

• Storage: files are kept in a non-public store (Supabase, Seoul region) under a per-user path and encrypted at rest. They open only through one-time links valid for 5 minutes, created after an access check, and every view is logged.
• Automatic sorting: files are sent to Anthropic's AI to read the type, school and year. You can check and correct the result.
• Sharing with an agent: only the documents you pick, only with the agent you pick. You can change or stop sharing at any time; the agent's access ends automatically 30 days after completion. Your contact details are passed on only if you choose so.
• Our team sees case status only; it can see documents only during the 14 days you turn on 'support', and those views are logged.
• Retention: deleted automatically 1 year after the case is completed (or 1 year after the last activity). We remind you 30 days before; you can extend 1 year at a time up to 5 years (e.g. for university admission). Leaving the service deletes them at once.
• Payment: we charge parents nothing; the agent quotes their own fee and you pay the agent directly.

When retention ends or the purpose is met we delete information without delay. A daily job finds expired information and deletes or irreversibly blanks it.

• Electronic files: deleted so they cannot be recovered
• Statistics: identifiers removed; only totals kept
• Paper: we do not keep personal information on paper; any that arises is shredded or burned

You (or the legal guardian of a child under 14) can ask at any time to see, correct or delete your information, to stop processing, or to withdraw consent.

• On My page you can edit or delete your profile, children and interests, and turn marketing emails on or off.
• For anything else, email the privacy officer at support@gowith-demo.vercel.app. We confirm your identity and reply within 10 days.
• A legal guardian or someone you authorise can also ask, with a letter of authorisation.
• A request may be limited where the law allows, for example when it would harm someone else's rights; we will tell you why.

• Administrative: as few people as possible handle personal information; admin screens are limited to admin accounts.
• Technical: encryption in transit (HTTPS) everywhere, row-level access control in the database, encrypted messenger chat addresses (AES-GCM), passwords stored encrypted by the authentication provider, secrets kept in environment variables (never in code), personal data stripped from error logs.
• Physical: data is kept in certified cloud data centres.

If your browser sends Do Not Track or GPC, we do not send visit statistics (gw_aid, gw_src). We use no advertising cookies.

To refuse cookies: Chrome — Settings > Privacy and security > Third-party cookies (or Site data); Safari — Settings > Privacy; Edge — Settings > Cookies and site permissions. Blocking sign-in cookies means features that need an account will not work.

We do not collect behavioural information for targeted advertising or share it with others, and we do not install other companies' advertising or tracking tools.

Sam uses Anthropic's AI model (Claude) to answer from the school information and guides in our database. Your conversation is sent to Anthropic to generate the answer and, under its commercial API terms, is not used to train AI models.

AI answers and check results are reference information and can be wrong. We make no decisions by AI alone that significantly affect your rights or obligations (fully automated decisions under Article 37-2 of the Personal Information Protection Act). You can still ask the privacy officer to explain the AI processing.

The community's 'AI panel' consists of fictional people whose conversations are written by AI; it is not built from real users' information.

To improve the service, we turn questions Sam could not answer, answers you corrected, community answers the asker marked "This helped" and our team's replies into general knowledge that helps other families.

• Identifying details are removed first: names, emails, phone numbers, messenger ids, addresses, birth dates and the name of the school your child attends are stripped automatically before the text is summarised with AI (Anthropic), and again from the summary. Conversation and member ids are never kept with the result.
• Only community questions posted as public are used; private questions are not.
• Operations records such as tour or enquiry response times are used only as statistics over groups of 5 or more; smaller groups are never shown.
• Only candidates a reviewer approves become knowledge notes. Member experience is presented as personal opinion and operations statistics with 'anonymous aggregate' and a date; nothing is published automatically as fact.
• This applies only to advisor and community content from 8 November 2026. If you do not want your content used, tell our privacy officer and we will exclude it.

We have appointed a privacy officer who is responsible for personal information processing, complaints and remedies.

General enquiries: support@gowith-demo.vercel.app

For advice or dispute resolution about personal information you can contact these Korean public bodies:

We announce changes in the Service 7 days before they take effect (30 days for changes important to your rights) and ask for consent again where needed. Earlier versions are listed under 'Previous versions' below.

Changes in v3 (phone consultations): added the purpose, items and retention for phone consultation requests (phone number, call language, time zone, preferred times, topic, note). The phone number is collected only with a separate consent for this purpose on the request form.

Change log: v3 (2026-11-08) — return document vault and 행정사 connection added. v2 (2026-11-01) — full revision.

Changes in v4 (knowledge): added how anonymised advisor and community content improves the service's knowledge, and the retention of knowledge candidates.