Privacy Policy

Required: email address, name (Google profile), phone number, sign-up timestamp.

User-entered: target credential (QBA/QASP-S/ABAT), occupation, education, affiliation, and optional date of birth, major, fieldwork start date; (supervisors) credentials held, credential numbers, issue/expiry dates, supervision availability, and a short bio (optional).

Generated in use: fieldwork logs (date, hours, activity type, supervisor name, etc.), monthly status records, consent history.

AI assistant: the questions you type and the bot's answers (for quality improvement and analysis). No raw identifiers are stored; IP is kept only as a one-way hash.

Automatically collected: usage records, access logs, and cookies (to maintain the login session).

Member identification and login (Google OAuth) authentication; fieldwork log management and monthly reporting; exam study support; service improvement and analytics (Google Analytics); and service notifications and (with consent) marketing/benefit messages sent via your phone number.

New service development, statistics, academic and market research, and marketing/event communications; analysis, utilization, and data-asset development using pseudonymized or anonymized information.

Personal information is destroyed without delay upon account withdrawal.

Fieldwork logs may be retained for up to 5 years for credentialing/audit purposes as required by law and certification bodies.

We may provide personal information to third parties: (a) with your prior consent, in which case we disclose the recipient, purpose, items, and retention period; (b) to certification bodies (e.g., QABA), partner supervisors, and collaborating education/research institutions to the extent necessary to provide the Service, support credentialing, and conduct research; and (c) where required by law or lawful request.

In accordance with the Personal Information Protection Act, we may use or provide to third parties pseudonymized or anonymized information — without additional consent — for statistics, scientific research, service improvement and new-service development, market analysis, and public-interest archiving, and may retain and utilize such information as a company data asset.

Data you enter or generate in the Service (such as fieldwork records) may be analyzed and processed within the above purposes to improve the Service and develop new services.

Supabase (auth/database/storage, Seoul region); Google LLC (OAuth login, Analytics); Vercel Inc. (hosting).

You may access, correct, delete, or restrict processing of your personal information at any time via the dashboard profile editor or the contact below.

Information whose retention period has elapsed or purpose achieved is destroyed without delay and permanently erased.

Access control with row-level security (RLS), HTTPS encryption in transit, and authentication/access logging.

Privacy matters (access, correction, deletion, restriction): SpectrumHub Operations Team — official.spectrumhub@gmail.com.

B-track, the Company's child behavior recording tool, does not collect a child's real name, date of birth (day), or address. It processes only the code/alias and behavior observations entered by the user (teacher/therapist).

The Company's operations team (administrators) may access user-recorded data to the minimum extent necessary for support, operations, troubleshooting, and quality/safety management. Sensitive information such as the diagnosis group is not displayed, and access is read-only.

In addition, a supervisor connected to a user (trainee) may view that trainee's recorded behavior data on a read-only basis for supervision purposes.

Each operations access is recorded in an audit log with the time, the item viewed, and the administrator.

Recorded data is processed within the purposes in Sections 2 and 4; pseudonymized or anonymized information may be used without additional consent for statistics, research, and service improvement.

Material changes will be announced at least 7 days in advance. Effective date: 2026-05-30.