Privacy Policy

Effective Date: October 9, 2026

[Notice] Updates to our Terms of Service and Privacy Policy (Privacy Policy effective October 9, 2026; Terms of Service effective November 10, 2026)

Hello, this is Quantum Jump Club.

To protect our paid course videos, we are updating our Terms of Service and Privacy Policy. These changes also apply to members who have already paid, so we want to explain them in detail ahead of time.

When do the changes take effect?

What is changing?

An account can be used only by its owner. Sharing it with family or friends, or lending or selling it, is not allowed. (This was already in our Terms. We have simply made it clearer.)
You can register up to 2 devices for paid videos, and play them in only one place at a time. A device you remove cannot be registered again for 30 days.
When you play a video on a device you have not used before, we send a verification code to your sign-up email. Enter the code and playback starts right away.
If we detect access that appears to be account sharing, we first send you a warning. If it is detected again within 90 days, video playback is paused for 24 hours. If it keeps happening after that, a person on our team will review the case and may limit your access period or terminate your account. Before that, we will always contact you separately and give you time to explain.
Your name, the last 4 digits of your phone number, and your account code appear faintly on the playback screen. They are visible only on your own screen.
To do this, we keep records of your access region (city level) for 90 days, and your registered device information until you close your account. We do not store your precise location or IP address.

What is not affected

Live classes, class materials, assignments, and the community remain fully available, regardless of device limits or playback restrictions.

If you think you were blocked by mistake

Please contact us through our KakaoTalk channel (pf.kakao.com/_xnfDyG) or at news@quantumjumpclub.com. A person on our team will review it within 3 business days. If the use turns out to be yours, we will delete the record and extend your access period by the length of the restriction.

If you do not agree

If you do not tell us you object by the day before the Terms of Service take effect (November 10, 2026), you will be considered to have agreed to the updated Terms. If you do not agree, you may cancel without any penalty until the day before the effective date, and we will refund the amount remaining after deducting the portion you have used.

You can read the full text of the changes at the links below.

Thank you.

Quantum Jump Club (hereinafter 'Company') complies with the Personal Information Protection Act and other relevant laws and does its best to protect users' personal information.

1. Personal Information Collected

The Company collects the following personal information to provide services:

Required items: Email address, Name (nickname), Mobile phone number
Optional items: Profile photo, Interests, Occupation
For payment: Payment information (card company, payment date, etc. - card numbers are not stored)
Automatically collected: Service usage records, access logs, cookies, IP address, device information
Podcast guest application: Name, email, phone, company, title, bio (collected from non-members)
Podcast live pre-registration: Name, email, company (optional) (collected from non-members)
Singularity Builders free briefing application: Name, phone, company or brand, role, biggest current challenge (optional) (collected from non-members)
Partner applications (instructor, FDE, developer): name, email, mobile number, one-line introduction, experience and work samples, AI tools used, portfolio links, resume file, Singularity Builders completion status and cohort (collected from non-members)
Enterprise AX Champion consultation requests: company name, contact name, phone number, email (required), employee count and inquiry details (optional) (collected from non-members)
Automatically collected when playing paid videos (legal basis: performance of contract, legitimate interests)
- Playback device identifier: a cryptographically transformed value (hash) of the device identification cookie the Company stores in the browser. The original cookie value is not stored
- Browser and operating system type (e.g. "Chrome · macOS"). The full original information sent by the browser is not stored
- Access region: country, province, and city name. This is a value estimated from the access IP address; the IP address itself is not stored for this purpose
- New device verification code sending and confirmation records: time sent, whether confirmed, and number of attempts. Verification codes are stored only as cryptographically transformed values
- Playback rejection records (reason, time), and records of signs of suspected account sharing, warnings, and restrictions
- Playback status information (playback device, start time, last response time): kept temporarily for 90 seconds only

2. Purpose of Collection and Use

Collected personal information is used only for the following purposes:

Service provision and member management
Payment processing and refunds for paid services
Service improvement and new service development
Marketing and advertising (with separate consent)
Compliance with legal obligations
Podcast broadcast notices and guest appearance coordination (schedule, live link, replay notices)
Singularity Builders free briefing schedule and participation instructions
Partner selection review and project engagement coordination (review outcome notice, interview and practical assessment scheduling)
Enterprise AX Champion training consultation, clarification of work and training goals, and proposals for scope, schedule and a quotation
Preventing misuse of paid videos: playback device registration and concurrent playback limits, identity verification for new playback devices, account sharing detection and usage restrictions, and handling of objections
Deterring unauthorized recording and distribution of paid videos and identifying distributors: the member's name, the last 4 digits of the mobile phone number, and an account code are faintly displayed on the playback screen. This marking appears only on the member's own screen and is not stored separately

3. Retention and Use Period

Personal information is destroyed without delay when the purpose of collection is achieved. However, if retention is required by relevant laws, it will be stored for that period.

Records on contracts or withdrawal: 5 years (E-Commerce Act)
Records on payment and supply of goods: 5 years (E-Commerce Act)
Records on consumer complaints or disputes: 3 years (E-Commerce Act)
Login records: 3 months (Protection of Communications Secrets Act)
Singularity Builders free briefing application data: 30 days from application
Partner application records and resume files: 90 days from the date of rejection notice. If accepted, until the partnership ends
Enterprise AX Champion consultation information: retained until the consultation purpose is fulfilled, then destroyed without delay. Where retention is required by law, retained for the legally required period
Registered device information (playback device identifier, browser and operating system type, registration and removal records): until you close your account
Access region: 90 days from collection (records past the retention period are destroyed at the weekly cleanup)
New device verification code sending and confirmation records: 90 days from sending (records past the retention period are destroyed at the weekly cleanup)
Playback rejection records: 90 days from recording (records past the retention period are destroyed at the weekly cleanup)
Signs of suspected account sharing, warning and restriction records: 90 days from recording; internal status information used for the assessment: 90 days from the last assessment (records past the retention period are destroyed at the weekly cleanup)
Playback status information: 90 seconds after playback stops

Destruction Procedure and Method

Personal information whose retention period has expired is deleted automatically under a pre-established destruction policy. Any other destruction is carried out with the confirmation of the Privacy Officer.

Personal information stored in databases is deleted, and any copy remaining in the provider backups expires together with that backup retention window. Any personal information printed on paper is shredded or incinerated.

4. Third-Party Provision

In principle, the Company does not provide users' personal information to third parties. However, exceptions are made in the following cases:

When the user has given prior consent
When required by law or requested by investigative agencies
A selected partner profile and resume may be provided to a client company when assigning a project. Separate consent is obtained before any such provision

Current Third-Party Provision Status

TossPayments: Payment processing (payment information)
Google: Social login (email, name)
Kakao: Social login (email, name, profile photo)

5. Processing Entrustment

The Company entrusts personal information processing as follows for service provision:

TossPayments - Payment processing
AWS (Amazon Web Services) - Cloud infrastructure
Vercel Inc. - Web service hosting and server execution, estimating the access region (city level) from the access IP address
Supabase - Database hosting and data storage (including playback device, access, and warning records)
Upstash, Inc. - Temporary storage of playback status information (90 seconds), request rate limiting
Bunny.net - Storage and delivery of paid videos
Resend - Email delivery (including new device verification codes and warning and restriction notices)
Solapi - SMS delivery (including notices to members without an email address)
Discord - Internal notifications for received applications and misuse detection (name, email, contact number (partly masked in some notifications), part of member ID)
Kakao - Operation of KakaoTalk channel consultations (including receipt of objections)

6. Cross-Border Transfer of Personal Information of Users of This Site

For the entrusted processing and storage necessary to provide the service (performance of contract), the Company transfers users' personal information overseas as set out below, and discloses this pursuant to Article 28-8(1)(iii)(a) of the Personal Information Protection Act.

Vercel Inc.

Recipient: Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) · Contact: privacy@vercel.com
Country of transfer: United States. Server functions for this site run in Seoul (icn1), but under the Vercel Data Processing Addendum data may be transferred to the United States and other countries where Vercel and its subprocessors operate
Items transferred: Access IP address, browser information, requested address, and information you enter and submit
Purpose of use: Web service hosting and server execution, and estimating access region (city level) from the access IP address
Time and method of transfer: Each time you access the service, over encrypted communication (HTTPS)
Retention and use period: Deleted within a commercially reasonable period after the processing agreement ends (Vercel Data Processing Addendum; no number of days is specified). Information that must be kept by law is kept for that period

Resend

Recipient: Plus Five Five, Inc. (doing business as Resend, 2261 Market Street #5039, San Francisco, CA 94114, USA) · Contact: privacy@resend.com
Country of transfer: United States (data is stored in the United States)
Items transferred: Email address, name, email body (new device verification codes, warning and restriction notices, etc.)
Purpose of use: Sending email
Time and method of transfer: Each time an email is sent, over encrypted communication
Retention and use period: Sent emails and logs are kept for 30 days (Resend standard plans), and backups for 7 days. Deleted within 90 days after the processing agreement ends

Upstash, Inc.

Recipient: Upstash, Inc. · Contact: privacy@upstash.com
Country of transfer: United States (location of Upstash, Inc.). The actual storage location is the cloud region the Company chose when creating the database
Items transferred: Member ID, playback device identifier (encrypted value), playback start and last response times, and the access IP address or member ID used for request rate limiting
Purpose of use: Temporary storage of playback status to check simultaneous playback, and request rate limiting
Time and method of transfer: When you play a video or make a request to the service, over encrypted communication
Retention and use period: Playback status information for 90 seconds after playback stops; rate limiting records are deleted automatically after twice the limit window (1 minute to 30 days). Returned or deleted when the processing agreement ends (Upstash Data Processing Addendum)

Bunny.net (BunnyWay d.o.o.)

Recipient: BunnyWay d.o.o. (doing business as Bunny.net, Dunajska cesta 165, 1000 Ljubljana, Slovenia) · Contact: support@bunny.net
Country of transfer: Slovenia. Videos may be processed on servers in multiple countries through the Bunny.net delivery network
Items transferred: Access IP address and browser information of the device playing the video, and playback request information (video identifier, playback authorization token)
Purpose of use: Storing and delivering paid videos
Time and method of transfer: Each time a video is played, over encrypted communication
Retention and use period: Deleted when the agreement ends or the account is closed (no number of days is specified). Kept until settlement if amounts are unpaid, and tax and accounting documents for the relevant statutory period (Bunny.net Privacy Policy)

Discord Inc.

Recipient: Discord Inc. (444 De Haro Street #200, San Francisco, CA 94107, USA) · Contact: privacy@discord.com
Country of transfer: United States. Depending on the location of users and service providers, data may be processed on servers in other countries
Items transferred: Information contained in operational notifications. For application, inquiry, payment, and refund notifications: name, email, mobile phone number (partly masked in some notifications), and the details received (course applied for, payment amount, order number, reason, etc.); for misuse detection notifications: the first 8 characters of the member ID, type of detected signal, and the action stage and count
Purpose of use: Internal notifications to the operations team about received applications, inquiries, and payments, and about misuse detection
Time and method of transfer: Each time a notification is generated, by webhook (encrypted communication)
Retention and use period: Until the Company deletes the message from its operations channel. Any retention on the Discord side after deletion, such as backups, follows the Discord Privacy Policy

Supabase Pte. Ltd.

Recipient: Supabase Pte. Ltd. (65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513) · Contact: privacy@supabase.com
Country of transfer: Data is stored in the Republic of Korea (Seoul, ap-northeast-2). However, the contracting party is a Singapore company, and access from Singapore and the United States may occur during support and operations
Items transferred: Among the items collected under item 1 above, information stored in the Company database (member information, payment records, playback device, access, and warning records, etc.)
Purpose of use: Database hosting and data storage
Time and method of transfer: At all times during service operation, stored and retrieved over encrypted communication
Retention and use period: For the term of the processing agreement. All copies are deleted once 30 days have passed after the agreement ends (Supabase Data Processing Addendum)

How to refuse and effect of refusal: If you do not want your personal information transferred overseas, please let the Privacy Officer know. However, because this work is essential to providing the service, if you refuse it will be difficult to use the services concerned (paid video playback, email notices, etc.).

7. Cross-Border Transfer of Personal Information under Entrusted Work

This section concerns a separate system the Company operates under entrustment from a client company. It does not apply to the personal information of users of this site (qjc.app). For processing entrustment relating to user personal information, see the Processing Entrustment item above.

The Company performs the operation and maintenance of an automated tally system for collective-building management-body meetings, entrusted by client companies (meeting agencies). In the course of that work, personal information provided by the client or its original entruster (the management body) is entrusted to or stored with the overseas providers listed below. The legal procedures for cross-border transfer, including notice to and consent from data subjects, are led by the client or original entruster as the personal information controller; the Company discloses the following as the entrusted processor, pursuant to Article 28-8 of the Personal Information Protection Act as applied mutatis mutandis by Article 26(8).

Personal information items processed by that system

Name, date of birth or registration number, address, unit number, ownership share, and contact of unit owners and occupants; the entries on powers of attorney and written resolutions; and signature images. Below, "all processed items" refers to this list.

The processing regions and retention periods below reflect the settings of the accounts the Company uses to operate that system, and are separate from this site's infrastructure settings.

a. Google LLC (automated document recognition)

Items transferred: Full page images of powers of attorney and written resolutions. Depending on the form, these may include name, date of birth or registration number, address, contact, unit number, ownership share, voting content, and signature image. Images are transmitted in full without prior separation or masking. Of the recognition results, only the first six digits of any resident registration number are stored in the Company's systems, and page images are not retained in the Company's systems (for retention on the recipient side, see the retention period below).
Country: United States (under the Gemini API terms, data may be temporarily stored or cached in other countries where Google or its agents operate facilities)
Timing and method: Transmitted via API over an encrypted channel at the time a recognition request is made
Recipient: Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Privacy inquiries: Google Cloud data protection team (support.google.com/cloud/contact/dpo)
Purpose of use: Generating and returning the requested document recognition results
Retention period: Retained for 55 days for abuse detection (Gemini API usage policy). On paid tiers, prompts and responses are not used for model training.
How to refuse: Data subjects may refuse in writing or by phone to the client or management body, using the method stated in the meeting convocation notice; such documents are then excluded from automated recognition.
Effect of refusal: The document is processed manually without automated recognition.

b. Vercel Inc. (application runtime environment)

Items transferred: All processed items listed above. Processed transiently as requests and responses during application execution; not retained in a persistent data store.
Country: United States (server function execution region: Washington, D.C. area, iad1)
Timing and method: Continuously during the system operation period, as request/response processing over an encrypted channel
Recipient: Vercel Inc., 440 N Barranca Avenue #4133, Covina, California 91723, USA. Privacy inquiries: privacy@vercel.com
Purpose of use: Provision of the server and application runtime environment
Retention period: Retained for the minimum period necessary to provide the service, then deleted (Vercel privacy notice and data processing addendum). The provider does not publish a specific number of days.
How to refuse: Same as item a above.
Effect of refusal: Excluded from system-based tallying; tallied manually instead.

c. Supabase Pte. Ltd. (data storage and backup)

Items transferred: All processed items listed above
Country: Data is stored in the Republic of Korea (Seoul, ap-northeast-2). However, the contracting entity is a Singapore company and technical support is performed by the U.S. entity Supabase, Inc. as a sub-processor, so access from Singapore and the United States may occur during support and operations.
Timing and method: Continuously during the system operation period, as storage and retrieval over an encrypted channel
Recipient: Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Privacy inquiries: privacy@supabase.io (Singapore entity, per the data processing agreement) or privacy@supabase.com (US entity Supabase, Inc., per its privacy policy)
Purpose of use: Data storage and backup
Retention period: The term of the entrusted work. Upon termination, returned or destroyed per the client's instructions. The provider's daily automated backups retain the most recent seven days.
How to refuse: Same as item a above.
Effect of refusal: Same as item a above.

8. Rights of Data Subjects

Users may exercise the following rights at any time:

Request access to personal information
Request correction or deletion of personal information
Request suspension of personal information processing
Withdraw consent

Rights can be exercised through the settings menu within the service or through customer support.

If you provided information without an account, you may submit your request to the Privacy Officer listed below.

9. Matters Concerning Automated Decisions

Fact and purpose of automated decisions: To prevent account sharing of paid videos, the Company's system determines warnings and 24-hour playback restrictions without human involvement. Fixed-term restrictions and termination of the service agreement are made only after review by a person.
Subjects: Members with access rights to paid videos
Main information used and its relationship to the decision: playback device identifier, access region (city level), playback rejection records, and verification code request records. The system checks whether the access regions of different devices are far apart within a short time, and whether playback rejections and verification code requests are repeated within a short period.
Considerations and procedure: When a sign of suspicion is first confirmed, only a warning is given; a 24-hour playback restriction is applied only if it is confirmed again within 90 days after the warning. Duplicate measures are not taken within the same 24 hours.
Sensitive information and personal information of children under 14: Not processed.
How to request an explanation or review: You may request an explanation of the reasons for a decision, or a review by a person, through the KakaoTalk channel (pf.kakao.com/_xnfDyG) or news@quantumjumpclub.com. We respond within 3 business days from the date the request is received.

10. Security Measures

The Company takes the following measures to ensure the safety of personal information:

Encryption of personal information
Access authority management and restrictions
Access log retention and forgery prevention
Installation and operation of security programs

11. Privacy Officer

The Company designates a Privacy Officer as follows to take overall responsibility for personal information processing and to handle user complaints and damage relief related to personal information processing:

Privacy Officer: Sangrok Jeong

Email: news@quantumjumpclub.com

Phone: 010-8216-8366

12. Cookie Usage

The Company uses cookies for service convenience. Cookies are small text files that websites store on users' browsers.

Purpose of cookie use: Login maintenance, service usage analysis, personalized service provision

The Company uses a device identification cookie (qjc_device, 1 year) to distinguish playback devices for paid videos. If you refuse or delete this cookie, your next playback may be recognized as a new playback device and email verification may be required.

Users can refuse to store cookies through browser settings, but this may cause difficulties in using the service.

13. Remedies for Infringement of Data Subject Rights

To seek redress for a personal information infringement, you may apply to the bodies below for dispute resolution or counselling. You may also contact the Privacy Officer above regarding the Company's own processing.

Privacy Infringement Report Centre: 118 (no area code) · privacy.kisa.or.kr
Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
Supreme Prosecutors' Office Cyber Investigation Division: 1301 (no area code) · www.spo.go.kr
National Police Agency Cyber Bureau: 182 (no area code) · ecrm.cyber.go.kr

14. Changes to Privacy Policy

This privacy policy may be modified due to changes in laws, policies, or security technologies. Changes will be notified through notices within the service from 7 days before implementation.

Revision History

Enacted January 28, 2026
Corrected September 3, 2026 — fills in statutory disclosures that were missing: remedies for infringement of data subject rights (item 13) and the destruction procedure and method (item 3); states how data subjects without an account may exercise their rights (item 8); and reclassifies Supabase from third-party provision to processing entrustment. What the Company processes has not changed; these entries were missing or inconsistent with the facts, so the correction applies from publication.
Effective September 9, 2026 — adds item 7, cross-border transfer of personal information under entrusted work.
Revised October 9, 2026: adds the items collected to prevent misuse of paid videos (playback device identifier, access region, verification code records, warning and restriction records) and their retention periods, and newly sets out processing entrustment (Vercel, Upstash, Bunny.net, Kakao), the cross-border transfer of personal information of users of this site, and matters concerning automated decisions. Corrects the omission of the mobile phone number from the required items.

← Back to Home