This policy covers the NURI WALLET mobile app, the official NWAS website and connected authentication and wallet services provided by Altermo Co., Ltd. (the Company).
Wallet creation, management, pairing, approval, backup and recovery take place in the app. The website provides information, installation, legal notices and support; browser signup is not offered.
We process usernames, registered email addresses and phone numbers, identifiers and permitted profiles from the selected social provider, verification status, wallet/device links, approval/signing requests and records, PIN verification values and authentication credentials, IP addresses, app/browser versions, access times and error/audit records.
The phone manages wallet key material and device credentials using OS secure storage. The app and Company server do not collect raw fingerprint or face data; they use the OS authentication result. Recovery keys are generated on the phone and kept by the user; the server stores encrypted recovery material. Never email a recovery key.
Purposes include account authentication, contact verification, wallet and signing/approval operations, device pairing, encrypted backup/recovery, fraud prevention, security auditing, support, disputes and legal duties. Processing relies on applicable grounds such as contract performance or legal obligations; where separate consent is required, its purpose and items are disclosed and consent obtained.
We do not sell personal information or provide it for third-party advertising tracking.
Optional Google, Apple and GitHub sign-in connects to the chosen authentication provider and returns the identifiers/profile permitted by the user. The providers' independent processing follows their own policies. Choosing sign-in is not blanket consent for advertising or unrelated disclosure.
Amazon Web Services (AWS) supports hosting, storage, key management, Amazon SES email and Amazon SNS SMS delivery. Delivery uses the recipient email/phone and verification message, with mail/telecom carriers involved in transit. The primary operating storage is in Sydney, Australia: service data is transferred, stored and processed outside Korea. Social-provider and message-delivery countries may vary with their operations.
We distinguish processing on our behalf from independent third-party processing and do not expand disclosure without the required legal grounds, notices and consent. Contact us below about providers, overseas processing or rights. Legally required disclosures and lawful security responses are limited to necessary information.
Account profiles, contacts and social links are processed while needed for the account; wallet links and encrypted recovery material while needed for that wallet service. Verified deletion requests retire the relevant active account/wallet and unnecessary linked data after checking the result. Wallet deletion and account deletion have different scopes.
Authentication attempts, sessions and one-time checks expire and are cleaned up according to their validity and purpose. Hashed deletion-result receipts support duplicate-request verification for 30 days after completion and are not used for that purpose after expiry. This is not a deletion deadline for every record.
Final ledger/transaction-integrity and security replay-prevention records are not reversed or erased wholesale by deleting an account. Records required by law or an unresolved incident/dispute are limited to the necessary scope and purpose. Unneeded electronic data is deleted against recovery once retention grounds end; paper, if any, is shredded. Contact us to ask about your retained items, grounds, periods and deletion scope.
Use Account & Legal in the app to delete an account, or the linked deletion guide if you cannot use the app. The Company cannot unilaterally erase transactions already recorded on a public blockchain.
Web login and security use necessary session cookies and authentication values, not advertising-tracking cookies as a service prerequisite.
You can block/delete cookies in browser settings, but web features requiring login may stop working. App secure storage and web cookies are distinct mechanisms.
Contact us to request access, correction, deletion, restriction or withdrawal of consent. Following necessary identity/representative verification, we explain the result or restriction grounds and how to raise an objection.
Refusing or withdrawing essential processing may limit associated authentication, wallet or recovery features. Legal retention or final-transaction integrity may limit a request; we explain its scope. Reading this policy is not separate consent.
We use access controls, protected communications/storage, device binding/authentication, approval verification and security records. Post-quantum cryptography and MPC apply at their implemented protocol, key and signing boundaries.
This does not mean external login, email/SMS, external chains or every TLS/authentication root is fully post-quantum. No zero-risk or absolute-security guarantee is made.
The service is not designed for children who cannot give valid independent consent under applicable law. If child data is processed without required guardian consent, we take legally required steps such as restriction or deletion. Eligibility follows applicable law and disclosed service conditions.
The Company may amend this policy for changes in law, services or processing. Material changes are notified in advance with reasons, content, application time and rights procedures; separate consent is obtained where required.
Privacy, complaints and rights contact: Altermo Co., Ltd. / (주)알테르모
Phone: 031-991-3999 / Email: nwas@altermo.dev
Never send a PIN, password, private/recovery key or one-time code. Our staff do not request those secrets.
The Company processes account identity and generation, wallet/device links, participation times and counts, an optionally selected referral relationship, reward acceptance, payment and settlement, and anti-abuse records for existing wallet users who choose to participate. Purposes are verifying participation, preventing duplicates and self-referrals, calculating and paying rewards, and handling inquiries or disputes. There is no new browser signup; browser connection never asks for a PIN, private key or recovery key.
Approve the purpose, official origin and matching code in the app before connecting a browser. Referral application is a separate choice; opening a referral link alone does not apply it. We do not disclose the invitee's email, phone number or other contact details to the inviter. Dedicated security cookies allow only the user's own participation functions. Limited browser storage supports connection requests and resuming requests with an unknown result. The user can disconnect; expiry and account or program status can restrict the connection.
Expired temporary connection and session records are cleaned up periodically. Participation, referral, duplicate-prevention and unsettled records are retained while needed for program operation, settlement or disputes. Disconnecting or closing the program does not erase finalized NWAS, ledger entries or payment-verification records. An unresolved payment may require reconciliation before account or wallet deletion. Contact nwas@altermo.dev about retained data, reasons, deletion or restriction requests.
