Privacy Policy

Madang (madang.im) processes personal information in accordance with Korea's Personal Information Protection Act (PIPA). This policy explains what we collect, why, and your rights.

1. Purposes of processing

• User identification and authentication
• Storing and retrieving sand tray therapy sessions
• Service operation and support
• Therapist–client session sharing when assigned by an administrator

2. Categories of personal information

• Required: email address (received from OAuth provider), username (chosen by user)
• Optional: display name (received from OAuth provider)
• Automatic: IP address, access logs
• User-generated content: sand tray session data (classified as sensitive information)

3. Retention period

Until the user deletes their account. On deletion, all personal information and user-generated content is permanently erased.

4. Third-party sharing

We do not share personal information with third parties, except where required by law or with the user's prior explicit consent.

5. Processing entrusted to processors

• Amazon Web Services, Inc. — data storage (DynamoDB), authentication (Cognito), CDN (CloudFront), server hosting (EC2)
• Region: Seoul (ap-northeast-2). Some authentication metadata is replicated to us-east-1.

6. Sensitive information (PIPA Article 23)

Sand tray session content may reflect a user's emotional or psychological state and is therefore treated as sensitive information. We process it only with explicit consent obtained at signup, and erase all sessions on account deletion. Therapist access is restricted to clients explicitly assigned to that therapist by an administrator.

7. Your rights

• Access, correct, delete, or pause processing of your personal data.
• Withdraw consent — use Account menu → Delete account.
• Contact: contact@madang.im

8. Security measures

• TLS/HTTPS encryption in transit
• At-rest encryption (AWS-managed keys)
• IAM role-based least-privilege access
• No passwords stored locally (delegated to OAuth providers / Cognito)

9. Children under 14

This service is not intended for children under 14. Account registration by children under 14 is restricted (PIPA Article 22-2).

10. Changes to this policy

This policy may be updated to reflect legal changes or service changes. We will provide notice within the service when material changes are made.

Effective: 2026-05-11 · Contact: contact@madang.im

Terms of Service

1. Purpose

These Terms govern the rights, obligations, and responsibilities related to the use of Madang (madang.im, the "Service").

2. Service description

Madang provides a digital tool inspired by Sand Tray Therapy. Features include:

• Virtual sand tray session creation, save, and load
• Miniature figure placement and manipulation
• Therapist–client session sharing (only when assigned by an administrator)

3. Medical disclaimer — Important

This Service is not a substitute for clinical psychotherapy. It is an expressive tool, not a substitute for diagnosis, treatment, or medical advice. If you need mental health support, please consult a qualified medical or psychological professional.

In a crisis, please contact:

• Korea Suicide Prevention Counseling: 1393
• Mental Health Crisis Counseling: 1577-0199

4. Registration and accounts

• You must be at least 14 years old to register.
• You must provide accurate information and choose a username that does not infringe on others' rights.
• You are responsible for the security of your account.

5. Rights to user content

• You retain all rights to content you create.
• You may permanently delete all your data at any time via the account-deletion feature.

6. Prohibited conduct

• Unauthorized use of others' accounts
• Interfering with service operations
• Creating illegal or harmful content

7. Service changes and interruptions

The Service may change or be discontinued with prior notice. Reasonable temporary interruptions do not constitute a breach of these Terms.

8. Changes to these Terms

These Terms may be updated to reflect legal changes or service changes. We will provide notice within the service when material changes are made.

9. Jurisdiction

Disputes arising from these Terms are governed by the laws of the Republic of Korea, with the Seoul Central District Court as the court of first instance.

Effective: 2026-05-11