Privacy Policy

Effective: September 28, 2025

Comebaek LLC ("Comebaek," "we," "us") provides a K-pop alerts app and related websites. This Privacy Policy explains what we collect, how we use it, and your choices.

What we collect

How we use data

Data sources & third parties

We use trusted providers to run the service (infrastructure, storage, delivery): e.g., Apple APNs, Google FCM, Cloudflare (Pages/Workers/Queues), Fly.io (API hosting), and a managed PostgreSQL database. We only share the minimum necessary to operate Comebaek.

What we don't do

Retention

We keep push tokens and preferences while you use the app. Server logs are kept for a limited period for security and operations, then deleted or aggregated.

Your choices

Children's Privacy (COPPA)

Comebaek is not intended for children under 13 years of age. We do not knowingly collect, use, or share personal information from children under 13. If you are a parent or guardian and believe we may have inadvertently collected information from your child, please contact us immediately at privacy@comebaek.com and we will promptly delete such information.

International users

Our services are operated in the United States. If you use Comebaek from other regions, your data may be processed in the U.S. and other jurisdictions.

Security

We use industry-standard safeguards appropriate to the nature of the data. No method of transmission or storage is 100% secure.

GDPR (EU/UK users)

Controller: Comebaek LLC, Santa Clara, CA, USA. Purposes & Legal Bases: Legitimate interest (service operation, security), consent (notifications). Recipients: Service providers (Apple, Google, Cloudflare, hosting). Retention: Active use period plus limited logs retention. Your Rights: Access, erasure, portability, objection, and right to lodge a complaint with an EU/UK supervisory authority. Response Time: We respond to EU/UK data rights requests within one month. Contact: privacy@comebaek.com.

Cookies & tracking

We use essential cookies for site functionality and may use analytics cookies with your consent. Non-essential cookies will not fire until consent is given for EU/UK visitors. You can control cookies in your browser settings. For EU/UK visitors, we'll request consent for non-essential cookies via our cookie banner.

Data breach notification

We will notify regulators within 72 hours when required by law (GDPR Art. 33) and notify affected California residents if personal information is breached as required by California Civil Code §1798.82. If 500+ California residents are notified, we will submit a sample notice to the California Attorney General.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights to know what personal information we collect, request deletion, correction, and opt-out of "sale" or "sharing" (we don't currently sell or share). To exercise these rights, email privacy@comebaek.com. We do not sell your personal information.

User-generated content & DMCA

If we ever introduce features allowing user-generated content, we will comply with the Digital Millennium Copyright Act (DMCA). Our designated DMCA agent for copyright notices is: Legal Department, Comebaek LLC, 2066 N Capitol Ave #9002, San Jose, CA 95132, USA - email: dmca@comebaek.com. This agent information will be registered with the U.S. Copyright Office when user content features are introduced.

Changes

We may update this Policy. We'll change the "Effective" date and, if changes are material, provide additional notice.

Contact

Privacy Officer: privacy@comebaek.com
General Support: support@comebaek.com
Company: Comebaek LLC
Address: 2066 N Capitol Ave #9002, San Jose, CA 95132, USA