Privacy Policy
How Quantum Materials Inc. processes personal information in HanFlow PC.
Effective date: 2026-09-27 · Data controller: Quantum Materials Inc.
Revision history: 2026-09-26 first version · 2026-09-27 added visit/download records and the one-to-one inquiry form
Announced 2026-10-03 · effective 2026-10-10: a description of the device identifier and operating system type for the macOS versions is added (the purpose of collection and retention period are unchanged).
Announced 2026-11-05 · effective 2026-11-05: adds the items and retention period used for invite rewards (trial extension with an invite code).
Quantum Materials Inc. (the “Company”) complies with the Personal Information Protection Act and other applicable laws, and publishes this Policy to keep users’ personal information safe. HanFlow PC is software used without membership registration, and the Company processes only the minimum information necessary.
1. Purpose of Collection and Use of Personal Information
- Handling inquiries — receiving, consulting on and replying to inquiries
- Performance and settlement of paid license contracts — issuing and reissuing license keys, processing payments and refunds
- License verification — when a program checks online whether its license is valid
- Stable service operation — reliable provision of the website and downloads, prevention of fraudulent use
- Invite rewards — issuing invite codes, extending the trial for the inviter and the invited person, and preventing the same reward from being claimed twice
2. Items Collected and Methods of Collection
| Category | Item |
|---|---|
| Contact | Email and inquiry content (name, affiliation and phone number only if you provide them) |
| License purchase, key issuance and refunds | Email, order number, payment authorization details (amount, date and time), license key issuance history |
| License verification (when the program checks online) | License key, program name, device identifier (a 24-character value derived from the Windows installation ID and user name by one-way hashing (SHA-256) — the original values cannot be recovered), and time of verification |
| Invites (when you get or enter an invite code in a program) | Invite code, program name, device identifier (the same 24-character value as above) and a 24-character value made from the Windows installation ID alone by the same method (SHA-256), invite and redemption time, IP address |
| Generated automatically while using the site | IP address, access time, pages viewed, referring site (domain only), browser type, country/city/network provider estimated from the IP, installer download records |
- Collected when entered directly by the user (inquiries, payment), or when generated automatically during payment and refund processing or while using the site and programs.
- The macOS versions use the Mac's Hardware UUID instead of the Windows installation ID, reduced together with the user name in the same way (SHA-256) to a 24-character value, and also send the operating system type (Windows or macOS) when verifying the license.
- Payment method information such as card numbers is received directly by Paddle; the Company can neither store nor view it. Resident registration numbers are not collected.
3. Children Under 14
There is no account registration, and we do not knowingly collect personal information from children under 14. If we become aware of any, we delete it without delay.
4. Retention Period and Destruction
- Records of contracts, withdrawals and payments: 5 years (Korean E-Commerce Act)
- Records of consumer complaints and dispute resolution: 3 years (Korean E-Commerce Act)
- Access, download and admin login records (including IP): 90 days — daily totals without IP: 400 days
- Invite records (invite code, device identifiers, program, time): kept for as long as the service is provided, to prevent the same reward from being claimed twice — the IP address received with them is deleted after 90 days
- One-to-one inquiries: spam 30 days, resolved inquiries 1 year, payment/refund inquiries 3 years (Korean E-Commerce Act) · the IP attached to an inquiry: 90 days
- Once the purpose has been achieved or the period has expired, electronic files are deleted by a method that makes recovery impossible, and paper documents are shredded or incinerated.
5. Provision to Third Parties, Outsourcing and Cross-Border Transfer
The Company does not provide users’ personal information to third parties without consent. However, to perform the contract, information is transferred abroad as described below (Personal Information Protection Act, Article 28-8(1)(3)), and all transfers are made over encrypted communication (HTTPS).
| Recipient | What it does |
|---|---|
| Cloudflare, Inc. (USA) · privacyquestions@cloudflare.com · 101 Townsend St., San Francisco, CA 94107 | Outsourcing: Website hosting, delivery and security, and operation of the license verification server — connecting IP and communication logs, license verification information · for the duration of the outsourcing |
| Plus Five Five, Inc. (Resend) (USA) · privacy@resend.com · 2261 Market Street #5039, San Francisco, CA 94114 | Outsourcing: Sending license key and receipt emails — email, order, license key · destroyed once sending is complete |
| Paddle.com Market Ltd. (UK) · privacy@paddle.com · 30 Old Bailey, London EC4M 7AU | Provision to a third party (reseller): Processing of payments, billing and refunds — email, order information · in accordance with Paddle’s policy |
If you do not want your information transferred abroad, please let us know at info@qmscience.net or 070-7609-1376. Inquiries can also be made by telephone, so you can contact us without any transfer. However, since payment and license key issuance must go through the provider above, you will not be able to make a paid purchase if you refuse.
6. Rights of Users
Users may at any time request access to, correction or deletion of, or suspension of processing of their personal information. Please send your request to info@qmscience.net or 070-7609-1376 and we will act on it without delay. Requests made through an agent must be accompanied by a power of attorney.
7. Cookies and Browser Storage
We use no advertising or tracking cookies. To remember the display language you chose, we use a cookie (hf_lang) and a browser storage value (hfLang) that contain only a language code. They do not identify you, and you can clear them at any time in your browser settings.
For visit statistics we use Cloudflare Web Analytics, which does not use cookies. We see only aggregate statistics such as pages visited, referring sites, browser type and country, and no individual is identified.
For visit and download statistics we record the pages viewed, the referring site (domain only), your IP address and the country, city and network provider estimated from it. We use no advertising or tracking cookies, and records containing an IP address are deleted after 90 days.
8. Security Measures
- Encryption in transit (HTTPS)
- Minimizing the staff who handle personal information and managing access rights
- Minimizing collection, e.g. payment method information is not retained (processed by Paddle)
9. Chief Privacy Officer and Handling of Complaints
- Chief Privacy Officer: Hwanyeol Park (CEO)
- Complaints department: Customer Center · 070-7609-1376 (weekdays 09:00–18:00) · info@qmscience.net
10. When Using the Programs
- The programs do not send the files users work with (photos, videos, documents, archives) to the Company.
- Automatic captions in HanFlow Cut download the transcription program (github.com) and the speech model (huggingface.co) directly from those sites only when the user clicks “Download”. Those sites process the connecting IP address at that time, and the Company is not involved. Speech is transcribed only on the PC.
11. Changes to This Policy
When this Policy is changed, we will announce it on this site from 7 days before it takes effect (30 days before for changes unfavorable to users).