Privacy Policy

1. Who we are

The controller (the party that decides how your personal data is used) is XIUSoft (Korean name: 시우소프트), Republic of Korea. Representative: Ga Ram Jung (정가람). Business registration number: 752-41-01398. Address: 901-401, 33 Dongtanjungsimsangga 1-gil, Dongtan-gu, Hwaseong-si, Gyeonggi-do, 18455, Republic of Korea. Telephone: +82 507-1432-9182.

Contact for all privacy matters, including requests to exercise your rights: contact@xiu.kr. We have not appointed a Data Protection Officer: our core activities do not consist of regular and systematic monitoring of people or of large-scale processing of special categories of data (Article 37 GDPR), because the diary content we store is end-to-end encrypted and cannot be read by us. We will appoint one if this changes. The contact point for data protection matters, for you and for the authorities, is our representative, Ga Ram Jung (정가람), at the same email address and telephone number. In the Republic of Korea this person is also our person in charge of personal information protection (개인정보 보호책임자).

Availability and representatives: The free features of Bosong are available in the European Economic Area (EEA) and the United Kingdom. There, the app runs entirely on your device and sends nothing to us: no account, no upload, no analytics. Bosong Plus (sign-in, the XIUSoft account, encrypted backup, sync and the PDF diary book) is not offered in the EEA or the UK. Whether you are in these regions is determined by the country or region of your app store account; there, the app does not show Bosong Plus and the subscriptions are not sold. If you email us from these regions, we use your email only to answer you (sections 2 and 7). We have not currently appointed a representative under Article 27 of the GDPR or the UK GDPR. Before we offer Bosong Plus in the EEA or the UK, we will appoint those representatives and publish their names and addresses here. If another country requires a local representative or contact point, we will do the same. Until then, write to contact@xiu.kr and we will deal with your request.

2. What we collect, why, and on what legal basis

The table lists everything we process. Legal bases are given for users in the EEA, the UK and Switzerland (GDPR). Anything not listed is not collected.

Items marked “with Bosong Plus” are processed only if you sign in to turn on Bosong Plus. Your XIUSoft account is shared with our app LiveSSH: if you also use LiveSSH, the LiveSSH Privacy Policy (livessh.xiu.kr/privacy) covers the data of that app. Providing the data is voluntary, but without it we cannot provide the feature concerned.

We do not use your data for automated decisions with legal effect, for advertising, or to train AI models. We do not collect advertising identifiers, location, contacts or photos, and we never receive your diary in readable form. For each legitimate-interest item we weighed our interest against your rights and expectations and keep only the data shown; you may object (section 8).

3. What stays on your device

The following is never sent to us. If you turn on Bosong Plus, the items marked with an asterisk (*) are also uploaded, but only as ciphertext that we cannot read (section 2).

• Your entries*: feelings, strengths, the main feeling, rest days, tags, one-line notes, gratitude notes, the time of each entry.
• Your tags*, presets* and custom feeling names* and colours; your settings and reminder times.
• Statistics, the calendar and the year in pixels, which are computed on your device.
• Help card: when an entry contains some words used on very hard days, the app shows places where you can talk to someone. This happens only on your device; neither the text nor the fact that the card was shown is sent anywhere.
• Reminders are scheduled on your device by the operating system; we run no notification server for Bosong.
• The device lock uses Face ID, Touch ID or your device passcode through the operating system. The app never receives your fingerprint, face data or passcode.
• Your recovery key, kept in your device’s secure storage (Keychain). It is never sent to us.
• Files you export are saved where you choose and are not encrypted by the app.

Deleting the app deletes this local data. Your operating system’s own device backup (for example iCloud Backup or Google’s device backup) may include it under the terms of Apple or Google; that backup is not controlled by us.

4. Information about your feelings and health

A mood diary can reveal how you are doing, which some laws treat as health data or other sensitive personal information (for example Article 9 GDPR, Article 23 of the Korean Personal Information Protection Act, the Brazilian LGPD, the Chinese PIPL and some US state laws). Without Bosong Plus we never receive it. With Bosong Plus we receive it only as ciphertext that we cannot decrypt, because the key is protected by your recovery key, which we never have.

We treat everything in your backup as sensitive data about your health, even though we only ever hold it encrypted. We therefore upload it only after your separate, explicit consent, which the app asks for as its own step (an unticked box) before the first upload, apart from the Terms and the purchase (Korean PIPA Article 23(1)(i); GDPR Article 9(2)(a)). We record when you consented and which version of the text you saw. We use the backup only to store and sync it for you, and never share its content with anyone, including RevenueCat. You can withdraw consent at any time by deleting your Bosong backup in the app (section 12) or by writing to contact@xiu.kr; this does not affect processing before the withdrawal, and the free features keep working. Under Japan’s APPI, the feelings, strengths and built-in tags you pick are generally not special care-required personal information on their own, but notes and custom names you write yourself can contain it (for example a diagnosis or a treatment), so we treat the whole encrypted backup as sensitive.

Apple Health (optional, iPhone and iPad only). If you turn on “Send State of Mind to Health” in Settings, the app writes each new entry to Apple’s Health app on your device as a State of Mind sample (a mood value derived from the feeling family and strength, and matching Apple labels; never your text, tags or custom names). This happens on your device: we do not receive it, and Bosong never reads any data from Health. Data in Health is governed by Apple’s terms and your Health settings. It is off by default; you can turn it off in Settings at any time and delete the samples in the Health app. We never use Health data for advertising or data mining.

5. Who receives data (processors and recipients)

We do not sell your data and do not share it for advertising. We use the providers below to run the service. They act on our instructions (as processors, or “entrusted parties”) except where noted. Each of these providers is bound by contract to protect your data at least as well as this policy does and to use it only to provide its service to us.

We may disclose data to authorities, courts or advisers where the law requires it, or to protect our rights, and to a successor if the business is transferred (we would tell you and the rules in this policy would continue to apply). Because your diary is end-to-end encrypted, anything we could disclose about it is ciphertext.

6. International transfers

XIUSoft is based in the Republic of Korea. Our server is in Japan (encrypted backup copies are also kept on our own backup device in the Republic of Korea), and our other providers are in the United States and other countries, so your data is transferred across borders wherever you live. Transfers happen only if you turn on Bosong Plus, contact us, or allow store diagnostics; the free features of the app transfer nothing to us.

For users in the EEA, the UK and Switzerland: transfers to the Republic of Korea and to Japan are covered by European Commission adequacy decisions (Korea: Decision (EU) 2022/254; Japan: Decision (EU) 2019/419) and by UK adequacy regulations. For the United States we use, for each provider, the safeguard in the last column of the table in section 5: the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, and otherwise the Standard Contractual Clauses (Decision (EU) 2021/914) with the UK Addendum or International Data Transfer Agreement and, for Switzerland, the Swiss addendum. You can ask for a copy of the safeguards at contact@xiu.kr.

For users in Korea, Japan, Brazil, mainland China and elsewhere: your data is processed in the countries listed above, under the safeguards and notices in section 9. You may refuse a transfer by not using the feature concerned or by deleting your account.

7. How long we keep data

8. Your rights

Depending on where you live you have some or all of these rights over your personal data: to know what we hold and get a copy (access); to correct it; to delete it; to restrict or object to processing; to receive it in a portable format; to withdraw consent at any time (this does not affect processing before the withdrawal); and not to be subject to decisions based solely on automated processing (we make none). We apply these rights to every user, whatever your country, unless a law makes an exception.

How to use them: use the in-app controls (export, delete backup, delete account) or write to contact@xiu.kr from the email address of your account. We may ask you to confirm your identity. We answer without undue delay, within the period required by applicable law and in any case within 30 days (shorter periods apply in some places, for example 10 days under Korean law), and tell you if the law allows and we need more time. Requests are free unless they are clearly unfounded or excessive.

Because your backup is end-to-end encrypted, we can export or delete your ciphertext but we cannot show you its contents; use the app to read your diary and its export function to get a readable copy.

If you are unhappy with our answer you may complain to the data protection authority where you live or work. Examples: Personal Information Protection Commission (Korea, PIPC); Personal Information Protection Commission (Japan, PPC); Autoridade Nacional de Proteção de Dados (Brazil, ANPD); the national authorities of EEA states (list at edpb.europa.eu); the Information Commissioner’s Office (UK, ICO); the Federal Data Protection and Information Commissioner (Switzerland, FDPIC); the California Attorney General and California Privacy Protection Agency; the Office of the Privacy Commissioner of Canada; the Office of the Australian Information Commissioner (OAIC); the Personal Data Protection Commission (Singapore, PDPC); the Data Protection Board of India. We would appreciate the chance to resolve your concern first.

9. Rules for specific regions

European Economic Area, United Kingdom, Switzerland (GDPR, UK GDPR, FADP)

The free features of Bosong are available in the European Economic Area and the United Kingdom and send nothing to us there; Bosong Plus is not offered there (section 1). In those regions the only personal data we receive are the emails you send us, which we use only to answer you, and, if you allow it in your device settings, crash reports that Apple or Google pass on to us (sections 2 and 7). This section applies wherever the GDPR, the UK GDPR or the Swiss FADP applies to our processing, including Bosong Plus in Switzerland, and will apply in full if we offer Bosong Plus in the EEA or the UK. Legal bases are in section 2, sensitive data in section 4 and transfers in section 6. You have the rights in section 8 and may complain to your supervisory authority. Where you have given consent, you may withdraw it at any time. You may object at any time to processing based on legitimate interests; we will stop unless we have compelling grounds or need the data for legal claims. If a personal data breach is likely to put you at risk, we will inform you and the authorities without undue delay and within the legally required period (for example 72 hours to the supervisory authority under the GDPR).

California and other US states (CCPA/CPRA and similar laws)

In the last 12 months we collected these categories: identifiers (email address, account identifiers, IP address); commercial information (subscription records); internet or network activity (server logs); and, as stored but unreadable by us, the other information in your encrypted backup. Sources: you, your device, and the stores and providers in section 5. Purposes: those in section 2. We keep each category as long as stated in section 7.

We do not sell personal information and do not share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the data of anyone under 16. We do not use or disclose sensitive personal information (which includes account log-in credentials and health information) except to provide the service you asked for. Some US state laws on consumer health data (Washington’s My Health My Data Act, Nevada law and Connecticut law) may treat your encrypted backup, and the fact that your account uses Bosong Plus, as consumer health data. How we handle it, and your rights, are set out in our separate Consumer Health Data Privacy Policy (bosong.xiu.kr/en/consumer-health-data/). We do not collect, use or sell personal data to train large language models or other AI models. Disclosures for a business purpose go to the processors in section 5.

You may ask to know, access, correct, delete and port your information, to opt out of sale/sharing (not applicable, as we do not do either) and not to be discriminated against for using these rights. You can use an authorized agent; we will verify the agent’s authority and your identity. We respond within 45 days (extendable once by a further 45 days with notice). If we refuse a request, you may appeal by replying to our decision at contact@xiu.kr. If we deny your appeal, you may complain to the attorney general of your state, for example in Washington at www.atg.wa.gov/file-complaint or in Connecticut at portal.ct.gov/ag. We do not offer financial incentives for data. Other US state laws (for example in Virginia, Colorado, Connecticut, Texas) give similar rights, which we honor in the same way.

Republic of Korea (PIPA)

Legal bases under PIPA: (1) Processed without consent: your XIUSoft account details, subscription status and messages to us, because they are necessary to conclude and perform the Bosong Plus contract (Article 15(1)(iv)); server logs and account-deletion records, limited to the items in section 2, for our legitimate interest in operating the service securely and proving deletion (Article 15(1)(vi)). (2) Processed with consent: your encrypted Bosong backup, which may count as sensitive information about health, only with consent obtained separately from any other consent (Article 23(1)(i); section 4). If you use only the free features, we process no personal information about you.

This policy is also our privacy policy under the Personal Information Protection Act. Items collected: section 2 (required for Bosong Plus: email address or sign-in identifier; collected automatically: IP address and service-use records). Sensitive information: we treat the encrypted backup as sensitive information about health and process it only with your separate consent (section 4). Purposes: section 2. Retention: section 7.

Overseas transfer: as entrustment or storage necessary to perform the Bosong Plus contract, we transfer personal information abroad by disclosing the following in this policy (PIPA Article 28-8(1)(iii)(a)). (1) Oracle (Oracle Cloud Infrastructure, the host of our server): Japan (Osaka region). Sent over encrypted connections (TLS) when you sign in, back up or sync, and stored on our server. Items: account details, encrypted backup, subscription records, server logs. Purpose: hosting our server. Retention: as in section 7. Encrypted copies of the server’s backups are also kept on our own backup device in the Republic of Korea; as we are based there, this is not a transfer abroad. (2) RevenueCat, Inc. (1032 E Brandon Blvd #3003, Brandon, FL 33511, USA; compliance@revenuecat.com): United States. Sent by the RevenueCat software in the app over encrypted connections when you buy, restore or open the app. Items: user ID, purchase receipt or token, IP address, device model, OS and app version, store country. Purpose: verifying and managing subscriptions. Retention: we request deletion when you delete your account; otherwise RevenueCat’s retention policy applies. (3) Google LLC (Google Workspace; 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA): United States and other locations. Sent when you email us. Items: your email address and message. Purpose: answering you. Retention: 30 days after our answer. To refuse, don’t turn on Bosong Plus or delete your account: backup and sync will be unavailable but the free features keep working. You can also contact us by phone (+82 507-1432-9182) or post instead of email. Sign-in with Apple or Google and store payments are handled by those companies under your own relationship with them and are not transfers by us.

Destruction: when a retention period ends or you ask us to delete data or withdraw consent, we delete it from our database without delay, and our encrypted disaster-recovery backups rotate out within 30 days so it cannot be restored. Support emails are permanently deleted when their retention ends. We keep no paper records. Breaches: if we learn of a personal-data breach, we notify you within 72 hours and, where the law requires (for example 1,000 or more people, sensitive information, or unlawful outside access), report it to the PIPC or KISA within 72 hours.

Person in charge of personal information protection: Ga Ram Jung (정가람), representative; contact@xiu.kr, +82 507-1432-9182. Safety measures: section 11. Complaints and remedy: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office Cyber Crime Investigation Division (spo.go.kr, 1301) and the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182). Users under 16 cannot sign in or use Bosong Plus, and we do not process personal information of children under 14 (section 10).

Japan (APPI)

If you are in Japan, the Act on the Protection of Personal Information (APPI) applies to us as a foreign business operator that handles the personal information of people in Japan in connection with providing a service to them (Article 171). Our name, address and representative are in section 1 and our purposes of use in section 2. Special care-required personal information: the feelings, strengths and built-in tags you choose are generally not special care-required personal information, but text you write yourself (for example about an illness or a treatment) can be. We never acquire it in readable form: it reaches our server only as ciphertext, and only after you consent in the app (section 4). Provision to third parties in a foreign country: we entrust RevenueCat, Inc. (subscription management) and Google LLC (support email), both in the United States, with the data listed in section 5, on the basis of your consent and of contracts that require these recipients to take measures in line with the APPI, which we review at least once a year. The United States has no comprehensive federal data protection law; see www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america. On request we will tell you how the recipients’ measures are ensured and checked. Handling in foreign countries: we handle personal data on our server in Osaka, Japan, and in the Republic of Korea, where XIUSoft operates and administers the service and where encrypted backup copies are also kept on our own backup device; Korea’s Personal Information Protection Act is a comprehensive law supervised by an independent commission. Our security measures are in section 11. You may ask us to notify you of the purposes of use, to disclose your retained personal data (including in electronic form) and our records of provision to third parties, to correct, add to or delete it, to stop using or erase it, and to stop providing it to third parties, by writing to contact@xiu.kr from your account email. We charge no fee. For complaints, write to the same address; you may also consult the Personal Information Protection Commission of Japan.

Brazil (LGPD)

The controller is XIUSoft (section 1); the contact point (encarregado) is contact@xiu.kr. The legal bases are those in section 2 mapped to the LGPD: performance of a contract (Art. 7, V), consent (Art. 7, I), legitimate interest (Art. 7, IX) and compliance with legal obligations (Art. 7, II); for sensitive data about health, your specific and highlighted consent (Art. 11, I; section 4). You have the rights listed in Article 18 (confirmation, access, correction, anonymization, blocking or deletion, portability, information about sharing, information about refusing consent and its consequences, and revocation of consent). You may complain to the ANPD. International transfers rely on the mechanisms in LGPD Article 33, in particular specific contractual clauses, and your specific consent where needed for the transfers described in section 6.

Mainland China (PIPL)

Bosong is currently not offered in mainland China. If you are in mainland China, the Personal Information Protection Law (PIPL) may apply. The free features of the app send nothing to us. If you turn on Bosong Plus, we process your personal information on the basis of your consent and where necessary to provide the subscription you ask for. Your data is stored on our server in Osaka, Japan, and encrypted backup copies are also kept on our own backup device in the Republic of Korea; we have no server in mainland China. It is processed by XIUSoft in the Republic of Korea and by the overseas recipients in section 5, for the purposes in section 2 and for the periods in section 7.

Where the law requires it, we ask for your separate consent, as its own choice in the app and before any data leaves mainland China, for (a) the cross-border transfer described in this policy and (b) processing the encrypted backup, to the extent it counts as sensitive personal information. We do not process the personal information of children under 14. If you do not consent, Bosong Plus is unavailable, but all free features still work. You may withdraw consent at any time by deleting your backup or account; this does not affect earlier processing.

To exercise your PIPL rights (to know, to decide, to restrict or refuse processing, to access and copy, to transfer, to correct, to delete, and to ask us to explain these rules), including against an overseas recipient, write to contact@xiu.kr from your account email. We answer within the period the law requires and in any case within 30 days. If you think we have infringed your rights, you may complain to the competent authority in China. Where the PIPL requires us to designate a dedicated institution or representative in mainland China, we will designate one and publish the contact here. We do not state that any filing, registration, standard contract or security assessment exists; we complete those the law requires for our situation before we offer Bosong Plus in mainland China. Sign in with Google may be unreachable there; Sign in with Apple works.

Canada (PIPEDA), Australia (Privacy Act), Singapore (PDPA), India (DPDP Act)

Canada: we obtain your consent for the collection, use and disclosure described here; your information may be processed outside Canada and may be accessible to foreign authorities under local law. You may withdraw consent or access and correct your information, and complain to the Office of the Privacy Commissioner of Canada.

Australia: we handle personal information in line with the Australian Privacy Principles. When we disclose information to overseas recipients (section 5) we take reasonable steps to make sure they handle it consistently with the APPs. You may ask for access or correction and, if we do not resolve a complaint, complain to the OAIC.

Singapore: we collect, use and disclose personal data with your consent or as the PDPA allows, and transfer it overseas only with protection comparable to the PDPA. Contact for data protection matters: contact@xiu.kr. You may complain to the PDPC.

India: we process your personal data on the basis of your consent and for the legitimate uses the Digital Personal Data Protection Act allows. You may access, correct, complete and erase your data, withdraw consent, nominate another person to exercise your rights, and use our grievance contact (contact@xiu.kr; we answer within 30 days). You may complain to the Data Protection Board of India after you have used our grievance process.

Hong Kong, Taiwan and other regions

Users in Hong Kong (PDPO), Taiwan (PDPA) and every other country have the rights in section 8 to the extent their law provides, and may contact us at contact@xiu.kr or complain to their local authority. Where local law gives you a stronger right than this policy, the local law applies.

10. Children

Bosong is not directed at children. You must be at least 16 years old to sign in or use Bosong Plus. We use one global age of 16 because it is the highest age of digital consent that any EU member state applies and is at least as high as the age set in Korea (14), the United Kingdom (13) and the United States (13, COPPA). If your country sets a higher age, that age applies. The free features of the app send no personal information to us, from anyone of any age. Before you can sign in for Bosong Plus, the app asks you to confirm that you are 16 or older; until you do, sign-in is not available, and we never ask for or store your date of birth. In the United Kingdom we treat users aged 16 and 17 as children under the ICO Age Appropriate Design Code: Bosong Plus has privacy-protective settings by default, no profiling, no location data and no nudges to share more.

We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, write to contact@xiu.kr and we will delete it without delay.

11. Security

• End-to-end encryption of the backup on your device with AES-256-GCM. Each account has a random data key, which is wrapped (encrypted) with a key derived from your recovery key; only the wrapped form reaches our server. The recovery key is created on your device and kept in its secure storage.
• TLS for traffic between the app and our server; Let’s Encrypt certificates.
• Database row-level security so each account can reach only its own rows; server ports closed to the Internet except the HTTPS entry point; administrative access only over a private network.
• Database backups, made every 3 hours, are encrypted as they are made, with a public key; the private key needed to decrypt them is on neither the server nor the backup device.
• No system is perfectly secure. The app’s source code is not public and has not been audited by a third party. If a security breach involves your personal data, we will notify you, and the authorities where the law requires, without undue delay and within the period the law sets: for example 72 hours to the supervisory authority under the GDPR, and no later than 60 days to you and, where its Health Breach Notification Rule applies, to the US Federal Trade Commission.
• Organisational and personnel measures: our representative is responsible for personal data handling and for responding to incidents, and is the only person with administrative access to the server. Physical measures: the server is in Oracle’s data centre in Osaka; the computers used to administer it use disk encryption and a screen lock.

12. Deleting your data and account

Delete only your Bosong data: in the app, Settings > Bosong Plus > Delete Bosong data only. Your encrypted keyset and items and the Bosong subscription records on our server (purchase and entitlement records) are deleted immediately, and we delete your Bosong RevenueCat subscriber record. Your XIUSoft account, your sign-in and any LiveSSH data stay. This does not cancel a subscription in the App Store or Google Play; cancel it in the store. If you keep it and restore purchases later, the subscription is recorded again. The entries on your devices are not touched.

Delete your whole XIUSoft account: in the app, Settings > Bosong Plus > Delete entire XIUSoft account. After a fresh sign-in and a confirmation, your account and everything stored on our server for it is deleted immediately, for Bosong and for LiveSSH: email or sign-in identifier, Bosong backup, subscription records and LiveSSH data. If your account uses Sign in with Apple, we revoke the Apple sign-in token, and we delete your RevenueCat subscriber record. A hash-only deletion record remains (up to 3 years, section 7); if you had used the former automatic LiveSSH free trial, the hash-only trial record described in the LiveSSH Privacy Policy also remains until it expires. Neither can identify you.

Copies in our encrypted backups disappear within 30 days, when those backups expire (section 7). If a step cannot be completed, we tell you in the app and finish it manually on request within 30 days at contact@xiu.kr.

Deleting data or the account does not cancel a store subscription. Cancel it in the App Store or Google Play first (see the Terms of Service).

If you cannot use the app, write to contact@xiu.kr from your account email and we will delete your Bosong backup or your account after verifying it is yours, within the period required by applicable law and in any case within 30 days. Entries on your device are removed when you uninstall the app.

13. Website, cookies and tracking

This website is static and loads nothing from third parties: no analytics, no advertising; its fonts and scripts are served from our own server, and the scripts run only in your browser (page motion, theme and language choice). When you pick a theme (light/dark) or a language in the header, a cookie remembering that choice (xiu_theme, xiu_lang) is set on the .xiu.kr domain so the same choice applies on the other XIUSoft sites. No cookie is set before you choose, and nothing else is stored. Our server logs requests as described in section 2. The XIUSoft account pages (account.xiu.kr) talk only to our own server and keep your session and language choice in your browser’s storage, which is strictly necessary for them to work; they set no cookies. We do not track you across apps or websites and the app does not use an advertising identifier (Apple App Tracking Transparency does not apply).

14. Changes to this policy

We will post the new version here with a new date and keep earlier versions on request. For material or adverse changes, such as new kinds of data, new purposes or new recipients, we will tell you in the app or by email at least 30 days before they apply, and ask for consent where the law requires it. For changes that are not adverse to you (for example a clarification or a change in your favour) we give at least 7 days’ notice.

This version (1.1) takes effect on 2026-10-14. It describes our backups as they are now: the database is backed up every 3 hours, and an encrypted copy of each backup is kept for 30 days on a backup device we own in the Republic of Korea, so deleted data is gone from every backup within 30 days (sections 5, 6, 7, 9, 11 and 12).

15. Contact

Privacy questions and requests: contact@xiu.kr. Telephone: +82 507-1432-9182. Postal address: XIUSoft, 901-401, 33 Dongtanjungsimsangga 1-gil, Dongtan-gu, Hwaseong-si, Gyeonggi-do, 18455, Republic of Korea. Support and security reports: see the Support page.