1. Personal Information We Collect and Purposes of Use
You can view tourism information, videos, and guidebooks without signing up. We receive the information below only when you use features such as signing up or writing reviews.
| Category | Items | Purpose of use |
|---|---|---|
| Sign-up with an ID | ID, nickname, password (stored in encrypted form that cannot be restored) | Identifying members, login |
| Google / Apple sign-in | Unique identifier of your Google or Apple account, email address, name (used only to create a nickname) | Identifying members, linking to an existing account with the same email |
| Reviews and activity | Star ratings, review text, records of "helpful" votes and reports, experience points, level, badges, time of writing | Publishing reviews, calculating levels and badges, preventing abuse |
| Automatically generated information | Access IP address, browser and device type (User-Agent), access time, requested address | Providing the Service, security, responding to failures |
| App — location (optional) | Current location of the device (precise or approximate) | Finding nearby attractions and stamp spots, and checking that you are within a place's radius when you collect a stamp |
| App — footprint stamps (optional) | The place where you collected a stamp, the date and time, and the emblems you earned | Providing the stamp passport, emblems, events, and rankings |
| App — notifications (optional) | Push notification token | Sending notifications |
| App — advertising | Advertising ID, device and app information, ad interactions | Displaying ads, measuring ad performance |
| App — analytics and errors | App usage records (screens and events), device and OS information, error logs | Improving the app, fixing errors |
We store your email address only when it was received through Google or Apple sign-in, and we do not use it to send advertising or promotional emails. Member review text is not translated or sent outside the Service.
2. Location Information
- Location is received once, only when you tap "Find stamps near me" or "Collect stamp" in the app, and only if you have allowed it on your device. We do not track your location continuously or receive it when you are not using the app. All features other than stamps remain available even if you do not allow it.
- Device coordinates are used only to find nearby attractions or to check that you are within the radius of the place where you want to collect a stamp, and they are not stored. They are discarded as soon as the request ends, although nearby-search requests may remain as part of the requested address in server access logs (up to 14 days).
- When you collect a stamp, the place and the date and time are saved as part of your member activity record. Only you can see this record; other people see only your stamp count and emblems. It is deleted immediately when you delete your account.
- You can turn off the use of location at any time in your device settings.
- On the web walking-trail map, tapping “Show my location” asks the browser for your current location once and shows it on the map. The coordinates are not sent to our server or stored, and you can still use the trail information and GPX download if you do not allow it.
3. Retention Period and Destruction
| Information | Retention period |
|---|---|
| Member information, reviews, badges, stamps, emblems | Until you delete your account (deleted immediately upon deletion) |
| IP records for abuse prevention (values converted so that the IP address cannot be restored) | 7 days |
| Server access logs | 14 days |
| Device location (coordinates) | Not stored (14 days if it remains in access logs) |
| Advertising, analytics, and error information | According to the retention policy of each service provider (Google) |
| Map tile and CDN access logs | According to each provider’s policy (OpenStreetMap, Cloudflare) |
Information whose retention period has expired or whose purpose has been fulfilled is deleted without delay. Electronic files are deleted by a method that cannot be recovered, and we do not handle personal information on paper. Where laws require us to keep information, we store it separately for that period.
4. Provision to Third Parties
The Operator does not sell or provide users’ personal information to third parties. The exceptions are where there is a basis in law, or where an investigative agency requests it through procedures prescribed by law.
5. Outsourcing of Processing and Overseas Transfer
To operate the Service, we use the services of the companies below. These companies are located abroad, so information is transmitted overseas over the internet when you use the Service. If you do not want the transfer, you can avoid using the relevant feature (social sign-in, notifications, location) or delete your advertising ID in your device settings. Advertising and app analytics and error collection take place together while you use the app.
| Recipient (country) | Items transmitted | Purpose | Retention period |
|---|---|---|---|
| Google LLC (United States) — Firebase Cloud Messaging | Push notification token, device information | Sending app notifications | Until the token expires or the app is deleted |
| Google LLC (United States) — Google AdMob | Advertising ID, device and app information, IP address | Displaying and measuring ads | According to Google’s policy |
| Google LLC (United States) — Firebase Analytics, Crashlytics | App usage records, device information, error logs | App analytics, fixing errors | According to Google’s policy |
| Google LLC (United States) — Google sign-in | Sign-in verification information | Identity verification | At the time of sign-in processing |
| Apple Inc. (United States) — Sign in with Apple | Sign-in verification information, request to disconnect the link upon account deletion | Identity verification, processing account deletion | At the time of sign-in or deletion processing |
| OpenStreetMap Foundation (United Kingdom) — map tiles | IP address, browser and device information, requested tile coordinates | Displaying the walking trail map | According to the OpenStreetMap Foundation’s policy |
| Cloudflare, Inc. (United States) — cdnjs | IP address, browser and device information | Delivering the map library (Leaflet) | According to Cloudflare’s policy |
The website and member information are stored on the Operator’s servers located in the Republic of Korea. For translating tourism information and searching for places, only public data and place names are sent; users’ personal information is not sent.
The walking-trail map loads OpenStreetMap tiles and the Leaflet library (CDN) directly in your browser. When you open the map, your IP address, browser and device information, and the requested tile coordinates are sent to those providers. If you do not open the map, no tile requests are made.
6. Cookies and Advertising Identifiers
- The website uses only cookies that keep you logged in (session) and remember the language you chose. It does not use advertising or tracking cookies. You can block cookies in your browser settings, but then you will not be able to log in.
- Ads in the app use the advertising ID. You can reset or delete the advertising ID in Android Settings → Privacy → Ads.
- Web analytics (Umami) uses no cookies and only counts page views and referral sources. Query strings are not sent, and the data is not used to identify individuals.
7. Your Rights and How to Exercise Them
- You may at any time request to view, correct, or delete your personal information, or to stop its processing.
- You can correct or delete your nickname and reviews yourself in "My page" in the app or on the web.
- You can delete your account (Delete account) directly in "My page" in the app or on the web; if you cannot, you can request it by email. For details: https://www.k-traveler.com/account-delete
- Please send requests by email to the Personal Information Protection Officer below. We will process them within 10 days after verifying your identity.
8. Children’s Personal Information
The Service is not directed at children under 14, and we do not accept sign-ups from children under 14. If we learn that information of a child under 14 has been collected, we will delete it immediately.
9. Security Measures
- Passwords are stored encrypted in a way that cannot be restored.
- All communications are encrypted with HTTPS.
- IP records for abuse prevention are converted into values that cannot be restored to the original address before being stored.
- Access to the DB and configuration files is restricted, and they are managed only by the Operator.
10. Google User Data
Information received through Google sign-in (unique identifier, email, name) is used only to identify members and link accounts, and is not used for any other purpose or passed on elsewhere. The use of this information complies with the Google API Services User Data Policy, including its Limited Use requirements.
11. Personal Information Protection Officer
For inquiries, complaints, and remedies concerning the handling of personal information, please contact the following.
- Privacy officer
- K-Traveler
- dikafryo@gmail.com
You may also seek consultation or file a report on personal information infringement with the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 without an area code), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301), and the National Police Agency (ecrm.police.go.kr, 182).
12. Changes to This Policy
If we change this policy, we will notify you on this page and through an in-app notice from 7 days before the change takes effect (30 days before for changes unfavorable to users). This policy applies from the effective date above.