Privacy Policy

Effective date: July 3, 2026 · Last updated: July 6, 2026

Nadeuri (“나들이”, the “Service”), operated by JicloudStudio, helps foreign residents and travelers discover places in Korea, find their way there, and share local know-how. This policy explains what we collect, why, and the choices you have. It follows Korea’s Personal Information Protection Act (PIPA) and the Act on the Protection, Use, etc. of Location Information.

1Information we collect

Provided by you / at sign-up

• Account (required): email address and display name from your social login (Apple, Google, or Kakao).
• Profile (optional): nationality flags, resident/visitor role and stay-since month.
• Content you create: spots, reviews, questions, answers, meetups, collections, and any photos you upload.

Collected automatically

• Device & usage: device model, OS, app version, log data, and in-app actions (for analytics and safety).
• Location (only while using the app): device GPS used for nearby search, distance to a spot, and visit verification. See Section 3.
• Push token: if you enable notifications.

2How we use your information

• Provide the Service — discovery, directions, reviews, Q&A, and meetups.
• Verify visits and build trust signals (e.g., “Verified visit”, reputation).
• Safety and moderation — reviewing reports, blocking abusive content.
• Analytics to improve the app, and to send notifications you opt into.
• Comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3Location information

Location is collected only in the foreground (while you are actively using the app), each time with the operating system’s standard permission prompt. We do not track your location in the background.

We do not store your raw coordinates on our servers. They are used on your device for immediate calculation and then discarded:

• Nearby search: coordinates are passed to a server function only to compute “which spots are closest.” The coordinates themselves are not written to any database record.
• Visit verification: the distance is computed on your device; only the resulting true/false value is saved with your review. The raw coordinates are never transmitted.
• Adding a place: coordinates help pre-fill a new spot’s location; what is saved is the place’s location, not your personal position.
• Photo EXIF: if you attach a photo to a travel note, its embedded GPS tag may be read on-device to help confirm the photo matches the route.

Records of location use: because we do not store your raw coordinates, records of location use exist only as the on-device results (e.g., a “verified visit” flag) saved with your content. You may request to view records or confirmation of when your location information was used or provided.

Location manager: Data Protection Officer · [email protected]. You may withdraw location consent at any time in your device settings. If we cause damage to you by intentionally or negligently violating your rights under the Act on the Protection, Use, etc. of Location Information, we are liable for that damage.

4Entrustment of processing (processors)

We do not provide your personal information to third parties for their own use. We only entrust processing to the service providers below, under contract and limited to what is necessary to run the Service:

• Supabase — authentication, database, and photo storage. Data is stored in the Republic of Korea (AWS Seoul, ap-northeast-2).
• Apple / Google / Kakao — social login.
• Apple Push (APNs) / Google (FCM) / Expo — delivering notifications you enable.
• ODsay / Kakao / TAGO — transit routing. When used, only origin/destination coordinates for route calculation are sent (not identifying information).

When you tap “open in a map app,” coordinates may be passed to an external map app (e.g., Kakao Map) as a deep-link parameter — this is your direct action and we do not store or mediate it.

5Cross-border transfer

Your account data, posts and photos are stored in the Republic of Korea (Supabase, AWS Seoul region). The following limited items are transferred abroad only for the purposes below:

By using the Service and consenting to this policy, you consent to these transfers. You may refuse by not using the relevant features, though core functions may then be unavailable.

6Retention & deletion

We keep personal information only as long as needed for the purposes above or as required by law. You can delete your account and content in-app (Settings → Delete my account). Upon deletion we remove your spots, reviews, questions, answers, meetups, saves, and collections without delay, except where retention is legally required.

7Your rights

You may access, correct, delete, or restrict processing of your personal information, and withdraw consent, at any time — in-app or by contacting us.

For help with privacy disputes or infringements, you may contact: the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972); the Personal Information Protection Commission (privacy.go.kr, 182); the Korea Internet & Security Agency privacy report center (privacy.kisa.or.kr, 118); the Supreme Prosecutors’ Office Cybercrime unit (spo.go.kr, 1301); or the National Police Agency Cyber Bureau (ecrm.police.go.kr, 182).

8Children

The Service is not intended for children under 14, and we do not knowingly collect their personal information. We do not separately collect the location information of children aged 8 or under.

9Security

We use encryption in transit, access controls, and logging. Access to personal data is limited to what is necessary to operate the Service. Our Apple privacy label and Google Data Safety declarations are kept consistent with this policy.

10Changes to this policy

If we make material changes, we will notify you in the app or on this page in advance of the effective date.