Privacy Policy
K-OREA(케이오리아)는 익명 로그인으로 시작하며, 원하는 경우에만 구글·애플 계정을 연결합니다. 다음 정보를 목적에 한해 처리합니다:
- 메뉴판 사진 — AI(Anthropic Claude)로 판독 후 저장하지 않음
- 증상·건강 프로필 — 동의 시에만 전송, 케어 카드 생성 후 폐기
- 위치 정보 — 지도·주변 검색·택시 요금 추정에만 사용, 서버에 저장·판매하지 않음
- 모먼트(사진·한줄평) — 공개 게시, 게시 전 AI 검열
- 구매 영수증 — 애플 또는 구글이 결제를 처리, 저희는 카드 정보를 보지 않음
- 이용 데이터 분석(PostHog) — My → 설정에서 언제든지 끌 수 있음
데이터를 판매하거나 광고에 사용하지 않으며, 앱 내에서 계정을 삭제할 수 있습니다. 앱 접근이 어려우면 delete-account.html을 참고하거나 4ddesigner@naver.com으로 문의하세요.
K-OREA ("the app", "we") is the operator of this app. This policy explains, in plain terms, what the app collects, why, who it is shared with, and how you can delete it. We do not sell your personal information, and we do not use it for advertising.
1. Signing in
The app signs you in anonymously and automatically the first time you open it, using Firebase Authentication — no password, no personal information required. You may optionally link a Google or Apple account (Sign in with Apple) to create a public @username, which is required only if you want to post a Traveler Moment or keep your K Pass across devices. If you sign in this way, we receive your name, email address, and account identifier from Google or Apple.
2. Menu photos (K-Menu)
When you scan a restaurant menu, the photo is sent to our server and passed to Anthropic's Claude API, which reads the dishes and returns the result as text. The photo is used only to decode that one menu — it is not written to a database, a file, or a log, and is discarded immediately after processing. We keep a simple per-device scan count to apply daily usage limits, not the photo itself.
3. Symptoms and health profile (K-Care)
Any allergy, medication, or condition information you enter is stored only on your device. It is sent to our server only when you actively choose to attach it to a pharmacist card, along with any symptom text you type. The server forwards that information to Anthropic's Claude API to generate the card, and discards it afterward — only a per-device daily counter persists. K-Care information is general and is not medical advice. In a real emergency in Korea, call 119.
4. Location (K-Map, K-Taxi, K-Care)
If you allow location access, your position is used, while the app is in use, to show nearby spots on the map, estimate taxi fares, and find nearby pharmacies, hospitals, and emergency rooms. Location is used to serve that request and is not stored long-term on our servers, not attached to your account or to a Traveler Moment, and never sold. We never access your location in the background.
5. Traveler Moments
If you choose to post a Moment, the photo and short caption you submit are reviewed by an automated AI moderation step (Anthropic Claude) before publishing, then stored and displayed publicly under your @username. Removing a Moment removes it for everyone, not just from your own view.
6. Purchases (K Pass)
K Pass is a real purchase, processed through Apple's In-App Purchase system on iOS and Google Play Billing on Android — we never see your card number or payment details, which are handled entirely by the store. Our server verifies each purchase with Apple or Google and keeps a purchase record containing your account identifier, the transaction ID, a one-way hash of the purchase token, the product ID, the platform, and the purchase time. If you have linked a Google or Apple account, this record lets us restore your K Pass when you sign in with that account on a new install or device. A purchase made without linking an account stays with that installation and cannot be restored after you reinstall or delete the account. Refunds follow the policy of the store you purchased from, not ours.
7. Device, usage identifiers, and analytics
We use a device identifier to apply fair-use limits, such as free daily menu scans and care cards. We also use PostHog, a product-analytics tool, to see which features are used and to catch app errors; it receives a random per-install identifier, in-app events, and JavaScript error details — never your account, an advertising identifier, or a screen recording. You can turn this off anytime in the app under My → Settings ("Share usage data").
8. Who we share data with
| Service | What it's for |
|---|---|
| Apple | Processes K Pass purchases on iOS through the App Store, and provides Sign in with Apple. |
| Google Play | Processes K Pass purchases on Android through Google Play Billing. |
| Google Firebase | Handles anonymous and Google sign-in, and stores account, profile, and Traveler Moment data. |
| Anthropic (Claude) | Reads menu photos, generates care cards, and moderates Moment photos/captions in real time. |
| Naver | Powers map display, place search, and location/direction lookups used for K-Map and fare estimates. |
| data.go.kr | Korea's public data portal; looks up nearby pharmacies, hospitals, and ERs for K-Care. Not linked to your account. |
Each of these providers handles data under its own privacy policy. We do not share your data with anyone for their own marketing, and we do not sell it.
9. Deleting your account and data
You can delete your account at any time from the app's Settings, without needing to email us. Deletion is immediate and cannot be undone. It removes:
- Your @username (released, so anyone can take it)
- Your profile
- Every Traveler Moment you posted, including its photo — removed for everyone, not just hidden from you
- Your Google or Apple sign-in link on this device
- Everything kept on your phone — saved spots, allergy rules, health card, K Pass state, and the rest of your local app data
Your language setting, analytics opt-out choice, device identifier, and cached public place data stay on your phone — removing them would only reset preferences you set on purpose.
A few things are kept, and here is why:
Anonymous per-device usage counters
Keyed to a device identifier only — no name, email, or content. Kept only as long as needed to keep daily usage limits working.
Moderation and report records
Kept for safety, as required to operate content moderation responsibly.
Purchase and receipt records
Our server keeps the purchase record described in section 6 (account identifier, transaction ID, hashed purchase token, product, platform, time), so we can restore a purchase or handle a refund. Card and payment details always stay with Apple or Google.
If you can't get into the app to delete your account, see delete-account.html, or email 4ddesigner@naver.com.
10. Children
K-OREA is not directed to children under 13, and we do not knowingly collect their personal information.
11. Changes to this policy
If this policy changes, we will update this page and the date above.
12. Contact
Questions about privacy or your data: 4ddesigner@naver.com