Privacy Policy
운영자: 에스에이치코드(SHCODE, 대표 조성환). Google Play(Android) 판은 주식회사 유니체스트가 배포를 대행합니다. 사업자 정보는 12절에 있습니다.
K-OREA(케이오리아)는 익명 로그인으로 시작하며, 원하는 경우에만 구글·애플 계정을 연결합니다. 다음 정보를 목적에 한해 처리합니다:
- 메뉴판 사진 — AI(Anthropic Claude)로 판독 후 저장하지 않음
- 증상·건강 프로필 — 동의 시에만 전송, 케어 카드 생성 후 폐기
- 위치 정보 — 지도 내 주변은 기기 안에서만 처리. 한국 도착 확인은 1.3.2 버전부터 위치 동의가 있을 때만 GPS로 기기 안에서 판정하고 결과(한국 안/밖)와 판정 근거 종류만 서버·통계로 보냄(좌표 없음, 동의가 없으면 접속 국가·시간대로 판정).택시 출발점(현재 위치)·약국 찾기는 좌표를 서버로 보내 네이버 클라우드·공공데이터포털에 조회만 하고 계정과 연결하지 않으며 저장하지 않음(서버 메모리에서 택시 최대 10분·약국 최대 30분 재사용). 스팟 도장은 계정에 스팟·시각·사진을 기록(좌표 없음, 사진 위치 메타데이터 삭제). 위치 이용 기록(좌표 없음)은 기록일로부터 186일(6개월 이상) 보관 후 자동 파기. 판매·광고 이용 없음. 1.3.2 버전부터 앱 My → 설정 → 위치에서 일시 중지·동의 철회 가능. 자세한 내용은 4절과 위치기반서비스 이용약관·개인위치정보 처리방침
- 모먼트(사진·한줄평) — 공개 게시, 게시 전 AI 검열
- 구매 영수증 — 애플 또는 구글이 결제를 처리, 저희는 카드 정보를 보지 않음
- 이용 데이터 분석(PostHog) — My → 설정에서 언제든지 끌 수 있음
데이터를 판매하거나 광고에 사용하지 않으며, 앱 내에서 계정을 삭제할 수 있습니다. 앱 접근이 어려우면 delete-account.html을 참고하거나 4ddesigner@naver.com으로 문의하세요.
The K-OREA app ("the app") is operated by SHCODE (에스에이치코드, "we"), a sole proprietorship in the Republic of Korea represented by Sung Hwan Cho. The Google Play (Android) version is distributed on our behalf by Unichest Inc. Our business details are in section 12. This policy explains, in plain terms, what the app collects, why, who it is shared with, and how you can delete it. We do not sell your personal information, and we do not use it for advertising.
1. Signing in
The app signs you in anonymously and automatically the first time you open it, using Firebase Authentication — no password, no personal information required. You may optionally link a Google or Apple account (Sign in with Apple) to create a public @username, which is required only if you want to post a Traveler Moment or keep your K Pass across devices. If you sign in this way, we receive your name, email address, and account identifier from Google or Apple.
2. Menu photos (K-Menu)
When you scan a restaurant menu, the photo is sent to our server and passed to Anthropic's Claude API, which reads the dishes and returns the result as text. The photo is used only to decode that one menu — it is not written to a database, a file, or a log, and is discarded immediately after processing. We keep a simple per-device scan count to apply daily usage limits, not the photo itself.
3. Symptoms and health profile (K-Care)
Any allergy, medication, or condition information you enter is stored only on your device. It is sent to our server only when you actively choose to attach it to a pharmacist card, along with any symptom text you type. The server forwards that information to Anthropic's Claude API to generate the card, and discards it afterward — only a per-device daily counter persists. K-Care information is general and is not medical advice. In a real emergency in Korea, call 119.
4. Location information (K-Map, K-Taxi, K-Care, stamps)
The app asks for location access only "while using the app" and never uses your location in the background. You can say no and keep using the app; the features below then work without your location or are not available. What happens to your location depends on the feature:
Map, nearby spots, your day plan
The blue dot, spots near you, and your plan's starting point use your position on your phone only. It is not sent to our server.
"In Korea" check (free arrival day, Korea-only content)
From version 1.3.2, the app uses your phone's GPS for this check only if you have agreed to location use (see "Your choices" below); the check runs on your phone and your coordinates never leave it. Without that agreement, it uses the country of your internet connection (our server answers only "Korea" or "other" and keeps nothing) and your phone's time zone instead. Only the result (in Korea or not) and the kind of check (location, network, or time zone) are sent: to our server, to grant a free arrival day, start a K Pass waiting for your arrival, apply an invite code, or start a pass right after purchase (our server keeps the date and the kind of check with your pass record, section 6, never coordinates), and to our app analytics (section 7). Analytics also receives the number of locked "hidden tips nearby" shown on the map, counted on your phone within about 2 km of your position (or within the visible map area when the GPS check is not used).
Taxi fare from where you are (K-Taxi)
Only when you choose your current location as the start point (searching for a start point sends no location). Your coordinates and the destination go to our server, which passes them to NAVER Cloud's Directions API to get the distance, time, and fare. They are not linked to your account and are not stored: our server keeps the fare answer in memory, filed under the start and destination coordinates, and reuses it for at most 10 minutes. It never writes the coordinates to a database, disk, or its logs.
Pharmacies, hospitals, and emergency rooms near you (K-Care)
Your coordinates go to our server. For pharmacies and emergency rooms it passes them to Korea's Public Data Portal (data.go.kr, National Medical Center API); hospitals and clinics are looked up in our server's own copy of public data. They are not linked to your account and are not stored: the answer is kept in server memory, filed under your position rounded to about 2 km, and reused for at most 30 minutes.
Photo stamps
Your phone checks whether you are close enough to the spot and sends only the yes/no answer, together with the spot, the time you took the photo, and the photo. Location data (GPS) is removed from the photo before upload. The photo is checked by an automated AI review (Anthropic Claude) and may be reviewed by our team. The spot, time, and photo are saved to your account. App versions before 1.2.3 sent coordinates for the distance check; our server used them once and did not save them.
Visit stamps
While the app is open and you are close to a guide's spot, your phone sends only which spot it is (no coordinates, no distance), and the spot and time are saved to your account. In versions before 1.3.2 this happens automatically. From version 1.3.2 it is off until you turn on "Auto visit stamps" and agree.
How long stamp records are kept. Your account keeps the spot, time, and region of each stamp, and the photo for photo stamps, to show your stamps, levels, and rewards. They are meant to be kept for no longer than 1 year. Automatic removal of stamp records older than 1 year is not in place yet and will be added; until then, they stay until you withdraw consent or delete your account (below).
Location use records. Korea's Act on the Protection and Use of Location Information requires a record of each use of location. Since October 22, 2026, our server writes one line each time a taxi fare from your location, a nearby facilities search, a stamp (photo or visit), or a Korea arrival check (when a GPS result, in Korea or not, is sent to our server: a free arrival day, starting a waiting K Pass, an invite code, or starting a pass right after purchase) uses your location: the time, the feature, how the location was obtained (iOS or Android location service), the version of your consent, and a scrambled (one-way hashed) identifier of your account or app install. A line never contains coordinates, your IP address, or the original identifier. Lines are kept for 186 days from the day they are written, so never less than 6 months, and then deleted automatically (server disk backups can hold them for up to 7 more days).
Sharing. We do not provide your location to third parties. To calculate taxi fares and to find pharmacies and emergency rooms, our server passes coordinates, as a lookup only and without your account, name, or any identifier, to NAVER Cloud (Directions API) and Korea's Public Data Portal (data.go.kr). We do not sell your location or use it for advertising. Analytics (section 7) never receives coordinates; it does receive whether the app judged you to be in Korea and the kind of check. App versions before 1.3.2 also sent which spot and region a stamp was for; from 1.3.2, stamp events no longer include them.
Your choices.
- You can turn off location for K-OREA in your phone's settings at any time.
- From version 1.3.2, the app asks for your agreement before the first use of a feature that sends your location to our server or saves it to your account. These features are for people 14 or older.
- From version 1.3.2, My → Settings → Location lets you pause location use, turn auto visit stamps on or off, and withdraw consent. Withdrawing deletes from our server your stamp records (spots, times, stamp photos) and the location use records tied to your account. Free days you already earned, and your stamp count and level, stay. A stamp photo you agreed to let us feature stays, with the link to your account removed.
- Deleting your account in version 1.3.2 or later deletes the same records. In earlier versions, deleting your account does not remove stamp records from our server: email us and we will delete them. Stamp records left on our server by accounts deleted before version 1.3.2 have been cleaned up (a check on October 22, 2026 found none remaining).
- Questions, or a request to see the location use records about you: 4ddesigner@naver.com
Location documents. Our Location-Based Services Terms and Location Information Privacy Policy set out these rules in the form Korea's location law requires, including our Location Information Manager.
5. Traveler Moments
If you choose to post a Moment, the photo and short caption you submit are reviewed by an automated AI moderation step (Anthropic Claude) before publishing, then stored and displayed publicly under your @username. Removing a Moment removes it for everyone, not just from your own view.
6. Purchases (K Pass)
K Pass is a real purchase, processed through Apple's In-App Purchase system on iOS and Google Play Billing on Android — we never see your card number or payment details, which are handled entirely by the store. Our server verifies each purchase with Apple or Google and keeps a purchase record containing your account identifier, the transaction ID, a one-way hash of the purchase token, the product ID, the platform, and the purchase time. If you have linked a Google or Apple account, this record lets us restore your K Pass when you sign in with that account on a new install or device. A purchase made without linking an account stays with that installation and cannot be restored after you reinstall or delete the account. Refunds follow the policy of the store you purchased from, not ours.
7. Device, usage identifiers, and analytics
We use a device identifier to apply fair-use limits, such as free daily menu scans and care cards. We also use PostHog, a product-analytics tool, to see which features are used and to catch app errors; it receives a random per-install identifier, in-app events, and JavaScript error details — never your account, an advertising identifier, or a screen recording. You can turn this off anytime in the app under My → Settings ("Share usage data").
8. Who we share data with
| Service | What it's for |
|---|---|
| Apple | Processes K Pass purchases on iOS through the App Store, and provides Sign in with Apple. |
| Google Play | Processes K Pass purchases on Android through Google Play Billing. |
| Google Firebase | Handles anonymous and Google sign-in, and stores account, profile, and Traveler Moment data. |
| Anthropic (Claude) | Reads menu photos, generates care cards, moderates Moment photos/captions in real time, and checks stamp photos. |
| Naver | Powers map display, place search, and route lookups used for K-Map and fare estimates. For a fare from your current location, NAVER Cloud's Directions API receives the coordinates, without anything that identifies you (section 4). |
| data.go.kr | Korea's public data portal; looks up nearby pharmacies and ERs for K-Care. It receives your coordinates, without anything that identifies you, and the lookup is not linked to your account (section 4). |
Each of these providers handles data under its own privacy policy. We do not share your data with anyone for their own marketing, and we do not sell it.
9. Deleting your account and data
You can delete your account at any time from the app's Settings, without needing to email us. Deletion is immediate and cannot be undone. It removes:
- Your @username (released, so anyone can take it)
- Your profile
- Every Traveler Moment you posted, including its photo — removed for everyone, not just hidden from you
- From version 1.3.2: your stamp records (spots, times, stamp photos) and the location use records tied to your account (section 4). A stamp photo you agreed to let us feature stays, with the link to your account removed
- Your Google or Apple sign-in link on this device
- Everything kept on your phone — saved spots, allergy rules, health card, K Pass state, and the rest of your local app data
Your language setting, analytics opt-out choice, device identifier, and cached public place data stay on your phone — removing them would only reset preferences you set on purpose.
A few things are kept, and here is why:
Anonymous per-device usage counters
Keyed to a device identifier only — no name, email, or content. Kept only as long as needed to keep daily usage limits working.
Moderation and report records
Kept for safety, as required to operate content moderation responsibly.
Stamp records, if you delete in a version before 1.3.2
Before version 1.3.2, account deletion does not remove stamp records (spots, times, stamp photos) from our server. Email us and we will delete them. Those left by accounts already deleted have been cleaned up (a check on October 22, 2026 found none remaining). Location use records without coordinates are deleted automatically 186 days after they are written (section 4).
Purchase and receipt records
Our server keeps the purchase record described in section 6 (account identifier, transaction ID, hashed purchase token, product, platform, time), so we can restore a purchase or handle a refund. Card and payment details always stay with Apple or Google.
If you can't get into the app to delete your account, see delete-account.html, or email 4ddesigner@naver.com.
10. Children
K-OREA is not directed to children under 14, and we do not knowingly collect their personal information.
11. Changes to this policy
If this policy changes, we will update this page and the date above.
12. Contact
Questions about privacy or your data: 4ddesigner@naver.com
- Operator: SHCODE (에스에이치코드), sole proprietorship · Representative: Sung Hwan Cho
- Business registration no.: 462-23-01899 · Mail-order business registration no.: 2025-Seoul Gangdong-0188
- Address: 3F, 8-7 Sangil-ro 5-gil, Gangdong-gu, Seoul, Republic of Korea
- Phone: +82-10-3001-6413 · Email: 4ddesigner@naver.com
The Google Play (Android) version is distributed on our behalf by Unichest Inc.
상호 에스에이치코드(SHCODE) · 대표자 조성환 · 사업자등록번호 462-23-01899 · 통신판매업 신고번호 제2025-서울강동-0188호 · 서울특별시 강동구 상일로5길 8-7, 3층(상일동) · 010-3001-6413 · Google Play(Android) 판은 주식회사 유니체스트가 배포를 대행합니다.