Privacy Policy

This policy explains what data the Korea Trip app for iPhone and Android (the "App") and the korea-trip.com website process, why we process it and what rights you have. We try to collect as little as possible.

Data controller

The data controller is AntiOS Dominik Rygiel, the developer of the Korea Trip app ("we", "us"). For any privacy matter, email rygieldb@gmail.com.

What data we process

Anonymous identifier

On iPhone, the App creates a random identifier when you first open it and stores it in the Keychain. On Android, it uses the Firebase installation ID. Neither is linked to your name, email address or Apple or Google account. We use it to connect the data described below.

Favorites, visited places and ratings

Places you mark as favorite, visited or hidden, and your place ratings, are saved on your device and sent to Google Firebase Firestore together with the anonymous identifier. Ratings from all users make up the average place rating shown in the App.

Plans, custom places and expenses

Your own day plans, places you add, trip days, as well as expenses, budget and chosen currency are stored only on your device. We don't send them to our servers. Deleting the App deletes this data.

Purchases and subscriptions

Purchases are handled by Apple (App Store) or Google (Google Play). We don't receive your payment card details or your Apple or Google account details. To manage access to content and help with purchase issues, we store in Firestore:

• your access status (e.g. free trial, active subscription, lifetime purchase) and its expiry date,
• your App Store or Google Play transaction history: transaction ID, product, date, price and currency,
• technical data: App and system version, device type, region, language, chosen theme and assigned test variants.

Usage statistics (Firebase Analytics)

We collect information about how you use the App, such as which screens and places you open, which features you use and whether you start a purchase. Technical data is processed alongside it (device model, system and App version, language, region and approximate location derived by Google from your IP address). This helps us understand what works and what to improve.

Crash reports (Firebase Crashlytics)

If the App closes because of an error, a technical report is sent: the state of the App at the time, your device model and system version.

Configuration and experiments (Firebase Remote Config)

The App downloads settings from a server and may randomly assign you to a test variant (e.g. a different version of a screen), so we can see which option works better.

App verification (Android)

On Android, the App uses Firebase App Check and Google Play Integrity to confirm that requests to our database come from the genuine App. Google processes technical data about your device and the App to do this.

Advertising tracking

On iPhone, the App may ask for permission to track (App Tracking Transparency). If you allow it, your device's advertising identifier (IDFA) may be used to measure how well our ad campaigns perform, for example whether the App was installed after someone saw an ad. If you decline, the IDFA isn't shared. You can change this at any time in Settings > Privacy & Security > Tracking.

On Android, Firebase Analytics may use your device's advertising ID. You can reset or delete it at any time in your phone settings (usually Settings > Google > Ads or Settings > Privacy > Ads).

Location

With your permission, the App uses your location to show where you are on the map and which way you're facing. Location is used only on your device and is never sent to our servers. The map uses Apple Maps on iPhone and Google Maps on Android. Map providers process map tile requests under their own privacy policies.

Messages you send us

If you send feedback, a bug report, a price suggestion or a request for a new language, we store the message and your email address if you choose to provide it (it's optional). We use it only to reply. If you email us, we process your address and the content of our correspondence.

Legal bases (GDPR)

• Performance of a contract (Art. 6(1)(b) GDPR): running the App and managing purchases and access to content.
• Legitimate interests (Art. 6(1)(f) GDPR): usage statistics, crash detection, testing improvements and keeping the App secure.
• Consent (Art. 6(1)(a) GDPR): advertising tracking on iPhone, location and any email address you choose to give us. You can withdraw consent at any time.

Who we share data with

• Google (Firebase: Analytics, Crashlytics, Firestore, Remote Config, App Check), acting as our data processor, and on Android also Google Maps and Google Play. Data may be processed outside the European Economic Area, including in the USA, under the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
• Apple and Google handle App distribution and payments (App Store and Google Play) under their own privacy policies.

We don't sell data and we don't share it with anyone for marketing purposes.

How long we keep data

• Firebase Analytics statistics: no longer than 14 months.
• Crashlytics crash reports: up to 90 days.
• Ratings, favorites and purchase information: for as long as you use the App, or until you ask us to delete them.
• Messages from you: as long as needed to reply and handle any follow-up.

Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interests. To exercise these rights, email rygieldb@gmail.com. Because we don't know who you are, we may ask for details that help us find your data, such as the approximate date you installed the App or made a purchase.

You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live. In Poland this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl).

Children

The App isn't directed at children and we don't knowingly collect data from anyone under 16.

The korea-trip.com website

The website doesn't use cookies or analytics tools. It only saves your chosen language in your browser's local storage. The site is hosted by Amazon Web Services (AWS Amplify), whose servers may log standard technical data such as your IP address and the time of your visit. The "Download on the App Store" button loads an image from Apple's servers.

Changes to this policy

If we change this policy, we'll publish the new version on this page and update the date at the top.

Contact

Privacy questions: rygieldb@gmail.com.