Privacy Policy

1. Service Provider

Ttolong ("ttolong.app") is a community-based Jeju travel planner service. This policy describes how we collect, use, and protect your personal information.

2. Information We Collect

• Account info: Name, email, profile photo (via Apple/Google/Kakao sign-in)
• Profile info: Nickname, bio, avatar (user-provided)
• Usage data: Travel plans created, community posts, comments, chat messages
• Community safety data: Reports you submit, report reasons and details, hidden posts, and blocked-user relationships
• Device info: Browser type, OS, screen size (via standard web analytics)
• Precise foreground location (optional): When you tap Current Location in the planner or nearby recommendations and grant operating-system permission, we access GPS coordinates. The coordinates are transmitted over HTTPS to ttolong.app to calculate nearby origins or places, are processed only for that request, and are not saved in our service database, profile, or travel plan.
• Approximate IP-based location (optional, web only): After you consent to location use, the web service may use your connection IP address through Cloudflare or ipapi.co to estimate city/region-level location when GPS is unavailable or, on desktop, as the first location method. The resulting latitude and longitude are used for nearby recommendations and are not saved in our service database.
• Background location and geofence events (optional, mobile app only): Only if you separately enable Area Recommendations and grant Always Allow/background location permission, the operating system monitors entry into 12 predefined Jeju areas even while the app is closed or not in use. Ttolong receives an area-entry event to send a local restaurant/cafe recommendation notification. Actual background coordinates are processed by the operating-system geofencing function and are not transmitted to Ttolong or saved in our service database.
• Push notification token: If push notifications are enabled by the user

3. How We Use Your Information

In the web nearby feature, origin and destination coordinates are also sent to the public OSRM routing service (router.project-osrm.org) to calculate driving distance and time. For mobile background recommendations, the predefined center coordinates of the entered region are sent to ttolong.app to retrieve places; these reveal the approximate region entered, not the device’s actual GPS coordinates. Entry into Jeju Island also triggers a welcome notification.

• Provide and operate the travel planning service
• Display your profile in the community
• Send push notifications you opted into (comments, chat, etc.)
• Improve service quality through usage analytics
• Generate AI-powered travel plans based on your preferences
• Find a nearby trip origin when you explicitly enable location access
• Recommend nearby restaurants, cafes, and attractions based on a foreground GPS or approximate IP-based location
• Detect entry into predefined Jeju areas in the background and send recommendation notifications only when Area Recommendations is enabled
• Review reports, prevent abuse, enforce community rules, and hide content from blocked users

4. Data Sharing

We do not sell your personal data. We share information only with:

• Supabase — Authentication & database hosting
• Cloudflare — CDN, edge computing, D1 database
• ipapi.co — Web IP geolocation when approximate location is used; receives the connection IP address
• Apple / Google — Operating-system location permission and on-device geofencing; Ttolong does not provide background coordinates to these companies, although the device platform processes location under its own terms
• If you choose AI planning, your travel request (including free text), dates and times, group composition, places, and preferences are sent to Google Gemini. Do not include personal information in free text. You can generate a plan without external AI if you decline.

5. Data Retention

Account and community data is retained while your account is active. Precise foreground coordinates and derived IP-location coordinates are processed for the requested search and are not saved in our service database. Background coordinates are not received or stored by Ttolong. Your location-consent choice, geofence registration, and notification cooldown history remain locally on the device until you disable the feature, clear app data, or uninstall the app. Infrastructure and security logs may temporarily retain IP addresses and request metadata under the relevant provider's retention policy. Reports may be retained while under review and as reasonably necessary to prevent repeated abuse. Upon account deletion, personal data is removed within 30 days unless retention is legally required.

6. Your Rights

• Access, correct, or delete your personal data
• Withdraw consent for data processing
• Export your data in a portable format
• Opt out of push notifications at any time
• Deny or withdraw foreground or background location permission in device settings and choose an area or origin manually without losing planner access
• Disable Area Recommendations at any time under Profile > Notifications; doing so stops the registered geofences
• Review and remove users from your blocked-user list in Settings

For Korean users: You have rights under the Personal Information Protection Act (PIPA). For EU users: You have rights under GDPR. For California users: You have rights under CCPA.

7. Cookies & Local Storage

We use cookies for locale preference and authentication sessions. Local storage is used to cache your profile and remember optional location and notification choices. The mobile app stores location-consent status, geofence registration state, and notification cooldown history on the device. No third-party tracking cookies are used.

8. Data Security

All data is transmitted over HTTPS. Authentication is managed by Apple/Google/Kakao through Supabase; we do not store passwords. Database access is restricted to authorized services only.

9. Children's Privacy

Our service is not intended for children under 14. We do not knowingly collect personal information from children under 14.

10. Night-time Push Notifications

In compliance with Korean telecommunications regulations, push notifications are not sent between 9:00 PM and 8:00 AM KST unless you explicitly opt in to night-time notifications in Settings.

11. Contact

For privacy-related inquiries, please contact: ppilsns@gmail.com