Privacy Policy

Effective: 2026-05-20 — Bundle ID: com.ootssu.hiddengem

What we collect

• Account identifiers (when you sign in): a stable user ID from your chosen provider — Sign in with Apple (Apple-issued sub), Google Sign-In (sub), Kakao Login (Kakao user id), or your email address if you use the email magic-link option. Names and email addresses are shared only if your provider chooses to share them.
• Location (when in use): used only when you tap "Nearby" or open the map tab to find spots around you. Read on-device by CoreLocation. Coarse location is sent to the backend only as a query to filter nearby spots; we do not store your location history.
• Photos you upload (optional): if you share a community discovery, the image and your short note are uploaded to the shared Supabase Storage bucket along with the GPS coordinates of the photo. Uploads pass automatic profanity and size moderation; three user reports auto-hide a post.
• App activity tied to your account: favorites you saved, spots you liked, community discoveries you posted, your selected locale, the timestamp/version of the terms you accepted, and your APNs device token (so we can send the optional "best time to visit" push for your favorites).
• Preferences: language preference, notification opt-in state, optimal-hour-local for favorites. Stored on the backend and on-device.

What we don't collect

• We don't collect advertising identifiers (IDFA) and we don't track you across other apps or websites.
• We don't access your contacts or microphone.
• We don't store your camera viewfinder feed; ARKit runs locally on-device.
• We don't run analytics keyed to your real identity.
• We don't sell or share personal data with advertisers.

Third-party services we use

• the Tourism OpenAPI (data.go.kr) — TourAPI 4.0 & DataLabService (its.go.kr / data.go.kr) — provides tourist-spot catalog (KorService2 / EngService2 / ChsService2 / JpnService2) and region-level visitor statistics (DataLabService). Your device or our weekly batch fetches these. The data portal receives standard request metadata (e.g., the service key, IP address) but no per-user identifiers.
• KakaoMap SDK for iOS — renders the map and authenticates with the Kakao Developers platform using a public app key. Kakao receives standard SDK telemetry tied to the device/app, not to your HiddenGem account.
• Supabase (Auth, Database, Storage, Edge Functions) — HiddenGem's backend. Your account row, favorites, likes, uploaded photos, and APNs token are stored in the hiddengem Postgres schema under row-level security scoped to your account. Storage holds your uploaded discovery photos.
• Sign in with Apple — Apple is the identity provider; HiddenGem only receives the identifiers Apple chooses to share.
• Google Sign-In — Google is the identity provider; HiddenGem receives the OAuth ID token only and exchanges it with Supabase Auth.
• Kakao Login — Kakao is the identity provider; HiddenGem receives the OAuth ID token only and exchanges it with Supabase Auth.
• Apple Push Notification service (APNs) — used to send the optional daily "best time to visit" push for your favorites, dispatched by our Edge Function.

Where your data lives

On-device: locale preference, terms-acceptance, ARKit local state. On the shared Supabase project (region: AWS ap-northeast-2): your account row in hiddengem.users, favorites, likes, community discoveries, APNs device tokens. Uploaded photos live in the hiddengem-discoveries Storage bucket. Row-level security restricts read/write to the row owner; the only callers with elevated access are server-side Edge Functions that run as the project's service role.

How long we keep your data

While your account exists, account-linked data lives until you delete it (e.g., remove a favorite). When you request account deletion, we soft-delete your row immediately, revoke third-party tokens where the provider supports it (Google oauth2.googleapis.com/revoke, Kakao kapi.kakao.com/v1/user/unlink), and permanently delete the soft-deleted record — including uploaded photos in Storage — within 30 days.

Deletion

Open Settings inside the app and choose Delete account. Doing so will: (1) soft-delete your hiddengem.users row, (2) remove your uploaded photos from the Storage bucket, (3) revoke your provider's OAuth token where supported, and (4) schedule permanent deletion within 30 days. If you only want to stop receiving push notifications, you can turn off notifications per-favorite or per-app in iOS Settings.

Children

HiddenGem is intended for general audiences planning travel. We do not knowingly collect data from anyone under 14.

Changes

If we make material changes to this policy we'll update the Effective date above and ask you to re-accept the terms on next launch.

Contact

Questions about your data? Email [email protected].