Privacy Policy

Article 1 (Purpose of Processing Personal Information) Walkfolk ("Company") processes personal information for the following purposes: • Member registration and account management • Local guide registration and management • Providing messaging and appointment services • Operating the review system • Service improvement and statistical analysis Article 2 (Items of Personal Information Collected) ① At registration: email, name, password (processed via Supabase Auth, not stored in plaintext), consent records ② At guide application: profile photo, name, email, main activity area, languages, interests, specialties, introduction, places, local route description, guide style, hourly rate, contact information ③ Messaging/Appointments: message content, appointment date/time, meeting place, participant information ④ Reviews: rating, review content, reviewer information, date ⑤ Automatically collected: access logs, IP address, browser information, service usage history ⑥ If location sharing is chosen: current location, accuracy, last-updated time, and expiry time explicitly shared by a confirmed appointment participant Appointment location is shown only to the other participant from 5 hours before the appointment until 3 hours after its start (or its explicit end time, when provided). The Company does not continuously track users in the background. Article 3 (Retention Period) • Member information: until withdrawal • Guide application and registration: 1 year after service termination • Messages/Appointments: 1 year after service termination • Reviews: until deletion request • Retained as required by applicable law Article 4 (Third-Party Provision) The Company does not provide personal information to third parties in principle, except with user consent or as required by law. Article 5 (Processing Delegation) The Company delegates personal information processing to the following company for service operations: • Supabase Inc. (authentication, database, and storage services) ※ Personal information may be stored overseas depending on the Supabase server region. Please verify the Supabase project region in your Supabase dashboard and update the overseas transfer section accordingly. Article 6 (Disposal of Personal Information) The Company promptly disposes of personal information when the retention period expires or the processing purpose is achieved. Electronic files are deleted using methods that prevent recovery. Article 7 (User Rights) Users may at any time request access to, correction of, deletion of, or suspension of processing of their personal information. • Request via email: 1vpdrnls@gmail.com Article 8 (Security Measures) • Password encryption (Supabase Auth) • HTTPS communication encryption • Minimum access rights (Row Level Security) • Regular security reviews Article 9 (Cookies and Similar Technologies) The Service uses session cookies provided by Supabase for authentication session maintenance. Third-party marketing or tracking cookies are not currently used. Article 10 (Privacy Officer) • Name: 이재경 • Email: 1vpdrnls@gmail.com • Phone: 010-6364-3815 Article 11 (Overseas Transfer) The Service uses Supabase as infrastructure, and data may be stored on overseas servers. ※ Please verify the Supabase project region and update this section accurately. Article 12 (Changes to Privacy Policy) Changes to this policy will be notified to users via in-service announcements.