1.1 Information you provide at sign-up and during use

1.2 Information generated through service use

• Trip information (title, dates, invite code, cover image, travel companions)
• Transactions (amount, currency, category, payment method, date, location coordinates, memo, exchange rate, receipt images and OCR results)
• Spot records (place name, address, coordinates, memo, photos, comments)
• Currency exchange records
• Budget, cash holdings, settlement information
• Trip photos (album)
• Consent records (consent items and timestamps)

1.3 Information collected automatically

• Device information (OS, model, app version, language, timezone)
• Push notification token (FCM token)
• Crash and error diagnostics (stack traces, anonymous diagnostic identifiers) — Firebase Crashlytics
• Advertising identifier (IDFA on iOS / AAID on Android) — AdMob
• Subscription and in-app purchase event logs (product ID, store, purchase/renewal/cancel timestamps, price, currency) — via RevenueCat webhook

1.4 Collection methods

Information is collected through direct user input in the app, camera and photo library access, location coordinates provided by the OS upon permission consent, and automatic generation by SDKs.

In principle, data is retained until account deletion. After deletion, the following applies:

• Within 30 days after deletion: Temporary retention for account recovery (deleted_at flag)
• 5 years after deletion: Minimal identifying data retained in a separate archive table for fraud dispute response and legal compliance
• Payment and subscription records: 5 years (Korean E-Commerce Consumer Protection Act)
• Advertising and labeling records: 6 months
• Contract, withdrawal, payment, and delivery records: 5 years
• Consumer complaint and dispute records: 3 years
• Login records: 3 months (Korean Communications Privacy Act)
• App crash and error diagnostic logs: Up to 90 days (Firebase policy)
• Ad impression logs: Per AdMob policy

We do not share your personal information with third parties without your consent, except as required by Articles 17 and 18 of Korea's Personal Information Protection Act (legal obligations, law enforcement requests, etc.).

To operate the Service, we entrust the following providers with limited processing under contractual data protection obligations.

By signing up and agreeing to this Policy, you consent to the international transfer of your personal information to the providers listed in Section 5.

• Data transferred: Items listed in the Section 5 table
• Timing and method: Transferred at the time of service use via encrypted communication (HTTPS/TLS)
• Recipients: Providers listed in Section 5
• Countries: United States, United Kingdom, etc.
• Purpose: Tasks described in Section 5
• Retention period: Until termination of provider contract or per Section 3 retention periods

When you invite others to a trip or join via invite code, the following information is visible to other members of the same trip:

• Nickname and profile photo
• Transactions, budgets, settlements, spots, photos, and comments registered to that trip
• Your registered transactions, exchanges, and memos

Even after leaving a trip, data you previously registered may continue to be visible to other members. To delete your data, use in-app features or follow the procedure in Section 8.

You may at any time request access, correction, deletion, processing restriction, or withdrawal of consent regarding your personal information through the following channels:

• In-app My Page: View and edit profile, delete account
• In-app transaction and trip screens: Edit and delete your data
• Email: nestplanet.official@gmail.com

For users under 14 years of age, a legal guardian may exercise these rights on their behalf. You can revoke consent for individual permissions (location, push notifications, camera, photos, ad tracking via iOS ATT) at any time through OS settings.

Personal information is destroyed without delay once the retention period expires or processing purpose is achieved.

• Electronic files: Permanently deleted using non-recoverable methods
• Printed documents: Shredded or incinerated

Items retained separately under Section 3 are stored in isolation from other personal data.

We do not knowingly collect personal information from children under 14 years of age. If we learn that an account belongs to a child under 14, we will immediately delete the associated personal information.

We deliver ads through AdMob, which may use advertising identifiers (IDFA/AAID).

• iOS: Decline via the in-app App Tracking Transparency (ATT) prompt
• Android: Settings → Google → Ads → "Delete advertising ID" or "Opt out of personalized ads"

Declining ad tracking does not remove ads, and rewarded ad credit features remain available.

We implement the following technical and administrative measures:

• Encryption in transit (HTTPS/TLS)
• Per-user access control via Supabase Row-Level Security
• Server-side environment variable separation for API keys and service credentials
• Principle of least privilege for access rights
• Regular vulnerability assessment and security updates

This mobile app does not use web cookies. Automatic collection is performed via SDKs as described in Section 1.3.

This Policy may be updated to reflect legal or service changes. Material changes will be announced 7 days in advance via in-app notice or this page. Significant changes may require renewed consent.