Privacy Policy

Introduction

Intaek Hwang (“we”) runs the odiga website (odiga.io) and app (the “service”) and protects your personal information under Korea’s Personal Information Protection Act. You can browse the service without logging in; the information below arises when you log in or use the service.

1. What we collect

• When you log in with Google or Apple: your email address, name, Google profile picture address, and the account ID that company assigns. If you use Apple’s “Hide My Email,” we receive the relay address Apple creates. We never receive a password.
• What you enter or create: your display name, @handle, boards (title and description), the places you save to them with any notes, and photos you add in the app.
• When you use the website: a random ID created for your browser, your member number if you are logged in, the pages you view and the features you use (saving a place, creating a board, searching, sharing), how you arrived (search engine, campaign tags on a link), your browser and device type, and your approximate location (country and city) estimated from your IP address.
• When you use the app: a random ID created for your device, the places you open and how long you stay, places you hide, and the areas and categories you pick.
• Access logs: IP address, browser information, time of access, and the address requested. Our servers record these automatically.

We do not collect national ID numbers, payment information, or your precise (GPS) location.

2. Why we use it

• To log you in and manage your account
• To show your profile and boards (see section 3)
• To pick places you may like in the app
• To understand how the service is used, so we can fix and improve it
• To prevent abuse, keep the service secure, and find errors
• To answer your questions

3. What is public

Every board on odiga is public. Your display name, @handle, board titles and descriptions, and the places on your boards can be seen by anyone and may appear in search engines such as Google and Naver. Notes you add may also be visible to people viewing the board. Content you delete can remain in search results or cached copies until search engines visit again.

4. How long we keep it

• Your account and what you create: until you delete your account. A board or place you delete disappears from view right away, and everything is destroyed when your account is deleted.
• Website usage data (Google Analytics): deleted automatically after at most 14 months.
• App usage data: two years from collection, or when you delete your account, whichever comes first.
• Access logs: deleted automatically after 7 days.
• Database backups: kept for 7 days, then removed in turn, so deleted information can remain in a backup for up to 7 days.

Where a law requires us to keep something longer, we keep it only for that period.

5. How we destroy it

When a retention period ends or you ask us to delete your information, we destroy it without delay. Electronic files are deleted so they cannot be recovered; we keep no personal information on paper.

6. Sharing with others

We do not sell or give your personal information to other companies or people, except when the law requires it, for example a request from an investigative agency through the proper procedure. The public information in section 3 is information you post knowing it is public.

7. Service providers and transfers abroad

We use the companies below to run the service, and some of them process information outside Korea. Information is sent to them, encrypted over the internet, as you use the service.

You can block the usage statistics as described in section 8 and still use the service as before. Supabase and Cloudflare are needed to provide the service; if you do not want them to process your information, stop using the service and ask us to delete your account.

8. Cookies and browser storage

• Staying logged in: your login is kept in your browser’s storage (localStorage). Clearing it logs you out.
• Cloudflare Web Analytics: counts visits without cookies.
• Google Analytics: keeps a random ID in a cookie.

You can block or clear this site’s cookies and data in your browser settings, or block only the usage statistics with a tracker blocker or Google’s Google Analytics Opt-out Browser Add-on. The service works the same either way.

9. Advertising

odiga shows no ads and does not use your information for targeted advertising.

10. Your rights

You can ask at any time to see, correct, or delete your personal information, or to stop us processing it.

• You can change your display name and @handle yourself under Edit profile.
• You can delete your boards and saved places yourself.
• For account deletion, a copy of your information, or anything else, email privacy@odiga.io. We confirm it is you, act within 10 days, and tell you the result.

A legal representative or someone you authorize can also make these requests for you.

11. How we keep it safe

• All connections are encrypted with HTTPS.
• We never receive or store passwords (you log in with Google or Apple).
• Only the operator can manage the database, and each account can change only its own information.
• Keys and secrets used to run the service are stored separately and securely.

12. Children under 14

The service is not meant for children under 14. If we learn that an account belongs to a child under 14, we delete it without delay.

13. Who is responsible

Send questions, complaints, or requests for help about personal information to:

• Privacy officer: Intaek Hwang
• Email: privacy@odiga.io

14. Getting help

If your personal information has been infringed, you can also contact these Korean agencies:

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center (KISA): 118, privacy.kisa.or.kr
• Supreme Prosecutors’ Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

15. Changes to this policy

If we change this policy, we post the changes and the new effective date on this page.