Privacy Policy

1. What we collect today

• Account: email address, display name, account role (traveler/host).
• Bookings: date, time, duration, group size, preferred language, area, interests, and optional notes you write.
• Chat: messages and images you send in booking chat rooms.
• Reviews: the review text, name and rating you post.
• Support: messages you send to our team.
• Host profiles (hosts only): profile photos, intro text, keywords and feed posts you upload.

2. What we will collect when verification launches

When identity verification launches, verification will be processed by a certified external provider. NADRI intends to store only verification results (verified yes/no, document type, country, expiry, face-match and liveness results, timestamps) — not raw passport images, selfies, face videos, full passport numbers or NFC chip data. The exact provider and data flow will be published here before launch. [Legal review required]

3. Why we collect it

• Operating bookings, chat and reviews.
• Verifying who hosts and travelers are (trust & safety).
• Processing payments and refunds through the platform.
• Responding to reports, incidents and disputes.
• Meeting legal obligations.

4. Retention

Account data is kept while your account exists and deleted when you delete your account, except where law requires longer retention (e.g. commerce records). Chat and booking records tied to disputes may be placed under legal hold until the dispute is resolved. Specific retention periods per data category will be finalized with legal review and published in a data-retention table. [Legal review required]

5. Sharing and processors

We use Supabase (database, auth, storage) and Vercel (hosting) as processors; data may be processed outside Korea by these providers. We do not sell personal data. When identity-verification and payment providers are added, they will be listed here with the country, items, purpose and retention involved.

6. Your rights

You can access and correct your information from your account page, and delete your account (and its data) at any time from Account → Delete account. For any privacy request, contact us through the in-app Contact form. We will designate and publish a privacy officer before full launch. [Legal review required]