Privacy Policy

1. What we collect today

• Account: email address, display name, account role (traveler/host).
• Bookings: date, time, duration, group size, preferred language, area, interests, and optional notes you write.
• Chat: messages and images you send in booking chat rooms.
• Reviews: the review text, name and rating you post.
• Support: messages you send to our team.
• Host profiles (hosts only): profile photos, intro text, keywords and feed posts you upload.

2. What we will collect when verification launches

When identity verification launches, verification will be processed by a certified external provider. NADRI intends to store only verification results (verified yes/no, document type, country, expiry, face-match and liveness results, timestamps) — not raw passport images, selfies, face videos, full passport numbers or NFC chip data. The exact provider and data flow will be published here before launch. [Legal review required]

3. Why we collect it

• Operating bookings, chat and reviews.
• Verifying who hosts and travelers are (trust & safety).
• Processing payments and refunds through the platform.
• Responding to reports, incidents and disputes.
• Meeting legal obligations.

4. Retention

Account data is kept while your account exists and deleted when you delete your account, except where law requires longer retention (e.g. commerce records). Chat and booking records tied to disputes may be placed under legal hold until the dispute is resolved. Specific retention periods per data category will be finalized with legal review and published in a data-retention table. [Legal review required]

5. Processors and overseas transfer (처리위탁·국외이전)

These are the processors actually in use today. Each line gives the company, the country where processing takes place, what it handles, and why. Data is retained by each processor only for as long as we retain it (section 4), and is deleted with the underlying record.

• Supabase Inc. — United States (with regional hosting) — account, booking, chat, review and uploaded-image data — database, authentication and file storage.
• Vercel Inc. — United States — page requests, IP address and browser user-agent in server logs, plus aggregate usage measurement — application hosting and Vercel Analytics.
• Resend (Resend Inc.) — United States — recipient email address and message content — transactional email such as booking notifications; used only where email delivery is configured.
• PortOne (아임포트) — Republic of Korea — payment approval data for a booking — card payment processing; not in use while payment runs in manual bank-transfer mode, and it becomes active only when card payment goes live.

Personal data is transferred outside Korea to the United States for the processors listed above, for the purposes stated, and is held for the retention periods in section 4. You may refuse the overseas transfer; because hosting and the database are the service itself, refusing means the account cannot be operated. We do not sell personal data and do not provide it to third parties for their own marketing. When an identity-verification provider is contracted it will be added here with the same four columns before any data flows to it. [Legal review required]

6. Automatic collection devices (자동수집장치)

• Cookies: we set the session cookies that Supabase authentication needs to keep you signed in, and a cookie holding your chosen language. These are required for the site to work; there are no advertising or cross-site tracking cookies.
• Vercel Analytics: measures page views and aggregate usage. It runs on every page of the site.
• Server logs: hosting produces request logs containing IP address, requested path, timestamp and user-agent.

You can refuse or delete cookies in your browser settings; refusing the authentication cookie means you cannot stay signed in. Whether the analytics measurement requires separate consent under Korean law, and how to offer an opt-out for it, requires confirmation. [Legal review required]

7. Destruction procedure (파기 절차)

• Trigger: personal data is destroyed without delay once its purpose is met — when you delete your account, or when the retention period in section 4 ends.
• Procedure: deleting your account removes account, profile, booking, chat and review records from the operational database. Records the law requires us to keep (commerce and payment records) are separated from live data and stored apart until the statutory period expires, then destroyed.
• Method: electronic files are deleted so they cannot be restored, including from backups on the backup rotation cycle; any printed material is shredded or incinerated.
• Hold: records tied to an open report, incident or dispute are placed under legal hold and destroyed only after the case closes.

The statutory retention periods that override deletion, per record type, are confirmed in the retention table referenced in section 4. [Legal review required]

8. Children under 14 (만 14세 미만 아동)

NADRI is not for children under 14. We do not knowingly collect personal data from anyone under 14 and do not provide an account creation path for them, and separately, minors may not participate in an outing alone (see Prohibited & Restricted Activities). If we learn that an account belongs to a child under 14, we delete the account and its data without delay.

If you believe a child under 14 has created an account, contact us through the in-app Contact form. Whether an age gate at signup and a legal-guardian consent flow are required for the 14–19 age range requires confirmation. [Legal review required]

9. Your rights

You can access and correct your information from your account page, and delete your account (and its data) at any time from Account → Delete account. For any privacy request, contact us through the in-app Contact form. We will designate and publish a privacy officer before full launch. [Legal review required]