Korea Water Escapes

Privacy Policy & Support · Effective August 12, 2026

Support

Safety notice

• Valleys and beaches carry a real risk of drowning. Check the weather, water depth, current, and any closure before you go.
• After rain, valley water can rise suddenly. Rain upstream is dangerous downstream, even under clear sky.
• Wear a life jacket. Children must stay with an adult at all times.
• Never enter closed areas or water without lifeguards.
• Information in the App is for reference. Your safety is your own responsibility.

At a glance

• No sign-up. We do not collect your name, phone number, or address.
• No real-time location. The app never asks for location permission.
• Ads (Unity LevelPlay): a banner at the bottom of the screen, and a full-screen or video ad when you choose to unlock free content. These use your device advertising identifier. A subscription removes all ads.
• Favourites, recently viewed places and settings stay on your device only.
• Data leaves your device only when you send an enquiry, use the AI trip planner, or verify a subscription.
• Payment is handled by the App Store or Google Play. We never see your card or billing details.

1. Introduction

Korea Water Escapes (the "App") is operated by an individual developer (the "Operator"). This policy explains what information the App handles, why, how long it is kept, and what you can do about it.

Effective date: August 12, 2026

2. Information we handle

The App works without an account. We do not collect your name, date of birth, gender, phone number, or postal address.

① Stored on your device only (never sent to the Operator): favourites, recently viewed places, map-app and display settings, launch count (used once to show a rating prompt), a random anti-spam identifier, and a cache of the place data. Deleting the App deletes all of it permanently; there is no account, so no server backup exists.

② Sent only when you tap Send on the Settings > Contact screen: the enquiry type, your message (up to 1,000 characters), an optional reply address, the random anti-spam identifier, the app version and platform (e.g. ios v1.0.2), and your IP address stored only as an irreversible hash for rate limiting. Nothing else from inside the App (favourites, browsing history) is attached.

③ Sent when you use the AI trip planner: the trip options you choose (number of days, regions, whether you have a rental car, whether you travel with children) and the free-text note you type, plus the random device identifier and an IP hash used to enforce usage limits. The note is truncated and stripped of control characters before use. Do not type personal or sensitive information into it.

④ Sent when you subscribe or when the App checks an existing subscription: the receipt token issued by the App Store or Google Play. The token proves that a subscription is active; it contains no name, card number, or billing address. We never receive your payment details.

⑤ Sent to Unity LevelPlay and its connected ad networks when an ad is requested — for the banner, and for the full-screen or rewarded ad you choose to view: your device advertising identifier (iOS IDFA / Android Advertising ID) and the standard ad-request data those networks need to serve and measure the ad. On iOS this happens only after you allow tracking; if you decline, a non-personalised ad is shown. See section 13.

⑥ Not collected at all: real-time location (GPS), contacts, photos and media, microphone, call logs, calendar, and file access.

3. How information is collected

· Entered and sent by you through the Contact screen or the AI trip planner

· Generated on your device while using the App (settings, favourites, anti-spam identifier)

The following features contact external servers. By the nature of network requests, those servers may log your IP address and the time of the request. The App does not attach any other personal information to them.

· Maps — OpenStreetMap tile servers and a map library CDN: the coordinates of the map area shown

· Place data and notice updates — Supabase storage: a file request containing no personal information

· Enquiries and AI trip planner — Supabase Edge Functions: the items listed in section 2

4. Why we use it

· To provide the service and keep place information up to date

· To answer your enquiries and fix reported problems

· To generate a trip plan when you request one

· To prevent abuse (spam, automated requests) and to keep running costs bounded

We do not use the information for any other purpose. If the purpose changes, we will say so in this policy before the change takes effect.

5. Sharing with third parties

We do not sell or rent your information. Advertising in the English edition is served through Unity LevelPlay mediation (currently Unity Ads and Liftoff Monetize). Unity and the connected ad networks receive the advertising identifier and ad-request data described in section 2 ⑤ to show and measure ads; see section 13.

We disclose information only when you have agreed in advance, or when required by law or by a lawful request from an investigative authority.

6. Processors

The following providers process data on the Operator’s behalf. Each follows its own privacy policy.

· Supabase Inc. — hosting of place data, storage and delivery of enquiries, and the server function that runs the AI trip planner

· OpenAI, L.L.C. — generates the trip plan text from the options and note you submit

· Unity Technologies (Unity LevelPlay, Unity Ads) — mediates and serves the banner, full-screen and rewarded video ads in the English edition and measures ad performance, using the advertising identifier and ad-request data in section 2 ⑤

· Liftoff Mobile, Inc. (Liftoff Monetize) — serves banner, full-screen and rewarded video ads through Unity LevelPlay and measures ad performance, using the same items

· Resend (Plus Five Five, Inc.) — forwards received enquiries to the Operator’s mailbox

· Apple Inc. and Google LLC — take the payment, run the subscription, and answer the server’s question of whether a receipt token is valid. Billing data stays with them and is never passed to the Operator.

· OpenStreetMap Foundation — map tiles

If you tap directions, the App opens Kakao Map, Naver Map, Google Maps, or Apple Maps and passes only the fixed coordinates of the place. Anything after that is governed by that provider’s own policy. Changes to this list will be published in this policy.

7. International transfers

The App is operated from the Republic of Korea, and data you send is processed there and in the countries listed below.

· Supabase Inc. — the database region is set to Seoul, Republic of Korea, but the operator of the service is based outside Korea. Items: enquiry content, optional reply address, random identifier, app version, IP hash, and AI planner inputs. Transferred over an encrypted network connection when you send them. Retention: as stated in section 8.

· OpenAI, L.L.C. — United States. Items: the trip options and free-text note you submit through the AI trip planner. Transferred over an encrypted network connection at the moment you request a plan, for the sole purpose of generating the plan text. Retention follows OpenAI’s API policy for API traffic; the content is not used to train models.

· Unity Technologies (Unity LevelPlay, Unity Ads) — United States and other countries where Unity operates data centres. Items: the advertising identifier and ad-request data in section 2 ⑤. Sent when an ad is requested — for the banner, and for the full-screen or rewarded ad you choose to view — to serve and measure that ad. Retention follows Unity’s policy.

· Liftoff Mobile, Inc. (Liftoff Monetize) — United States. Items: the same as above. Sent when Unity LevelPlay fills the ad with this network. Retention follows that company’s policy.

· Resend (Plus Five Five, Inc.) — United States. Items: enquiry content and optional reply address. Transferred when an enquiry is received, for the purpose of sending a notification email. Deleted according to that service’s policy after delivery.

· Apple Inc. and Google LLC — United States. Items: the subscription receipt token. Sent to that store’s verification server at the moment you subscribe, restore, or request an AI trip plan, for the sole purpose of confirming the subscription is active. The token is not stored by the Operator.

If you do not want these transfers, do not use the Contact screen, the AI trip planner, or the subscription. Every other part of the App works without them.

8. How long it is kept

· Data stored on your device: until you delete it or uninstall the App

· Enquiries received by the Operator: until the enquiry is resolved and the related problem is fixed, then deleted without delay. If you ask us to delete it earlier, we will do so once we can identify it.

· Anti-spam identifier and IP hash: until the anti-abuse purpose is met, then deleted

· AI planner inputs: not stored by the App beyond the request. Only a counter marker (no content) is kept to enforce usage limits.

· Subscription receipt token: not stored. It is checked against the store on each request and discarded. Only a marker counting how many devices share one subscription is kept, to limit account sharing.

· Where a law requires a longer retention period, that period applies.

9. Deletion

Information that has reached the end of its retention period or purpose is deleted without delay. Electronic files are erased in a way that cannot be recovered.

10. Your rights

You may ask to access, correct, delete, or stop the processing of your information at any time, and you may withdraw consent.

· Data on your device: delete it in the App, or uninstall the App.

· Anything else: email koreatong.kr@gmail.com and we will act without delay.

There is no account system, so to identify your data we need the reply address you used or part of the message you sent.

11. Children

The App is not directed to children and we do not knowingly collect personal information from them. Children should not use the Contact screen or type personal details into the AI trip planner without a parent or guardian.

The ads (section 13) are for a general audience and are not directed to children.

If you believe a child has sent us personal information, email koreatong.kr@gmail.com and we will delete it without delay.

12. Location

The App does not collect your real-time location and does not request location permission.

Maps are based on the fixed coordinates of the place you opened (a valley, beach, or hot spring). Those coordinates do not identify you.

13. Advertising

The English edition shows ads served through Unity LevelPlay mediation (currently Unity Ads and Liftoff Monetize): a banner at the bottom of the screen, and a full-screen ad when you choose to unlock additional places. The AI trip planner requires watching a rewarded video to the end. Apart from the banner, no ad appears unless you tap to view it.

To serve and measure these ads, those ad networks use your device advertising identifier (iOS IDFA / Android Advertising ID) and standard ad-request data. On iOS we ask for App Tracking permission first; if you decline, a non-personalised ad is shown instead.

A subscription removes all ads. You can reset or limit the advertising identifier in your device settings (Settings > Privacy & Security > Tracking, and Apple Advertising).

A subscription removes all ads. You can reset or limit the advertising identifier in your device settings (Settings > Google > Ads).

On iOS, "tracking" means linking the advertising identifier with third-party data for advertising. If you deny the App Tracking Transparency prompt, the identifier is not used to track you and only non-personalised ads are shown. How Unity and its connected ad networks handle this data is governed by their own policies (Unity player and app user privacy policy, Unity privacy policy, Liftoff privacy policy).

Affiliate links. Screens such as the trip planner may show affiliate links for eSIM or car rental. Tapping one opens the partner’s own site, and from that point their privacy policy applies. Partners identify the referral themselves in order to settle commission. The Operator receives no personal data from them, and nothing is sent unless you tap the link.

14. Subscription and payment

You can open two places in detail for free each day in each category (valleys, beaches, hot springs). After that, viewing one full-screen ad — once per category per day — unlocks three more places in that category until midnight; otherwise you can subscribe. The AI trip planner is available once a day by watching a rewarded video to the end. A subscription unlocks every place and unlimited planner use with no ads.

· Products: Monthly Pass — $4.99 per month; Yearly Pass — $29.99 per year. Your local currency and the exact amount are shown on the subscription screen before you confirm.

· Renewal: the subscription renews automatically at the end of each period unless it is cancelled at least 24 hours before that period ends. Payment is charged to your App Store or Google Play account at confirmation of purchase.

· Cancelling: manage or cancel in the App Store (Settings > your name > Subscriptions) or Google Play (Payments & subscriptions > Subscriptions). Uninstalling the App does not cancel a subscription.

· Refunds: requests are handled by Apple or Google under their own policies. The Operator cannot issue refunds.

The Operator receives no card number, bank detail, or billing address at any point. The App handles only the receipt token described in section 2 ④.

15. Security

· All traffic is encrypted in transit (HTTPS/TLS).

· API keys live only on the server; they are not embedded in the App.

· IP addresses are stored only as irreversible hashes, used for rate limiting.

· The App requests no device permissions it does not need (location, contacts, photos, microphone, storage).

· Text you submit is sanitised before it is stored, displayed, or passed to the trip planner.

16. Breach notification

If we learn that personal information has been lost, stolen, or exposed, we will notify affected users and the competent authorities without delay, as required by applicable law.

17. Contact

For any question, complaint, or request about personal information:

· Data protection contact: the Operator of Korea Water Escapes

· Email: koreatong.kr@gmail.com

· In the App: Settings > Contact

We reply without undue delay.

18. Content and automated collection

The selection, arrangement, and written descriptions of the places in the App are protected as a copyrighted work and as a database.

Factual items such as place names and coordinates derive in part from Korean public open data; rights in that source material remain with the issuing bodies. The App processes and restructures it.

Collecting, copying, or redistributing the App’s content by crawler, scraper, or bot is prohibited.

19. Disclaimer and governing law

Place information (facilities, water depth, safety notes) is provided for reference and may differ from the actual site. Check local notices before you visit. Swimming and outdoor activity are at your own risk.

This policy and use of the App are governed by the laws of the Republic of Korea.

20. Changes to this policy

If this policy changes, we will announce it in the App or through an update before the change takes effect. Material changes (what we collect, why, who receives it, international transfers) are announced at least 7 days in advance.

Revision history

· August 12, 2026 — corrected the description of ad formats: the banner shown to free users was not described, and the detail unlock now uses a full-screen ad instead of a rewarded video. What is collected, why, and who receives it are unchanged.

· August 3, 2026 — first version of the English-edition policy.