1. Data collected
Email, name, payment information (handled by a payment processor), and service usage logs. If you use the reservation feature, we also collect the guest's name, mobile phone number, email (for phone numbers outside Korea), language, and reservation details (time, party size, requests). If you allow location in the heyyumi app, we send your current coordinates to find venues nearby; they may remain in search logs but are not linked to your name, contact details, or reservations. When a visit is confirmed with the venue's Yumi check-in device, the arrival time and the number of guests seated are recorded. To prevent abuse, IP addresses and browser information are kept only as irreversible values (hashes). We recommend not including sensitive information such as health details in booking requests; if included, it is used only to pass the request on to the venue.
2. Purpose
Service delivery, billing, customer support, abuse prevention, statistical analysis. Reservation data is used to process bookings, notify the guest of the outcome (confirmed / declined / expired), send reminders before the visit, translate requests and venue replies so the guest and the venue can each read them in their own language, confirm visits and settle venue fees, and let the venue contact the guest in case of a no-show. We also send a one-time verification code (SMS) and provide a reservation-management link so guests can view and cancel their own reservations.
3. Retention
Deleted upon account closure, except where laws require longer retention. One-time verification codes are deleted after a short validity period. Guest name, phone number, email and booking notes (including translations) are kept for 3 years from the reservation date for fee settlement and dispute handling, then deleted; only records that can't identify anyone (venue, date and time, party size, outcome) are kept for statistics. Check-in attempt records left when a visit is confirmed with a Yumi check-in device (stored only as irreversible hashes) are deleted after 90 days.
4. Third parties, processors & overseas transfer
We do not share with third parties without consent. However, when you make a reservation, we share the guest's name, phone number, reservation details, and a summary of the guest's prior reservation history at that venue (visit / no-show / cancellation counts) with the venue operator to complete the booking. This history summary is limited to that venue and is not combined with history from other venues. To operate the Service we also delegate personal data processing as follows, and some processors are located overseas, with appropriate safeguards: authentication/account database: Supabase, Inc. (USA); app/API hosting infrastructure: Vercel Inc. (USA); reservation status messages and identity-verification codes (KakaoTalk/SMS): Solapi (솔라피 주식회사, Korea); result emails for guests with phone numbers outside Korea: Resend, Inc. (USA); tool for handling reservation requests: Slack Technologies, LLC (USA); translation of requests and venue replies: OpenAI, L.L.C. (USA), used only for translation and not for model training; reservation notifications (push) in the venue app: Expo, Apple Inc., Google LLC (USA); payment processing for paid subscriptions: PortOne (Korea PortOne Co., Ltd., Korea) and payment processors. Transferred items are limited to what each task requires and are transferred over the network. If processors are added or changed, we will announce it in advance through this policy.
5. Your rights
You may request access, correction, deletion, or processing restriction. Contact our Privacy Officer.
6. Safeguards
Encrypted transport (HTTPS), least-privilege access, regular audits.
7. Contact
Privacy Officer Yuhyun. Email ixplorer@hidemeplease.xyz / +82 70-7954-1357.
Governed by Korea's PIPA. Material changes are announced on the site in advance.