1. Data collected
Account: social login (Google/Apple) identifier, email, name (email and password for email sign-up). Contact: owner name, mobile phone number. Verification: business registration certificate image (for venue verification). Reservation: guest name, contact, party size, requests, and expected visit time passed along during reservation handling. Usage: notification tokens, access/usage logs, device information.
2. Purpose
Verifying your venue, managing venue information, receiving/responding to and helping fulfill reservation requests, sending (push) notifications, handling inquiries, preventing abuse, and improving the service.
3. Retention & deletion
(i) Personal data is destroyed without delay once its purpose is achieved, and account data is destroyed without delay upon account closure. (ii) Verification documents such as the business registration certificate are stored encrypted in a private store with restricted access and destroyed once verification/dispute-handling purposes end. (iii) Records that must be kept under applicable law are retained only for the statutory period and then destroyed (e.g., access logs for 3 months under the Protection of Communications Secrets Act). Account/data deletion follows the 'Yumi Partners Account & Data Deletion' guide.
4. Processing delegation & overseas transfer
To operate the Service, the Company delegates personal data processing as follows, and some processors are located overseas, with appropriate safeguards. Authentication/database: Supabase, Inc. (USA). App/API infrastructure: Vercel Inc. (USA). Push notifications: Expo (Expo Application Services), Apple Push Notification service (Apple Inc.), Firebase Cloud Messaging (Google). Transferred items are limited to what each task requires and are transferred over the network.
5. Third-party provision
We do not provide personal data to third parties except as required by law or with your consent.
6. Security measures
The Company applies encrypted transport (HTTPS), least-privilege access and access controls, encrypted storage of verification documents, and regular audits.
7. Your rights
You may at any time request access, correction, deletion, or suspension of processing of your personal data; account/data deletion can be requested in-app or via the contact below.
8. Children's data
The Service targets business owners and does not collect personal data from children under 14.
9. Privacy officer
Privacy Officer Yuhyun. Contact: ixplorer@hidemeplease.xyz
Governed by Korea's PIPA. Material changes are announced within the Service before they take effect.