Privacy Policy

1. Who is responsible for your data

Your personal data is handled by 느낌있는 사람들 (Neukkim-inneun Saramdeul), represented by Kim Hyundae, 7-5 Eonnam 9-gil, Seocho-gu, Seoul, Republic of Korea ("Trito", "we"). We are the controller of the data described in this policy.

Our privacy officer (the person in charge of personal information protection) is Kim Hyundae (support@trito.app). You can reach them, and us, at support@trito.app.

2. What we collect and why

Account and sign-in: your phone number, which Google Firebase Authentication verifies with a one-time code. On our own servers we store the phone number only as a keyed hash, not in readable form. We also store your Firebase account ID. We use these to create your account, keep one account per phone number, and prevent abuse.

Apple, Google or email sign-in: if you sign in this way, Google Firebase Authentication receives your email address (Apple may give a private relay address instead) and, for Apple or Google, may receive the name on that account. Your email address is kept only in Firebase Authentication, not on our own servers, and is used only to sign you in and, for email sign-in, to reset your password.

Profile: your name, handle, photo, bio, home city, languages and birth year. The birth year is required so that we can keep Trito for adults (18 and older); your age range is shown on your profile only if you choose to show it. Gender is optional and is shown only if you choose. We use the profile to show who you are to other users and to run features such as locals who are open to travelers.

Content you create: courses, photos (their location metadata is removed), trips, join requests, and chat messages. We use them to provide the service. Chat messages you delete stay on our servers, out of sight of other users, because a report may refer to them; we use them only for safety review.

Footprints: a record of the footprints you earn, spend and are refunded, so we can show your balance and level.

Purchases: for each footprint pack you buy, the store (Apple or Google), its transaction id, the product, and when it was bought or refunded, so we can add the footprints once and handle refunds. We never receive your card or payment details; the store keeps them.

Safety: reports you make or that are made about you, blocks, and moderation records such as restrictions. We use them to review reports and keep the service safe.

Notifications: your push notification token, your notification settings and the chat rooms you muted. We use them to send the notifications you ask for.

Device and usage: your device language and time zone, and daily activity, such as the day you checked in or used the app, which we use for service statistics and to make the app work in your language.

3. Legal bases (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under the GDPR: performance of a contract (running your account and the features you ask for); our legitimate interests in keeping Trito safe and preventing abuse and fraud (reports, blocks, filters, moderation records); legal obligations where they apply; and your consent for push notifications, which you can withdraw at any time in Settings.

In Korea we collect and use personal information with your consent and as the Personal Information Protection Act (PIPA) allows for providing the service you requested.

4. Who we share data with (processors) and transfers abroad

We do not sell your personal data. We use these service providers to run Trito. They process data on our behalf, only for the purposes described here.

Google Firebase Authentication (Google LLC, United States and other countries): verifies your phone number, signs you in, and keeps the email address of accounts that use Apple, Google or email sign-in.

Sign in with Apple (Apple Inc., United States): if you choose it, Apple confirms who you are and passes your sign-in to Firebase Authentication.

Cloudflare R2 (Cloudflare, Inc., United States and other countries): stores the photos you upload and our offsite backups.

Expo push notification service (Expo, United States), together with Apple Push Notification service and Firebase Cloud Messaging (Google): deliver push notifications. Notification text, such as a message preview, a sender's name and a room name, passes through Expo's servers on its way to Apple or Google.

Our hosting provider in Korea runs the servers and database where your data is stored.

Because some of these providers are outside Korea and your country, your data may be transferred abroad. When we transfer data from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as standard contractual clauses or adequacy decisions. Where PIPA requires it, we tell you about transfers abroad in this policy and, where needed, ask for your consent. We may also disclose data when the law requires it, for example to answer a valid request from a court or an investigating authority.

Other users see what you choose to share: your handle, profile, courses, trips and the messages you send.

5. How long we keep data and how we destroy it

We keep your data while your account is active. When you delete your account, we remove or anonymize your personal data right away: your profile is cleared, your saved courses, visited countries and trips you hosted are removed, your pending requests are closed, your Firebase sign-in account with its email address is deleted and Sign in with Apple is revoked, and photos that no other trip or course still uses are deleted. Courses you chose to keep stay without your name.

To stop abuse, we keep a keyed hash of the phone number for 30 days after deletion, which only stops the same number from being registered again straight away. After that it is no longer kept.

Chat messages stay with the conversation but are no longer linked to a readable profile. Reports, blocks, restrictions and other moderation records are kept for as long as needed to keep Trito safe and to meet legal obligations.

Our database backups are kept for 14 days on our server and 30 days in offsite storage, so deleted data can remain in backups for up to 30 days before it is overwritten. Electronic files are destroyed in a way that they cannot be restored.

Where the law requires us to keep certain records for longer, we keep them for the period the law requires.

6. Your rights

You have the right to access your data, to correct it, to delete it, to restrict or object to some of our processing, to receive your data in a portable format, and to withdraw consent. You can correct your profile in the app under Me, Edit profile. You can delete your account in the app. You can turn push notifications off, or mute single rooms, in Settings.

To use any other right, write to support@trito.app. We will answer within the time the law requires, and in any case within 30 days. You may also complain to your local data protection authority, or in Korea to the Personal Information Protection Commission or the Korea Internet and Security Agency privacy center.

7. How we protect your data

We encrypt data in transit with HTTPS. Access to our servers and database is limited to the people who need it. Phone numbers are stored only as keyed hashes. Backups are kept in private storage that is not open to the public. No system is perfectly secure, so if a breach affects you we will tell you and the authorities as the law requires.

8. Children

Trito is only for adults aged 18 and older. We require a birth year at sign-up and do not allow anyone under 18 to register. If we learn that an account belongs to someone under 18, we close it and delete the data.

How to delete your account

In the app: open Me, then Settings, then Delete account, and follow the steps. You can choose whether to delete the courses you shared or keep them without your name. Deletion takes effect immediately.

By email: if you cannot use the app, write to support@trito.app from the email address you can use to reach us and tell us the phone number of the account. We will confirm that the account is yours and delete it within 30 days.

What is deleted and what is kept is described in section 5 of this policy. This page is the account deletion address we give to Google Play.

9. Changes to this policy

We may update this policy. The effective date is at the top of this page. If a change matters, we will tell you in the app and, where the law requires it, ask for your consent again.