プライバシーポリシー

Last updated:

1. Overview

AreumTravel is built to minimize data collection. We collect and store only data needed to operate core features like accounts, purchases, saved content, and playback continuity.

2. Data We Collect

We currently store the following categories of data in our systems:

  • Account data: name, email address, profile image (if provided), role, preferred language, and account timestamps.
  • Authentication and security data: password hash (if applicable), OAuth account identifiers, passkey credentials, and refresh-token families.
  • User-created content: playlists, notes, sharing/public setting, and any custom places you add to a playlist (including custom lat/lng coordinates).
  • Usage continuity data: logbook/history entries and persisted audio player state (queue/history).
  • Commerce data: subscription status, city purchases, payment records, and purchase metadata required for fulfillment, support, and refunds.
  • Session technical data: anonymous session ID, optional device ID, user agent, and IP address (stored in Redis with a 7-day TTL).

3. Data We Do Not Collect

  • We do not store a persistent GPS location history of where you travel.
  • We do not run ad-tech profiling or ad-tracking SDKs in the web app.

4. How Location Features Work

Nearby/discovery features require your device to provide coordinates. Coordinates may be sent in request parameters to compute nearby results, but those raw coordinates are not written to our primary application database as a location history.

In the web app, only a user-set location override is persisted locally in browser storage for convenience. Live geolocation is not persisted in local storage by default.

5. External Processors

We use third-party processors for specific operations:

  • Stripe: payment processing and checkout.
  • Apple / Google: in-app purchase receipt verification.
  • Resend: transactional emails such as password reset.

6. Retention

  • Account and user-content data are retained until account deletion.
  • Anonymous session records in Redis expire automatically (7 days).
  • Purchase/payment records are retained as needed for service operations and compliance.

7. Your Controls

You can delete your account from settings. Account deletion removes your account and related in-app data from our application database.

8. Changes To This Policy

If our data practices materially change, we will update this policy and revise the "Last updated" date above.

9. Contact

For privacy questions, contact us at our contact page.

No story selected

—