Privacy Policy

1. Information We Collect

• Account information: email, social identifier, profile name and image provided via social login (LINE, Apple, Google).
• Service usage: saved (wishlisted) restaurants, visit records, followed stars, search history.
• Automatically collected: device and browser information, access logs, cookies, IP address.
• Location (optional): processed only with your consent when you use map and directions features.
• Push notification device token: when you opt in to notifications in our mobile app, we process the device token to deliver push notifications.

2. Purposes of Processing

Member identification and login; providing personalized features such as wishlists, visit records, and follows; operating, improving, and analyzing the Service; responding to inquiries; preventing fraud; delivering push notifications.

3. Retention

We retain your information until you delete your account, after which it is deleted without undue delay, except where retention is required by law.

4. Third Parties and Processors

We do not provide your personal information to third parties without your consent. We use the following processors to operate the Service:

• Supabase — database, authentication, server hosting
• Cloudflare — web hosting, CDN, security
• LINE / Apple / Google — social login authentication
• Google (Firebase Cloud Messaging) — push notification delivery
• (Analytics, if used) — usage statistics
• (Maps, if used) — maps and directions

5. International Transfers

Because the Service uses international infrastructure such as Supabase and Cloudflare, your information may be stored and processed outside your country (e.g., an Asia region) within the purposes above.

6. Your Rights

You may at any time request access to, correction or deletion of, or restriction of processing of your personal information, and withdraw consent. You can delete your account via [My Page > Delete Account] in the Service or by contacting us below.

7. Children Under 14

We do not collect personal information from children under 14 without the consent of a legal guardian.

8. Security

We apply reasonable safeguards including access controls, encryption in transit (HTTPS), and access management.

9. Privacy Contact

• Business name: ONGROUND / Representative: Seongbin Hwang / Business reg. no.: 147-04-03551
• Address: #302, 15, Jandari-ro 9-gil, Mapo-gu, Seoul, South Korea
• privacy@mash-itta.com

10. Changes

If this policy changes, we will post the effective date and the changes within the Service.