1. Privacy Policy Overview
TastyLog ('Company') values users' personal information and complies with relevant laws including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the Act on the Protection and Use of Location Information.
This Privacy Policy explains the items, purposes, and retention period of personal information collected and used when using our services (restaurant posts, TastySnap, TastyGallery, TastyCrew, TastyMeetup, Community, AI Search, etc.).
2. Personal Information Collected and Collection Methods
2.1 Information Collected During Registration
- Required: Email address, password, nickname
- Optional: Profile picture, bio
- Social Login: Social account information (email, profile)
2.2 Automatically Collected Information During Service Use
- Access logs, IP address, cookies, device information
- Service usage records, search history
- Location information (with user consent)
- Real-time location information when using TastyCrew (GPS coordinates, location accuracy)
2.3 Information Collected When Creating Posts
- Post content, photos, videos
- Restaurant location information (latitude, longitude)
- Creation date and time, view count
2.4 Information Collected When Using TastyCrew Service
- Crew participation information (participation date/time, crew member list)
- Real-time location information (GPS coordinates, location sharing start/end time)
- In-crew chat messages (optional)
2.5 Information Collected When Using TastySnap Service
- Uploaded video and image files
- Thumbnail images (auto-generated for videos)
- Content metadata (upload date/time, view count, like count)
- Content moderation analysis results (AWS Rekognition — inappropriate content detection)
2.6 Information Collected When Using TastyGallery Service
- Gallery title, description, and country information
- Collection and post data included in the gallery
- Gallery view count and bookmark records
2.7 Information Collected When Using TastyMeetup Service
- Club membership and management information (role, join date, activity records)
- Schedule participation records (attendance status, date/time)
- Club posts, comments, and attached images
- Schedule chat messages (optional)
- Schedule location information (meeting place coordinates)
2.8 AI Search/Recommendation and Content Moderation
- Search queries and search patterns (for AI recommendation service)
- AI chat messages and conversation history (when using the AI conversation feature)
- Location-based recommendation context (when generating AI chat/recommendation results)
- Post titles and partial post content (when analyzing AI recommendation/search reasoning)
- Clicks and interactions with AI-recommended content
- Content moderation violation warning records (for service safety management)
- * When you use AI search, recommendation, or chat features, the search queries and conversation content you enter, along with related context such as location and post information, are transmitted to and processed by the third-party generative AI services specified in Section 7 below (Google Gemini, and Anthropic Claude where applicable). Uploaded images are also transmitted to AWS Rekognition for analysis of inappropriate content.
3. Purpose of Collection and Use of Personal Information
The Company uses collected personal information for the following purposes:
- Member registration and management: Providing membership services, identity verification, preventing unauthorized use
- Service provision: Restaurant information sharing, warning information provision, map services
- TastyCrew service: Companion matching and location sharing features (users are solely responsible for their own safety during meetups; the Company acts only as a platform provider)
- TastySnap service: Short-form content upload, feed provision, content moderation
- TastyGallery service: Publishing and exploring restaurant collection galleries
- TastyMeetup service: Club creation and management, schedule management, member management
- Community service: Post creation and exploration, user interaction
- AI search and recommendation: Personalized content recommendations and search services
- Content moderation: Automatic inappropriate content detection and service safety management
- Marketing and advertising: Event and promotion information (with optional consent)
- Service improvement: Statistical analysis, service quality enhancement
4. Personal Information Retention and Use Period
In principle, the Company deletes personal information without delay after the purpose of collection and use is achieved.
However, information is retained for the specified periods in the following cases:
4.1 Internal Company Policy
- Records of unauthorized use: 1 year
- Service usage records: 3 months
- TastyCrew location information: Automatically deleted within 24 hours after meetup ends
- TastyCrew chat records: 30 days after crew ends (minimum period for report processing)
- TastySnap content: Deleted immediately upon account withdrawal (retained up to 30 days for report processing)
- TastyMeetup club data: 30 days after club dissolution
- TastyMeetup schedule chat: 30 days after schedule ends
- Content moderation violation records: 6 months (for repeat violation detection and account management)
4.2 Retention According to Relevant Laws
- Records of contracts or withdrawal of subscriptions: 5 years (E-Commerce Act)
- Records of payment and supply of goods: 5 years (E-Commerce Act)
- Records of consumer complaints or dispute resolution: 3 years (E-Commerce Act)
- Records of labeling and advertising: 6 months (E-Commerce Act)
- Website visit records: 3 months (Protection of Communications Secrets Act)
- Location information use/provision confirmation data: 6 months (Location Information Act)
5. Personal Information Destruction Procedures and Methods
The Company destroys personal information without delay when the retention period has expired or the processing purpose has been achieved.
5.1 Destruction Procedures
- Users' personal information is transferred to a separate database after achieving its purpose and is destroyed after being stored according to internal policies and laws.
- TastyCrew location information is automatically destroyed within 24 hours after meetup ends.
5.2 Destruction Methods
- Electronic files: Permanently deleted in an unrecoverable manner
- Paper documents: Shredded with a shredder or incinerated
6. Provision of Personal Information to Third Parties
In principle, the Company does not provide users' personal information to third parties.
However, exceptions are made in the following cases:
- When users have given prior consent
- When using TastyCrew service: Nickname, profile picture, and real-time location information are shared with other users participating in the same crew (requires explicit user consent)
- When required by law or by legal procedures for investigative purposes
7. Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows for smooth service provision:
| Provider | Purpose | Retention Period |
|---|---|---|
| Amazon Web Services (AWS) | Server operation and data storage; AI analysis and moderation of inappropriate content in uploaded images (Amazon Rekognition) | Until membership withdrawal or contract termination |
| Google (Maps / Login / Ads) | Map services, social login, ad serving (AdSense) | Service usage period |
| Google (Gemini / Generative AI API) | Analysis of search queries, conversation content, and location-based results to provide AI search, recommendation, and chat features (Data transferred: search queries, AI chat messages and conversation history, location-based recommendation context, post titles and partial post content) | One-time processing at the point of AI feature use (subject to Google's policy) |
| Anthropic (Claude API) | AI search/conversation analysis (alternative provider — used where applicable) | One-time processing at the point of AI feature use (subject to Anthropic's policy) |
The Company manages outsourcing through contracts to ensure compliance with personal information protection laws. Data transmitted to the generative AI services above is used only to the extent necessary to provide AI search, recommendation, and chat features, and is processed in accordance with each provider's privacy policy.
8. Rights and Obligations of Data Subjects and Exercise Methods
Users can exercise the following rights at any time:
- Request access to personal information
- Request correction or deletion of personal information
- Request suspension of personal information processing
- Withdraw consent for location information collection/use/provision (stop TastyCrew location sharing)
- Membership withdrawal (consent withdrawal)
Rights can be exercised through the 'Settings' menu in the service or via email (support@tastylog.net).
The Company will take action on requests without delay and notify the results.
9. Security Measures for Personal Information
The Company takes the following measures to ensure the security of personal information:
- Personal information encryption: Important information such as passwords is encrypted and stored
- Location information encryption: Real-time location information is encrypted during transmission and storage
- Technical measures against hacking: Installation and periodic update/inspection of security programs
- Access control: Management of access rights to personal information processing systems
- Storage and prevention of tampering of access records: Storage of access records and regular backups
- Minimization of personal information processing and training: Minimizing staff and providing regular training
10. Use of Cookies
The Company may use cookies to provide services.
Cookies are small text files sent by the server operating the website to the user's browser.
Purpose of using cookies:
- Maintaining login status
- Providing personalized services to users
- Analyzing service usage statistics
How to refuse cookies:
You can refuse to store cookies in your browser settings, but some service usage may be restricted.
Third-party advertising and cookies:
- This service may display ads from third-party advertising vendors, including Google.
- Third-party vendors, including Google, use cookies to serve personalized ads based on a user's prior visits.
- Users can opt out of personalized advertising by visiting Google Ads Settings (https://www.google.com/settings/ads).
11. Privacy Officer
The Company designates a Privacy Officer to oversee personal information processing and handle complaints and remedies for data subjects regarding personal information processing.
Privacy Officer:
Email: privacy@tastylog.net
Business Hours: Weekdays 09:00 ~ 18:00 (excluding weekends and holidays)
For other reports or consultations regarding personal information infringement:
Please contact the data protection supervisory authority in your country or region.
Major Data Protection Authorities by Country:
- South Korea: Personal Information Infringement Report Center (privacy.kisa.or.kr)
- Japan: Personal Information Protection Commission (ppc.go.jp)
- United States: Federal Trade Commission (ftc.gov)
- EU: Data protection authority in each member state
- Others: Local consumer protection authority or data protection supervisory authority
12. Changes to Privacy Policy
This Privacy Policy takes effect from the implementation date, and any additions, deletions, or corrections to changes according to laws and policies will be announced through notices at least 7 days before the implementation of changes.
However, in cases of significant changes to user rights, such as changes in the items of personal information collected or purposes of use, notice will be given at least 30 days in advance.
13. Location Information Services (TastyCrew)
The Company collects and uses users' location information in accordance with the Act on the Protection and Use of Location Information to provide TastyCrew services.
13.1 Collection and Use of Location Information
- Collection method: Real-time location positioning through GPS, Wi-Fi, and cell tower information
- Purpose of use: Real-time location sharing among crew members (users are solely responsible for their own safety; the Company provides only the location sharing feature)
- Retention period: Automatically deleted within 24 hours after meetup ends
- Collection frequency: Real-time when location sharing is active (approximately every 10 seconds)
13.2 Provision and Sharing of Location Information
- Users' real-time location information is shared only with other users participating in the same TastyCrew
- Location sharing begins only after users' explicit consent and can be stopped at any time
- When location sharing is stopped, the location immediately stops being displayed to other users
- Location sharing automatically ends when the crew ends or when leaving the crew
13.3 Protection and Management of Location Information
- Location information is transmitted through TLS/SSL encryption protocol
- Stored location information is protected with AES-256 encryption
- Location information access rights are strictly limited to TastyCrew participants
- Abnormal location information access attempts are automatically blocked and administrators are notified
- Location information collection and use records are kept for 6 months (Location Information Act compliance)
13.4 Protection of Children Under 8 Years Old
- Legal guardian consent is obtained when collecting location information of children under 8 years old
- Legal guardians can withdraw consent for collection, use, and provision of children's location information at any time
- Collection records of children's location information are provided upon request by legal guardians
13.5 Consent to Location-Based Service Terms
- Users must agree to separate location-based service terms before using TastyCrew service
- Without consent, TastyCrew service cannot be used, but there are no restrictions on using other services
13.6 Location Information Manager
- Name: Location Information Manager
- Email: location@tastylog.net
- Business Hours: Weekdays 09:00 ~ 18:00 (excluding weekends and holidays)
13.7 Location Information Dispute Resolution
- For complaints or consultations related to location information, please contact the Location Information Manager
- You can file complaints and request consultations with your country's data protection or location information supervisory authority
- Related Authorities by Country:
- - South Korea: Korea Internet & Security Agency (privacy.kisa.or.kr), Korea Communications Commission (kcc.go.kr)
- - Japan: Personal Information Protection Commission (ppc.go.jp)
- - EU: Data protection authority in each member state
- - Others: Local consumer protection authority or telecommunications regulatory authority