① Information we process and why
You can use Color Block Map without signing up. Travel records are stored on your device. Because the app does not create an account or sync records to a server, the operator cannot view the travel records stored on your device. The information processed by the service and its purposes are listed below.
| Category | Information processed | Purpose |
|---|---|---|
| Travel records on your device | Region codes, save times, random record identifiers, colors applied to records, and the currently selected color | Coloring the map, listing visits, and showing collection progress |
| Settings and diagnostics on your device | Whether app lock is enabled, device language and display mode, and recent error logs including error times, types, and messages | Providing app lock, applying display settings, and reviewing errors on the device |
| In-app feedback | Required: title and message Optional: reply email address | Receiving, reviewing, and responding to inquiries, and improving the service |
| Email inquiries | Sender email address and display name, sending and receiving times, subject, message, and attachments you provide | Handling inquiries and requests to exercise privacy rights |
| Submission and connection information | Connection information such as IP address, request time, path, and status; hashes used for rate limiting; App Check tokens; and app identifiers | Providing the website and submission server, maintaining security, and preventing excessive requests |
When you submit feedback in the app, the title, message, and reply email address are sent to Slack through the submission server. The email address is optional, so you can send feedback without providing one. However, it may not be possible to reply individually without an email address. You can continue to use the map and travel record features without submitting feedback. The submission server checks the App Check token and app identifier. It uses this information only while verifying the request and does not retain it in a separate store or log it.
Draft feedback and feedback that could not be sent disappear when you close the feedback screen. Inquiry titles, messages, and reply email addresses are not recorded as separate fields in usage analytics or error reports. Before sending an inquiry, please check that it does not include information unnecessary for a reply, such as a resident registration number, password, or health information.
Information necessary to provide the service and handle inquiries you request is processed under Article 15(1)(4) of the Personal Information Protection Act of the Republic of Korea. Requests to exercise privacy rights are processed under Article 15(1)(2) and other applicable laws. Where separate consent is required, the applicable consent procedure must be followed. Publishing this policy alone does not constitute obtaining consent.
② App usage analytics and error reports
We use Google Analytics for Firebase and Firebase Crashlytics to understand which screens are used and where errors occur. Identifiers assigned to each app installation are also processed. Although these identifiers do not contain your name, they can distinguish users and are treated as personal information.
| Service | Information and purpose | Retention period |
|---|---|---|
| Google Analytics for Firebase | Screen paths; usage events such as first opens, sessions, and engagement time; app instance identifiers; app and operating system versions; device model and language; and country and city estimated from IP addresses Used to analyze screen usage and improve features. | User data: 14 months; event data: 2 months |
| Firebase Crashlytics | Crash and exception messages and stack traces; occurrence times; app, operating system, and device diagnostics; installation identifiers; current screen paths; and diagnostic screen logs Used to diagnose errors and improve app stability. | Deletion begins after 90 days of retention |
Analytics and error reporting are enabled by default when you install the app. The app currently has no settings to disable these collections individually. Precise GPS location, lists of visit records, inquiry messages, and email addresses are not sent as separate analytics fields. However, error messages and the paths where errors occur may include diagnostic information from that time.
In Analytics, the retention period for user-level information resets to 14 months from the time of new activity. This does not extend the retention period of all previous events. The retention period does not apply to standard reports that aggregate information across users. Crashlytics reports from an unexpected app shutdown may be stored temporarily on the device and sent the next time the app opens.
Firebase privacy information · Google Analytics data retention
③ Retention and deletion
| Information | Retention period | Deletion method |
|---|---|---|
| Travel records and selected colors | Until you delete or change them, or delete app data | Delete individual or all visit records in the collection. Settings and other data are managed separately. |
| Error logs on your device | The most recent 200 entries, with no time-based expiry | Entries beyond the 200-entry limit are deleted oldest first. Deleting app data also removes them. |
| App lock settings | Until you turn off app lock | Turning off app lock deletes its settings from secure storage. |
| Feedback, inquiry emails, and attachments | Until the inquiry or privacy rights request has been handled | Deleted without delay after handling is complete, including the operator's stored copies, duplicates, and trash folders. |
| Server rate-limit information | Used for rate limiting for 10 minutes after submission | Expired information is removed from memory when the next request is handled or the server instance ends. Inquiry messages in Slack are retained separately. |
| Analytics and remote error reports | The service-specific periods in section ② | Removed according to each service's data deletion procedures. |
If information must be retained longer under applicable law, we will explain the legal basis, information concerned, and retention period. Such information will be stored separately and deleted when the required period ends. Color Block Map currently has no payment or purchase features and does not retain payment or purchase histories.
Electronic files are deleted so that they cannot be recovered and used. Any printed materials are shredded. Deletion of logs and backups maintained by hosting, email, and map providers for security or operations is reflected according to each provider's policies and settings.
Selecting 'Clear all records' deletes visit records. It does not also reset the selected color, error logs, or app lock settings. On iOS, app lock settings may remain in secure storage after the app is deleted. To remove those settings as well, turn off app lock before deleting the app. Device and cloud backups must be deleted separately through the relevant backup service.
④ Third-party disclosure and service providers
Color Block Map does not collect travel records stored on your device to sell or provide them to other businesses. Information received through inquiries is not disclosed for other purposes without your consent or a legal basis. Some tasks needed to operate the service are entrusted to the external providers listed below.
| Provider and service | Processing tasks | Information concerned |
|---|---|---|
| Google LLC · Analytics / Firebase | Usage analytics and error collection and diagnosis. Firebase, Inc. participates in operating Crashlytics. | Analytics and error report information described in section ② |
| Vercel Inc. · Hosting | Operating the website and feedback submission API, handling requests, and maintaining security | Connection information, and titles, messages, and optional email addresses handled during submission |
| Slack · Inquiry management | Delivering and storing submitted feedback for review by the operator | Titles, messages, and optional reply email addresses |
| Google LLC · Gmail | Sending, receiving, and storing email inquiries and replies | Email addresses and display names, sending and receiving times, messages, and attachments |
The operator manages access to personal information so that it is limited to what is needed for the relevant work. Safeguards under external providers' terms and data processing agreements are also managed. Information processed directly by map providers for their own services is explained in section ⑥, Location information and external maps.
⑤ Processing outside Korea
We use overseas providers for usage analytics, error reports, website operations, and inquiry handling. Personal information may be processed or stored outside Korea in doing so. The feedback submission server is configured to process requests in Seoul, but global support by the hosting provider and inquiry handling through Slack may take place outside Korea. Details are listed below.
| Recipient and countries | Information and purpose | Timing, method, and retention |
|---|---|---|
| Google LLC and Firebase, Inc. United States and countries where published subprocessors are located | Usage analytics and error report information described in section ② Usage analysis and error diagnosis | Sent over encrypted connections during app use, when an error occurs, or on the next launch Analytics: user data for 14 months and event data for 2 months; Crashlytics: deletion begins after 90 days |
| Vercel Inc. United States and countries hosting its infrastructure and support operations | Connection information and submitted feedback Providing and securing the website and submission server | Processed over encrypted connections when you visit the website or submit feedback Used during submission processing. Rate-limit information is used and deleted as described in section ③. Infrastructure logs follow the provider's policies. |
| The Slack service provider and its subprocessors United States and other countries hosting service infrastructure | Titles, messages, and optional reply email addresses Delivering, reviewing, and storing inquiries | Sent from the submission server over encrypted connections when feedback is submitted The operator's copies are deleted after the inquiry has been handled. |
| Google LLC · Gmail United States and other countries hosting Google infrastructure | Email addresses, display names, sending and receiving times, subjects, messages, and attachments Sending and receiving inquiries and replies | Transferred over the internet when inquiries and replies are sent or received The operator's copies are deleted after the inquiry has been handled. |
Overseas processing and storage necessary to provide the service are carried out on the grounds and under the contracts provided for by the Personal Information Protection Act. Where separate consent is required, the applicable consent procedure must be followed. The providers' information linked below describes their data centers, support providers, and subprocessors.
- If you do not want inquiry information processed outside Korea, you may choose not to submit in-app feedback or email inquiries. This prevents us from receiving and answering those inquiries, but you can still color the map and keep records on your device.
- The app currently has no settings to disable analytics and error reporting individually. To stop further transmissions, you must stop using the app. You may ask the operator to provide access to, delete, or stop processing information already sent.
- Please send inquiries and privacy-related requests to jthcast@gmail.com. Installation identifiers are not linked to real names or accounts, so we may check the minimum information needed to locate the information covered by your request.
Google Analytics subprocessors · Firebase subprocessors · Vercel Data Processing Addendum · Slack privacy information
⑥ Location information and external maps
Visit records are based on information you save yourself. Color Block Map does not request GPS location permission or collect your current location or movement history to verify visits. Coordinates of regions shown on the map do not represent your current location.
The detailed map uses Apple Maps on iOS and Google Maps on Android. Requests needed to display, pan, or zoom the map, along with device, usage, performance, and error information, may be sent directly to the relevant map provider. This information may be processed outside Korea. The app supplies shapes and markers to the map feature, but does not send the list of visit records on your device to the operator's server.
If you do not want to use external maps, you can use coloring mode or statistics mode. Please refer to the information below for each map provider's processing, retention, and deletion practices.
⑦ Automatic collection, cookies, and external links
Collection of advertising identifiers (IDFA and Android advertising ID), IDFV, and SSAID, and advertising personalization are disabled. Visited regions, save times, colors, signed-in user IDs, and query parameters in screen addresses are not sent as separate analytics fields.
These legal document pages do not use advertising or visitor analytics tools. Browser storage is used to remember the display theme, and cookies may be used to remember your language preference. Connection information needed to deliver and secure the website may also be processed. You can delete or block site data and cookies in your browser settings, but your display and language preferences may then no longer be remembered.
Links to external sites do not include travel records or inquiry messages. After you leave this website, the external site's policy and your browser settings govern its handling of cookies and connection information.
⑧ Your rights and how to exercise them
You may request access to your personal information, correction or deletion of inaccurate information, or suspension of processing at any time. You may also withdraw consent for information processed on the basis of consent. Requests may be made through a legal representative or an authorized agent. Use the following methods according to where the information is stored.
- You can view and delete travel records stored on your device directly in the collection. To correct an incorrectly saved record, delete it and save it again.
- For submitted inquiries or information sent to external providers, contact jthcast@gmail.com. Include enough detail to identify the information and the action you are requesting.
- The operator will verify your identity or your representative's authority to the extent necessary and notify you of the result within the period required by law. If a request is restricted by law, we will explain the reason.
- Analytics and error reports are not linked to real names or accounts. We may request the minimum information or device actions needed to locate the information, but will not ask for unnecessary identity documents.
Deleting inquiry information may make it difficult to answer that inquiry. Deleting the app or stopping its use does not immediately delete information already sent. Please contact the operator if you need information already sent to be deleted.
⑨ Children's personal information
Color Block Map does not require sign-up or ask for an age or date of birth. Analytics and error reports are not separated by age. The legal representative of a child under 14 may ask the operator for access to, deletion of, or suspension of processing of the child's personal information.
Processing that requires the consent of a legal representative must follow the procedures required by applicable law. If we identify children's information collected without a lawful basis, we will delete it without delay.
⑩ Measures to protect personal information
- Travel records and device error logs are managed in app-specific storage. Access to services used by the operator is limited to the permissions necessary for the work.
- Feedback, usage analytics, and error reports are transmitted over encrypted connections. Copies unnecessary for handling an inquiry are not made.
- App lock settings use the operating system's secure storage. The app does not store face or fingerprint data or the device passcode; it receives only whether authentication succeeded.
- Information that no longer needs to be retained is deleted, and access permissions and service settings are managed.
The app does not apply an additional layer of encryption to ordinary visit records. Please use a device lock and manage your security updates and backup settings.
⑪ Privacy officer and remedies
Operator and privacy officer: 정태훈 (Jeong Tae-hun)
Inquiries and privacy rights requests: jthcast@gmail.com
Please use the email address above for questions, concerns, or requests for remedies relating to the processing of personal information. You may also contact the organizations below if you need advice or dispute mediation separately from your inquiry to the operator.
Personal Information Infringement Report Center · 118 within Korea, without an area code
Personal Information Dispute Mediation Committee · 1833-6972
⑫ Effective date and changes
This Privacy Policy takes effect on September 14, 2026. If the information processed, purposes, retention periods, or service providers change, we will announce the changes and their effective date before they take effect. Changes requiring separate consent will follow the procedures required by applicable law.
You can view the current and previous policies by selecting an effective date at the top of this page. The only policy currently published is the edition effective September 14, 2026.