DUCPIC Privacy Policy (Australia)

Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: AU v1.1

This Privacy Policy is provided in accordance with Australian Privacy Principle (APP) 1 under the Privacy Act 1988 (Cth).

1. Introduction

PICTOREAL Inc. ("DUCPIC," "we," "us," or "our") operates the DUCPIC mobile application, website, and related services (the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features. PICTOREAL Inc. is a company organised under the laws of the Republic of Korea.

This Policy explains how we handle the personal information of users in Australia, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Your use of the Service is also governed by our Terms of Service, which include provisions on limitation of liability and dispute resolution. By using the Service, you acknowledge that we will handle your personal information as described in this Policy, including storing and processing it overseas as set out in Section 6.

2. What personal information we collect

We collect the following kinds of personal information:

• Account and registration information — email address, nickname, password (stored only as a one-way hash), social-login identifier, and age or date of birth (for age verification);
• Profile information (optional) — profile photo, favourite artists / fandom interests;
• User-generated content (UGC) — posts, reviews, photos, comments, route plans, and information contained within them;
• Location information — your device's precise location (e.g. GPS), collected only when you use location features;
• Technical and usage information — IP address, cookies and similar technologies, device information (operating system, device identifier, app version), service usage history, and access logs;
• Event and promotion information (if you participate) — name, contact details, and delivery address where a prize is sent;
• Commerce information (if and when paid features launch) — payment information, billing/delivery address, and booking or transaction history.

We do not seek to collect sensitive information as defined in the Privacy Act (such as health information; racial or ethnic origin; political, religious or philosophical beliefs; sexual orientation; criminal record; or biometric information). If you choose to include such information in UGC, you do so voluntarily and consent to us handling it for the purpose of operating the Service. We collect only personal information that is reasonably necessary for our functions and activities (APP 3).

3. How we collect personal information