DUCPIC Privacy Policy (Canada)

Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: CA v1.1

1. Introduction and scope

PICTOREAL Inc. ("DUCPIC," "we," "us," or "our") operates the DUCPIC mobile application, website, and related services (the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features. PICTOREAL Inc. is a company organised under the laws of the Republic of Korea.

This Policy explains how we collect, use, disclose and protect the personal information of users in Canada, consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian laws. Your use of the Service is also governed by our Terms of Service, which include provisions on limitation of liability and dispute resolution.

This Policy and the Service are provided in English and are intended only for users in Canadian provinces and territories other than Quebec. We do not offer a French-language service or a Quebec-specific privacy notice, and we take steps to limit the offering of the Service to users outside Quebec.

2. Accountability and Privacy Officer

We are responsible for personal information under our control. We have designated a Privacy Officer who is accountable for our compliance with this Policy and applicable privacy law. You can contact our Privacy Officer using the details in Section 14.

3. Personal information we collect

We collect the following personal information:

• Account and registration information — email address, nickname, password (stored only as a one-way hash), social-login identifier, and age or date of birth (for age verification);
• Profile information (optional) — profile photo, favourite artists / fandom interests;
• User-generated content (UGC) — posts, reviews, photos, comments, route plans, and information contained within them;
• Location information — your device's precise location (e.g. GPS), collected only when you use location features;
• Technical and usage information — IP address, cookies and similar technologies, device information (operating system, device identifier, app version), service usage history, and access logs;
• Event and promotion information (if you participate) — name, contact details, and delivery address where a prize is sent;
• Commerce information (if and when paid features launch) — payment information, billing/delivery address, and booking or transaction history.