Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: PH v1.1
This Policy is issued in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (the "DPA").
PICTOREAL Inc. ("DUCPIC," "we," "us," or "our"), as personal information controller, operates the DUCPIC mobile application, website, and related services (the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features. PICTOREAL Inc. is a company organised under the laws of the Republic of Korea.
This Policy explains how we collect, use, disclose and protect the personal data of users in the Philippines, consistent with the DPA. Your use of the Service is also governed by our Terms of Service, which include provisions on limitation of liability and dispute resolution.
We have designated a Data Protection Officer (DPO) accountable for our compliance with the DPA. You may contact our DPO at [email protected] (with general enquiries to [email protected]).
We collect: account and registration data (email, nickname, hashed password, social-login identifier, age or date of birth for age verification); optional profile data (profile photo, favourite artists); user-generated content (posts, reviews, photos, comments, route plans); location data (your device's precise location, only when you use location features); technical and usage data (IP address, cookies, device information, usage history, access logs); event and promotion data (name, contact, delivery address, if you participate); and commerce data (payment, billing/delivery address, transaction history, if and when paid features launch).
Some information we collect — for example, age — may constitute sensitive personal information under the DPA. We minimise the sensitive personal information we collect and process it only on a lawful criterion under Section 13 of the DPA (such as your consent). We do not seek to collect other sensitive personal information (such as health, religious or political affiliation, marital status, or government-issued identifiers). If you include such information in UGC, you do so voluntarily.
We process personal data for the following purposes: to create and manage your account and confirm age eligibility; to provide and operate the Service, including content, community and location-based features; to personalise content and recommendations; to communicate service notices (see Section 7); to administer events and promotions; to detect and prevent fraud, misuse and security incidents; to comply with legal obligations and enforce our terms; and (if applicable) to process payments and bookings.
We process personal data based on the criteria for lawful processing under the DPA, including your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests that are not overridden by your fundamental rights. Sensitive personal information is processed only where a criterion under Section 13 applies (such as your consent). Consenting to optional or secondary processing is not a condition of using the core Service. You may withdraw consent at any time by contacting our DPO or adjusting your device or in-app settings.