Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: SG v1.1
This Policy is issued in accordance with the Personal Data Protection Act 2012 (Singapore) (the "PDPA").
PICTOREAL Inc. ("DUCPIC," "we," "us," or "our") operates the DUCPIC mobile application, website, and related services (the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features. PICTOREAL Inc. is a company organised under the laws of the Republic of Korea.
This Policy explains how we collect, use, disclose and protect the personal data of users in Singapore, consistent with the PDPA. Your use of the Service is also governed by our Terms of Service, which include provisions on limitation of liability and dispute resolution.
We have appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with the PDPA. You may contact our DPO at [email protected] (Attn: Data Protection Officer) for any questions, requests or complaints about your personal data.
We collect: account and registration data (email, nickname, hashed password, social-login identifier, age or date of birth for age verification); optional profile data (profile photo, favourite artists); user-generated content (posts, reviews, photos, comments, route plans); location data (your device's precise location, only when you use location features); technical and usage data (IP address, cookies, device information, usage history, access logs); event and promotion data (name, contact, delivery address, if you participate); and commerce data (payment, billing/delivery address, transaction history, if and when paid features launch).
We collect only personal data that a reasonable person would consider appropriate for the purposes below.
Purposes. We collect, use and disclose personal data to: create and manage your account and confirm age eligibility; provide and operate the Service, including content, community and location-based features; personalise content and recommendations; communicate service notices (see Section 7); administer events and promotions; detect and prevent fraud, misuse and security incidents; comply with legal obligations and enforce our terms; and (if applicable) process payments and bookings.
Notification and consent. We notify you of the purposes for collection, use and disclosure at or before the time of collection, and we obtain your consent, except where the PDPA permits collection, use or disclosure without consent. In particular, we may rely on the legitimate interests exception (for example, to prevent fraud and misuse and to ensure security), the business improvement exception (for example, to improve and develop the Service), and deemed consent where applicable, in each case as provided under the PDPA. Consenting to optional or secondary processing is not a condition of using the core Service.
Withdrawing consent. You may withdraw consent at any time on reasonable notice by contacting our DPO or by adjusting your device or in-app settings; withdrawal may limit certain features.