Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: US v1.1
This Privacy Policy explains how PICTOREAL Inc. ("DUCPIC," "we," "us," or "our") collects, uses, discloses, and protects personal information of users located in the United States when they use the DUCPIC mobile application, website, and related services (collectively, the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features.
PICTOREAL Inc. is a company organized under the laws of the Republic of Korea, headquartered in Jeju, Korea. By using the Service, you understand that your personal information will be processed in Korea, the United States, and other locations as described in Section 14 (International Data Transfers).
This Policy applies to U.S. users. Your use of the Service is also governed by our Terms of Service, which include important provisions on dispute resolution and limitation of liability (see Section 17A). Users in other countries are governed by the privacy notice applicable to their jurisdiction. This Policy does not apply to information practices of third parties we do not control.
We collect only the personal information reasonably necessary for the purposes described in this Policy. The "statutory category" column maps each item to the categories defined under the California Consumer Privacy Act (CCPA), as amended by the CPRA, and comparable state laws.
| Information we collect | Examples | Statutory category (CCPA) |
|---|---|---|
| Account & registration data | Email address, nickname, password (stored only as a one-way hash), social-login identifier, age or date of birth (for age verification) | Identifiers; Customer records |
| Profile data (optional) | Profile photo, favorite artists / fandom interests | Identifiers; Internet/online activity; Inferences |
| User-generated content (UGC) | Posts, reviews, photos, comments, route plans, and information contained within them | Internet/online activity; Visual information (photos) |
| Precise geolocation (only when you use location features) | Device GPS location for "spots near me," current-location display, and spot check-ins | Sensitive personal information (precise geolocation) |
| Automatically collected data | IP address, cookies and similar technologies, device information (OS, device identifier, app version), service usage history, access logs | Identifiers; Internet/online activity |
| Event & promotion data (if you participate) | Name, contact details, shipping address (where a prize is sent) | Identifiers; Customer records |
| Commerce data (if/when paid features launch) | Payment information, billing/shipping address, booking and transaction history | Customer records; Commercial information |
| Inferences | Preferences and characteristics derived from your activity to provide recommendations | Inferences |
Declining to provide optional information does not restrict basic use of the Service.
We do not intentionally collect Social Security numbers, government ID numbers, financial account log-in credentials, precise health data, biometric identifiers, or information about racial/ethnic origin, religion, sexual orientation, or union membership. If you voluntarily include such information in UGC, you do so at your own discretion.
We collect personal information: (a) directly from you (registration, profile, UGC, event entries); (b) automatically through your use of the Service (device, log, cookie, and — with your permission — location data); and (c) from third parties you choose to connect, such as social-login providers.
We use personal information for the following business and commercial purposes: