KROUND Privacy Policy

• Account: email, authentication identifiers, registration and sign-in times
• Optional profile: display name, username, photo, bio, location, website, birthdate
• Bookings: name, phone number, email, party size, schedule, special requests and booking status
• Participation features: posts, polls, reports and photos/videos uploaded by users
• Automatically generated information: IP address, browser/device information, cookies, error and security logs

• Login, account and profile management
• Content delivery, storage, translation and personalized UI composition
• Booking intake/confirmation and partner operations processing
• AI experience result generation and processing of user requests
• Fraud prevention, security, incident response and service improvement

When you submit a booking request, KROUND provides the selected partner with your name, contact details, any optionally entered email and special requests, party size and schedule. The selected partner processes that information to confirm, fulfill or modify the booking and to respond to customer inquiries.

Bookings are processed only if you complete the separate consent on the booking screen. Do not enter sensitive information unnecessary for the booking—such as resident registration numbers or health information—into the special requests field. A booking code is used to verify non-member bookings, so do not share it with others.

If you participate without logging in, we collect your name, contact details, email, chosen recipe, and photos/videos and descriptions of your entry. Name, contact and email are used only to confirm participation and respond to inquiries and will not be made public. Entries and descriptions are published in the challenge gallery.

Name, contact, email and the submission's security identifier are deleted by daily cleanup 90 days after submission. Incomplete uploads are removed after 24 hours, and published entries are retained until a deletion request or the end of the promotion. You may request correction or deletion via the personal data inquiry channel with your submission number. You may refuse consent to collection and publication, but challenge submissions will be restricted.

Account information is retained until account deletion is completed. Booking, transaction and consumer inquiry records are retained to allow booking fulfillment, dispute handling and to meet applicable legal requirements, after which they are deleted or anonymized. Security logs are kept only to the minimum extent necessary for safe service operation.

For K-Map reports, the reporter’s name and email are deleted at the earlier of 30 days after completion or rejection of the report and 180 days after submission. Report titles, bodies, and processing records may be retained as operational and audit records after direct identifiers are removed. If a report body contains personal information, the entire report is deleted upon a rights request or an operational decision.

When a user deletes a profile photo, the linked storage object is deleted as well. Retention periods may be extended only to the extent required by legal obligations, disputes or security investigations.

Account deletion is not an immediately executed automatic function. After receiving a request, the operator verifies your identity, any pending bookings/reports and legally required retention scopes; material that must be retained is separated or stripped of identifiers, and the remaining account data is deleted.

After deleting an Auth account, any link between the deletion request record and the user's identifier is severed. Request status, processing timestamps and minimal operational audit logs may be retained separately to verify deletion completion and to respond to disputes; operational memos should not contain unnecessary personal data.

When moving to external services such as map directions, YouTube videos or partner bookings, the privacy policy of that service provider applies. Except where required by law or you have explicitly consented, we do not sell personal data to third parties.

We use cookies and browser storage to maintain login sessions, language/theme and display preferences. We do not currently operate third-party tracking cookies for behavior-based advertising. You can delete stored data in your browser settings, but login and some preferences may be reset.

Users may request access to, correction or deletion of their personal data, or request processing suspension and account deletion. ProfileFrom here you can edit your public profile, export your account, profile, and posts you've made in communities as JSON, and check the status of an account deletion request or withdraw it before deletion begins.

Guest bookings are not automatically linked to an account, so you must present the booking code together with partner information. Requests regarding bookings or operational records that are not included in the online export can be submitted to the business address below; they will be handled after identity verification.

• Access controls by permission and auditing of administrator actions
• Encryption in transit and separation of secret keys
• Monitoring logs, uploads, and anomalous requests
• Regular review of backup, recovery, and security policies

Personal data protection officer: Crounded Korea Inc. — Operations Manager · IS BIZ TOWER 2, 1501, 23 Seonyu-ro 49-gil, Yeongdeungpo-gu, Seoul. Account deletion requests can first be submitted from your profile. In processing rights requests we will request only the minimum additional information necessary to verify the request target and the requester’s identity.