Privacy Policy

1. Personal data we process

We process only what the service needs to work.

a. Account and authentication

• The account identifier and email address that Apple or Google gives us when you sign in
• The handle you choose, and a profile photo if you add one
• An installation identifier generated by the app, session and authentication token records, and sign-in times

b. Content you create

• Trip name, dates, and countries visited
• Record title, note, time and time zone, place name, latitude and longitude
• Record photos and videos (including audio in a video), and trip cover photos
• Ratings and comments of records, and trip reviews
• Invitation links you issue or accept, and trip membership

c. Location data

• The capture location and time stored in a photo or video. Original photo metadata (EXIF) is stripped before the photo leaves your device. Because videos are stored as original files without conversion, embedded metadata such as location and device information may remain. A place name, coordinates, and capture time are also stored as record information when you confirm them.
• Your device's current location, read only while you take a photo or video in the app, choose a place, or create a new trip after you have already allowed location access. We do not store it on its own. When you create a trip we only look up which country you are in to preselect it, and coordinates are kept only when you save a place on a record.
• You can use the service without granting location access.

d. Notifications

• Push notification tokens (Apple APNs, Google FCM), device identifier, and the language to display notifications in

e. Trip creation purchases

• Product ID, store transaction identifier, Google Play purchase token, store environment (production or test), and the times a purchase was granted and used
• Apple and Google process the payment itself, so we never receive card or bank account details.

f. Data generated automatically

• Usage records: which feature was requested, the outcome and error code, processing time, app version, and operating system
• Diagnostic records: the type and location (stack trace) of an error, and app, OS, and runtime information
• The IP address handled by network and cloud infrastructure while you connect to the service

Usage and diagnostic records never contain the content you write, your email address, authentication tokens, or device identifiers.

2. Why we process it

• Creating and maintaining your account, signing you in, and identifying you
• Storing and syncing travel records and sharing them with the members of a trip
• Storing and serving photos and videos
• Suggesting and searching places for a record, and showing them on a map
• Suggesting a country to visit for a new trip
• Sending notifications about invitations and new records
• Confirming trip creation purchases, consuming and returning them, and handling payment disputes
• Keeping the service reliable, diagnosing errors, and preventing abuse
• Answering enquiries and sending service notices

3. Legal bases

• Performance of a contract: account creation and authentication, storing, syncing, and sharing travel records, photo and video storage, purchase handling
• Your consent: access to device location, the photo and video library, camera and microphone, and push notifications. You can withdraw consent at any time in your device settings; only the related feature stops working.
• Our legitimate interests: service reliability, error diagnosis, and preventing abuse or duplicate charges
• Compliance with legal obligations: retention of transaction records required by Korean consumer protection law

4. What other members can see

llog is built around a shared trip journal, so the members of a trip can see the following.

• Your handle and profile photo
• The records, photos and videos, places, ratings, comments, and reviews you added to that trip

Your email address and device information are never shown to other users. A trip can only be joined through an invitation link, and the service has no public feed or public sharing.

If you leave a trip or delete your account while other members remain, the records, photos, and videos you already added stay in that trip so the shared journal is not lost for them; your authorship is replaced with a non-identifying value. You can delete individual records, photos, and videos at any time in the app, and a trip where you are the last member is deleted together with your account.

5. How long we keep it

We delete personal data without delay once its retention period ends or its purpose is fulfilled. Electronic files are deleted in a way that prevents recovery.

6. Sharing with third parties

We do not sell or share your personal data with third parties, except where a law requires it or an investigative authority requests it through the procedure a law prescribes.

7. Processors and international transfers

We use the following processors to run the service. Their servers are outside Korea, so personal data is transferred internationally over the network as you use the service and is kept for the retention periods above.

Place search runs on our server rather than in the app, so only the search term and coordinates are sent — never your account details. To preselect a country for a new trip, the app passes only your coordinates to the operating system's geocoder (Apple on iOS, Google on Android), again without your llog account details. Diagnostic records are stored on a server we operate ourselves in the Republic of Korea and are not transferred abroad, and we use no third-party error tracking, behavioural analytics, or advertising services.

You may refuse the international transfer of your personal data. Because the entire infrastructure behind the service is located outside Korea, refusing means the service cannot be provided. Contact us at the address below, or delete your account for the same effect.

8. Your rights and how to use them

You can request access to, correction of, deletion of, or suspension of the processing of your personal data at any time. The following are available directly in the app.

• Change your profile photo and handle: Settings
• Edit or delete records, photos, videos, comments, and reviews: the record screen
• Leave a trip: the trip screen
• Delete your account: Settings, Delete account
• Withdraw notification, location, photo and video library, camera, and microphone permissions: your device's system settings

For anything else, write to nootherchoice.noc@gmail.com. We act on a request within 10 days of receiving it and tell you the outcome. You may also act through a legal representative or an agent you authorise.

Unused trip creation purchases and unlimited access are forfeited when you delete your account and cannot be restored.

9. Minimum age

The service is for people aged 14 and over. We do not process the personal data of children under 14, and they may not create an account.

In the EEA and the UK, anyone below the age of consent for data processing set by their country (between 13 and 16) may likewise not create an account.

If we learn that we have collected personal data from someone below the minimum age, we delete the account and the data without delay. Please tell us at the contact address below if you find such an account.

10. How we protect your data

• All traffic between the app and our servers is encrypted with HTTPS.
• Authentication tokens are kept in the device's secure storage (iOS Keychain, Android Keystore).
• Sign-in provider tokens and replay protection data stored on the server are encrypted, and invitation link tokens are stored only as hashes.
• Photos and videos are held in access-restricted storage and served only through short-lived signed URLs.
• Operational records exclude the content you write, your email, authentication tokens, and device identifiers.
• Access to personal data is limited to the smallest possible number of people and is managed.

11. Cookies, advertising, and analytics

The service contains no advertising and does not collect advertising identifiers (IDFA or Android Advertising ID). We embed no behavioural analytics or advertising SDKs. The web pages that serve invitation links and this policy do not use cookies.

12. Contact and data protection officer

13. Additional notice for users in the EEA and the UK

If the EU General Data Protection Regulation or the UK GDPR applies to you, the following also applies. The controller of your personal data is No Other Choice (노아더초이스), 604-F102, 1068 Hyohaeng-ro, Byeongjeom-gu, Hwaseong-si, Gyeonggi-do 18405, Republic of Korea, nootherchoice.noc@gmail.com.

Our legal bases are those listed in section 3, corresponding to GDPR Article 6(1)(b) contract, (a) consent, (f) legitimate interests, and (c) legal obligation.

You have the following rights and can exercise them at the contact address above.

• Access to your personal data and a copy of it
• Rectification and erasure
• Restriction of processing
• Data portability in a structured, machine-readable format
• Objection to processing based on our legitimate interests
• Withdrawal of consent at any time, without affecting processing carried out beforehand
• Lodging a complaint with the supervisory authority where you live or work

Your personal data is transferred to the Republic of Korea and to the countries listed in section 7. Korea is covered by a European Commission adequacy decision; other transfers rely on lawful transfer mechanisms such as the EU Standard Contractual Clauses.

We do not use your personal data for automated decision-making or profiling that produces legal effects for you.

14. Changes to this policy

When this policy changes we publish the change and its effective date on this page. Changes that disadvantage users are announced 30 days in advance, and other changes 7 days in advance, in the app or on this page.

• September 5, 2026: first version