Privacy Policy

Effective: 2026-11-08 · Version 1.0 · Personal information handler: 데브스튜디오 (devs7udio)

1. Summary

데브스튜디오 (devs7udio) (the “Operator”) provides the iPhone app Locatube (the “Service”) and complies with Korea’s Personal Information Protection Act and related laws. This policy explains what information we use, why, and how we protect it.

2. What we collect and why

The Service has no advertising SDK, does not track you, and does not use the advertising identifier (IDFA). We use no analytics tools beyond what the table shows. All third-party services are listed in section 5.

3. Sign-in providers

You can sign in with Apple, Google or Facebook, and in Korea also with Kakao. When we add another provider, we will update this table first and announce it. The consent items a provider shows may be broader than this table depending on the provider and app settings, but the Service uses information beyond your user ID only for sign-in and account identification.

4. Location

• We ask only for While Using the App permission. We do not use location in the background.
• Only when you tap “near me” do we send your current location (approximate or precise) to our server (Supabase) to find nearby videos.
• It is used only for this search; Locatube does not save it. We do not identify you by location or build a movement history.
• Our infrastructure providers may keep ordinary technical logs (such as IP address and request time) for security and operation for a limited time under their own policies.
• You can turn the permission off in iPhone Settings at any time. The map and search keep working.

5. Third-party services

YouTube (Google)

Videos play in the official YouTube embedded player, and the Service uses YouTube API Services. By using Locatube you are also agreeing to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). When you play a video, YouTube (Google) may process information under its own policies. Google Privacy Policy: https://policies.google.com/privacy. You can revoke access to data that was accessed through YouTube API Services on your Google Account’s security settings page (https://security.google.com/settings/security/permissions). Our servers fetch public video information such as titles, thumbnails and public descriptions; the Service does not access your Google account data.

Supabase

Provides our database and sign-in infrastructure (Tokyo, Japan region). Your account identifier, favorites and watch history are stored there, and “near me” requests are delivered there.

Mapbox

Displays the map. To load the map your device talks to Mapbox servers, and Mapbox may collect usage telemetry. We disable Mapbox’s optional telemetry by default. Mapbox Privacy Policy: https://www.mapbox.com/legal/privacy

OpenCage and OpenStreetMap contributors

Our servers derive place names and coordinates from public video descriptions and look up coordinates with the OpenCage geocoder. No user data is sent to OpenCage. The geocoding data comes from OpenStreetMap and is licensed under the ODbL: © OpenStreetMap contributors.

Apple

Apple processes Sign in with Apple under its own policy. When you delete your account in the app, the Service also revokes your Apple sign-in token.

Google, Facebook (Meta), Kakao and Naver sign-in

These sign-ins run in a web browser sheet (an authentication session) through Supabase (Naver through the Service's own server function), and each provider's own policy applies. No provider SDKs are included in the app. When you delete your account we also ask the provider to remove the Locatube connection. For Kakao and Facebook the Service asks directly. For Google and Naver, the sign-in token (refresh token) issued at sign-in is kept only on this device, in the iOS Keychain, solely to disconnect the app when you delete your account; it is sent to our server only with the deletion request, used to revoke the connection and not stored there, and it is deleted from the device when you sign out or delete your account. If the provider does not confirm the disconnect, the app tells you, and you can remove Locatube in that service's settings (Naver: My info > Connected services).

If you disconnect Locatube in your Kakao account settings or leave Kakao, Kakao notifies the Service. If Kakao was the only way you sign in, we delete that account, its favorites and watch history. If another sign-in method (such as Apple or Google) is linked to the account, the account stays and you can delete it in the app. The browser sheet may remain signed in to the provider.

6. Overseas transfer of personal information

The Service uses servers of the overseas providers below. If you do not want these transfers, do not sign in or use “near me”, and you can tell us you refuse the transfer at the contacts in section 9 (some features then will not work).

No user information is sent to OpenCage (geocoding), so it is not a transfer recipient.

7. Retention and deletion

Deleting your account

In the app, tap Account, then Delete account. Your account, favorites and watch history are deleted, and a Sign in with Apple link is revoked. For Google, Facebook, Kakao or Naver we also ask that service to remove the connection; anything not confirmed can be removed in that service's settings. This cannot be undone. If a law requires us to keep some information, we will keep it separately only for that period (currently there is none).

Data from YouTube API Services

Video information we store on our servers (titles, thumbnails, descriptions, statistics and so on) is refreshed or deleted within 30 days, as the YouTube API Services policy requires. Information older than 25 days is re-fetched, and after 30 days it is deleted and the video is hidden from the Service. Place and timestamp annotations that the Operator created are not subject to this deletion.

Deleting it yourself

On-device preferences are removed when you delete the app.

8. Children

The Service is not directed to children under 14. We do not collect personal information from children under 14 without a legal guardian’s consent, and if we learn that we have, we will delete it without delay. For videos YouTube marks as “made for kids”, we record no watch history and use no personalized features.

9. Your rights and how to use them

Under the Personal Information Protection Act you may at any time ask for access, correction or deletion, suspension of processing, withdrawal of consent, and you may refuse the overseas transfer in section 6. You can delete your account, favorites and watch history directly in the app; send other requests below. We will tell you the result without delay and within 10 days at the latest.

• Email: devs7udio@gmail.com
• Phone: 010-8300-8210 (Korea)

To verify your identity we may ask for information related to the account you signed in with (Apple, Google, Facebook, Kakao or Naver). You can also seek help from these Korean bodies:

• Personal Information Infringement Report Center, 118 (privacy.kisa.or.kr)
• Personal Information Dispute Mediation Committee, 1833-6972 (kopico.go.kr)
• Supreme Prosecutors’ Office, 1301 (spo.go.kr); National Police Agency Cyber Crime Reporting System, 182 (ecrm.police.go.kr)

10. Data protection officer

• Name: 김용만 (Yongman Kim), representative and data protection officer
• Email: devs7udio@gmail.com
• Phone: 010-8300-8210 (Korea)

11. Security measures

• All communication is encrypted (HTTPS).
• Sign-in tokens are stored in the iPhone Keychain.
• Database access is split to the minimum needed, and service keys are never put in the app; they are used only on the server.
• Access to personal information is limited to one person, the Operator.

12. Changes to this policy

We will announce changes on this page and in the app at least 7 days before they take effect (30 days for important changes such as new categories of data). Earlier versions are kept in the history below.

13. Effective date and version history

This policy takes effect on 2026-11-08.