Trovel Privacy Policy

Last updated: 2026-05-30 · Effective: 2026-05-30

Article 1 (Purpose of Processing)

We process the minimum information necessary for the following purposes:

• Preserving visit records, streak counts, and passport progress (locally on device)
• Delivering the daily "Landscape of the Day" local notification (only when enabled)
• Saving user preferences (notification time, sound on/off, dark mode, etc.)
• Improving service quality and aggregating anonymous statistics

Article 2 (Information Collected and Methods)

The Service does not require sign-up, so we do not collect personally identifiable information such as name, email, or phone number. The following data is processed automatically:

Type	Details	Storage
Visit records	IDs of landmarks marked as visited, stamp dates, streak counts, optional memos	Local device (SharedPreferences)
Preferences	Daily reminder enabled/time, sound effects on/off, theme mode, onboarding completion	Local device (SharedPreferences)
Recent searches	Up to 8 recent search terms entered in the Search screen	Local device (SharedPreferences)
Network request logs	Standard HTTPS requests (IP, User-Agent) when fetching Wikipedia images / summaries	Wikimedia (external) — not stored on our servers
Advertising identifiers & measurement data	Advertising ID (IDFA / AAID), coarse location (country-level), ad impression / click / viewability events, device type and OS version, and other standard advertising signals	Google AdMob (external) — not stored on our servers. Users may block or reset at any time via OS settings ("Disable personalized ads" on iOS / "Reset / Delete advertising ID" on Android)

Article 3 (Retention Period)

We do not retain personally identifiable information on our servers.

• Locally stored data: Removed permanently when the app is uninstalled.
• "Reset visit records" feature: From Settings, you may instantly delete all stamps, memos, and streak counts at any time.
• External service logs: Not owned by us — governed by each external service's policy.

Article 4 (Disclosure to Third Parties)

We do not share your information with third parties, except as required by law or by legitimate requests from investigative authorities.

Article 5 (Processor Delegation)

We delegate a limited portion of data processing to the following processors for advertising delivery.

Processor	Delegated work	Information delegated
Google LLC (Google AdMob)	In-app ad serving, impression measurement, ad fraud prevention	Advertising ID (IDFA / AAID), coarse location, device / OS metadata, ad event logs

If a user declines App Tracking Transparency on iOS, or disables the advertising ID on Android, only non-personalized (contextual) ads are served and no identifiable advertising signal is transmitted.

Article 6 (External Service Integration)

The Service calls or links to the following external services. We do not retain any information that these services may collect.

• Wikimedia (Wikipedia REST API): Used to fetch landmark photos and summary text. Standard HTTPS request information such as IP and device metadata may be transmitted to Wikimedia. Wikimedia Privacy Policy
• External links (tap to navigate): The Wikipedia / YouTube / Maps app (Google Maps, etc.) buttons on landmark detail screens open external browsers or apps. We do not track or store activity on those external sites.
• System share sheet: The "Invite others" feature invokes the OS share sheet. No user data other than the share text leaves the device.
• Google AdMob: Serves the bottom-of-screen banner and full-screen ads on app open. Standard advertising signals (advertising ID, coarse location, device metadata) may be transmitted to Google. Google Privacy Policy · AdMob data disclosures

Article 7 (Permissions)

Trovel uses only the minimum permissions necessary for service operation.

• Notifications (POST_NOTIFICATIONS): For daily "Landscape of the Day" local notifications. May be declined or revoked at any time in system settings. Notifications are produced entirely on-device. We do not send push notifications from our servers.
• Boot completed (RECEIVE_BOOT_COMPLETED, Android): To preserve scheduled daily reminders across device restarts.
• Internet (INTERNET): For fetching Wikipedia landmark photos and summaries.

Article 8 (User Rights)

You may exercise the following rights, which we process promptly:

• Revoke notification permission at any time in system settings.
• Use "Reset visit records" in Settings to instantly delete all local data.
• Uninstalling the app removes all locally stored data.
• Advertising identifier opt-out: On iOS, go to Settings → Privacy & Security → Tracking; on Android, go to Settings → Google → Ads to refuse / reset the advertising ID or opt out of personalized ads.
• For additional rights, contact us using the information below.

Article 9 (Security Measures)

• Technical measures: User data is stored exclusively in the app sandbox (SharedPreferences) on device, blocking external access.
• Minimization principle: We process only the minimum information necessary and do not collect identifiable personal information.
• Administrative measures: We have no internal system to access user data; all data stays on the user's device.
• External services: We use only verified official SDKs and APIs such as the Wikimedia REST API and Google AdMob, and we adhere to each provider's privacy policy.

Article 10 (Advertising and In-App Purchases)

The Service displays Google AdMob advertising to fund continued operation. We do not currently offer paid in-app purchases; if introduced, this Policy will be updated with prior in-app notice.

10.1 Ad formats shown

• Banner: Fixed at the bottom of the main screen.
• App Open: Shown once on cold start, and on resume only when the app has been in the background for 2 hours or more (not on brief task-switches).
• Interstitial: Shown when entering a region (country group) screen, with a minimum 5-minute interval and a maximum of 3 times per session. Not shown within 60 seconds of an App Open ad.
• Exit-dialog Native ad: Embedded inside the "Exit / Keep exploring" confirmation dialog shown when the user tries to leave the app. The user can dismiss the dialog by tapping "Keep exploring" without watching the ad.

10.2 How advertising data is processed

• Google AdMob processes the advertising ID (IDFA / AAID), coarse location (country-level), and ad impression / click events. No advertising data is stored on our servers.
• You may decline ad tracking at any time in your device settings:
  • iOS: Settings → Privacy & Security → Tracking → disable for "Trovel" (App Tracking Transparency).
  • Android: Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalization".
• Even when tracking is declined, ads continue to display, but only contextual non-personalized ads are served instead of interest-based ones.

10.3 Children & ad content

Because the Service is suitable for family use, we apply AdMob's "Non-personalized ads" option together with the age-appropriate content rating filter, so that inappropriate ads are not displayed.

Article 11 (Children Under 14)

The Service is available to children under 14, but since we do not collect identifiable personal information, no separate guardian consent process is implemented.

Article 12 (Privacy Officer)

Article 13 (Changes to This Policy)

We may revise this Policy in response to legal or service changes; revisions take effect upon posting on this page.

Article 14 (Privacy Infringement Reporting)

For reporting or consultation on privacy infringement, the following Korean agencies can be contacted:

• Personal Information Infringement Report Center (privacy.go.kr / Tel: 182)
• Personal Information Dispute Mediation Committee (www.kopico.go.kr / Tel: 1833-6972)
• Supreme Prosecutors' Office Cybercrime Investigation (www.spo.go.kr / Tel: 1301)
• National Police Agency Cyber Bureau (cyberbureau.police.go.kr / Tel: 182)