Privacy Policy

Korea Toilet: Restroom Finder · Effective 2026-10-04

1. Who we are

Korea Toilet: Restroom Finder (“the app”) is published by Dcode (“we”), Republic of Korea. Ratings, reviews, door codes, and photos are handled by our server at korearestroom.1pass.dev, which runs on Oracle Cloud in Chuncheon, Republic of Korea. Contact: support@1pass.dev.

2. Data we collect

The app has no sign-up or login, and Dcode does not use a separate analytics or crash-reporting service. It never asks for your name or phone number, and it asks for an email address only in the business owner removal request form (section 11). Our server stores:

• the random device ID that the app creates (section 5);
• what you choose to post — ratings, tags, comments, door codes, and photos — and, with a review, a country code when one is available (section 6);
• your votes on door codes (section 6) and your reports of content (section 7);
• daily counters of how many times your device has posted, voted, reported, or sent a removal request, used for daily limits;
• if you send a business owner removal request from the app, the email address and message you enter (section 11); and
• if your device ID is banned for breaking our rules, a record of the ban (section 7).

All of this is linked to your device ID. Our server does not store your IP address in its database; our server logs keep it for up to 30 days (section 10). Your GPS location, if you allow it, stays on your device (section 4). Google AdMob's SDK processes your device's advertising identifier, IP address, ad interaction data, and diagnostic and performance data, and may use approximate location estimated from your IP address, to serve and measure ads (section 8).

3. Data stored on your device only

Item	Purpose	Where
Saved restrooms	Your saved list	On your device only
Recently viewed restrooms	Quick access to restrooms you opened	On your device only
The restroom you last got directions to, and which restrooms the app has already asked you to rate	To ask you for a quick rating after a visit, without asking again	On your device only
Which content you reported	To keep it hidden from you (the report itself is sent to us — section 7)	On your device only
Users you blocked (their author codes)	To hide their reviews from you (section 7)	On your device only
Whether you agreed to the Terms of Use	So that the app asks only once	On your device only
Preferences (such as language, appearance, and maps app)	Remember your settings	On your device only

The app does not send these to us or to anyone else, although, like other app data, they may be included in your phone's own backups. Deleting the app deletes them; Delete my data does not. The device ID is also kept on your device, but it is sent to our server (section 5).

4. Network access

The restroom list and a detailed map of Seoul are built into the app and work offline. When you are online, the app connects to our server (korearestroom.1pass.dev) to:

• load ratings for the restrooms on screen — the request contains their restroom IDs. When the screen shows restrooms near you, these IDs reveal roughly which area you are in, but not your coordinates;
• load the reviews, door codes, and photos of a restroom you open;
• send what you post, edit, vote on, report, or delete; and
• download map tiles for areas outside the built-in map of Seoul, and for some zoomed-out views. These requests show which area of the map you are viewing — often the area around you — but not your coordinates.

Requests for ratings, reviews, and posts include the device ID (section 5) and, if your phone has a region setting, its country code (section 6). Map tile requests include neither. Like any internet request, each one reaches our server with your IP address; section 10 explains how long our logs keep it. Your coordinates are never sent to our server. The only other network requests go to Google, for ads and ad-consent information (section 8).

If you tap Directions or Share, the app hands the restroom's name, address, and coordinates to the maps or sharing app you choose. It does not include your own location.

5. Device ID and author code

When you first open the app, it creates a random ID and keeps it on your device. The ID belongs to this installation of the app, not to your phone itself: after Delete my data, or when the app is installed fresh, it is replaced by a new random ID. The app sends this ID with its requests to our server so that you can edit or delete your own reviews and delete your data, and so that we can prevent abuse — for example, with daily limits on posting and by banning device IDs used to break our rules. You can see the ID in Settings → Device ID; include it when you contact us about your data.

Each review you post carries an anonymous author code, so that other users can block reviews posted with the same device ID (section 7). Our server makes the code from your device ID with a secret key, and the code cannot be turned back into your device ID. Because all reviews posted with one device ID carry the same code, others can tell that those reviews came from the same installation of the app, but not who you are.

The device ID is not linked to your name or phone number. It is stored with an email address only if you send a business owner removal request (section 11).

Deleting the app deletes the device ID from your device, unless the app's data is later restored from a backup of your phone. It does not delete anything on our server — use Delete my data for that (section 10). After Delete my data, the app creates a new device ID, so your later reviews get a new author code.

6. Reviews, door codes, and photos you post

• Ratings, tags, comments, door codes, and photos you post are public and anonymous: they are shown to other users of the app without a name or account.
• When a valid two-letter country code is available, we store it with your review and show it next to the review. It comes from your phone's region setting or, if our network provider supplies one, a country estimated from your IP address. The app sends the country code of your region setting with its requests, but our server stores it only with reviews.
• Comments are translated into English, Korean, Japanese, and Chinese (Simplified and Traditional), and checked for spam, hate speech, and personal information, by an AI service: Google Gemini, accessed through the BizRouter gateway. Only the comment text and its language are sent to it. A comment that fails the check is hidden from other users.
• Before a photo is stored, it is resized to at most 1,600 pixels on its longest side, and its metadata (EXIF), including any GPS location, is removed.
• Votes on whether a door code works are stored with your device ID. Other users see only the totals.
• Please do not post photos that show people or personal details. Before your first post with a comment, a photo, or a door code, the app asks you to agree to our Terms of Use.

7. Reports, blocking, and bans

• When you report a review, photo, or door code, we store what you reported and the reason with your device ID. A reported photo or door code is hidden right away, and a review is hidden after two reports.
• We review every report within 24 hours of receiving it and, within the same 24 hours, remove content that breaks our Terms of Use and ban the device ID that posted it. A ban blocks posting, voting, reporting, and removal requests made with that device ID, and hides every review, photo, and door code posted with it. It does not identify you or your physical phone. We keep a record of the ban — the device ID, the reason, and which post led to it — until we lift the ban, even if Delete my data is used with that device ID.
• When a report or a business owner removal request arrives, we receive an alert that names the content or restroom and the reason. The alert does not include any device ID, author code, email address, message, comment, photo, or door code.
• You can block another user from any of their reviews. The list of users you block is stored on your device only, as their author codes, and is not sent to us. Blocking hides their reviews on your device only; they are not notified, and ratings do not change. Reviews they post later with a new device ID carry a new author code and are not blocked.
• Whether you agreed to the Terms of Use is also stored on your device only.

8. Advertising

The app shows banner ads supplied by Google AdMob. To deliver and measure ads, Google may process technical data such as your device's advertising identifier, IP address, and general ad interaction data. Google's ad SDK may also collect diagnostic data, such as crash and performance information, and may use approximate location derived from your IP address for advertising and measurement. We do not receive this data.

• On iPhone and iPad, the app shows Apple's App Tracking Transparency prompt once. If you tap Allow, Google may use your device's advertising identifier to show personalised ads. If tracking is denied or restricted, the app requests non-personalised ads only. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
• On Android, the app requests non-personalised ads only. Google may still read the device's advertising ID to deliver and measure those ads. You can reset or delete it in Android Settings → Privacy → Ads (on some phones Settings → Google → Ads).
• The app asks Google to update ad-consent information. It shows a consent form when Google's consent SDK requires further consent, and requests ads only when the SDK allows it. Where ad consent is required, such as in the European Economic Area and the United Kingdom, ads are personalised only if you consent as well as allowing tracking. If the app's Settings shows Ad privacy options, you can change your choice there.
• Non-personalised ads are still delivered using limited data for purposes such as frequency capping and aggregated reporting.
• The app asks Google only for ads rated PG or below (AdMob's maximum ad content rating).
• The app does not pass your GPS coordinates to Google AdMob. Google may still estimate your approximate location from your IP address, as described above.
• Google retains and deletes ad data under its own policies — see Google's Privacy Policy and How Google retains data it collects. Google protects this data under those policies.
• Google's own handling of this data is described in How Google uses information from sites or apps that use our services.

9. Permissions

The app may ask you for the following, and works without them:

• Location (while using the app) — only to sort restrooms by distance and to show your position on the map. Your location is processed on your device; the app does not send it to us and does not pass it to Google AdMob or anyone else. If you decline, you can still browse the map and search restroom names and addresses.
• Tracking (iPhone and iPad, tracking authorization) — Apple's App Tracking Transparency prompt, described in section 8. Android has no such prompt; the app declares the advertising ID permission used by Google AdMob (section 8).
• Photos or camera — only if you choose to add a photo to a review. Only the photo you pick is uploaded.

It does not send notifications and does not access your contacts.

10. Retention and deletion

Nothing in our server's database is deleted automatically. Reviews, photos, door codes, votes, reports, owner removal requests, and daily counters stay until you delete them or we delete them. Content hidden after reports, by the AI check, or by a ban is not shown to other users, but stays on our server until it is deleted.

• One review: delete it in Saved → My reviews. Its photos are deleted with it.
• Everything from your device: Settings → Delete my data deletes from our server your reviews and photos, door codes you added, your votes, reports and owner requests, and daily counters that are linked to your current device ID. It cannot be undone. It does not delete ban records (section 7) or server logs (below). The app then creates a new device ID. Saved restrooms, settings, and other data stored only on your device stay; delete the app to remove them.
• Ban records are kept until we lift the ban (section 7).
• Server logs: our server does not store your IP address in its database. Its logs record the IP address and the requested URL of each request the app makes to our server (for example, which restrooms were loaded), but not your comments, door codes, email address, messages, or device ID. The logs are deleted automatically within 30 days. Map tile requests are not logged.
• Caches: our server lets photos be cached for 24 hours. Deleted or hidden photos are no longer served by our server, but copies already cached or saved on other devices may remain for longer.
• Deleting the app deletes the data stored on your device, including the device ID, but nothing on our server. Use Delete my data first. If you have already deleted the app, we cannot confirm which posts were yours; email us the restroom's name, roughly when you posted, and what you posted, and we will review your request.

Step-by-step instructions, and what is kept and for how long: Delete your data.

11. Business owners

If a door code or the location of your business should not be shown in the app, ask us to remove it — by email at support@1pass.dev or with a removal request in the app. The in-app form asks for your email address and a message; it is the only place where the app asks for an email address. We store the request with the device ID that sent it, use your email address and message only to handle and reply to your request, and keep the request until you use Delete my data or we delete it.

12. Children

The app is not directed at children under 14 in Korea, or under 13 elsewhere (or the applicable age in your country). Dcode does not knowingly collect data from children; ad data is processed by Google as described in section 8.

13. Your rights

You can edit or delete your own reviews in the app (Saved → My reviews) and delete your data from our server with Settings → Delete my data (section 10). To access or delete anything else we hold, contact us and include your device ID (Settings → Device ID). You can turn off tracking in iOS Settings, change your ad consent in Settings → Ad privacy options where it is offered, reset or delete the advertising ID in Android Settings, and turn off location access in your phone's settings. If you email us, we keep your message only to reply. For data processed by Google, see Google's Privacy Policy. For any request, contact us and we will respond within 30 days.

14. Changes

We will post any changes on this page with a new effective date. Material changes will also be noted in the app's release notes.

Change history: 2026-10-04 — added Delete my data, the device ID in Settings, author codes and blocking, reports and bans, map tile downloads, retention and server log periods, the email address in owner requests, and what Google's ad SDK collects (previous version effective 2026-10-02).

15. Contact

Dcode · support@1pass.dev · dcode-labs.com/korea-toilet

한국어 요약

Korea Toilet: Restroom Finder · 운영 Dcode · 2026년 10월 4일 시행

• 계정과 로그인이 없습니다. 이름과 전화번호는 묻지 않습니다. 이메일은 업주 삭제 요청 양식에서만 받습니다. Dcode 자체 분석 도구와 크래시 수집 도구는 쓰지 않습니다.
• GPS 위치는 기기 안에서 거리순 정렬과 지도 표시에만 씁니다. 좌표는 서버로 보내지 않고 AdMob에도 넘기지 않습니다.
• 평점을 보여 주려고 화면에 보이는 화장실의 ID를 서버로 보냅니다. 주변 화장실을 보고 있다면 이 ID로 대략 어느 지역에 있는지 드러납니다. 서버 주소는 korearestroom.1pass.dev입니다. 서버는 Oracle Cloud 춘천 리전에 있습니다.
• 서울 밖이나 축소한 지도는 서버에서 지도 타일을 받아 그립니다. 서버는 이 요청에서 지금 보고 있는 지역과 IP 주소를 알 수 있습니다. 내 주변을 보고 있다면 대략 어느 지역에 있는지도 드러납니다. GPS 좌표와 기기 ID는 이 요청에 담지 않습니다.
• 기기 ID는 앱을 처음 실행할 때 만드는 무작위 값입니다. 휴대폰 자체를 가리키지 않습니다. 내 데이터 삭제를 하거나 앱을 새로 설치하면 새 값으로 바뀝니다. 내 리뷰 수정과 삭제, 데이터 삭제, 남용 방지에 씁니다. 설정 → 기기 ID에서 볼 수 있습니다. 이름이나 전화번호와는 연결하지 않습니다. 업주 삭제 요청을 보낼 때만 이메일과 함께 저장합니다.
• 리뷰마다 익명 작성자 코드가 붙습니다. 서버 비밀키로 기기 ID에서 만든 값이라 기기 ID로 되돌릴 수 없습니다. 다른 사용자는 이 코드로 같은 기기 ID의 리뷰를 차단할 수 있습니다. 같은 기기 ID로 쓴 리뷰인지는 알 수 있어도 누가 썼는지는 알 수 없습니다.
• 별점, 태그, 후기, 문 비밀번호, 사진은 이름 없이 공개됩니다. 유효한 두 글자 국가 코드가 있으면 리뷰와 함께 저장하고 후기 옆에 표시합니다. 국가 코드는 휴대폰 지역 설정에서 가져오고 네트워크 제공자가 IP 기반 국가 정보를 주면 그 값을 씁니다.
• 후기 본문은 AI 서비스로 보내 번역하고 검사합니다. AI 서비스는 BizRouter 게이트웨이를 거친 Google Gemini입니다. 보내는 것은 본문과 원문 언어뿐입니다. 검사 항목은 스팸, 혐오 표현, 개인정보입니다. 검사에 걸린 후기는 다른 사용자에게 보이지 않습니다.
• 사진은 저장하기 전에 긴 변을 1,600px 이하로 줄이고 위치 정보를 포함한 EXIF 메타데이터를 지웁니다. 사람이나 개인정보가 나온 사진은 올리지 마세요.
• 신고는 기기 ID와 함께 저장합니다. 사진과 문 비밀번호는 신고 1건, 후기는 신고 2건이면 바로 숨깁니다. 신고를 받으면 24시간 안에 검토하고 규칙 위반이면 같은 24시간 안에 콘텐츠를 내리고 게시한 기기 ID를 퇴출합니다. 퇴출하면 그 기기 ID로는 게시, 투표, 신고, 업주 요청을 할 수 없습니다. 그 기기 ID로 올린 게시물도 모두 숨깁니다. 퇴출은 휴대폰이나 사람을 식별하지 않습니다. 퇴출 기록에는 기기 ID, 사유, 원인 게시물이 담깁니다. 이 기록은 퇴출을 풀 때까지 남기며 내 데이터 삭제로도 지워지지 않습니다.
• 신고나 업주 요청이 오면 운영자에게 알림이 갑니다. 알림에는 대상과 사유만 넣습니다. 기기 ID, 이메일, 본문은 넣지 않습니다.
• 차단 목록과 약관 동의 여부는 휴대폰에만 저장하고 서버로 보내지 않습니다. 차단은 상대의 지금 작성자 코드에만 걸립니다. 상대가 새 기기 ID로 올린 리뷰는 차단되지 않습니다.
• 서버 데이터베이스에는 자동 삭제 작업이 없습니다. 리뷰, 사진, 문 비밀번호, 투표, 신고, 업주 요청, 일일 카운터는 사용자나 운영자가 지울 때까지 남습니다.
• 리뷰 하나는 저장 → 내 리뷰 화면에서 지웁니다. 설정 → 내 데이터 삭제를 누르면 지금 기기 ID에 연결된 위 데이터를 서버에서 지우고 새 기기 ID를 받습니다. 퇴출 기록과 서버 로그는 지워지지 않습니다. 저장한 화장실과 설정은 휴대폰에 그대로 남습니다. 영어 화면에서는 Saved → My reviews, Settings → Delete my data입니다.
• 앱을 지우면 휴대폰 안의 데이터와 기기 ID만 지워집니다. 서버 데이터는 남습니다. 앱을 지우기 전에 내 데이터 삭제를 먼저 실행하세요. 이미 앱을 지웠다면 화장실 이름, 올린 시기, 올린 내용을 이메일로 보내 주시면 검토합니다.
• 서버는 IP 주소를 데이터베이스에 저장하지 않습니다. 서버 로그에는 요청마다 IP 주소와 요청한 URL이 남습니다. 후기 본문, 문 비밀번호, 이메일, 기기 ID는 로그에 남기지 않습니다. 로그는 30일 안에 자동으로 지워집니다. 지도 타일 요청은 로그에 남기지 않습니다.
• 사진의 캐시 유효기간은 24시간입니다. 지우거나 숨긴 사진은 서버에서 더 이상 내보내지 않습니다. 다른 기기에 이미 캐시된 사본은 더 오래 남을 수 있습니다.
• 광고는 Google AdMob 배너입니다. Google 광고 SDK는 광고 ID, IP 주소, 광고 상호작용, 진단과 성능 데이터를 처리합니다. IP 주소로 추정한 대략적인 위치도 광고와 측정에 쓸 수 있습니다. 앱은 GPS 좌표를 AdMob에 넘기지 않습니다. 광고는 PG 등급 이하만 요청합니다.
• 앱은 Google에 광고 동의 정보 갱신을 요청합니다. 동의 SDK가 추가 동의를 요구하면 동의 창을 띄웁니다. 광고는 SDK가 허용할 때만 요청합니다. 설정에 광고 개인정보 옵션이 보이면 거기서 선택을 바꿀 수 있습니다.
• iPhone과 iPad에서는 추적을 허용해야 맞춤 광고가 나옵니다. EEA와 영국처럼 광고 동의를 받아야 하는 곳에서는 동의까지 해야 맞춤 광고가 나옵니다. Android에서는 맞춤형이 아닌 광고만 요청합니다. Android 광고 ID는 휴대폰 설정의 광고 메뉴에서 재설정하거나 삭제할 수 있습니다.
• 업주는 문 비밀번호나 장소 정보를 지워 달라고 이메일이나 앱으로 요청할 수 있습니다. 앱에서 요청할 때 입력한 이메일과 내용은 요청 처리와 답변에만 씁니다.
• 한국의 만 14세 미만, 그 밖의 나라의 13세 미만 아동을 대상으로 하지 않습니다.
• 문의는 support@1pass.dev로 받습니다. 요청에는 30일 안에 답합니다.