hikerfit

PRIVACY POLICY

Privacy Policy

hikerfit collects only the personal information essential to providing the service and destroys it without delay once its purpose has been fulfilled.

Effective September 30, 2026 · Previous version September 22, 2026This is a courtesy translation. If there is any discrepancy, the Korean version prevails.
01

Personal information we collect

  • Sign-up and login · Email, password (stored encrypted; nobody can read the original), Google account email and name when signing in with Google, Kakao account email and nickname (required) and profile photo (optional) when signing in with Kakao
  • Trek and meetup bookings · Applicant name, mobile number, email, companions' names and mobile numbers, number of participants, payment amount
  • Payment · Transaction records such as the payment approval number (payment method details such as card numbers are handled by Toss Payments and are not stored by hikerfit)
  • Points · Earning, spending and reclaim history
  • Trek reviews · Nickname, review text, the mountain and date visited, uploaded photos
  • Hosting meetups and events · Meetup details, uploaded photos, meeting point and map location
  • 1:1 chat support · Chat content and time of the conversation
  • Collected automatically · Access logs, browser information, and push subscription information when you subscribe to notifications
02

Purposes of use

  • Identifying members, login, and preventing misuse
  • Receiving trek and meetup bookings, confirming participants, processing payments and refunds
  • Sending service emails and notifications such as booking confirmations
  • Managing points, responding to 1:1 chat support, publishing reviews
03

Retention and destruction

  • Member information is kept until you withdraw and is destroyed without delay after withdrawal.
  • As required by law, contract, payment and refund records are kept for 5 years, consumer complaint and dispute records for 3 years, and access logs for 3 months, and then destroyed.
  • Electronic files are deleted in a way that prevents recovery.
04

Outsourced processing

To provide the service smoothly, we entrust the processing of personal information to the companies below. Transfers to overseas companies are described in detail in section 05.

  • Supabase · Member authentication, database and file storage · Overseas (cloud)
  • Vercel · Website hosting · Overseas (cloud)
  • Toss Payments · Card payment processing · South Korea
  • Resend · Sending booking emails · Overseas (cloud)
  • Google · Google account login · Overseas
  • Kakao · Kakao account login, meeting point search · South Korea
05

Overseas transfer of personal information

To provide the service, hikerfit transfers personal information overseas for storage and processing as follows.

  • Supabase, Inc. (supabase.com/privacy)
    Destination country
    Australia (Sydney, AWS data center)
    Items transferred
    Member information (email, login details), booking and payment records, points, reviews, meetups, chat content, uploaded photos
    Purpose
    Member authentication, database and file storage
  • Vercel Inc. (vercel.com/legal/privacy-policy)
    Destination country
    United States (server processing); the connection within Korea is routed through Seoul
    Items transferred
    Request data exchanged while using the service, access logs
    Purpose
    Website hosting and request handling
  • Resend(Plus Five Five, Inc.) (resend.com/legal/privacy-policy)
    Destination country
    United States
    Items transferred
    Email address, name, booking notification content
    Purpose
    Sending booking confirmation and other emails
  • Timing and method · Data is sent over an encrypted network (HTTPS) each time you use the service.
  • Retention period · Same as section 03 ‘Retention and destruction’; data is destroyed when the period ends or the outsourcing contract ends.
  • How to refuse and its effect · If you do not want your data transferred overseas, you can request account withdrawal and deletion through 1:1 chat support. However, we cannot provide the service without the companies above, so sign-up and booking features will not be available.
06

Provision to third parties

We do not provide personal information to third parties except with your consent or where required by law. If you book a meetup hosted by a member, your name and contact details are passed to that host.

If you sign in with Kakao or Google, that company provides the login information listed in section 01 to hikerfit with your consent. hikerfit does not provide this information back to that company for any purpose other than login.

07

Your rights

You may request to view, correct or delete your personal information, or to suspend its processing, at any time. Please make your request through 1:1 chat support (the Haiki chat at the bottom right of the site).

08

Security measures

  • Passwords stored encrypted; HTTPS encryption in transit
  • Minimal database access (accessible from the server only)
  • Admin features are available to admin accounts only
09

Privacy officer and inquiries

Please submit privacy-related inquiries, complaints and requests for redress through the site’s 1:1 chat support and we will respond without delay. You can also seek advice on privacy violations from the Personal Information Infringement Report Center (dial 118 within Korea, no area code).