한국어 · English

Vernissage Privacy Policy

Effective Date: November 1, 2026

This English version is provided for convenience only. In the event of any conflict or inconsistency between the English and Korean versions, the Korean version shall prevail.

This Privacy Policy explains how Atelier Labs ("we," "us," or "our") collects, uses, shares and protects your personal information when you use the Vernissage app and website (the "Service"), and how you can exercise your rights. We have established this policy in accordance with the Personal Information Protection Act of the Republic of Korea so that we can protect your personal information and respond promptly to any concerns you may have.

1. Information We Collect

Information from social sign-in

Sign-in provider	Information we receive
Kakao	Nickname and profile photo
Naver	Name, nickname, profile photo and email address
Google	Name, profile photo and email address
Apple	Email address (or an Apple relay address if you choose "Hide My Email") and name (if you provide it the first time you sign in)

Information collected when you use the Service

Your social account's unique identifier, used to identify your account
Optional profile information you enter yourself: gender, date of birth and region
Content you create: visit logs (visit date, notes and mood tags), photos you upload, your saved list, and inquiries you send to us together with our replies
Information collected automatically: access dates and times, usage records, app version, operating system version, device model, a device identifier (used to tell apart the devices on which the app is installed), IP address, app display language and device time zone (to improve the Service, troubleshoot errors and time notifications), and search history, including search terms, search times and number of results (to improve the Service)
Notification information: if you allow push notifications, your push notification token and device type (iOS or Android), your settings for each type of notification, whether and when you consented to or withdrew consent for marketing notifications, and the notifications you have received (your inbox)
Location information: if you grant location permission, your device's current GPS coordinates (latitude and longitude), collected when you use the "Find nearby museums" feature

2. How We Use Your Information

Purpose	Information used
Identifying you and signing you in	Social account identifier, nickname, email address
Providing the Service (your archive and saved list)	Visit logs, photos, mood tags, saved list
Displaying your profile	Nickname, profile photo
Responding to your inquiries	Inquiry content, nickname, email address
Sending push notifications (reminders about saved exhibitions and events, replies to your inquiries, service announcements, etc.)	Push notification token, device type, notification settings, saved list, visit logs
Sending marketing notifications (new docent stories and recommendations) — only if you have separately opted in	Push notification token, marketing consent status and the dates of consent or withdrawal
Showing the Service in your language and sending notifications at appropriate local times	App display language, device time zone
Improving the Service and troubleshooting errors	App usage logs, device information, search history
Finding nearby museums (location-based service)	Location information (GPS coordinates)

3. Retention and Deletion

We delete personal information without delay once the retention period has expired or the purpose for which it was collected has been fulfilled. Electronic files are permanently deleted using methods that prevent recovery, and paper records are shredded or incinerated.
Where applicable law requires us to retain certain information, we retain it for the period required by that law.
Access and usage records and your notification history are automatically deleted after 180 days, and search history after 90 days.
If you delete your account, information that can identify you, such as your email address, name, profile photo and date of birth, is immediately deleted or de-identified, and you will no longer be able to sign in to that account. Your inquiries, push notification tokens, notification settings and notification history are deleted immediately.
Activity data you created, such as visit logs, may be retained in de-identified form, with information that identifies you removed, solely for service statistics.

4. Disclosure to Third Parties

We do not disclose your personal information to third parties beyond the purposes described in Section 2, except:

with your prior consent; or
when required by law, such as at the request of an investigative authority in accordance with legal procedures.

5. Service Providers

We engage the following service providers to process personal information on our behalf. They process it only to the extent necessary to provide sign-in authentication, data storage, notification delivery and related services.

Service provider	Services performed	Retention period
Kakao Corp.	Kakao sign-in authentication	Until the service agreement ends
NAVER Corp.	Naver sign-in authentication	Until the service agreement ends
Google LLC	Google sign-in authentication; push notification delivery to Android devices (Firebase Cloud Messaging)	Until the service agreement ends
Apple Inc.	Sign in with Apple authentication; push notification delivery to iOS devices (Apple Push Notification service)	Until the service agreement ends
650 Industries, Inc. (Expo)	Relaying app push notifications	Until the service agreement ends
Railway Inc.	Server hosting and data storage (database and Redis)	Until the service agreement ends
Cloudflare	Data storage (R2)	Until the service agreement ends
Sentry (Functional Software, Inc.)	Collecting and analyzing app error and crash reports to improve stability	Until the service agreement ends

6. Your Rights and Choices

You may exercise the following rights at any time:

Access: request information about how we process your personal information
Correction and deletion: edit your profile in the app or contact us by email
Restriction of processing: ask us to stop processing your personal information
Opting out of notifications: turn off each type of notification or withdraw your marketing consent in [My > Notifications] in the app, or turn off notification permission in your device settings
Account deletion: use [Delete account] in the app or contact us by email

To exercise any of these rights, contact us at atelierlabs.kr@gmail.com. We will respond without undue delay.

7. Security

Encrypted storage of sensitive information such as authentication tokens
Access limited to authorized personnel on a need-to-know basis
Encryption of data in transit using HTTPS
Logging of access to personal information and regular reviews

8. International Transfers

To provide the Service, we transfer personal information to the overseas companies listed below. Information is transferred over the network when you use the Service, and the recipients retain it until you delete your account or the service agreement ends. If you do not want your information transferred overseas, you may refuse by deleting your account or by not using the relevant feature (such as a particular sign-in method or push notifications); however, you will then be unable to use the Service or that feature.

Google LLC
Country: United States / Information: email address, name and profile information (if you sign in with Google); push notification token and notification content for Android devices / Purpose: Google sign-in authentication and push notification delivery

Apple Inc.
Country: United States / Information: Sign in with Apple authentication data (if you sign in with Apple); push notification token and notification content for iOS devices / Purpose: Sign in with Apple authentication and push notification delivery

650 Industries, Inc. (Expo)
Country: United States / Information: push notification token, device type, notification title and content / Purpose: relaying app push notifications

Railway Inc.
Country: United States / Information: Service usage data, including account information, visit logs, saved list, uploaded photos, inquiries and notification information / Purpose: server hosting and data storage

Cloudflare Inc.
Country: United States / Information: photos you upload with your visit logs / Purpose: file storage and delivery (R2 Object Storage)

Sentry (Functional Software, Inc.)
Country: United States / Information: device information (operating system, device model and app version) and technical logs at the time of an error (such as error messages and stack traces) / Purpose: collecting app error and crash reports and improving stability

9. Location Information

We provide a location-based service through the "Find nearby museums" feature, and collect and use your location information for this purpose.

How we collect it: if you grant location permission, we collect your current coordinates (latitude and longitude) through your device's GPS.
How we use it: to find museums near you and show your location on the map.
Location information is collected when you use the feature and stored as part of your usage records. We do not share it with third parties.
You can withdraw location permission at any time in your device settings. If you do, the "Find nearby museums" feature may not be available.

10. Push Notifications and Marketing Communications

If you allow notifications on your device, we send notifications related to your use of the Service, such as reminders about saved exhibitions and events, replies to your inquiries and service announcements. You can change which types you receive at any time in [My > Notifications] in the app.
We send marketing communications, such as new docent stories and recommendations, only to users who have separately opted in, as required by the Korean Act on Promotion of Information and Communications Network Utilization and Information Protection. Marketing notifications are labeled "(Ad)" at the start of the title and include instructions on how to unsubscribe.
We do not send marketing notifications between 9:00 p.m. and 9:00 a.m. in your device's time zone.
We will notify you of the result whenever you opt in or out, and remind you of your consent status every two years from the date you opted in.
You may withdraw your consent to marketing communications at any time in [My > Notifications].

11. Advertising and Advertising Identifiers

To help cover the cost of running the Service, we display ads provided by Google LLC through Google AdMob on certain screens of the mobile app.

Information collected: behavioral information such as advertising identifiers (the Android Advertising ID and, only if you allow tracking on iOS, the IDFA), ad impressions and clicks in the app, IP address, and device information
How it is collected: Google collects this information automatically through its advertising SDK when an ad is shown in the app. We do not collect or store this information ourselves.
Purposes: serving ads, personalizing ads based on your interests, measuring ad performance and preventing invalid clicks
Processor and international transfer: Google LLC (United States). Google processes this information in accordance with Google's advertising policies.
Retention: behavioral information is retained for the periods set out in Google's policies. Once you reset your advertising identifier, that information is no longer linked to your device.
Your choices: you can delete your advertising identifier or turn off personalized ads under [Settings > Privacy & Security > Tracking] on iOS, or [Settings > Privacy > Ads] on Android (menu names and locations may vary by device). Opting out does not restrict your use of the Service, but you may still see non-personalized ads.

12. Children's Privacy

We do not knowingly collect personal information from children under the age of 14. If we become aware that we have collected personal information from a child under 14, we will delete it without delay.

13. Privacy Officer and Contact Information

Email: atelierlabs.kr@gmail.com

Please send any questions, complaints or reports concerning your personal information to the email address above. You may also contact the following Korean authorities to report a privacy violation:

Personal Information Protection Portal
Personal Information Infringement Report Center: dial 182 (from within Korea)
Korean National Police Agency Cyber Crime Reporting System

14. Changes to This Privacy Policy

This Privacy Policy takes effect on November 1, 2026. We may update this policy to reflect changes in the law or in the Service. If we make material changes, we will notify you in advance through an announcement in the app.

Previous version: effective October 9, 2026

Contact: atelierlabs.kr@gmail.com