Gotgan Privacy Policy
Effective: 2026-00-00
This is a draft. It will be finalized against actual data practices before launch.
1. Overview
Ttoittoi ("we") protects the personal information of Gotgan users in accordance with Korea's Personal Information Protection Act. This policy explains what Gotgan processes, why, and when it is deleted.
2. What we process and why
| Category | Data | Purpose |
|---|---|---|
| Account | Sign in with Apple user identifier, email (if you choose to share it) | Sign-up, verification, account management |
| Household | Household name, member list, invite codes | Sharing a list with your family |
| Items | Item name, storage location, dates, opened date, quantity, notes | Syncing across devices and household members |
| Notifications | Push notification token | Sending expiry reminders |
| Support | Email address, message | Replying to you |
Once you share a household, its members can see each other's item lists and names.
3. Retention and deletion
- Account and item data: deleted without delay when you delete your account.
- Server backups: removed within [확인 필요] days of account deletion, following the backup cycle.
- Support emails: deleted 1 year after we reply.
You can delete your account at any time in Settings. Deleted data cannot be recovered.
5. Processors
| Processor | Service |
|---|---|
| Supabase, Inc. | Authentication and database hosting |
| Apple Inc. | Push notification delivery |
6. International transfers
| Recipient | Country | Data | When and how | Retention |
|---|---|---|---|---|
| Supabase, Inc. ([확인 필요] contact) | [확인 필요] | Account, household and item data | Sent over the network while you use the app | Until account deletion |
If you do not want your data transferred abroad, you can use the app on your device only without an account, or delete your account.
7. Barcode lookup
When you scan a barcode, only the barcode number is looked up in Open Food Facts, a public food database, through our server. Nothing that identifies you or your device is sent with it.
8. Device permissions
- Camera (optional): used to read barcodes and printed expiry dates.
- Notifications (optional): used for expiry reminders.
You can use the rest of the app without granting optional permissions.
9. Security
- All data exchanged with our server is encrypted in transit (HTTPS).
- Row-level access control in the database ensures only members of a household can see its data.
- Server administration access is limited to those who need it.
10. Cookies and tracking
Gotgan does not use cookies, advertising identifiers or analytics tools.
11. Your rights
You can ask us to access, correct, delete or stop processing your personal information at any time by emailing hello@ttoittoi.com. We will respond within 10 days.
12. Privacy officer
- Title: Representative
- Email: hello@ttoittoi.com
13. Getting help
If you need to report a privacy violation or seek advice, you can contact the following Korean agencies:
- Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Supreme Prosecutors' Office Cyber Investigation: 1301, www.spo.go.kr
- Korean National Police Agency Cyber Bureau: 182, ecrm.police.go.kr
14. Changes to this policy
This policy takes effect on 2026-00-00. We will post any changes on this page at least 7 days before they take effect.