한국어 · English
Privacy Policy — “Daehan Dokrip”
Effective date: 8 October 2026
Ten Softworks (“the Company”) operates the history-museum learning app
Daehan Dokrip (“the Service”) in compliance with the Personal Information Protection Act
of the Republic of Korea and other applicable laws. This policy explains what information the
Service handles and how.
This is an English translation provided for convenience. If the two versions
differ, the Korean version prevails.
1. Information we collect and how
| Category | Items | When collected |
|---|
| Generated automatically |
A random device identifier (created by the app on first launch; it is not an advertising ID
or a hardware serial, and it disappears when the app is uninstalled),
quest progress (museum and spot information, quiz answers and whether they were correct,
time spent at a spot), and
location coordinates and their measurement details (accuracy, time of measurement,
and whether the location is a mock location) (used to confirm on-site presence and to prevent location
spoofing and other fraudulent use — automatically deleted after 30 days),
the app version and platform (iOS, Android or web), and
Bluetooth beacon contact records (identifiers and signal strength of beacons
installed on the premises, with timestamps — used to assist on-site verification indoors,
automatically deleted after 30 days) |
While using the app |
| On sign-up (optional) |
The name (nickname) and profile image provided by the social login account, and the
e-mail address (for Google and Apple sign-in. Kakao and Naver sign-in do not provide an
e-mail address and none is collected) |
If the user chooses to sign up |
| When using one-to-one inquiries |
The reply e-mail address, the inquiry category, subject and content,
photos attached to the inquiry (photos the user chooses or takes, up to
3 per message; only a copy resized on the device is transmitted, not the original),
and whether and when consent to the collection and use of personal data was given |
If the user sends an inquiry |
| When issuing a security-tour certificate (optional) |
Military service details — unit, rank, name and service number.
Collected only with the user’s consent, and only when a service member
completes the security-tour course and requests the leave certificate.
It is used solely so that the unit can verify the authenticity of the
certificate and so that one person cannot obtain multiple certificates through several
accounts. Because this information is highly sensitive it is strongly encrypted
when stored on our servers, so that its contents cannot be read even if
the data were leaked (the decryption key is stored separately and securely, and
decryption occurs only inside our server processes). The public verification page shows
only the last four digits of the service number; the full details are
visible only to staff authorised to view the Ministry of National Defense report. |
If the user enters military service details for the certificate and consents to their
collection and use |
| When using the souvenir shop |
Delivery address: recipient name, contact number, delivery address
(postcode, address, address detail), address label, delivery note
Order history: items ordered, quantity and amount, the payment method
selected, order and delivery status, and the reason given when a cancellation or return
is requested
Cart and wishlist: the items saved
Product reviews: star rating and text (shown publicly on the product
screen; only the first character of the author's name is displayed)
Points: records of points granted, used and expired |
If the user saves a delivery address or places an order, adds an item to the cart or
wishlist, or writes a review |
As of the effective date the souvenir shop is in trial operation for operations-check accounts
(test members designated by the operator) only and is not open to general users. No real payment
takes place during the trial and no payment information (such as card numbers) is collected.
Before the shop is opened to general users, this policy will be amended to describe how payment
information is handled.
2. Use of device permissions
- Camera: used for photo missions, to take a picture matching a reference
image, and to take a photo to attach to a one-to-one inquiry. An image captured in a photo
mission is evaluated only on the device and is never transmitted
to or stored on our servers. A photo taken for an inquiry is transmitted with the
inquiry only as a copy resized on the device.
- Photo library: when you choose a photo to attach to a one-to-one inquiry,
the operating system's photo picker is opened. The app receives only the photos
you select and does not read other photos in the library. A selected photo is
transmitted with the inquiry only as a copy resized on the device.
- Location: used to confirm that the visitor is inside the museum so that
quiz answers and completion are recognised only on site. Because rewards such as military
leave certificates depend on it, location coordinates are collected and recorded on
our servers for the purpose of preventing fraudulent use such as location spoofing or
remote play. Along with the coordinates we receive the accuracy of the location, the
time it was measured and whether it is a mock (simulated) location. Coordinates measured
with a mock location are not recognised as on-site. Before a certificate is issued, location
records and stay times are checked automatically; if a record is inconsistent with an on-site
visit, issuance is paused and an administrator reviews the record before deciding.
These anti-fraud records are kept for 30 days only and then
deleted automatically, and are never used for advertising or shared with third
parties.
- Bluetooth (nearby): where satellite positioning is unavailable, such as
indoors or underground, signals from beacons installed on the premises are
used to confirm on-site presence and to show a notice when you enter a space. The app reads
only the beacon identifiers (UUID, Major, Minor) and signal strength; it does not read the
names or addresses of nearby devices. Beacon contact records are kept for the same purpose
and the same period (30 days) as location data.
Declining a permission does not restrict any part of the Service other than the corresponding
feature (photo missions, taking a photo for an inquiry, time-on-site recording).
3. Purposes of use
- Saving and resuming quiz progress, and issuing completion certificates
- Verifying certificate authenticity and preventing fraudulent issuance
(service-number matching, duplicate-issuance checks)
- Managing member accounts and synchronising progress across devices
- Receiving and delivering souvenir orders, showing order history, handling cancellations and
returns, and managing the granting and use of points
- Responding to enquiries and improving the Service
We do not use the collected information for advertising, and we do not sell it to third parties.
4. Retention and destruction
- Destroyed without delay when a member withdraws or requests deletion.
- Military service details (unit, rank, name, service number) are destroyed
immediately upon withdrawal, and are also destroyed for accounts with no access
for one year or more.
- Location coordinates (anti-fraud records) and Bluetooth beacon contact records are retained for 30 days and then deleted
automatically.
- One-to-one inquiry records (e-mail address, inquiry content and attached
photos) are retained for 3 years from the date the reply is completed and then destroyed.
- Guardian (legal representative) e-mail address of users under 14 is used only to send the
guardian a request for consent to location use; it is stored encrypted and kept as part of the consent record
together with the guardian's reply. It is destroyed when consent is withdrawn or the account is deleted.
The user's birth year is stored only on the device; the server records only whether the user is 14 or older.
- Appeal records: if a user files an appeal against a certificate decision and separately consents,
an encrypted copy of that day's location records is kept until the case is closed (at most 1 year) and may be
submitted to the Ministry of National Defense and the host institution as the basis of the decision.
Nothing is kept without that consent.
- For use without sign-in (recorded against the device ID), on-device data is removed when the
app is uninstalled; deletion of server-side records may be requested at the contact below.
- Delivery addresses, cart, wishlist, product reviews and point records of
the souvenir shop are destroyed immediately upon withdrawal (account deletion). A saved
delivery address can be deleted at any time on the address screen in the app.
- Order records (including the recipient name, contact number and delivery
address written on the order) are stored separately and then destroyed after the periods
required by the Act on Consumer Protection in Electronic Commerce: records of contracts
and withdrawal of subscription for 5 years, records of payment and supply of goods for
5 years, and records of consumer complaints and dispute handling for 3 years. These records
are kept for those periods even after withdrawal.
5. Measures to secure personal information
- Encryption: sensitive information such as military service details (unit,
rank, name, service number) is encrypted with a strong algorithm before being
stored on our servers. The encryption key is kept separately from the data, so the
contents cannot be read even if the data were leaked. Decryption takes place only within
defined server-side processing.
- Access control: access to personal information is limited to the minimum
necessary, and data in transit is encrypted (HTTPS). The publicly accessible verification
page displays only the minimum needed for matching, such as the last four digits of the
service number.
6. Outsourcing and overseas transfer
| Processor | Entrusted work |
|---|
| Supabase Inc. | Storage of member and visit records (cloud infrastructure; servers
may be located outside Korea) |
| Vercel Inc. | Web service hosting |
7. Rights of users
Users may at any time request access to, correction of, deletion of, or suspension of
processing of their information. Requests sent to the contact below are handled without delay.
For children under the age of 14, a legal representative may exercise these rights.
8. How to delete your account
Deletion of your “Daehan Dokrip” account and its associated data (quest progress, certificate
issuance history, sign-up information, and the souvenir shop's delivery addresses, cart,
wishlist, product reviews and point records) can be requested as follows.
- Directly in the app: My Page → Settings → Account → Delete account.
The account, quest progress, certificate issuance history, delivery addresses, cart and
wishlist are deleted immediately.
- By e-mail: write to
airlab@tensoftworks.com with the social account
(Kakao, Naver, Google or Apple) used to sign up and its e-mail address, or the visitor
number shown on My Page in the app. After verifying your
identity we will delete the account and all related data within 7 days.
- Order records subject to a statutory retention obligation are stored separately for
the period stated in section 4 and then destroyed.
8-1. Deleting some of your data without deleting your account
“Daehan Dokrip” (operated by Ten Softworks) provides the following ways to delete some of
your data while keeping your account.
- Request by e-mail: write to
airlab@tensoftworks.com specifying the data you
want deleted — e.g. military service details (unit, rank, name, service number), quest
progress, or certificate issuance history. After verifying your identity via the e-mail
address of the social account used to sign up or the visitor number shown in the app, we
delete it within 7 days. Your account remains intact.
- Directly in the app: a saved delivery address can be deleted under
My Page → Address, and items in the cart or wishlist can be removed on
their own screens.
- Automatic deletion: location coordinates (anti-abuse records) are deleted
automatically after 30 days (except an appeal copy the user separately consented to, section 4);
military service details are destroyed automatically after 1 year of inactivity.
Withdrawing location consent deletes the server's location records immediately (app Settings → Location consent).
- What is retained: order records subject to a statutory retention
obligation (section 4) are stored separately for the stated period and then destroyed.
9. Privacy officer and contact
10. Changes to this policy
If this policy changes, we will give notice within the Service or on this page at least 7 days
before the change takes effect.