ExpoTimesPrivacy Policy
Expotimes (the "Company") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws, and publishes this Privacy Policy to protect the personal information of users of the ExpoTimes mobile app and website (the "Service"). If this English version differs from the Korean version, the Korean version prevails.
Article 1 (Purposes of processing)
The Company processes personal information for the following purposes only. If a purpose changes, the Company will take the measures required by law, such as obtaining separate consent.
- Membership: identifying and authenticating members through their Google or Apple account, managing accounts, preventing misuse, and sending notices
- Providing the Service: exhibition and trade fair information and related articles, writing and posting logs (visit records) and comments, likes and follows, displaying profiles, exhibitor and organizer profiles, venue maps and location guidance, real-time venue lounge chat, Spotlight content, and expo-start and activity notifications
- User protection: receiving and handling reports, blocking users, hiding or removing prohibited posts, restricting use, and other community safety measures
- Improving the Service: usage statistics and app error analysis
- Inquiries: reviewing and responding to inquiries
Article 2 (Information we collect and how)
| Category | Items | How collected |
|---|---|---|
| Member account | (Required) Social sign-in identifier (the unique ID of your Google or Apple account), email address, name With Apple sign-in you choose whether to share your email and name; if you choose "Hide My Email", we receive a relay email address created by Apple. We do not collect passwords. | Provided by Google or Apple when you sign in with that account |
| Profile | (Required) Nickname (Optional) Bio, profile photo | Entered or uploaded by you when editing your profile (photo chosen from your device's photo library or camera) |
| Posts and activity | Logs (visit records: text, photos, tags, visibility setting), comments, likes, follow and follow-request lists | Written or selected by you (photos chosen from your device's photo library) |
| Venue lounge chat | Chat messages, photos posted in chat | Written or uploaded by you in a venue lounge chat room |
| Reports and blocks | Reported item (log, comment, lounge message, profile, Spotlight) and reason for the report; list of users you have blocked | Created when you use the report or block feature in the app |
| Device location | (Optional) Location of your device (the "my location" marker on the map; and, when you enter a venue lounge chat room, the last known precise location (latitude/longitude) of your device) | Collected only when you have granted the app location permission. The map "my location" is used on your device only. When you enter a venue lounge chat room, the last known location is sent once to the Company's server to confirm you are on site. It is not shared with other users. |
| Device and notification data | Push notification token (FCM), a device identifier generated by the app, platform (iOS/Android), app language, time zone, app build number | Generated automatically when the app is installed or launched and registered with the Company's server. Expo-start reminders (the day before and on the day) are scheduled on your device or sent by the Company's server using this data. |
| Usage data | Service usage records, access time, IP address, device information (model, OS version), app error information, selected country and language settings | Generated and collected automatically while you use the app |
| Inquiries | Email address, content of the inquiry | Provided by you when you contact us by email |
You can browse exhibition information, venue maps, articles and public logs without signing up. In that case no account, profile or post information is collected, while device and notification data and usage data may be collected.
The Company does not collect personal information from children under 14. The Service is available only to users aged 14 or older; if we learn that a user under 14 has signed up, we delete the account and its personal information without delay.
Article 3 (Retention period)
- Account, profile, posts and activity (logs, comments, likes, follows, lounge chat messages and photos, block list): until you delete your account. When you request deletion in the app (My > Settings > Account management > Delete account) or by email (expotimes@expotimes.io), your account is deleted immediately and you can no longer sign in, and your posts, photos, comments and lounge messages, and the personal information we collected, are deleted, or anonymized so that other users cannot identify you, within 30 days of the request. Report records (below) and information that must be retained by law are kept separately for the applicable period. See the Account & Data Deletion page for details.
- Report records (reported item, reason, outcome): kept for up to 1 year after the report has been handled, to deal with false or repeated reports and resolve disputes, then destroyed.
- Device and notification data (push token, device identifier, etc.): until you delete your account or the token becomes invalid because the app was uninstalled.
- Device location: used only to provide the map feature and to confirm on-site presence when you enter a venue lounge chat room, and not for any other purpose.
- Usage data and app error information: destroyed without delay once the purpose is achieved; data held by processors follows the retention periods in Article 6.
- Email address and inquiry content: destroyed without delay after the inquiry has been handled.
Where applicable laws require retention, the information is kept for the period required:
- Service access logs (such as sign-in records): 3 months (Protection of Communications Secrets Act)
- Other information subject to a statutory retention duty: the period set by that law
Article 4 (Provision to third parties)
The Company processes personal information only within the purposes in Article 1 and provides it to third parties only where permitted under Articles 17 and 18 of the Personal Information Protection Act, such as with your consent or where required by law.
The Company does not provide personal information to third parties for advertising or other commercial purposes. Information visible to other users is limited to what you choose to make public in the Service (your profile, logs with a public visibility setting, comments, likes, follow relationships and lounge chat messages).
Article 5 (Outsourcing of processing)
To provide the Service, the Company outsources the following processing tasks.
| Processor | Tasks |
|---|---|
| Google LLC | Firebase Analytics: app usage statistics Firebase Crashlytics: app crash and error reporting Firebase Cloud Messaging: push notifications Firebase Remote Config: delivering app configuration Google Maps Platform: map display Google account sign-in: member authentication |
| Apple Inc. | Sign in with Apple: member authentication Apple Push Notification service (APNs): delivering notifications to iOS devices |
| Environmental Systems Research Institute, Inc. (Esri) | Providing map base images (map tiles) |
The Company sets out the necessary terms in its agreements so that personal information is managed safely, and will announce any change of processors through this Privacy Policy.
Article 6 (International transfer)
The Company's servers are located in the Republic of Korea. The processors in Article 5 are located outside Korea, so personal information is transferred abroad as follows while you use the Service. You may tell the Company that you refuse the transfer, but in that case you may not be able to use the related features.
| Recipient (country) | Items transferred | When and how | Retention |
|---|---|---|---|
| Google LLC (United States) | Usage data, device information, app error information, device token and notification content, IP address, Google sign-in authentication data | Transmitted over the network from time to time while you use the app | Until the processing agreement ends, or as set by each service's data retention policy |
| Apple Inc. (United States) | Device token and notification content when notifications are sent to iOS devices; Apple sign-in authentication data | Transmitted over the network while you use the iOS app | Until the processing agreement ends, or as set by Apple's data retention policy |
| Esri (United States) | IP address and map area sent with map requests | Transmitted over the network when you use the map screen | As set by Esri's data retention policy |
Article 7 (Your rights and how to exercise them)
- You may at any time request access to, correction of, deletion of, or suspension of processing of your personal information, and withdraw your consent.
- You can exercise these rights through the settings menu in the app or by email (expotimes@expotimes.io), and the Company will act without delay. You can edit or delete your profile, logs and comments directly in the app, and delete your account at My > Settings > Account management > Delete account.
- You can withdraw consent to location access at any time by turning off the app's location permission in your device settings, and stop notifications by turning off the app's notification permission in your device settings.
- You may also exercise your rights through a representative, such as a legal guardian or a person you have authorized.
- Requests may be limited where the law provides otherwise, for example for information that must be retained by law.
Article 8 (Destruction of personal information)
- Procedure: personal information is destroyed without delay when its retention period ends or its purpose is achieved. Information that must be kept by law is stored separately from other personal information and destroyed when that period ends.
- Method: electronic files are deleted so that they cannot be restored, and paper documents are shredded or incinerated.
- Anonymization: content created by a user who has deleted their account that cannot readily be deleted is anonymized by removing the author attribution and other personal information so that other users cannot identify the author. Anonymized content is no longer personal information and may remain in the Service.
Article 9 (Security measures)
- Administrative: limiting the number of people who handle personal information to the minimum
- Technical: managing access rights to systems that process personal information, and encrypting data in transit (HTTPS)
Article 10 (Automatically collected information and cookies)
- The app uses Firebase Analytics and Crashlytics for usage statistics and error diagnosis. In the process, an app-installation identifier, device information, usage records and error information are collected automatically.
- The app does not display ads, does not collect advertising identifiers (IDFA or GAID), and does not use technologies to track users.
- Automatic collection stops when you uninstall the app. You can request deletion of information already collected as described in Article 7.
- This website does not use cookies or analytics tools.
Article 11 (Privacy officer)
The Company has designated the following privacy officer to oversee personal information processing and to handle related complaints and remedies.
- Privacy officer: Youngsun Cho, CEO
- Contact: expotimes@expotimes.io
Article 12 (Remedies for infringement)
You may apply to the following Korean authorities for dispute resolution or advice regarding infringement of personal information.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
Article 13 (Changes to this policy)
This Privacy Policy is effective from October 24, 2026. If it is amended, the Company will announce the changes through the app or website at least 7 days before they take effect.
- October 16, 2026: took effect
- October 24, 2026: revised — added social sign-in (Google/Apple) identifiers, lounge chat, comments/likes/follows, reports and blocks, push token and device identifier; removed payment and advertising-identifier wording; added the 30-day deletion/anonymization rule on account deletion and the under-14 restriction