Privacy Policy
스프라우트그로우랩스 (the "Company") provides the Sanlog service (the "Service"), values the personal information of its users, and complies with the Personal Information Protection Act (개인정보 보호법) and other applicable laws. This Policy explains what information the Company collects and how it uses, retains, and destroys that information.
Key changes in this revision (effective October 18, 2026) — (1) Added the items collected in connection with overseas peak collections and multilingual support (country, language and unit settings); (2) clarified the photo location check used for summit check-in and the push notification token; (3) added use of the usage statistics and screen analytics tool (Amplitude) and a new section on overseas transfer of personal information; (4) added the in-app account deletion procedure and notes for overseas users (EEA, UK, Switzerland, Japan, and others).
1. Personal Information We Collect
The Company collects the following personal information in order to provide the Service.
| Category | Items collected | Method of collection |
|---|---|---|
| Sign-up (required) | Social login identifier (Apple, Google, and in Korea also Kakao), name (display name), username (ID), date of birth, gender, country | Social login integration and entry at sign-up |
| Sign-up (optional) | Profile image, Instagram account, consent to receive marketing information | Entered at sign-up or when editing your profile |
| Hike records and summit check-in | Location information (GPS route and elevation), elevation based on the barometric sensor, hike date/time and duration, hike journals and photos, shooting date/time and location information contained in summit check-in photos, summit check-in determination results, flags and notes | The user's use of the Service (device sensors, photos selected by the user) |
| Summit zone activity | Echo posts, replies, and photos; cheers (hearts) and reposts; Altitude chat messages and images; report and block history; feature requests and mountain information reports | The user's use of the Service |
| Hiking gear price tracking (Korea) | Product links registered by the user, price alert settings | Entered directly by the user |
| Notifications | Push notification token (Apple Push Notification service), notification preferences by type | Generated automatically when notification permission is granted |
| Settings | App language, distance and elevation units, selected Collection country | Set while using the Service |
| Automatically collected | Device model, OS version, app version, access logs, service usage records such as screen views and button taps, screen usage flow information (session replay) | Collected automatically while using the Service |
Users may decline to consent to the collection of optional items, in which case the use of some features may be restricted.
Only persons aged 19 or older may sign up for and use the Service. The Company verifies eligibility by age using the date of birth, and does not collect personal information of users under 19.
Your name and username are made public within the Service, while your date of birth and gender are not made public and are used only for age verification and personalized recommendations.
2. Purposes of Collection and Use
- Identifying members and logging in; providing and operating the Service
- Verifying eligibility and age for use by persons aged 19 or older
- Recording hike routes and elevation, determining summit arrival, photo-based summit check-in, and providing record features such as flags, ridgeline, and the Collection
- Providing the Collection, famous-peak lists, and screen displays tailored to country, language, and unit settings
- Providing communication features between users such as summit zone Echoes and Altitude chat, and handling reports and blocks
- Sending Service notifications such as replies, cheers, and summit flags, and sending marketing information to users who have consented
- Improving the Service, including analyzing usage statistics, identifying errors, and developing new features
- Responding to customer inquiries and delivering notices
- Preventing misuse (such as manipulation of location or photos) and ensuring the stability of the Service
3. Processing of Location, Photo, and Sensor Information
The Company collects and uses location information for the Service's core features (recording hike routes, determining summit arrival, awarding flags, and finding nearby mountains). The detailed standards for processing location information are governed by the Location-Based Services Terms.
- Location information is collected and used, while you have allowed location access, when you start recording a hike, find nearby mountains, or check the location of a summit photo.
- Photos: The app accesses only the photos you choose yourself, and checks the shooting location and date/time contained in a photo for summit check-in. Reading text in photos (such as on a summit marker) is processed on your device. Photos you decide to post or save are uploaded to our servers and are resized before upload.
- Barometric sensor (Motion & Fitness): The barometric sensor values of your device are used to measure elevation accurately.
- You may withdraw location, photo, and motion access permissions at any time in your device settings; if you do, the related features will be restricted.
- Location information is processed in accordance with the Act on the Protection and Use of Location Information (위치정보의 보호 및 이용 등에 관한 법률, the "Location Information Act" (위치정보법)) and other applicable laws.
4. Retention and Use Period
In principle, the Company destroys personal information without delay once the purpose of collection and use has been achieved. However, in the following cases the information is retained for the period specified.
- Member information: until account deletion
- Hike records, summit zone activity, and photos: until account deletion (immediately if the user deletes them individually)
- Push notification token: until logout, turning off notifications, or account deletion
- Records confirming the collection, use, and provision of location information: 6 months (Location Information Act)
- Access records: 3 months (Protection of Communications Secrets Act (통신비밀보호법))
- Usage statistics and screen analytics information: until the analytics purpose is achieved or until account deletion
- Any other period prescribed by applicable laws
5. Provision to Third Parties and Entrustment of Processing
In principle, the Company does not provide users' personal information to outside parties. It does so only where there is a basis in law or the user has consented. The Company entrusts the following tasks for the operation of the Service, and manages and supervises whether the entrusted companies process personal information securely.
| Processor | Entrusted task | Location |
|---|---|---|
| Supabase | Server operation, database and photo storage, member authentication | Server: Seoul, Republic of Korea |
| Amplitude, Inc. | Usage statistics analysis, screen usage flow (session replay) analysis | United States (see Article 6) |
| Apple Inc. | Push notification delivery, Sign in with Apple, App Store payment and distribution | United States and elsewhere |
The authentication provider you choose when logging in (Apple, Google, Kakao) and the map provider (Korea: Naver Map; overseas: Apple Maps) process information independently under their own terms of use and privacy policies, and in the course of displaying maps, the map area you are viewing and device information may be sent to the map provider.
6. Overseas Transfer of Personal Information
To improve the Service, the Company transfers personal information overseas as set out below.
| Item | Details |
|---|---|
| Recipient | Amplitude, Inc. (contact: the privacy contact published in that company's privacy policy) |
| Country of transfer | United States (server location depends on Amplitude's configuration) |
| Date/time and method of transfer | Transmitted over the network in encrypted form each time the Service is used |
| Items transferred | Unique member identifier (internal UUID), device model, OS, and app version, app language and region, usage records such as screen views and button taps, screen usage flow information |
| Purpose of use | Usage statistics analysis, error identification, Service improvement |
| Retention and use period | Until the analytics purpose is achieved or until account deletion |
| How to refuse and its effect | If you do not wish the transfer to take place, please make a request to the contact below. Upon request, we will stop collecting and transmitting analytics information. This does not affect your use of the Service's core features. |
Service data created by users, such as hike records and photos, is stored on servers located in the Republic of Korea (Seoul). Even if you use the Service from overseas, your data is transmitted to the same servers.
7. User Rights and How to Exercise Them
Users may at any time view and correct their personal information, and may request withdrawal of consent to collection and use, suspension of processing, deletion, or account deletion. You may exercise these rights through the Settings or Account screens in the app or through the contact below.
- Account deletion: You can delete your account yourself from the Account screen in the app.
- Notifications: You can turn off notifications by type in the app settings, or turn off all notifications in your device settings, and you can withdraw your consent to receive marketing information at any time.
- Access and export: If you request this by email, we will process it without delay after verifying your identity.
8. Destruction of Personal Information
Personal information whose retention period has expired or whose processing purpose has been achieved is destroyed without delay. Electronic files are deleted by a method that makes recovery impossible, and printed materials are shredded or incinerated. Where information must be retained under other laws, it is stored separately from other personal information.
9. Security Measures
To process personal information securely, the Company implements administrative and technical protective measures such as managing access rights, encrypting data in transit (HTTPS), controlling database access, and retaining access records.
10. Automatic Collection Devices such as Cookies, and Behavioral Information
The Company collects app usage records (screen views, feature usage, and the like) for usage statistics and error analysis. The Company does not collect advertising identifiers and does not use them to track users. It does not collect sensitive behavioral information such as that relating to ideology, beliefs, or health.
If personalized advertising is introduced in the future, the Company will revise this Policy in advance and obtain the user's consent. You can restrict advertising-related tracking through your device settings as follows.
- iOS: Settings > Privacy & Security > Tracking > turn off 'Allow Apps to Request to Track'
- Android: Settings > Privacy > Ads > Delete or reset advertising ID
11. Chief Privacy Officer
- Chief Privacy Officer: 김은희
- Contact: sanlog-support@sproutgrowlabs.com
12. Remedies for Infringement of User Rights
Users may contact the following organizations for consultation and relief regarding infringement of personal information.
- Personal Information Infringement Report Center (Korea Internet & Security Agency): 118 (no area code) · privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
- Supreme Prosecutors' Office, Cyber Crime Investigation Division: 1301 (no area code) · www.spo.go.kr
- Korean National Police Agency, Cyber Bureau: 182 (no area code) · ecrm.police.go.kr
13. Duty of Notice
If this Policy is added to, deleted from, or amended, we will notify you at least 7 days before it takes effect through an in-Service notice or this website. However, if there is a material change to user rights, we will notify you at least 30 days in advance. The previous version (effective July 13, 2026) is available on request.
14. Additional Notes for Overseas Users (EEA, UK, Switzerland, Japan, and others)
The Service is operated by a company based in Korea, and even if you use the Service from overseas, your personal information is processed in accordance with the Policy above. This English policy is a translation of the Korean policy provided for convenience, as are the German and Japanese versions; if there is any discrepancy, the Korean policy prevails. However, where the laws of your country of residence guarantee rights more favorable to you, those laws prevail.
- Legal bases for processing (GDPR and similar): We process personal information on the basis of performance of a contract to provide the Service (sign-up, hike records, community), legitimate interests (Service improvement, prevention of misuse, security), and consent (receipt of marketing information, device permissions, and the like). Where we are subject to a legal obligation, we process information to comply with that obligation.
- Rights: You may request access, rectification, erasure, restriction of processing, portability (export), objection to processing, and withdrawal of consent (without affecting the lawfulness of processing before withdrawal), as well as, under Japan's Act on the Protection of Personal Information, suspension of use and disclosure of records of provision to third parties. Please send your request to sanlog-support@sproutgrowlabs.com.
- International transfers: Data is stored on servers in the Republic of Korea (Seoul), and usage statistics are transmitted to a processor in the United States. For users in the European Economic Area, the UK, and Switzerland, transfers are made by means recognized by law (adequacy decisions, standard contractual clauses, and the like).
- Complaints to supervisory authorities: You may lodge a complaint with the personal information supervisory authority of your country of residence (for example, the data protection authority of each country or Japan's Personal Information Protection Commission).
- Children: Persons under 19 may not use the Service, and we do not collect information from that age group.