Liko

Privacy Policy

Effective October 2, 2026

This is an English translation of the Korean Privacy Policy. If the two differ, the Korean version applies.

Liko is a private map where close friends collect reviews of places. This policy covers the Liko app and this website. Liko is run by Jae Seung Lee, an independent developer. Send any questions by email (templer151@gmail.com).

1. What we collect and what it's for

When you sign in

  • Your Apple or Google account identifier: to recognize your account.
  • The email of the account you sign in with: to fill in the email field for you. If you use Apple's Hide My Email, we get the relay address Apple creates.
  • The name on that account: to fill in the name field for you.

Your profile

  • Name: shown to friends in the same room.
  • Profile photo (optional): shown to friends in the same room.
  • Birthday: to check that you are 14 or older. Friends don't see it.
  • Email: to answer your questions, to confirm it's you when you ask for something like deleting your account, and to send notices we must send. Friends don't see it. We never send marketing email.
  • Language (Korean, Japanese or English): to set the language of the app.

Rooms and reviews

  • Rooms: name, photo, grades (emoji and name), member limit, invite code, and who is in which room
  • Reviews: text, the grade chosen, photos (up to 5), and when it was written and edited
  • Reviewed places: the Apple Maps place ID, name, address and location (coordinates)
  • Places added by hand: the name given by pressing and holding the map, its location (coordinates) and address, and who added it. These are seen only in that room and are deleted with the room.

We collect these to show them to friends in the same room. A review is seen only in the room it was posted to, and friends who join the room later can see earlier reviews too. When photos are saved on our server as WebP files, information inside them (metadata) such as where they were taken is removed.

The operator looks at account information (including email and birthday), rooms, reviews and photos only to handle a question or report, or to check a breach of the Terms of Service or a legal obligation. Deleted reviews are hidden from the operator too.

Created while you use Liko

  • Sign-in state: a value that keeps you signed in. Our server stores only a transformed value (a hash), never the original, and it stops working after 30 days without use.
  • Server access logs: IP address, time of the request, requested address, result, and device and app information (User-Agent). Used to find errors and protect the service.
  • Notification token (only if you turn notifications on): to send this device a notification when a friend in the same room posts a new review. We receive the value your iPhone creates through Expo. A notification contains the room name, the friend's name, the place name and the grade emoji, never the review text.
  • App usage: screens opened, features used (creating or joining a room, posting a review, adding a place, number of search results, opening a photo, whether notifications were allowed), where you tapped, device information (model, iOS and app version, language), and the country and city estimated from your IP address. After you sign in, this comes with your Liko account ID. It never includes your name, email, birthday, review text or place names. Used only to fix and improve the app.
  • App screen recording (session replay): records how the screen changed and where you tapped. Every piece of text, input field, photo and map is masked on the device before it is sent, so review text, names, photos and places never appear in a recording.
  • Visits to this website: pages viewed, language, whether the App Store button was tapped, browser information, and the country and city estimated from your IP address. No cookies or browser storage are used, so one visit is not linked to the next.

What we don't collect

  • Your location: used only on your device to show where you are on the map. It is never sent to the Liko server, and we don't track friends' locations.
  • Place searches: these go from your device straight to Apple Maps search. The Liko server never receives your search terms.
  • We don't collect contacts, advertising identifiers or payment information. We use no advertising tools, and we don't combine your data with other companies' data to track you outside the app.
  • This website uses no cookies and no ads.

2. How we collect it

  • From Apple or Google when you sign in.
  • What you type or choose in the app.
  • Automatically while you use the app and the website (sign-in state, notification token, server access logs, usage, app screen recording).

3. How long we keep it and how it is deleted

  • Account information is kept until you delete your account.
  • When you delete a review, nobody can see it anymore and its photos are deleted right away. The text and grade stay hidden until the room or your account is deleted.
  • When an owner deletes a room, every review and photo in it is deleted. This can't be undone.
  • If you leave a room, your reviews stay in it. To remove them, delete them before you leave.
  • When you delete your account, your reviews and photos in every room, your profile and rooms with only you in them are deleted. If you own a room with friends in it, you need to hand it over first.
  • Photos uploaded but never attached to a review are deleted after 24 hours.
  • Deleted photo files may remain for up to 7 days because of the storage's recovery feature.
  • Server access logs are kept for 30 days.
  • Records of the operator viewing accounts, rooms and reviews or deleting accounts (who, when, which account or room, and with what search terms) are kept for 1 year. These records stay for that period even after an account is deleted.
  • App and website usage is kept for 1 year, and app screen recordings for 30 days. These stay until their period ends even after you delete your account, but they are no longer linked to the deleted account's name or email. Email us if you want them deleted right away.
  • A notification token is deleted when you sign out, your sign-in expires, you delete your account, or notifications can no longer be sent to that device. If someone signs in with another account on the same device, it becomes that account's token.
  • We don't make separate database backups yet. If we start, we will add how long backups are kept to this policy.
  • If the law requires us to keep some information, we keep it separately and only for that period.

4. Information we give to others

Liko never sells or gives your information to other companies or people. If an authority such as an investigative agency asks for information under the law, we provide it only through the procedure the law sets.

5. Companies that process data for us

We use the companies below to run the service. Under their contracts and security standards, they protect your information to the same level as this policy.

  • Google LLC (Google Cloud): running the server, storing photos, keeping logs
  • Prisma Data, Inc.: running the database
  • Vercel Inc.: running this website
  • 650 Industries, Inc. (Expo): delivering new-review notifications
  • Apple Inc.: delivering new-review notifications to your iPhone (Apple Push Notification service)
  • PostHog, Inc.: analyzing app and website usage and app screen recordings

6. Information kept outside Korea

Liko's server and database are in Japan, so the information of people using Liko in Korea is also stored in Japan. New-review notifications pass through Expo and Apple in the United States, and app and website usage is kept by PostHog in the United States. Information moves over encrypted connections (TLS) each time you use the app or the website, and notifications each time a friend posts a review.

Google LLC

  • Country: Japan (Osaka)
  • Information moved: everything the app collects, photo files and server access logs
  • Purpose: running the server, storing photos, keeping logs
  • Retention: the same periods as in section 3
  • Privacy contact: Google Privacy Policy

Prisma Data, Inc.

  • Country: Japan (Tokyo)
  • Information moved: account, room and review information, without photo files
  • Purpose: running the database
  • Retention: the same periods as in section 3
  • Privacy contact: Prisma Privacy Policy

Vercel Inc.

  • Country: the United States and the delivery locations Vercel uses in many countries
  • Information moved: IP address, browser information and requested address when you visit this website
  • Purpose: delivering the website
  • Retention: as long as Vercel needs to run the website
  • Privacy contact: Vercel Privacy Policy

650 Industries, Inc. (Expo)

  • Country: the United States
  • Information moved: notification token and notification content (room name, the friend's name, place name, grade emoji)
  • Purpose: delivering new-review notifications
  • Retention: notification content only until it is handed to Apple; the notification token as long as Expo needs it to deliver notifications
  • Privacy contact: Expo Privacy Policy

Apple Inc.

  • Country: the United States
  • Information moved: notification token and notification content (as above)
  • Purpose: delivering new-review notifications to your iPhone
  • Retention: until the notification reaches your iPhone. If your iPhone is off, it is kept briefly and then delivered
  • Privacy contact: Apple Privacy Policy

PostHog, Inc.

  • Country: the United States
  • Information moved: app and website usage, app screen recordings (with text, input fields, photos and maps masked), Liko account ID, device and browser information, IP address
  • Purpose: analyzing how the app and website are used
  • Retention: usage 1 year, app screen recordings 30 days
  • Privacy contact: PostHog Privacy Policy

If you don't want your information kept outside Korea, you can stop using Liko or delete your account. The service can't be used without it.

7. Your right to see, correct and delete your information

  • You can change your name, birthday, email and profile photo anytime in Account in the app.
  • You can ask to see, correct or delete your information, or to stop processing it. You can delete your account right away with [Delete account] in Account in the app. For anything else, write to templer151@gmail.com from the email address on your account.
  • We confirm it's you, handle the request within 10 days and tell you the result.
  • Someone can also ask on your behalf with a power of attorney.
  • Requests are free.

8. Children under 14

Liko is only for people aged 14 and up. Your birthday is used to check this. If the birthday chosen at sign-up is under 14, sign-up is blocked and the information received at sign-in is deleted right away. If we find an account of someone under 14, we delete the account and its information.

9. How we protect your information

  • Only the Liko server can reach the database, and every table denies access by default.
  • Photos are kept in private storage and shown only after we confirm the viewer is a friend in the same room or the operator.
  • Connections between the app and the server, and between the server and the database, are encrypted.
  • The values that keep you signed in are stored only as hashes.
  • Only registered operator accounts can use the operator tools, and every time the operator views information, a record is kept.

10. Tools that collect information automatically

This website uses no cookies and no browser storage. Each page view is sent with a new temporary ID. The app keeps your sign-in state in the device's keychain and a random app-only ID for usage data in the app's storage. This ID is not an advertising identifier and changes when you sign out. The notification token is used only to send notifications, never to track your device.

11. Privacy officer

Send privacy questions, complaints and requests for remedies to the contact above.

12. Where to get help

You can also ask these Korean agencies for advice or file a report.

13. Changes to this policy

When this policy changes, we announce it on this page 7 days before it applies. Changes that matter for your rights are announced 30 days before and also sent to your account email.