Skip to content
flyve
FlyverNoticesNewsroomFAQContact
Get the app

Privacy Policy

Effective date: October 30, 2026

In accordance with the Personal Information Protection Act and other applicable laws of the Republic of Korea, molio (the “Company”) establishes and discloses this Privacy Policy as follows in order to protect data subjects’ personal information and to handle related grievances smoothly.

Contents

  1. Article 1 (Purposes of Processing Personal Information)
  2. Article 2 (Items of Personal Information Processed)
  3. Article 3 (Processing and Retention Periods)
  4. Article 4 (Personal Information of Children under 14)
  5. Article 5 (Procedures and Methods for Destroying Personal Information)
  6. Article 6 (Provision of Personal Information to Third Parties)
  7. Article 7 (Criteria for Additional Use and Provision)
  8. Article 8 (Outsourcing of Personal Information Processing)
  9. Article 9 (Transfer of Personal Information Overseas)
  10. Article 10 (Measures to Ensure the Security of Personal Information)
  11. Article 11 (Installation, Operation and Refusal of Automatic Collection Devices)
  12. Article 12 (Collection, Use, Provision and Refusal of Behavioral Information)
  13. Article 13 (Processing of Personal Location Information)
  14. Article 14 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
  15. Article 15 (Automated Decisions)
  16. Article 16 (Chief Privacy Officer and Grievance Department)
  17. Article 17 (Remedies for Infringement of Data Subjects’ Rights)
  18. Article 18 (Changes to This Privacy Policy)

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes, and if a purpose changes, it takes the measures required by the Personal Information Protection Act.

  1. Member management: identifying Members and verifying identity, verifying age, managing accounts, preventing fraudulent use, and giving notices and notifications
  2. Providing the Service: automatically organizing photos and building the travel map, granting badges and titles, travel plans and expense settlement, messages between Members, translating Posts, and sending notifications
  3. Providing personalized content: adjusting the order in which Posts appear in the feed and elsewhere
  4. Operating the Flyver program: reviewing applications and contacting applicants, calculating and paying earnings, and withholding tax and submitting payment statements
  5. Improving the Service: analyzing usage statistics, analyzing how users find the Service and measuring the effect of invitations and shares, opening the shared screen right after the app is installed, analyzing errors, and developing new features
  6. Marketing and advertising: sending advertising information such as events (only to Members who have consented to receive it), and measuring advertising performance
  7. Fulfilling legal obligations and responding to disputes

Article 2 (Items of Personal Information Processed)

(1) The Company processes the following personal information.

CategoryItems processed
Sign-up (required)Email address, password, date of birth, and, for social login, the identifier and profile information provided (nickname, profile image, etc.)
Profile (optional)Display name, username, bio, profile and cover images, links, gender, region of residence, language, travel interests and places you want to visit
PostsPhotos and videos and the metadata they contain (capture location, capture date and time, device information, etc.), audio in videos, text and comments
Travel plansThe title, dates, cities, places, notes and photos of a plan, the list of companions, and expense records and participant names for settlement (including the names of companions who do not use the app)
MessagesThe contents of messages between Members and records of sending and receiving
Flyver (participating Members)Region of activity, field, introduction, channel address (optional), records of consent to the terms, and, for paying earnings, the account holder, bank, account number and resident registration number (alien registration number for foreign nationals), and payment history
Automatically generated or collected informationService usage records, access logs, IP address, device identifier, device and operating system information, push notification token, notification and marketing preferences, content impression and view records, link usage records, sign-up source (referring link and campaign), share and invitation link open records, and cookies

(2) The Company processes Flyvers’ resident registration numbers only where the Income Tax Act or other applicable laws require it (Article 24-2 of the Personal Information Protection Act) and does not use them for any other purpose.

(3) Where needed to provide a feature, the Service requests access to the device’s photos (album), camera, location and notifications. All permissions are optional, and even if you do not allow them, you can use the Service other than the relevant feature.

(4) The Company collects information that Members enter or upload themselves when signing up or using the Service, information received from social login providers, and information generated automatically in the course of using the Service.

Article 3 (Processing and Retention Periods)

(1) The Company destroys personal information without delay once the purpose of processing has been achieved or the Member withdraws. However, the following information is retained for the periods stated.

ItemRetention periodBasis
Service usage records and access logs3 monthsProtection of Communications Secrets Act
Identification information of withdrawn Members, to prevent fraudulent sign-up and use30 days after withdrawalPrevention of fraudulent use
Content impression records90 days after collectionProviding personalized content
Link usage records3 months after collectionCalculating earnings and preventing fraudulent use
Flyver application information1 year from the date the review endsReviewing re-applications
Records relating to the payment of earnings (including resident registration numbers, etc.)The period prescribed by applicable laws (kept separately even after withdrawal)Framework Act on National Taxes; Income Tax Act

(2) The information of a Flyver who still has earnings to be paid is retained until payment is completed.

Article 4 (Personal Information of Children under 14)

The Service does not accept sign-ups from children under 14 years of age, and the Company does not knowingly collect personal information of children under 14. If the Company becomes aware that personal information of a child under 14 has been collected, it destroys that information without delay.

Article 5 (Procedures and Methods for Destroying Personal Information)

(1) The Company destroys personal information without delay once its retention period has expired or the purpose of processing has been achieved. Information retained under applicable laws is stored separately from other information.

(2) Information in electronic files is deleted by methods that make it unrecoverable, and information recorded on paper is shredded or incinerated.

Article 6 (Provision of Personal Information to Third Parties)

(1) The Company does not provide personal information to third parties except in the cases set out in Articles 17 and 18 of the Personal Information Protection Act, such as where the data subject has consented or a law specifically provides for it.

(2) In accordance with applicable laws, the Company submits Flyvers’ payment statements and similar documents to the competent tax authorities.

(3) Posts that a Member has made public, and information contained in them such as the capture location, are information disclosed to other users at the Member’s choice, not information the Company provides to third parties.

Article 7 (Criteria for Additional Use and Provision)

Where the Company uses or provides personal information additionally without the data subject’s consent under Article 15(3) and Article 17(4) of the Personal Information Protection Act, it considers whether the use or provision is related to the original purpose of collection, whether it is foreseeable in light of the circumstances of collection and processing practices, whether it unduly infringes the data subject’s interests, and whether measures necessary to ensure security, such as pseudonymization, have been taken.

Article 8 (Outsourcing of Personal Information Processing)

(1) To provide the Service, the Company outsources the processing of personal information as follows.

ProcessorOutsourced tasks
Google LLCOperating the service infrastructure and database, translating Posts, and looking up place information
Cloudflare, Inc.Storing and delivering photo and video files
ResendSending verification emails
Expo Application ServicesSending push notifications
Functional Software, Inc. (Sentry)Error analysis
Amplitude, Inc.Usage statistics analysis

(2) When entering into an outsourcing contract, the Company specifies the matters necessary to ensure that personal information is managed securely and supervises the processor. If the outsourced tasks or the processor change, the Company will give notice through this Policy.

(3) The Company uses the services of Kakao, Google and OpenStreetMap to look up place information, and the authentication services of Apple, Google, Kakao and LINE for social login.

Article 9 (Transfer of Personal Information Overseas)

(1) Under Article 28-8(1)(iii) of the Personal Information Protection Act, the Company discloses in this Policy the outsourcing of processing and storage of personal information necessary to perform the service contract, and transfers personal information overseas as follows. Transfers take place over information and communications networks each time the Service is used.

Recipient (contact)CountryItems transferredPurpose of useRetention and use period
Google LLC (policies.google.com/privacy)United States and others (including the Republic of Korea region)The information in Article 2Operating the service infrastructure, translation, and looking up place informationUntil the Member withdraws or the outsourcing contract ends
Cloudflare, Inc. (privacyquestions@cloudflare.com)United States and othersPhoto and video files and metadataStoring and delivering filesUntil the Post is deleted or the Member withdraws
Resend (resend.com/legal/privacy-policy)United StatesEmail addressSending verification emailsUntil the purpose of sending is achieved
Expo Application Services (expo.dev/privacy)United StatesPush notification token and notification contentsSending push notificationsUntil the token is discarded or the Member withdraws
Functional Software, Inc. (Sentry) (sentry.io/privacy)United StatesDevice and operating system information, usage records at the time of an error, and Member identifierError analysis90 days
Amplitude, Inc. (amplitude.com/privacy)United StatesMember identifier, usage records, and device and operating system informationUsage statistics analysisUntil the Member withdraws or the outsourcing contract ends
Meta Platforms, Inc. (facebook.com/privacy/policy)United StatesPseudonymized Member identifier and event informationMeasuring advertising performanceIn accordance with Meta’s policies

(2) Members may refuse the overseas transfer. To stop the transfer to Meta, send your objection together with the email address you signed up with to help@flyve.kr; the transfer will stop after your identity is verified, and refusing does not restrict your use of the Service. The other transfers are processing essential to providing the Service; if you do not want them, you can stop the processing by withdrawing your membership.

Article 10 (Measures to Ensure the Security of Personal Information)

The Company takes the following measures to ensure the security of personal information.

  1. Administrative measures: establishing and implementing an internal management plan, and minimizing and training personnel who handle personal information
  2. Technical measures: managing access rights and controlling access, encrypting unique identification information and the like, retaining and reviewing access records, and operating security programs
  3. Physical measures: using the data centers of cloud providers with secured facilities

Article 11 (Installation, Operation and Refusal of Automatic Collection Devices)

(1) The Company’s website uses automatic collection devices such as cookies for visit statistics, view counts and measuring advertising performance. A cookie is a small piece of information that a website sends to the user’s browser and that is stored on the user’s device.

(2) Users can refuse or delete cookies in their web browser settings. If you refuse cookies, some features may be restricted.

(3) The mobile app processes device identifiers to provide the Service and compile usage statistics, and does not collect advertising identifiers (IDFA/ADID).

Article 12 (Collection, Use, Provision and Refusal of Behavioral Information)

(1) The Company processes behavioral information as follows to measure advertising performance.

CategoryDetails
Items collectedWebsite visit records, event information such as sign-ups, Post uploads and shares, cookies, and pseudonymized Member identifiers
Collection methodAutomatically collected when the website is visited; events sent from the server when the app is used
Purpose of collectionMeasuring advertising performance and optimizing advertising campaigns
Retention periodUntil the Member withdraws
Advertising business that collects and processes behavioral informationMeta Platforms, Inc.

(2) Users can refuse the collection of behavioral information through their web browser’s cookie settings or Meta’s ad settings (facebook.com/adpreferences), and can refuse the transfer of app usage information by the method in Article 9(2).

(3) The Company does not collect sensitive behavioral information, and inquiries about behavioral information can be made to the contact in Article 16.

Article 13 (Processing of Personal Location Information)

(1) The Company uses the capture location recorded in photos and videos uploaded by Members to organize Posts and build the travel map, and the capture location of Posts made public may be shown to other users on the map, in the feed and elsewhere.

(2) If a Member allows location access, the Company uses the device’s current location to the extent necessary to provide nearby content and similar features, and destroys it without delay once the purpose is achieved.

(3) Members can delete their Posts or make them private at any time, and can revoke location access permission in the device settings.

(4) Details of the processing of personal location information are governed by the Location-Based Services Terms.

Article 14 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)

(1) Data subjects may at any time request access to, correction or deletion of, or suspension of processing of their personal information, and may withdraw their consent.

(2) These rights may be exercised in the settings within the Service or by contacting help@flyve.kr, and may also be exercised through a legal representative or an authorized agent.

(3) The Company may restrict or refuse a data subject’s request in accordance with the Personal Information Protection Act or other applicable laws, in which case it will give the reasons.

(4) Data subjects must not, in violation of applicable laws, infringe their own or another person’s personal information or privacy being processed by the Company.

Article 15 (Automated Decisions)

The Company does not make fully automated decisions that materially affect the rights or obligations of data subjects. Adjusting the order of the feed does not constitute such a decision, and if the Company begins to make such decisions, it will give advance notice through this Policy.

Article 16 (Chief Privacy Officer and Grievance Department)

The Company designates the following Chief Privacy Officer to oversee the processing of personal information and to handle related grievances.

CategoryDetails
Chief Privacy OfficerLee Heesoo (Representative)
Contacthelp@flyve.kr, 0507-1490-3470

Article 17 (Remedies for Infringement of Data Subjects’ Rights)

To obtain remedies for infringement of personal information, data subjects may apply for dispute mediation or consultation to the following bodies.

OrganizationContact
Personal Information Dispute Mediation Committee1833-6972, www.kopico.go.kr
Personal Information Infringement Report Center (Korea Internet & Security Agency)118, privacy.kisa.or.kr
Supreme Prosecutors’ Office1301, www.spo.go.kr
Korean National Police Agency182, ecrm.police.go.kr

Article 18 (Changes to This Privacy Policy)

This Privacy Policy applies from the effective date shown at the top. If any content is added, deleted or modified, the Company announces the changes and the effective date within the Service in advance.

flyve

flyve — plan trips together, and your photos map themselves

FlyverNoticesNewsroomFAQContact
TermsPrivacyLocation TermsPoliciesDelete account
Business name몰리오 (molio)Representative이희수 (Lee Heesoo)Business registration number286-08-03801Address3F, 9-8 Seolleung-ro 129-gil, Gangnam-gu, Seoul, Republic of KoreaContact0507-1490-3470 · help@flyve.kr
© 2026 flyve