Effective Date: February 13, 2026 | Last Updated: March 15, 2026
Ryan Kim Studio ("Service Provider", "we", "us", or "our") operates the Hannoon Planner mobile application and web service (the "Application") as a free, ad-supported service. This service is provided "AS IS".
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Application. By using the Application, you agree to the practices described in this policy.
When you use the Application, we may automatically collect the following types of information:
The Application offers optional login via Google, Apple, Naver, or Kakao accounts. When you choose to log in, the following information is collected:
Non-logged-in users: If you do not log in, none of the above information is collected. Core features (schedule creation, map usage, etc.) are fully available without login.
The Application processes your device's location information for the following features:
We do not collect phone numbers, government IDs, or other sensitive personal identifiers.
Schedule and travel planning data you create within the Application is stored locally on your device.
Logged-in users: Your schedule data and saved places are additionally synchronized to Firebase cloud servers (Google Cloud) via encrypted communication. This is for cross-device data synchronization and backup purposes. Cloud data is associated with your account only and accessible only by you.
When you use route calculation or place search features, limited data (such as search queries, place names, or coordinates) may be transmitted to third-party map and transportation service providers (Google Maps, Naver Maps, Kakao, T Map, ODsay, OSRM, etc.) solely for processing your request. This data is not stored by us.
Schedule data may include the following information:
When you share a schedule, the following information is stored on our servers in a publicly accessible form:
Shared schedules can be viewed by anyone with the share link. Authors can delete their shared schedules at any time.
Together Mode allows multiple users to co-edit schedules and share locations in real time. When using this feature, the following data is processed:
| Data Collected | Purpose | Retention |
|---|---|---|
| User-chosen display name | Identifying session participants | 24 hours after session ends |
| Real-time GPS coordinates (approx. every 5 seconds) | Location sharing between participants | 24 hours after session ends |
| Online/offline status | Showing participant activity status | 24 hours after session ends |
| Schedule editing data | Real-time co-editing | 24 hours after session ends |
| Unique session user ID | Distinguishing users within a session | Stored permanently in device localStorage |
Important: When you join a Together Mode session, all participants can see each other's display names and real-time locations. Anyone with the session link can join, so please share the link only with people you trust. Session data is stored in Firebase Realtime Database and is automatically deleted upon session expiration (24 hours).
The Application may access your camera and photo library for the following purposes:
Camera and photo library access requires your explicit permission and only occurs after you grant it.
The Application offers a feature to search for landmarks and tourist attractions using photos. When you use this feature:
The Application provides text translation for multilingual support. When using the translation feature:
The Application may display schedule information through device home screen widgets or Live Activities (iOS). Data displayed in widgets is processed on the device, and no additional server transmission occurs for widget display.
The Application searches for images to display place information. During this process:
For travel cost calculations, exchange rate information is retrieved from the Frankfurter API (based on European Central Bank data). No personal information is transmitted during this process.
The Application displays advertisements provided by Google AdMob. The Application does not collect IDFA (iOS) or Google Advertising ID (Android), and does not request App Tracking Transparency permission. AdMob may process the following information to deliver ads:
This information may be used to provide non-personalized advertising.
For more information, please review Google's Privacy Policy.
You may opt out of personalized advertising at any time:
The Application uses the following third-party services that may collect and process data in accordance with their own privacy policies:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication (Google LLC) | User authentication (Google/Apple/Naver/Kakao Sign-In) | Link |
| NAVER Corp. (Naver Login) | User authentication (Naver account login) | Link |
| Kakao Corp. (Kakao Login) | User authentication (Kakao account login) | Link |
| Firebase Firestore (Google LLC) | Cloud data sync & shared schedule storage | Link |
| Firebase Realtime Database (Google LLC) | Together Mode real-time collaboration data | Link |
| Firebase Hosting (Google LLC) | Shared schedule web pages | Link |
| Apple Inc. | User authentication (Apple Sign-In) | Link |
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Maps Platform (Google LLC) | Map display, route planning, place search, geocoding | Link |
| Naver Maps API (NAVER Corp.) | Map display, place search, route planning | Link |
| Kakao (Kakao Corp.) | Place search, nearby search, reverse geocoding, driving route planning | Link |
| T Map (SK Telecom / SK Open API) | POI search, geocoding/reverse geocoding, pedestrian/driving/transit route planning | Link |
| ODsay Lab | Domestic public transit route planning (South Korea) | Link |
| OpenStreetMap Community (Photon, OSRM, Overpass API) | International place search, driving/walking route planning, area information | Link |
| HERE Technologies (HERE Global B.V.) | International place search, reverse geocoding, route planning | Link |
| Mapbox, Inc. | International map display, place search, reverse geocoding, route planning | Link |
| Geoapify GmbH | International place search, nearby search, reverse geocoding, route planning | Link |
| Transitous / OpenTripPlanner (Open Source) | International public transit route planning | Link |
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Gemini API (Google LLC) | AI-powered schedule generation, travel planning, concierge service | Link |
| Groq, Inc. | AI-powered schedule generation, travel planning (fallback) | Link |
| Cerebras Systems, Inc. | AI-powered schedule generation, travel planning (fallback) | Link |
| OpenAI, Inc. | AI-powered schedule generation, travel planning, concierge service (fallback) | Link |
| Cloudflare Workers AI (Cloudflare, Inc.) | Image-based place search (image analysis & description generation) | Link |
| Google Cloud Vision API (Google LLC) | Image-based place search (landmark & label detection) | Link |
| Google Cloud Translation API (Google LLC) | Multilingual text translation | Link |
| MyMemory Translation API (Translated s.r.l.) | Multilingual text translation (fallback) | Link |
| Service | Purpose | Privacy Policy |
|---|---|---|
| Unsplash, Inc. | Place image search and display | Link |
| Wikimedia Foundation (Wikipedia, Wikimedia Commons) | Place image and information search | Link |
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google AdMob (Google LLC) | Advertising | Link |
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare, Inc. (Workers, Pages) | API proxy server operation, web hosting, API key protection | Link |
We only share the minimum data necessary for the operation and improvement of the Application with these providers. No personal identifiers (name, email, account info) are transmitted to third-party services except for Firebase Authentication and Apple Authentication.
The Application uses AI-powered services to provide automatic schedule generation, travel plan recommendations, and concierge assistance. When you use these features:
Account data (profile, schedules, saved places): Retained until account deletion.
Shared schedule data: Retained until deleted by the author or upon account deletion.
Together Mode session data (display names, locations, edits): Automatically expires 24 hours after session creation.
API response cache data: Retained for up to 7 days, then automatically deleted.
Automatically collected data (such as device information and usage analytics) is retained for up to 24 months from the date of collection, after which it is anonymized or deleted.
Third-party advertising data collected by AdMob is retained according to Google's data retention policies.
If you wish to request deletion of any data associated with your account or device, you can use the Account Deletion feature within the app (Settings > Account Deletion), or contact us at [email protected]. We will respond within 30 days.
The Application is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.
If you believe a child has provided personal information through the Application, please contact us at [email protected], and we will promptly take steps to delete such information.
We implement reasonable technical and organizational measures to protect information processed through the Application, including:
However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Your information may be transferred to and processed in countries outside of your country of residence for the purpose of providing the Service:
| Recipient | Country | Purpose | Data Transferred |
|---|---|---|---|
| Google LLC (Firebase Auth, Firestore, Hosting) | United States | User authentication, data sync, shared schedule storage | Email, name, profile photo, UID, schedule data, saved places |
| Google LLC (Firebase Realtime Database) | United States (Singapore) | Together Mode real-time collaboration data | Display name, GPS coordinates, online status, schedule editing data |
| Google LLC (Cloud Vision API, Cloud Translation API) | United States | Image-based place search, text translation | Photo image data, text for translation |
| Google LLC (AdMob, Maps Platform) | United States | Advertising, map services | Device info, IP address, search queries |
| OpenAI, Inc. | United States | AI-powered schedule generation, travel planning, concierge | Place names, coordinates, search queries, user-entered text (no personal identifiers) |
| Cloudflare, Inc. | United States and global edge network | API proxy, image analysis (Workers AI), web hosting | IP address, API request data, photo image data |
| OpenStreetMap-based services (Photon, OSRM, Overpass) | Germany, Europe, etc. | International place search, route planning | Search queries, coordinates |
| Groq, Inc. | United States | AI-powered schedule generation, travel planning (fallback) | Place names, coordinates, search queries, user-entered text (no personal identifiers) |
| Cerebras Systems, Inc. | United States | AI-powered schedule generation, travel planning (fallback) | Place names, coordinates, search queries, user-entered text (no personal identifiers) |
| HERE Global B.V. | Germany (Netherlands) | International place search, reverse geocoding, route planning | Search queries, coordinates |
| Mapbox, Inc. | United States | International map display, place search, route planning | Search queries, coordinates, IP address |
| Geoapify GmbH | Germany | International place search, nearby search, reverse geocoding, route planning | Search queries, coordinates |
| Transitous (Open Source) | Europe | International public transit route planning | Origin/destination coordinates |
| Translated s.r.l. (MyMemory) | Italy | Text translation (fallback) | Text for translation |
| Unsplash, Inc. | Canada | Place image search | Search queries |
| Wikimedia Foundation | United States | Place image and information search | Search queries, place names |
Transferred data is protected in accordance with each service provider's privacy policy. We ensure that appropriate safeguards are in place for any cross-border data transfer. Domestic Korean services (Kakao, T Map, ODsay, Naver) process data within South Korea.
If you are located in the European Economic Area, the following additional provisions apply under the General Data Protection Regulation (GDPR):
For GDPR purposes, Ryan Kim Studio acts as the data controller for personal data processed in connection with the Application. You may contact the data controller at [email protected].
For users in the EEA, we obtain consent for personalized advertising through a consent management platform compliant with the IAB Transparency and Consent Framework (TCF 2.2) and the ePrivacy Directive. You may withdraw your consent at any time through the Application's settings or by contacting us.
You have the right to:
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To exercise your rights, contact us at [email protected].
Depending on your jurisdiction, you may have the right to:
Logged-in users may delete their account directly through Settings > Account Deletion within the Application. Upon account deletion, the following data is immediately and permanently deleted:
Deleted data cannot be recovered. Data stored locally on the device is not affected by account deletion; users must uninstall or reset the Application separately to remove local data.
To exercise any of these rights, you may use the in-app features or contact us at [email protected]. We will respond within 30 days of receiving your request.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, provide notice within the Application.
Continued use of the Application after changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:
Ryan Kim Studio
Email: [email protected]
We will respond to your inquiry within 30 days.