IGZIG Privacy Policy

1. Overview

ORIOTI (the "Company") provides the mobile app "IGZIG" (the "Service") in compliance with the Personal Information Protection Act, the Act on the Protection and Use of Location Information, and other applicable laws, and maintains this Policy to handle your information safely.

The Service has no accounts. It does not require sign-up or login and does not collect identity information such as your name, contact details, or date of birth. Your location history is stored on your device (and, while iCloud Backup & Sync is on, in your own iCloud) and is never stored on the Company's servers. The Service is built so that the Company cannot know where you have been; this Policy describes that structure.

2. Information processed only on your device

The following information is stored and processed only on your device (and, while iCloud Backup & Sync is on, in your own iCloud). The Company does not collect, receive, or have any access to it.

• Location history: routes travelled, places you stayed, and times. With location permission set to "Always", recording continues without opening the app
• Motion and sensors: activity type (walking, running, cycling, driving) from motion detection, barometric pressure (to estimate underground parking levels)
• Car connection: the name of the Bluetooth or CarPlay device connected while driving (used to tell cars apart and detect parking)
• Parking: parking location, notes you enter such as level and pillar number, pillar text read by the camera
• Photo library: capture time and location metadata of your photos, shown next to the day's record. Photo files are never copied or sent anywhere. The exception is a sticker you make by long-pressing a photo (the cut-out subject only): it is stored in the app's records on your device and, while iCloud backup is on, backed up to your own iCloud. Cutting out is done on the device. Photos you take with "Shoot it like then" and Then/Now cards are saved to your own photo library
• Things you enter: place names, places to visit, saved courses, collections, favorites, area groupings, car names
• Diagnostic log: app state such as GPS on/off, trip start/end, memory use, and errors. Kept only on the device and deleted automatically after 30 days
• Settings: app lock (Face ID) on/off, notification preferences
• Siri, Shortcuts and Spotlight: when you ask Siri or a shortcut (for example, "Where did I go yesterday"), the app builds the answer (place names, distance, visit counts) on your device and hands it to iOS. Answers are given only on an unlocked device (a locked device asks for Face ID, Touch ID or the device passcode first), and if app lock is on, the app opens and asks for app lock authentication instead of answering. If app lock is off, or you turn on "Find places in Spotlight" in Settings, place names and visit summaries are added to the Spotlight search index on your device; they are removed when you turn app lock on or erase all records. Processing of the Siri request itself follows Apple's privacy policy
• Apple Watch: if you use the IGZIG watch app, your parking location, parking lot name, spot text and time, the name of the place you're at now and how long you've stayed are sent directly from your iPhone to your paired watch

Face ID and Touch ID authentication is handled by iOS on the device; the Company has no access to biometric data.

3. Information transmitted to the Company

The Service communicates with a server operated by the Company (orioti.com) only in the following case.

• Korean place-name lookup (Kakao relay): to find the name and address of a place you stayed, name suggestions, nearby places worth visiting, and parking-lot names, coordinates and search words you type are sent to the Kakao Local API. The app rounds coordinates to four decimal places (about 11 m) before sending, and the Company's server only passes them on to Kakao. You can turn this off in Settings → Privacy; the app then uses Apple Maps only
• Server access log: the IP address, time, request path, response status, and app version of relay requests are recorded in the server access log. Coordinates and search terms are not logged. The log is used only to prevent abuse and respond to outages and is deleted automatically after 14 days

The Company does not link server access logs to any individual user and does not build per-user profiles. No advertising or tracking identifiers are used.

4. Information sent elsewhere (iCloud, family sharing, shared images)

• iCloud backup and multi-device sync: on by default, and can be turned off under Settings → Backup & Records, "iCloud Backup & Sync". While on, your records are saved once a day to your own Apple ID's iCloud (CloudKit private database) and synced with your iPad on the same iCloud. The Company cannot access this database. If you enable Apple's Advanced Data Protection, it is end-to-end encrypted. When off, nothing new is uploaded; existing backups can be removed with "Erase all records" or in iOS iCloud storage settings
• Family car sharing: when you invite family members or join a share you were invited to, your parking location, parking place name, spot label, time, and car name are delivered to the members of that share through the share owner's iCloud shared database. The app asks before joining when you receive an invitation. It does not pass through the Company's servers. Ended parkings are removed from the share after 30 days; you can stop sharing at any time, and the parkings you posted are removed from the share when you leave
• Shared images and record file export: files you create yourself; where to send them is your choice

5. Purposes of use

• Automatic recording of routes and places, and looking back by day, month, and year
• Detecting and showing your parking location, and sharing it with family
• Finding names and addresses of places you stayed, and recommending nearby places and courses
• Reminiscence when you return to a spot you visited long ago ("Standing there again")
• Error analysis and performance improvement (on-device diagnostic log; statistics from the server access log)
• Preventing abuse of the Service (rate limiting on the relay server)

6. Retention period

• On-device records: until you delete them. "Erase all records" in Settings → Backup & Records deletes everything, and deleting the app removes on-device records as well
• Diagnostic log: 30 days
• iCloud backup, sync, and family-sharing data: until you delete them in the app or in iOS Settings → iCloud storage management
• Server access log: 14 days

The Company does not receive payment information. Any payments are processed by the Apple App Store, which keeps receipts and refund records; therefore no transaction records subject to retention under the E-Commerce Act arise on the Company's side. If you contact us by email, the content and your email address are kept for 3 years after the inquiry is handled (consumer complaint and dispute records).

7. Provision to third parties

The Company does not provide your information to third parties, except where required by law, upon a lawful request from an investigative authority, or with your separate consent. Because the Company does not hold your location history, there is no location history to provide even if requested.

8. Processors and international transfers

• Apple Inc. (iOS, iCloud/CloudKit, MapKit, Siri/Spotlight, App Store): handling of location, motion, and photo permissions; handling of Siri and Shortcuts requests and Spotlight search; your iCloud storage; map display and place search (worldwide, and as a fallback in Korea); app distribution. Coordinates are sent to Apple for map searches under Apple's privacy policy. iCloud data is stored on Apple servers in the region of your Apple ID
• Google LLC (Google Cloud, us-central1, United States): hosting of the Company's server (orioti.com). The relay requests and access logs in Section 3 pass through or are stored on servers located in the United States (international transfer). Items transferred: rounded coordinates (relayed, not stored), IP address, time, request path, app version; retention 14 days
• Kakao Corp. (Kakao Local API, Republic of Korea): looks up place names and addresses from rounded coordinates and search terms, under Kakao's privacy policy

You can avoid these transfers by turning off Kakao place lookup and iCloud Backup & Sync in Settings and by not using family car sharing. In that case, Korean business-name lookup, backup and restore, and family sharing are unavailable.

9. Destruction

Information whose retention period has ended or whose purpose has been fulfilled is destroyed without delay. On-device information is erased immediately when you delete it; server access logs are removed irrecoverably by automatic rotation.

10. Your rights

Because all of your records are on your device (and in your own iCloud), you can view, edit, and delete them in the app at any time. Location, motion, photo, and camera permissions can be revoked in iOS Settings at any time; the related feature simply stops working, with no other disadvantage.

Because the Company holds no information that identifies you, it cannot locate, disclose, or delete a specific user's information on request. Other inquiries sent to support@orioti.com are answered within the period set by applicable law.

Children under 14 may not use the Service.

11. Notice regarding location information

The Service collects, stores, and uses your device's location information only on the device; the Company does not collect, store, use, or provide location information. Sending rounded coordinates to Kakao or Apple for place-name lookup is immediate processing at your request and is not retained by the Company. You may change location permission to "While Using" or turn it off, in which case automatic recording stops or is partial.

If the Company adds a feature that collects or stores location information on servers (for example anonymous aggregation), it will complete any registration required by law, revise this Policy with advance notice, and start only after obtaining your consent.

12. Security measures

• Record files are protected by iOS Data Protection (accessible after first unlock); records collected briefly after a restart before the first unlock are merged into the main record at unlock and then deleted. With app lock (Face ID / Touch ID) enabled, authentication is required each time the app opens
• Surroundings of your home, workplace, and school are automatically masked in anything shared outward
• Coordinates sent for place lookup are rounded to about 11 m, and requests and responses are not written to the device disk cache
• External API keys are kept only on the Company's server, never in the app; the server accepts requests only from the app and rate-limits them
• All communication is encrypted with TLS. Coordinates and search terms are not written to server access logs
• No advertising SDKs, analytics SDKs, or tracking identifiers are used

13. Privacy officer

Name: Yunju Jung (CEO) · Email: support@orioti.com · Phone: +82-10-9523-5257

You may also report or consult on privacy infringements with the Personal Information Infringement Report Center (privacy.go.kr, ☎ 118), the Supreme Prosecutors' Office Cyber Investigation Division (☎ 1301), or the National Police Agency Cyber Bureau (ecrm.police.go.kr, ☎ 182).

14. Changes to this Policy

This Policy takes effect on October 18, 2026. Changes are announced in the app or on this page at least 7 days before they take effect; changes unfavorable to users or otherwise significant are announced 30 days in advance.

Rules for using the Service are set out in the Terms of Service.

Business information