Privacy policy

1. Operator and contact

The operator of the service and the person responsible for privacy: the developer of the Korea Drone Zones app. Channel for questions and for requests to access, correct, delete or restrict processing and to withdraw consent: [email protected] or t.me/neoklip. A reply is usually provided within 30 days.

2. What data is processed

3. Device location

The website does not request the browser's system geolocation. The user picks the flight point by tapping the map, by search, by entering coordinates or with the check-the-centre command.

From version 2.0 the Android app can determine the current location, but only after the user has pressed “My location” and granted access. The permission is requested for foreground use only: there is no background location, route tracking or history of visited points.

The coordinates do not leave the device. The zone check runs on them right in the app: zone boundaries, cultural heritage and rules are already loaded into the app and stored in it. The coordinates are not passed to the operator, not sent to any servers, not written to logs, not kept between launches and not shared with third parties. The app's network requests are: downloading the shared list of operational NOTAMs, zone snapshot updates and the shared weather forecast for all of Korea from dronezone.kr, loading the NAVER map for the visible area and, on an explicit user action, a search query. None of them contains the user's coordinates. The absence of coordinates in network requests is checked automatically in every build. The “Copy” and “Share” buttons on the point card work only when pressed: the first puts the coordinates of the selected point on the clipboard, the second passes a link to it to the app the user has chosen in the Android system menu. The app itself sends nothing in either case.

The map follows the user's actions: after “My location” is pressed it moves to the found point, and the NAVER Maps SDK loads the imagery of that area. The coordinate itself is not transmitted, but the requested map fragments show which area is on the screen.

Since the operator does not collect, use or provide personal location information, processing entirely on the device does not, in the operator's view, constitute an activity that requires a permit or notification under the Act on the Protection, Use, etc. of Location Information of the Republic of Korea (위치정보의 보호 및 이용 등에 관한 법률). If the processing model changes, the policy will be updated before such a version is released.

The permission can be revoked in the Android settings at any time. After that, “My location” simply stops working, and the other ways of choosing a point remain.

4. Transfer and processing outside the Republic of Korea

Network providers may process data outside the Republic of Korea. The transfer happens over HTTPS automatically when the service is accessed or when search is used. Basis for the necessary infrastructure processing: performance of the function requested by the user and the information in this policy; the optional search is started only by a separate command of the user.

A search by name in Korean or in Latin script goes at the same time to NAVER Cloud Platform inside the Republic of Korea and to the OpenStreetMap Foundation outside it: NAVER finds businesses and addresses, OpenStreetMap finds cities and districts. Therefore the search string in any language leaves the country, but only to the recipients in the table below: Cloudflare as the service infrastructure and the OpenStreetMap Foundation.

You can refuse the transfer abroad by not using the search field. Showing the map does not require such a transfer: on the website the basemap is served from the service infrastructure, and in the app the map is loaded by NAVER inside the Republic of Korea. The main point can be chosen by tapping the map or by entering coordinates. Fully refusing Cloudflare is impossible while using the service, since the app is delivered through it.

5. Storage and deletion

There is no own user database and no search history. A search response is automatically removed from the edge cache no later than 24 hours after it was refreshed. Pages Functions does not keep real-time logs. When the purpose of processing ceases or a justified request is received, the data available to the operator is deleted or anonymized, except where retention is required by law. Data in device memory disappears when the page is closed; the user deletes URLs and history with the browser or Android.

6. Security

Data is transmitted over HTTPS; Android forbids unencrypted traffic. The app contains no advertising or analytics SDKs. Access to the infrastructure is restricted, and published builds are checked for secrets. No method of transmission over the internet gives an absolute guarantee of security.

7. User rights

You can request confirmation of processing, access, correction, deletion or suspension of processing, or withdraw consent through the contact in section 1. Fulfilling a request may require reasonable identity verification and details that allow the request to be found. A decision can be appealed to the operator and to the competent personal data protection authority.

8. Children

The service is not specifically intended for children and does not knowingly request their personal data. If the operator learns that a child's data has been submitted through search, it will be deleted to the extent available to the operator.

9. Data providers and links

The web map basemap is built from OpenStreetMap data under the ODbL license; in the app the map is drawn by the NAVER Maps SDK. The zone and NOTAM layers use open or officially published materials of V-World and AIM Korea. The weather forecast in the app is based on Open-Meteo data (CC BY 4.0), and the Kp index on NOAA SWPC data: the service's server fetches them for all of Korea at once, and the app does not contact these providers. Following an external link opens a service of another operator with its own policy. The license terms of components and datasets are listed in the third-party notices (in Russian).

10. Changes to the policy

If the set of data, providers or purposes of processing changes materially, the policy is updated before the corresponding version of the app is released. The version date is shown at the top; the current version (the Russian original) is always at dronezone.kr/privacy, and this translation at dronezone.kr/en/privacy.