Effective date: 2026-10-08
At a glance
1. Introduction
RutiLand is operated by Keuhan Co., Ltd. (“Keuhan”, “we” or “us”). We take your privacy seriously and handle personal information in line with the Personal Information Protection Act of Korea (PIPA) and other applicable laws. This Privacy Policy explains what personal information we collect and why, how we use, store and delete it, and what rights you have.
RutiLand is a productivity app in which completing routines, tasks and focus sessions grows your own cozy garden (your “land”). Friends' gardens connect into 2x2 squares as neighbors, forming a small, private world shared with the people close to you.
This policy applies to all RutiLand services we provide, including the web (https://rutiland.com, on mobile web and desktop) and the iOS and Android apps (together, the “Service”).
2. Information we collect and how
We collect only the minimum personal information needed to provide the Service. RutiLand has no passwords, so we never collect or store one. We do not collect resident registration numbers or other unique identifiers, or sensitive information.
| Category | What we collect | When |
|---|---|---|
| Account | Email address, Apple or Google account identifier, name or nickname, @handle, avatar settings, language (locale), time zone | When you sign up or sign in, and when you set up or change your profile |
| Your content | Routines (including schedules, reminders, notes and visibility), daily check-ins, tasks, lists and subtasks, focus sessions, garden (land) state and item layout, dragon name, guestbook messages, gifts and gift messages, cheers | When you enter it or use a feature |
| Social connections | Friends, friend requests, neighbor links and squares, invites, blocks, reports | When you use social features such as friends and neighbors |
| Device and notifications | A device ID generated by the app, platform, app version, OS version, push token (FCM token in the apps, Web Push subscription in browsers) | When you open the app or website, and when you allow notifications |
| Service logs | IP address, access times, error logs, and minimal usage events used to keep the Service stable | Generated automatically as you use the Service |
| Optional | Land snapshot images you create for sharing | When you create a snapshot |
We collect personal information in the following ways:
You are free to write whatever you like in routine names and notes. We recommend not entering sensitive details such as health conditions. We do not classify or analyze what you write as sensitive information.
3. How we use your information
We use personal information only for the purposes below. If a purpose changes, we will take the steps required by PIPA.
We process personal information to the extent needed to perform our contract with you (providing the Service), to comply with legal obligations, and as you have consented (for example, allowing push notifications or creating a land snapshot).
We do not sell your personal information. We do not use third-party advertising trackers, we do not collect behavioral data for targeted advertising, and we do not profile you for ads. We also do not make decisions that significantly affect your rights or obligations based solely on automated processing.
4. What other users can see
RutiLand is built around friends and neighbors, so some information is visible to other users according to the visibility you choose. You can change these settings at any time in Settings.
| Item | Visibility | Who can see it |
|---|---|---|
| Garden (land) | Public | Anyone, including people who open a share link |
| Garden (land) | Friends | Your friends and neighbors |
| Garden (land) | Private | Only neighbors you are connected with |
| Routines | Public | Anyone |
| Routines | Friends | Your friends and neighbors |
| Routines | Private | Only you |
Information that other users see because of the visibility you chose is shared at your direction. It is not a provision of personal information to third parties by us.
5. How long we keep information
As a rule, we keep your personal information until you delete your account. We never delete your garden or records just because you haven't visited in a while. The exceptions are listed below.
| Information | Retention | Basis |
|---|---|---|
| Account information and your content | Until you delete your account | Performing our contract with you |
| Email sign-in codes | 10 minutes after issue (then expired and unusable) | Sign-in security |
| Access logs (IP address, access times, etc.) | 3 months | Protection of Communications Secrets Act |
| Backups | Purged within 30 days after account deletion | Backups kept for disaster recovery |
| Other records required by law | The period set by the relevant law | Applicable laws |
RutiLand is currently free. If paid features are introduced, we will keep records of contracts and withdrawals of offers, and of payments and supply of goods, for 5 years, and records of consumer complaints and dispute handling for 3 years, as required by the Act on the Consumer Protection in Electronic Commerce.
6. Account deletion and destruction of data
You can delete your account at any time in Settings, and deletion takes effect immediately. When you delete your account:
Anything that remains after deletion is kept only in a form that can no longer identify you. Data in backups is purged within 30 days after deletion. Information we must keep by law (for example, access logs kept for 3 months) is stored separately from other data for the required period and then destroyed.
Procedure: we destroy personal information without delay once its retention period ends or its purpose has been achieved. Method: electronic files are deleted using technical methods that prevent recovery, and any paper records are shredded or incinerated.
Uninstalling the app does not delete your account. To delete your account, use the account deletion option in Settings.
7. Sharing with third parties
We do not provide your personal information to third parties, except:
If personal information is transferred because of a merger or a transfer of business, we will notify you in advance of the transfer and of the recipient as required by PIPA, and you may delete your account if you do not wish your information to be transferred.
8. Service providers (processing outsourcing)
To provide the Service reliably, we entrust certain processing to the service providers below. Our contracts with them prohibit processing for any other purpose and require technical and administrative safeguards, restrict sub-processing, and set out liability for damages. We oversee how they handle personal information.
| Provider | Services | Location | Retention |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, database, file storage (including land snapshot images), email delivery (Amazon SES) | Republic of Korea (AWS Seoul region, ap-northeast-2) | Until account deletion or the end of the contract |
| Google LLC | App push notifications (Firebase Cloud Messaging), Google Sign-In | USA | Until the notification is delivered or sign-in is processed |
| Apple Inc. | Sign in with Apple, iOS push notifications (APNs) | USA | Until sign-in is processed or the notification is delivered |
| Browser push services (Apple Inc., Google LLC, Mozilla Corporation, etc.) | Delivering web browser push notifications (Web Push) | USA and other locations of each provider's servers | Until the notification is delivered or the subscription is removed or expires |
If our providers or the services they perform change, we will update this Privacy Policy.
9. International transfers
Your data is stored in the AWS Seoul region in the Republic of Korea. To provide sign-in and push notifications, however, some personal information is transferred outside Korea as described below. These transfers are processing outsourcing necessary to perform our contract with you, and we disclose them in this policy as permitted by Article 28-8 of PIPA.
| Recipient | Country | Items transferred | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Google LLC | USA | FCM token, notification content (title and body), Google Sign-In credentials | Sending app push notifications, processing Google Sign-In | When a notification is sent and when you sign in with Google, over an encrypted network (TLS) | Until the notification is delivered or sign-in is processed (per Google's policies) |
| Apple Inc. | USA | Sign in with Apple credentials (authorization code and tokens), iOS device push token, notification content (title and body) | Processing Sign in with Apple, revoking tokens on account deletion, sending iOS push notifications | When you sign in with Apple, when you delete your account, and when a notification is sent, over an encrypted network (TLS) | Until sign-in is processed or the notification is delivered (per Apple's policies) |
| Browser push services (Apple Inc., Google LLC, Mozilla Corporation, etc., depending on your browser) | USA and others | Web Push subscription (push endpoint), encrypted notification content | Delivering web browser push notifications | When a notification is sent, over an encrypted network (TLS) | Until the notification is delivered or the subscription is removed or expires |
Web Push notification content is encrypted so that only your browser can decrypt it. Browser push services cannot read what the notification says.
You can contact the recipients about privacy here:
If you don't want your information transferred abroad, you can sign in with an email code instead of Apple or Google, and turn off push notifications in your device, browser or app settings. You won't be able to use that sign-in method or push notifications, but everything else, such as tracking routines and growing your garden, keeps working.
10. Cookies and local storage
We use cookies and browser local storage only where needed to provide the Service. We do not use advertising cookies or third-party tracking cookies.
| Type | What is stored | Purpose |
|---|---|---|
| Cookie (httpOnly) | Refresh token | Keeping you signed in |
| Local storage | Device ID, language, theme, onboarding draft | Telling your devices apart, remembering display settings, keeping unfinished onboarding input |
You can delete or block cookies and site data at any time in your browser settings. If you delete or block the sign-in cookie, you will be signed out or will not stay signed in. If you clear local storage, settings such as language and theme are reset. In the apps, information for the same purposes is stored on your device and is removed when you uninstall the app.
11. Your rights
You can exercise the following rights over your personal information at any time:
For requests you can't complete in the Service, email support@rutiland.com. After verifying your identity, we will handle your request and let you know the result within 10 days of receiving it. You may also exercise your rights through a legal representative or an authorized agent, who must submit a power of attorney.
A request may be limited in whole or in part where PIPA allows, for example where another law specifically provides otherwise or where it could unfairly harm someone else's rights. If so, we will tell you why.
12. Children under 14
RutiLand does not allow children under 14 to sign up or use the Service, and we do not knowingly collect personal information from children under 14.
If we learn that a child under 14 has signed up, we will delete the account without delay. If you believe your child under 14 has signed up, please let us know at support@rutiland.com.
13. How we protect your information
We take the following measures to keep personal information safe:
We do our best to protect your information, but no system on the internet can be guaranteed to be perfectly secure. Please keep your Apple, Google and email accounts secure, and never share your sign-in code with anyone.
14. Privacy officer and contact
We have designated a privacy officer who oversees the handling of personal information and handles privacy questions, complaints and remedies:
Send requests for access and any other privacy questions to the email above, and we will respond and act on them without delay.
15. Other ways to get help
If you need further help with a privacy concern, you can also contact the following Korean authorities, which are independent of us:
16. Changes to this policy
We may update this Privacy Policy when laws, the Service or our policies change. We will announce changes in the app and on our website at least 7 days before they take effect, and at least 30 days before for changes that significantly affect your rights, such as collecting new items or using information for new purposes.
If you would like a previous version of this policy, email support@rutiland.com.
This Privacy Policy takes effect on October 8, 2026.