Inko collects and processes only the information needed to provide, protect, and improve the service.
When enabled, Inko processes limited foreground activity and direct-message reply timing to provide country-level time-of-day engagement insights. Activity records include account and installation identifiers, observed time, device time zone, local date and hour, UTC offset, and declared nationality. Reply-processing records can include message, room, and participant identifiers and message timestamps; they do not include message body text.
For this feature, processed activity-capture queue records are deleted after 7 days. Per-user activity slots, reply-processing records, and reply summaries are deleted after 90 days. Expired reply windows are deleted within 24 hours after expiry, and obsolete aggregate snapshots are deleted after 48 hours. Public country and time-of-day results are available only when the configured privacy thresholds are met: at least 30 users per country, 10 users per time slot, 30 reply outcomes, and 14 observation days.
Location sharing is optional and opt-in. Users can deny location permission, stop sharing location, or turn off nearby discovery features. If location sharing is not active, the app may still show general city-level community information, but nearby user lists are limited.
When a user opts in, Inko may process precise latitude and longitude internally for distance calculation, abuse prevention, and safety filtering. Precise latitude and longitude are not displayed to other users and are not returned in map, city, nearby, profile, chat discovery, Hour, or Bingo API responses.
Other users see only approximate location signals such as city, district, nearby, within-city, or aggregated map clusters. Map cluster coordinates are city centers or rounded/geohash display coordinates, not a user's raw GPS coordinate. Single-user clusters are hidden to reduce location inference risk.
Hour captures do not store raw latitude or longitude. Hour may use a user's existing opt-in shared location only for internal nearby filtering, and Hour grid responses do not display a user's precise capture location.
Bingo verification does not store, display, or return location in v1.0. Inko will not introduce Bingo location verification unless a separate opt-in product design, approximate display policy, retention period, and report/block safety filtering are reviewed and approved.
Location may be used for nearby users, city online counts, map clusters, profile discovery context, and starting chat connections from discovery. Blocked, hidden, reported, suspended, or otherwise restricted users are filtered from discovery where applicable.
Active shared location expires automatically and is no longer used for active discovery after its expiration time. Users can refresh their location by choosing to share again, or stop sharing to remove themselves from active nearby discovery.
Users can request account deletion in the app or at /account-deletion. During the compatibility rollout, a new request permanently deletes the account immediately. This action cannot be canceled or recovered. External storage deletion and Apple token revocation failures are retried in the background.
A new 30-day recovery request is not available until the account-deletion grace-period rollout is enabled on every server target. Requests already in the 30-day deletion-pending period remain cancellable before their scheduled deletion time after re-authentication with the same social login.
At permanent deletion, social links, profile and settings, relationship data, user-generated content payloads, and uploaded media are deleted, scrubbed, or replaced with non-identifying tombstones needed for conversation integrity. Records that must be retained under applicable law are separated from general account data, access-restricted, and deleted when the applicable period ends. Where Korea's e-commerce rules apply, advertising records may be retained for 6 months, contract/cancellation and payment/supply records for 5 years, and consumer complaint/dispute records for 3 years.
인코는 서비스 제공과 안전 운영에 필요한 계정, 프로필, 사용자 콘텐츠, 선택적 위치, 기기/push token, 로그, 진단, 결제/구독 정보를 처리합니다. Engagement 기능이 활성화된 경우 국가별 시간대 참여 인사이트 제공을 위해 제한된 포그라운드 활동과 1:1 채팅 응답 시간을 처리합니다. 활동 기록에는 계정·설치 식별자, 관측 시각, 기기 시간대, 현지 날짜·시간, UTC 오프셋, 신고 국적이 포함되고, 응답 처리 기록에는 메시지·채팅방·참여자 식별자와 메시지 시각이 포함될 수 있으나 메시지 본문은 포함하지 않습니다. 처리 완료된 활동 수집 대기열은 7일, 사용자별 활동 슬롯·응답 처리 기록·응답 요약은 90일 후 삭제합니다. 만료된 응답 창은 만료 후 24시간 이내에, 더 이상 사용하지 않는 집계 스냅샷은 48시간 후 삭제합니다. 공개 국가·시간대 결과는 국가별 30명, 시간대별 10명, 응답 결과 30건, 관측 14일 이상의 보호 기준을 충족한 경우에만 제공합니다. 위치 공유는 명시적 선택 사항이며 정확한 위도/경도는 다른 사용자에게 표시하지 않습니다. 호환 배포 기간의 신규 탈퇴 요청은 계정을 즉시 영구 삭제하며 철회하거나 복구할 수 없습니다. 신규 30일 복구 유예는 모든 서버 target에서 기능이 활성화된 뒤에만 제공되지만, 이미 삭제 대기 중인 요청은 삭제 예정 시각 전까지 동일한 소셜 로그인으로 재인증해 철회할 수 있습니다. 영구 삭제 시 일반 계정 데이터는 삭제·비식별화하고, 관계 법령상 보존 의무가 있는 기록만 일반 데이터와 분리해 해당 기간 동안 제한적으로 보존합니다.