Privacy Policy

Last updated: October 6, 2026

At Travel Korea, operated by Travigeon (“we,” “our,” or “us”), we value your trust. This policy describes how we collect, use, and protect your information when you use our mobile application and website to plan your medical tourism journey in South Korea.

1Introduction

Travel Korea is a platform designed to connect international travelers with medical clinics and tourism experiences in South Korea.We act as a facilitator, not a medical provider. We do not provide medical advice, diagnosis, or treatment. AI-generated clinic suggestions and itineraries are for information only and are not medical advice.

2Information We Collect

We collect information to provide our services, match you with clinics, and generate itineraries. This includes:

Personal Information

  • Name, Email Address, and Phone Number (collected only when you voluntarily submit a Consultation Request or register as a clinic owner).
  • We do not require you to create an account to browse clinics or use the app's patient features.

Health & Interest Data

  • Procedure Interests: Categories of treatments you are interested in (e.g., “Dermatology”, “Rhinoplasty”).
  • Travel Preferences: Budget, travel dates, and tourism interests (e.g., “K-Pop”, “Food”).
  • Goals: Optional free-text goals you enter in the AI clinic matcher.
  • Note: We do not ask for medical records or diagnostic images. Please don't include personal medical details in free-text fields.

Consultation Requests

  • When you tap Book Consultation on a participating clinic, we collect your name, email address, phone number (optional), the procedure you are interested in, your travel dates, and an optional message.
  • Your message may contain health information if you choose to include it. The request is stored and shared with the clinic you selected so it can respond to you.

Location Data

  • Precise or approximate location (GPS), only if you choose to share it, to find clinics near you.
  • You can disable this in your device settings at any time.

Connection Data

  • Server Logs: Our servers log technical request data (such as IP address and device type) for security and troubleshooting.
  • We do not use advertising or tracking SDKs, and we do not track your behavioral usage patterns or screen interactions.

Clinic Owner Accounts

  • If you register as a clinic owner, we collect your name, email address, phone number, password, and clinic name. Your password is handled by our authentication provider (Supabase Auth) and stored only in hashed form.
  • We also collect the clinic details, doctor and procedure information, and photos of your clinic that you choose to upload. This content is submitted voluntarily and is displayed publicly on your clinic's profile.

Push Notifications

  • If you are a clinic owner and allow notifications, we store your device's push token on your account to alert you about new inquiries and account updates.
  • Notifications are delivered through Expo's push service and Apple Push Notification service (or Firebase Cloud Messaging on Android). New-inquiry notifications show the procedure the requester asked about (not their name). The token is removed from your account when you log out (while online) or delete your account, and you can turn notifications off in your device settings at any time.

3How We Use Your Data

  • 1Clinic Matching: We rank clinics on our servers using your selected procedures, goals, and preferred area (and your location, if you choose to share it). When AI features are used (in the latest version of the app, only if you allow them), your selected procedures, goals, travel dates, and preferred area are also sent to OpenAI's API to write short clinic summaries (see Section 4). Suggestions are for information only and are not medical advice.
  • 2AI Itinerary Generation: Your travel preferences and interests are processed by OpenAI's API to generate personalized travel plans (see Section 4). Generated itineraries are saved so they can be opened from their share link.
  • 3Translation: Some text in the service is translated using OpenAI's API.
  • 4Consultation Requests: To deliver your request to the clinic you selected and notify the clinic owner so they can respond.
  • 5Clinic Owner Accounts: To create and manage your account and clinic listing, review new owner registrations, and send you notifications about inquiries and your account.
  • 6Security: To protect the service and prevent abuse, for example by rate limiting requests using connection data such as IP address.

4AI Features (OpenAI)

The AI clinic matcher and AI trip planner use OpenAI's API. In the latest version of the app, we ask for your permission before the AI clinic matcher or trip planner sends anything to OpenAI, and nothing is sent unless you agree. Earlier versions of the app send these inputs when you submit the clinic matcher or trip planner, without asking first; please update the app to get this choice. On the website, your inputs are sent only when you submit the AI clinic matcher or trip planner form.

What is sent to OpenAI:

  • AI clinic matcher: The medical category, the procedures you select, your goals text (if you enter any), your travel timing, your preferred area, and whether you are an international patient.
  • AI trip planner: Your trip length, travel dates, budget level, interests, and preferred areas, plus the procedure you select if you include a clinic visit.

What is never sent: Your name, email address, phone number, and your device's exact location are never sent to OpenAI.

Turning AI Features Off: In the latest version of the app, you can turn AI features off at any time in the Profile tab (AI features (OpenAI)). While they are off, your clinic matcher and trip planner inputs are not sent to OpenAI.

If you are a clinic owner, the clinic address you enter may also be sent to OpenAI to convert it to Korean format for map placement. This is your clinic's business address, not your personal contact details.

5Third-Party Services

We use the third-party services below to operate our platform. Service providers that process personal data on our behalf do so only as needed to provide the service and under terms that require them to protect it at least to the standard described in this policy. Embedded content (TikTok, Instagram, OpenStreetMap) loads directly from those services, as described below:

  • Supabase: For secure database hosting, file storage (including uploaded photos), and clinic-owner authentication. Hosted on Amazon Web Services (AWS) in Mumbai, India.
  • Vercel: For hosting our website and the API used by the app, with servers in Seoul, South Korea.
  • OpenAI: For the AI clinic matcher and AI trip planner (see Section 4 for exactly what is sent), text translation, and converting clinic addresses for map placement.
  • Expo, Apple Push Notification service, and Firebase Cloud Messaging: For delivering push notifications to clinic owners using a device push token.
  • Naver Maps / NCP Geocoding: For displaying maps and converting clinic addresses into map locations.
  • Google Maps (Android) / Apple Maps (iOS): For displaying maps in the app.
  • OpenStreetMap: For displaying clinic location maps. The map loads directly from OpenStreetMap, which may receive technical data such as your IP address.
  • TikTok and Instagram: For embedded videos in the Trending section. We don't share your personal data with TikTok or Instagram. When you watch an embedded video, it loads directly from that service, which may set its own cookies and receive technical data such as your IP address.

6Data Sharing & International Transfer

Sharing with Clinics: We do not sell your data. We only share your consultation details (name, email, phone number if provided, procedure, travel dates, and message) with the clinic you choose, when you explicitly request a consultation with it. The clinic receives these details only to respond to your request, under terms that require it to protect them at least to the standard described in this policy.

Service Providers: We share personal data only with the service providers listed in Section 5 and the clinic you choose, only as needed to provide the service, and under terms that require them to protect it at least to the standard described in this policy.

International Transfer: Your information may be transferred to and processed in countries other than your own. Specifically:

  • Our database and file storage are hosted in India (Mumbai, via Supabase on AWS).
  • Our website and API run on servers in South Korea (Seoul, via Vercel).
  • Clinic inquiries are sent to medical providers in South Korea.
  • Other service providers listed in Section 5 (such as OpenAI, Expo, Apple, and Google) may process data in other countries, with the same protections described above.

By using our service, you consent to the transfer of your information to these jurisdictions.

7Data Retention & Account Deletion

Retention: We keep personal information while your account is active, or for as long as needed to provide the service (for example, so a clinic can respond to your consultation request). When an account is deleted, its personal information is deleted, except where we are required by law to keep certain information.

Deleting a Clinic Owner Account: In the app, open the Profile tab, tap Delete Account, and confirm with your password. This permanently deletes your owner account. If you are the only owner of your clinic, the clinic listing, its doctors, procedures, and inquiries, and the photos you uploaded are deleted as well.

Other Requests: To delete a consultation request you submitted or an itinerary you saved (please include its share link), or for any other deletion request, please email us at it@travigeon.com.

8Your Rights & Security

You have the right to access, correct, or delete your personal information. Clinic owners can delete their account directly in the app (see Section 7). For any other request, please contact us at it@travigeon.com.

Withdrawing Consent: You can withdraw your consent at any time:

  • AI features: Turn off AI features (OpenAI) in the Profile tab of the latest version of the app.
  • Location and notifications: Turn off Location and Notifications for the app in your phone's settings.
  • Clinic owner account: Delete your account in the app's Profile tab (see Section 7).
  • Everything else: Email us at it@travigeon.com to withdraw your consent, or to ask us to delete consultation requests you submitted or itineraries you saved (please include the itinerary's share link).

Withdrawing consent doesn't affect processing that already happened before you withdrew it.

We implement industry-standard security measures (encryption, secure HTTPS) to protect your data. However, no method of transmission over the internet is 100% secure.

9Children's Privacy

Our service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at it@travigeon.com so we can delete it.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Company: Travigeon

Email: it@travigeon.com