Privacy policy
Last updated · Sat 26 Sep 2026
Kaja collects the least information needed to book your ride and hand it to your driver, keeps it for a defined time, and deletes it. This policy explains what we collect, why, who receives it, where it is stored and what you can ask us to do. It is published under Article 30 of the Personal Information Protection Act of the Republic of Korea.
Article 1 — Purposes of collection and use
We use your personal data to: receive and confirm your booking request; assign a driver and let the driver meet you; send your confirmation, status link and service messages; handle changes, cancellations, delays and complaints; keep records the law requires; and prevent abuse of the service.
Article 2 — Data we collect
2.1 Required (booking form): name; email address; messenger of your choice (WhatsApp, Telegram, LINE or WeChat) and your handle or number on it; pickup and drop-off places; date and time; number of passengers and pieces of luggage; flight number for airport rides.
2.2 Optional: notes about the ride; a referral code; a message you attach to a change or cancellation request from your status link.
2.3 Collected automatically: the IP address and basic device and browser information of requests to our servers, and the time of each request, used for security and rate limiting. We do not collect your phone number unless you give it as your WhatsApp number, and we collect no payment information.
2.4 How we collect: the booking form and status link on our website, and messages you send us.
Article 3 — Retention
3.1 Booking data is kept for 1 year after the ride is completed or cancelled, to handle disputes and repeat bookings, and then deleted.
3.2 Where Korean law requires a longer period, we keep only the record the law names, for that period: records of contracts and their withdrawal, 5 years; records of consumer complaints or disputes, 3 years (Act on Consumer Protection in Electronic Commerce); records of website access, 3 months (Protection of Communications Secrets Act).
3.3 Your driver keeps the ride details only until 30 days after the ride and then deletes them (Article 10).
Article 4 — Your right to refuse
You may refuse to give us personal data. Because the required items are what a driver needs to meet you, we cannot book a ride without them. Optional items can always be left out.
Article 5 — Deletion
When the retention period ends, or when you ask us and no legal duty requires us to keep a record, we delete the data from our database and backups within the next scheduled deletion run, and the driver deletes it from the messaging app used for the ride.
Article 6 — Location data
Kaja does not collect or track your location. Your driver monitors your flight, not your phone. If a live-tracking feature is introduced, it will come with its own notice and consent under the Location Information Act.
Article 7 — Your rights and how to exercise them
You may ask to see, correct or delete your personal data, or to stop us from using it, at any time by messaging us on WhatsApp or writing to the email address in the footer. We answer within 10 days. A legal representative may act for you. We may ask for enough detail to confirm that the request comes from you.
Article 8 — Children
Kaja does not knowingly collect personal data from children under 14 without the consent of a parent or legal guardian. A booking for a child must be made by an adult.
Article 9 — Cookies and similar tools
9.1 The customer website sets no cookies. Your confirmation is held in your own browser's session storage on your device so that the confirmation page can show it; it is not sent anywhere else.
9.2 We measure visits with Vercel Web Analytics, which does not use cookies and does not identify individual visitors. Your private status link and its contents are excluded from analytics.
9.3 Sign-in cookies exist only for Kaja operators on the admin console.
Article 10 — Sharing with your driver
| Recipient | What | Why | For how long |
|---|---|---|---|
| Your assigned driver (one licensed taxi driver) | Your name, your messenger handle or number, pickup and drop-off places, date and time, passengers and luggage, flight number, and any ride notes | To meet you and perform the ride | Deleted by the driver within 30 days after the ride |
Your driver is bound by a written agreement to use these details only for your ride and to delete them. We share nothing else with anyone else, except where a law or court requires it.
Article 11 — Processors and overseas transfer
We store and send your data through the following service providers. Because they operate outside Korea, this is an overseas transfer for the purpose of performing your booking (Article 28-8 of the Personal Information Protection Act). You may object by not using the service, or ask us about it at any time.
| Provider | Country | What | Purpose | Retained |
|---|---|---|---|---|
| Supabase Pte. Ltd. | Singapore (data hosted in Seoul, Republic of Korea) | Booking database | Storing bookings and sending service messages | As in Article 3 |
| Vercel Inc. | United States | Website hosting, request logs, visit statistics | Serving the website | Logs: up to 30 days; statistics contain no personal data |
| Resend, Inc. | United States | Email address, confirmation email | Sending your confirmation | Provider log, up to 30 days |
| Telegram FZ-LLC | United Arab Emirates (servers worldwide) | Booking number, route, time — no name, no contact | Alerting the operator to a new booking | Operator chat history |
| Google LLC (Google Sheets) | United States | Booking number, time, route, fare basis, status — no name, no contact | Backup copy of the booking list | As in Article 3 |
Article 12 — Security
Access to booking data is limited to the operator account and to the assigned driver's ride details; the database enforces row-level access rules and refuses anonymous access; data travels only over encrypted connections; secrets are kept out of the website code; every change to a booking is recorded in an append-only log; and we collect only the items above.
Article 13 — Data protection officer and complaints
13.1 Data protection officer: the representative of Kaja. Contact: the WhatsApp number and the email address in the website footer.
13.2 If you believe your rights have been infringed, you may also contact the Korean authorities: Personal Information Infringement Report Centre (privacy.kisa.or.kr, tel. 118); Personal Information Dispute Mediation Committee (kopico.go.kr, tel. 1833-6972); Supreme Prosecutors' Office Cybercrime Investigation Division (tel. 1301); Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, tel. 182).
Article 14 — Changes to this policy
We announce changes on this page at least 7 days before they take effect, and at least 30 days before for changes that reduce your rights or add new uses of your data. Effective date: Sat 26 Sep 2026.