Haruhaeng Privacy Policy
Effective date: To be set (launch date)
This policy explains how Tryangle Studio (트라이앵글스튜디오; representative: Jonghyeok Park; “we”, “us”), which operates Haruhaeng, handles your personal information when you use the Haruhaeng app (the “App”), in accordance with Korea’s Personal Information Protection Act and other applicable laws.
1. In short
- You can use every basic feature without signing in, and in that case we receive no personal information. Your tasks, records and settings are stored only on your device.
- Signing in is optional. It exists so you can back up your records and move them to a new phone.
- The free version shows ads from Google AdMob. Section 10 explains what Google collects directly from the App for ads. While you have Rail Pass there are no ads, and the ad SDK is not started.
- We don’t sell your personal information. On iPhone, we don’t ask for permission to track you across other companies’ apps and websites.
2. What we process and why
| When | Information | Purpose |
|---|
| When you sign in (optional) | Email address, name (if your sign-in provider shares it), your account ID with that provider, an app user ID | Creating your account, signing you in, confirming it’s you |
| When you back up (after signing in) | Your app records (task names, times, reflections, ratings, routines, travel progress, settings), backup time, a random ID created for each install, operating system type | Backing up, restoring and moving to a new phone |
| When you buy Rail Pass or open the App | Purchase history (product, purchase and renewal times, subscription status), app user ID | Providing your subscription, verifying and restoring purchases, sales statistics |
| Automatically while you use the service | IP address; device, operating system and app version information | Security, preventing misuse, keeping the service reliable |
| When ads load in the free version (not while you have Rail Pass) | IP address; device identifiers (advertising ID and app set ID on Android, an app-specific identifier on iPhone); ad and app usage (ads viewed, ad taps, app launches); app performance and crash information | Showing ads, measuring ad performance, preventing invalid clicks. Collected directly by Google (section 10) |
| When a task card appears on your iPhone Lock Screen | The push token Apple gives that card (a new one for each card), the task’s start and end times, the next task’s start time, and whether you boarded. Task names are not sent | Removing the card from your Lock Screen at its end time, even when the App is closed |
Information that never leaves your device: the following is processed only on your device and is never sent to us.
- Calendar: read only, so you can add the events you choose to your timetable. (Tasks you add become part of the app records above.)
- Focus Lock: the apps you choose to lock, and checks on which app is currently open (Usage access on Android, Screen Time on iOS), are handled only on your device.
- The contents of notifications, widgets and Lock Screen cards. For iPhone cards, only the timing information in the table above is sent, so the card can be removed at its end time.
Device backups: if you use iCloud Backup or Google backup, app data may be included in your own backup. Those backups are governed by Apple’s or Google’s policies, and we do not receive that information.
3. How long we keep it
- Account information and server backups: kept until you delete your account, then deleted without delay. Complete removal from our processors’ systems may take some additional time under their procedures.
- Purchase history: kept as long as needed to provide your subscription, or until you ask us to delete it. Payment records themselves are kept by Apple or Google under their own policies and applicable law.
- Data on your device: deleted when you delete the App.
- Lock Screen card information: deleted as soon as the message that removes the card is sent, and no later than one day after the card’s end time.
- Ad information: collected directly by Google and kept under Google’s policies. We don’t receive ad information about individual users. We only see totals, such as ad revenue.
4. Processors and international transfers
We entrust the following companies with processing to run the service. They use personal information only for the work we entrust to them.
| Recipient | Service provided | Information transferred | Country, method and timing |
|---|
| Google LLC (Firebase) | Sign-in and accounts, backup storage (Seoul region), server functions | The sign-in, backup and automatically collected information and the Lock Screen card information in section 2 | Google data centers in the United States and other countries, encrypted transfer over the internet, when you sign in or back up, and when a card appears on your iPhone |
| Apple Inc. (Apple Push Notification service) | Delivering the message that removes a Lock Screen card at its end time | The card’s push token, start and end times, whether you boarded | United States, encrypted transfer over the internet, at the card’s end time |
| RevenueCat, Inc. | Subscription and purchase verification | Purchase history, app user ID | United States, encrypted transfer over the internet, when you make a purchase or open the App |
| Google LLC (AdMob, User Messaging Platform) | Showing and measuring ads in the free version, collecting ad consent where the law requires it | The ad information in section 10, your consent status | Google data centers in the United States and other countries, encrypted transfer over the internet, when ads load in the free version |
If you choose to sign in, your sign-in provider (Apple, Google and, where offered in the App, Kakao, NAVER or LINE) handles sign-in under its own policy. If you don’t want your information transferred abroad, you can choose not to sign in or make purchases. All basic features still work.
In the free version, ad information is sent to Google while ads are shown. If you have Rail Pass, the ad SDK is not started and none of it is sent. Google also processes ad information independently to run its own advertising services, and some of it may be passed to Google’s advertising partners when ads are selected (section 10).
5. Sharing with third parties
We do not provide your personal information to third parties, except where required by law. In the free version, however, Google collects the information in section 10 directly from the App for advertising.
6. How we delete data
When the retention period ends or you delete your account, server data is deleted so that it cannot be recovered. We keep no personal information on paper.
7. Your rights and how to exercise them
- Access and correction: you can view and edit your records and account details directly in the App.
- Deletion (deleting your account): App › Profile › your name at the top › Delete account. This deletes your server backup, your account and your sign-in connections. If you can’t use the App, you can request deletion by email as described at https://haruhaeng.tryanglestudio.com/delete-account/.
- Stopping processing: once you sign out, your records are no longer sent to our servers (backup stops). If you bought a Rail Pass, purchase verification with RevenueCat continues under the user ID of the last signed-in account so your subscription keeps working on this device. Deleting your account ends this link too.
- Turning off personalized ads and changing your ad consent: see section 10.
- For any other request, contact us using the details below and we will respond without delay.
8. Children under 14
We ask that children under 14 not sign in (create an account). If we learn that we have collected personal information from a child under 14 without consent from a parent or legal guardian, we will delete it without delay.
9. How we keep information secure
- All data in transit is encrypted (HTTPS).
- Server backups are protected so that only your own account can read and write them.
- We process only the minimum information the service needs.
10. Ads, cookies and tracking
The free version shows ads from Google AdMob. No ads appear while a task or an Express run is in progress.
- Who collects it: Google LLC (Google AdMob). The Google Mobile Ads SDK built into the App collects this information automatically when it loads and shows ads. We don’t receive ad information about individual users.
- What is collected: IP address (which may be used to estimate your general location); device identifiers (the advertising ID and app set ID on Android, an app-specific identifier on iPhone); usage such as ads viewed, ad taps, app launches and video views; app performance and crash information.
- Why: showing ads, personalized ads (where allowed), measuring and analyzing ad performance, and preventing invalid clicks.
- How long: as set out in Google’s policies.
- Consent (EEA, UK, Switzerland and similar regions): where the law requires consent, Google’s consent form appears the first time you use the App. You can change your choices anytime in App › Profile › Ad privacy settings. This option appears only in regions that require consent.
- iPhone: the App does not ask for App Tracking Transparency permission, so it does not access the advertising identifier (IDFA).
- Turning off personalized ads on Android: you can delete or reset your advertising ID in Settings › Google › Ads (on some devices, Settings › Privacy › Ads).
- Rail Pass: while you have Rail Pass there are no ads, and the ad SDK is not started, so none of this information is sent.
- How Google uses this information: see the Google Privacy Policy (https://policies.google.com/privacy) and “How Google uses information from sites or apps that use our services” (https://policies.google.com/technologies/partner-sites).
- Cookies: the App itself uses no cookies. The Google Mobile Ads SDK that shows the ads may use cookies or similar technologies to show and measure ads.
11. Privacy officer and contact
- Privacy officer: Jonghyeok Park (Representative, Tryangle Studio)
- Email: contact@tryanglestudio.com
- Operator: Tryangle Studio (트라이앵글스튜디오), represented by Jonghyeok Park. Business details are at the bottom of this page.
12. Where to get help (Korea)
If you need to report or get advice about a privacy violation, you can contact the following organizations.
- Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr / 118 (from Korea)
- Personal Information Dispute Mediation Committee: www.kopico.go.kr / 1833-6972
- Cyber Investigation Division, Supreme Prosecutors’ Office: www.spo.go.kr / 1301 (from Korea)
- Cyber Bureau, Korean National Police Agency: ecrm.police.go.kr / 182 (from Korea)
13. Changes to this policy
If this policy changes, we will announce it on this page and in the App, and update the effective date.