Privacy Policy

01Purpose of processing

The app has no sign-up or login. It uses the budget and payment records you enter to work out the money left and what you can spend today. These records are in a saved file on your device, and the developer does not receive that file.

The app shows a banner ad at the bottom of the main screen. Google's ad service AdMob selects and displays that ad, and uses device information to show ads and measure how they perform.

If you send a message report email, the developer receives it. The developer uses it to teach the app that card company's message format and to reply to you, and for no other purpose.

02Information processed

The data the app saves on your device is listed at the end of this section. The developer does not receive it. The app does not receive contacts, location or photos.

The app can't read your Messages directly. It reads only text passed by a Shortcuts automation you made or text you paste. You decide in the Shortcuts app which messages are passed. Text that is read but not recorded is not saved.

If you send a message report email, the developer receives your email address, the original message text you chose to send (which may include part of the approver's name, the merchant, the card's last 4 digits, the amount and the time), the reason it could not be read, the app and iOS versions, and information your mail app adds (such as your sender name, depending on your mail account settings). The app does not send this email. You send it yourself from your own mail app, and you can delete or change it before sending.

Information that AdMob may collect when showing ads is listed in section 9.

• Budget settings (budget type and amount, period start day, Count weekdays only, Expires if unspent, whether payments go through over budget, how payment notices arrive, days left out in the calendar): used to work out the money left and the daily amount
• Card last 4 digits (if entered): used to skip messages from other cards
• Transactions (date, amount, merchant or memo, time added to the app, how it was recorded): used to work out the money left and for the transaction list
• The original text of recorded payment messages: saved as is in the saved file and used so the same message isn't recorded twice. It may include part of the approver's name (for example H*D), the merchant, the card's last 4 digits, the amount and the time
• The last balance seen and when, a first-run mark, the day a celebration was shown, and whether the calendar is expanded: used to draw the screen

03Processing and retention period

Records on your device stay until you delete them or delete the app. Delete a transaction by swiping it in the list. If no other app from the developer that uses the same App Group is on the device, deleting the app removes the records and settings with it.

A message report email is deleted without delay after the developer decides whether to add that message format to the app, and at most 1 year after it was received.

Information collected by AdMob is kept as set out in Google's Privacy Policy (policies.google.com/privacy).

04Disclosure to third parties

The developer does not provide users' personal information or message report emails to third parties. However, the Google Mobile Ads SDK and Google User Messaging Platform SDK built into the app send the information in section 9 directly to Google, as follows.

• Recipient: Google LLC (United States), AdMob
• Purpose: checking ad consent, showing ads and measuring ad performance
• Information: the device information and ad interaction records listed in section 9
• When and how: sent over the internet when the app opens, checks consent and starts the SDK, and when an ad is loaded and shown
• Retention: as set out in Google's Privacy Policy

05Outsourcing of processing

The developer does not outsource the processing of personal information.

A message report email travels through your mail service to the developer's Naver mailbox (kvndh36@naver.com).

06Destruction of information

Records on your device are removed when you delete them from the transaction list or delete the app.

A message report email is deleted from the mailbox without delay after the developer decides whether to add that message format to the app, and at most 1 year after it was received.

07Rights of users and legal guardians, and how to exercise them

If you have sent a message report email, you can ask to view or delete that email at the address below. If you have questions, email us at the same address.

You can check and delete the records on your device yourself in the app.

You can ask Google to give you access to, or delete, information collected by AdMob (policies.google.com/privacy). To refuse use of the advertising identifier, follow section 9.

08Security measures

The app's records and settings sit in one file (ledger.json) in storage the app and its widget share on your device (an App Group). The widget only reads this file and does not use the ad SDK. Values used to draw the screen are in the app's UserDefaults. The developer runs no server, and the app does not use iCloud sync. This file can be included in iCloud or Mac backups you turn on.

The app does not send email itself. Tapping 문자 제보 (Report message) only fills in the recipient, subject and body of a mail draft, and you tap send or cancel. If no mail account is set up, it opens a mail app you choose with the same content.

The only permission the app asks for is tracking (ATT). It does not ask for photos, location, notifications, camera or contacts. The app takes clipboard text only when you paste it. Apart from ads, the only outside addresses the app opens are the message report email and this privacy policy page, and only when you tap them.

What the app passes to the ad SDK is the ad request and the banner size. It does not pass budgets, transactions, messages or card numbers.

09Automatic collection and how to refuse it

The app does not use cookies or analytics tools. It includes the Google Mobile Ads SDK (AdMob) and the Google User Messaging Platform SDK for advertising, which may collect the information below when they check ad consent and when they load and show ads. The list below is what the privacy manifests of the two SDKs declare.

The app checks ad consent information after you tap 시작 (Start) on the first-run screen. If you have already started, it checks when the app opens. Where ad consent is required, such as the European Economic Area, Google's consent form appears first. If ads can be requested and you haven't answered yet, iOS shows the App Tracking Transparency (ATT) prompt. If you don't allow tracking, AdMob does not get the advertising identifier (IDFA), and ads keep appearing. You can change this choice in iOS Settings > Privacy & Security > Tracking.

If the consent result means ads can't be requested, the tracking prompt is not shown and ads are not requested. Where consent is required, change it from 개인정보 선택 (Privacy choices) in Settings.

• Device identifiers, and the advertising identifier (IDFA) if you allow tracking
• Approximate location
• Ad interaction records such as impressions and taps, and app usage records
• App performance, crash and diagnostic information

10Privacy officer

If you have questions about personal information, email us at the address below.

Officer

kvndh

Email

kvndh36@naver.com

11Remedies for privacy concerns

If you need advice about a privacy concern or help settling a dispute, you can contact the Korean bodies listed below. If you live outside Korea, you can also contact the data protection authority in your country.

• Personal Information Dispute Mediation Committee: 1833-6972 in Korea (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 in Korea (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 in Korea (www.spo.go.kr)
• National Police Agency: 182 in Korea (ecrm.police.go.kr)
• European Union and EEA: the data protection authority of your country (edpb.europa.eu)
• United Kingdom: Information Commissioner's Office (ico.org.uk)
• United States: Federal Trade Commission (reportfraud.ftc.gov)
• Other countries: the data protection or consumer protection authority where you live

12Changes to this policy

If this policy changes, this page will show what changed and the new effective date.