Krononlabs Co., Ltd. (the “Company”) complies with the Personal Information Protection Act of Korea and other applicable laws and regulations, and processes users’ personal information as follows. This Privacy Policy applies to the to-do management application “PING” (the “Service”) provided by the Company.

Article 1 (Items of Personal Information Collected)

To provide the Service, the Company collects the minimum necessary information as described below.

• Sign-up / authentication (Sign in with Apple): user identifier and, if the user consents to provide them, email address and name. Name and email may be provided only at the first login under Apple’s policy, and if the user chooses Apple’s Hide My Email (private email relay), the relay address is collected.
• Profile information: nickname and the identifier value of the default avatar provided in the app. These may be displayed to the connected counterparty when using sharing features.
• Information generated during Service use: to-dos created by the user (title, due date, category, completion status, etc.), whether a to-do is personal/shared, and user connection information (invite code, connection relationship).
• Device and notification information: push notification token, app installation identifier, app version, OS platform, language, and notification settings.
• Service usage analytics information: through Firebase Analytics, the Company may collect the app installation identifier, device and OS information, app version, app language, and records of feature usage such as login, profile settings, adding/editing/completing/deleting/sorting to-dos, linking for sharing, lock screen settings, and Live Activity usage. Analytics information does not include the titles of to-dos created by the user, nickname, email, or invite code.
• Re-signup restriction information after withdrawal: to prevent abuse via repeated withdrawal and re-signup, the Company collects a one-way hashed value of the Apple user identifier (so it cannot be restored) and the time of withdrawal.
• Automatically generated information: IP address, access time, authentication/session information, and error logs may be automatically generated and processed by the service provider’s systems during Service use.

Article 2 (Purposes of Collection and Use)

The Company uses personal information for: identifying members and authenticating Sign in with Apple; providing to-do management and to-do sharing/real-time synchronization between users; sending push notifications; providing widget and lock screen display features; analyzing Service usage; improving features and user experience; checking errors; preventing abuse through repeated withdrawal and re-signup; and operating/maintaining the Service and preventing errors/abuse.

Article 3 (Retention and Use Period)

Upon account withdrawal, the Company deletes without delay personal information stored in the production database, including profile, to-dos, shared data, and connection information. However, to prevent abuse through repeated withdrawal and re-signup, the Company separately retains (and then deletes) the one-way hashed Apple user identifier and the withdrawal time for 24 hours. In addition, if the Company is required to retain information under applicable laws, it will store such information separately for the required period and then delete it.

To-dos that the user deletes individually are retained in a “deleted” state for up to 7 days for cross-device synchronization and error recovery, and then permanently deleted. Upon account withdrawal, the user’s personal information and to-do data are deleted from the production database regardless of this waiting period.

For shared to-dos, if a user withdraws, the connection relationship is terminated and shared to-dos created under that connection are deleted.

Firebase Analytics usage records are retained for service analytics purposes and for the retention period configured in Firebase, and are deleted when the retention period expires.

Article 4 (Provision to Third Parties)

The Company does not provide users’ personal information to third parties. However, exceptions apply where required by law or where there is a lawful request from an investigative agency. When the user uses the to-do sharing feature, shared to-do content and profile information (nickname/avatar) may be displayed to the connected counterparty within the sharing scope set by the user.

Article 5 (Outsourcing of Personal Information Processing)