Privacy Policy
Effective: October 22, 2026
Yongho Choi (“we”) runs the noonchi app and the website noonchi.awaik.io (the “Service”). This policy explains how we handle your personal information under Korea's Personal Information Protection Act. This is a translation; if it differs from the Korean version, the Korean version prevails.
1. What we process and why
| Category | Items | Purpose |
|---|---|---|
| Sign-up and sign-in | Email address (an Apple relay address if you choose “Hide My Email” with Sign in with Apple), Sign in with Apple user identifier, account ID | Identifying you, signing in, managing your account |
| Profile | Nickname (required), profile photo (optional) | Showing you to your group members |
| Groups | Group name, description and image (if you created or changed them), role (leader or member), join and leave dates, result-sharing periods | Running groups and managing members |
| Goals and results | Goal name (free text you write, so it may contain app names), daily limit, daily results (Success, Failed, Unverified, Permission off), result confirmations | Judging and revealing results, streaks |
| Reactions | Emoji reactions, cheer messages (up to 100 characters) | Cheering each other on |
| Device and notifications | Device ID created by the app, device credential (stored only as a hash), push token, time zone and time zone history, Screen Time permission state, notification settings | Confirming the judging device, computing result dates, sending notifications |
| Collected automatically | A hash of your IP address when you enter an invite code (the invite-attempt record keeps only the hash, not the IP), service logs (IP address, device or browser information, time of access) | Preventing invite-code guessing, security and troubleshooting |
| Inquiries | Email address, message content | Answering your inquiry |
We do not collect your actual usage time or the apps, categories, and websites you pick. That information is processed only on your iPhone. We also do not collect your location, contacts, or advertising identifiers, and we use no analytics, advertising, or crash-reporting tools.
2. What your group members see
Members of the same group see your nickname, profile photo, goal name, daily limit, revealed daily results, and the reactions and cheer messages you leave. Notifications include nicknames and group names. Your actual usage time and the apps you pick are never shared.
3. How long we keep it
We keep your information until you delete your account. When you delete it, we erase your information without delay (usually within a few hours). The following are kept for the stated period and then deleted:
- Account deletion record (account ID, status and time): 30 days after deletion completes
- Invite-code attempts (including the IP hash): 2 days
- Notification delivery records: 14 days
- Service logs: server logs up to 7 days; the IP address and device information of a signed-in session until you sign out or delete your account; website access logs for the period set by our host (Vercel)
- Database backups: up to 7 days (information in a backup is deleted when the backup expires)
- Inquiry emails: 1 year after we answer
After you delete your account, the cheer messages and reactions you left in a group stay, shown as “Former member”. Group names, descriptions, images, and shared goals you created or changed also stay while the group has other members. This content is no longer linked to your account. When a group has no members left, an hourly cleanup job deletes the group and its images.
Electronic files are deleted so they cannot be recovered. We keep no personal information on paper.
4. Sharing with third parties
We do not provide or sell your personal information to third parties, except when the law requires it, such as a lawful request from an investigative authority.
5. Service providers and transfers abroad
We rely on the providers below to run the Service, and your information is transferred to them outside Korea. Transfers happen over the network whenever you use the Service.
| Recipient and contact | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| Supabase Pte. Ltd. privacy@supabase.com |
Singapore (data stored in the Amazon Web Services Singapore region); server functions may run in the Supabase region nearest to you (such as Korea, Japan, the US, or Europe) | The sign-up, profile, group, goal, result, reaction, device and notification information in section 1, service logs, sign-in code emails | Database, authentication, file storage, server functions, sending sign-in code emails | Until you delete your account or the contract ends (logs and backups as in section 3) |
| Apple Inc. apple.com/legal/privacy/contact |
United States | Sign in with Apple information, push token and notification text (nickname, group name), inquiry emails | Sign in with Apple, delivering push notifications, receiving inquiry emails (iCloud Mail) | As in Apple's privacy policy; inquiry emails as in section 3 |
| Vercel Inc. privacy@vercel.com |
United States (pages are served from servers worldwide) | Website access logs (IP address, browser information, time of access) | Hosting the website and the invite page | The minimum period under Vercel's retention policy |
If you do not want your information transferred abroad, you can stop it by deleting your account. We cannot provide the Service without these providers, so refusing means you cannot use the Service.
6. Your rights
- Change your nickname and photo in the app under Settings > Edit profile.
- Delete your account at any time in the app under Settings > Delete account.
- Ask to access, correct, delete, or stop processing your information at yong@awaik.io. We answer within 10 days of receiving your request. A legal representative or someone you authorize can also make the request.
7. Children under 14
The Service is only for people aged 14 or older. If we learn that we have collected information from a child under 14, we delete the account and its information without delay.
8. How we protect your information
- All traffic between the app, our server, and the website is encrypted (HTTPS).
- Row-level access control in the database shows each person only what they and their group may see.
- Device credentials and the IP addresses of invite-code attempts are stored only as hashes.
- Stored data is protected by our providers' encryption at rest.
9. Cookies and tracking
The app and the website use no cookies, advertising identifiers, or behavioral analytics.
10. Users in the UK and the European Economic Area
- Legal basis: we process the information in section 1 to perform our contract with you (providing the Service). Invite-code attempts, service logs, and report handling rely on our legitimate interest in security and preventing abuse.
- Rights: you can ask for access, correction, deletion, restriction, objection, and portability, and you can complain to the data protection authority where you live. Use the contact in section 6.
- Transfers: we transfer data under the safeguards in our providers' data processing terms, such as Standard Contractual Clauses.
11. Privacy officer
Yongho Choi · yong@awaik.io
12. Getting help in Korea
You can also contact these Korean bodies about a privacy concern.
- Personal Information Infringement Report Center: 118 (in Korea), privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Supreme Prosecutors' Office: 1301 (in Korea), www.spo.go.kr
- Korean National Police Agency: 182 (in Korea), ecrm.police.go.kr
13. Changes to this policy
We post changes on this page 7 days before they take effect, or 30 days before for changes that matter to your rights.
History
- October 22, 2026: first version