Privacy Policy

1. Purpose of Processing Personal Information

The Operator processes personal information and usage data for the following purposes. The processed data will not be used for purposes other than those specified below, and if the purpose of use changes, necessary measures such as obtaining separate consent will be implemented.

1. Providing App Services and Core Features: Recording clock-in/out times, calculating scheduled clock-out times, counting real-time salary accrual per second, managing flexible work schedules and annual leaves, managing wishlists, delivering local notifications, and syncing home widgets and iOS Dynamic Island / Live Activities.
2. Ensuring Service Stability and Error Diagnosis: Diagnosing crash reports, monitoring application performance, analyzing causes of abnormal termination, and improving software quality.
3. Advertising and Rewards (Including Future Integrations): Displaying mobile in-app advertisements (banners, interstitials, and rewarded video ads for unlocking mascot characters or skins) and measuring ad performance through Google AdMob.
4. Compiling Clock-out Statistics, Spending Trends, and Workplace Benchmark Metrics (Optional): If and only if the user voluntarily configures this in Settings, non-identifying statistical telemetry is collected to provide clock-out predictions, salary bracket trends, wishlist spending benchmarks, and peer comparisons (including future community feature extensions). (※ This information is strictly NEVER used to identify individual users, and it is technically impossible to do so. It is purely anonymous aggregate telemetry.)

2. Categories of Information Collected and Collection Methods

A. Local Storage (100% On-Device Data)

The following information entered or generated by users while using the service is stored exclusively inside the user's mobile device (Drift SQLite database and SharedPreferences) and is never transmitted to or collected by the Operator's external servers or cloud infrastructure:

• Salary and Work Configuration: Salary type (Monthly Net / Annual Gross / Hourly), entered salary amount, payday, daily standard work hours, lunch start time and break duration, default clock-in time, working days of the week, total and used annual leave days, and monthly bonus/incentive notes and amounts.
• Clock-In/Out and Work Records: Daily clock-in/out timestamps, work status (working, clocked out, overtime, annual leave, half-day, hourly leave, etc.), accrued earnings per second, recognized overtime hours, and lunch break deduction details.
• Wishlist Data: Target item name, target price, category, and completion status.
• App Customization Preferences: Mascot character (all characters including the default character 'Dongjoob-nyang' and any characters to be added in the future) and theme/skin settings, widget workplace privacy masking mode, notification time intervals, and haptic feedback settings.

B. Automatically Collected Items (Third-Party SDKs)

To analyze service quality, calculate anonymous workplace benchmarks, and serve advertisements, the following information may be automatically collected during service usage:

• Google Firebase Analytics & Crashlytics:
  • System and Diagnostic Information: Device model name, OS version, app version, language/region settings, stack traces and system state logs at the time of a crash, and screen view events.
  • Optional Non-Identifiable Statistical Telemetry:
    1. Demographic Indicators: Job category, age group (10s to 50s+, subdivided into early/mid/late), gender.
    2. Estimated Gross Annual Salary Bracket (5M KRW intervals): Transmitted ONLY when the user explicitly enables the "Share Anonymous Salary Statistics" toggle in Settings. It is automatically converted into coarse 5M KRW brackets (e.g., 30M~35M KRW) based on the entered salary. If the toggle is disabled or consent is not granted, no salary data is transmitted whatsoever.
    3. Wishlist Spending Trend Data: Purchase target category icon, 500k~1M KRW price tiers, normalized item keyword tokens, and estimated work days required to achieve.
    4. Clock-In/Out Telemetry: Total work session duration, overtime hours, and attendance time ranges.
  • 🚨 Guarantee of Non-Identification: User's name, contact details, unique device identifiers, exact 1-won net salary, company/workplace name, or any personally identifiable information (PII) are NEVER collected or transmitted, and it is technically impossible to identify any individual user.
• Google AdMob (Mobile Advertising Platform):
  • Collected and Processed Data: Mobile advertising identifier (iOS: IDFA, Android: GAID/AAID), ad impressions/clicks and interaction data, coarse device info.
  • Tracking Consent and Non-Personalized Ads: If ad tracking is rejected via Apple App Tracking Transparency (ATT) or Android device settings, personalized tracking is immediately halted, and Non-Personalized Ads (NPA) or contextual ads are served.
  • Ad Formats: Standard banners, interstitials, and rewarded video ads (e.g., watching an ad to unlock special mascot character skins or premium theme features). (※ May be rolled out incrementally with future service updates.)

C. Device Permissions

The app utilizes the following device permissions to provide core features:

• Notifications (Notification / POST_NOTIFICATIONS): To deliver clock-out reminders, warning alerts, and overtime notifications.
• Exact Alarms (SCHEDULE_EXACT_ALARM - Android): To trigger local notifications accurately at the user's scheduled clock-out time.
• Boot Completed (RECEIVE_BOOT_COMPLETED - Android): To reschedule scheduled notifications automatically after the device reboots.
• Vibration (VIBRATE): To provide haptic feedback upon clocking in/out or tapping buttons.
• Photo Library (NSPhotoLibraryUsageDescription / NSPhotoLibraryAddUsageDescription - iOS): To support saving or attaching images when using embedded image manipulation features (requested selectively only when user initiates the feature).
• (Notice) The app DOES NOT request or collect sensitive permissions such as Camera, GPS Location, Microphone, or Address Book.

3. Provision of Personal Information to Third Parties

The Operator does not provide users' personal information to third parties. However, to maintain technical stability, analyze coarse anonymous statistics, and monetize through ads, the following external SDKs are integrated, and data is processed according to their respective privacy policies:

4. Retention and Use Period of Personal Information

1. On-Device Local Data: Retained permanently inside the user's smartphone until the user uninstalls the app or clears app data.
2. Third-Party Analytics and Ad Logs: Managed and automatically deleted according to Google Firebase and AdMob data retention cycles (typically 2 to 14 months).

5. Destruction Procedures and Methods

1. Destruction Procedure: OnTheDot is built with a 100% Local-first (Zero-Server) architecture and does not maintain a central database server.
2. Destruction Method:
   • When a user uninstalls the app or clears app storage/cache via device settings, all salary information, work session records, and wishlist data stored in local SQLite are permanently deleted immediately.
   • ⚠️ Notice: Since the Operator does not operate backend servers, previously stored data cannot be restored by the Operator if the app is uninstalled or the device is lost/factory-reset.

6. Rights of Users and Methods of Exercise

1. Users can withdraw consent and destroy all local data at any time by uninstalling the application.
2. Users can opt out of personalized ad tracking or reset their Advertising Identifier via device settings:
   • iOS: Settings > Privacy & Security > Tracking > Toggle off "Allow Apps to Request to Track"
   • Android: Settings > Security & Privacy > Privacy > Other privacy settings > Ads > Delete advertising ID or opt out of ad personalization
3. Users can disable app push notifications at any time via device notification settings.
4. Users can withdraw or re-enable consent for sharing coarse salary bracket data at any time by toggling the "Share Anonymous Salary Statistics (Optional)" switch in the in-app Settings screen.

7. Measures to Ensure Personal Information Security

The Operator implements the following technical and organizational measures to safeguard user data:

1. Zero-Server Local Isolation: Sensitive annual salary, net income, and work attendance records are never transmitted over external networks or stored in cloud databases; they reside strictly within the device's sandboxed local SQLite storage.
2. Workplace Privacy Shield: To prevent accidental exposure in conference rooms or public spaces, the app features an instant masking option (••••••) for home widgets and dashboard views.
3. Encrypted Network Communications: Any external communication (such as public holiday data synchronization and Crashlytics crash reporting) is conducted over standard HTTPS encrypted connections.

8. Protection of Children's Privacy

This service is primarily intended for working professionals and does not target children under the age of 14 (or applicable age in relevant jurisdictions), nor does it knowingly collect personal information from children.

9. Privacy Officer and Contact Information

For inquiries, feedback, or concerns regarding personal information protection, please reach out to:

10. Amendments to the Privacy Policy

This Privacy Policy may be updated to reflect changes in laws, regulations, or service functionality. Any updates will be notified through the app or the official website.