Haru ("the Service") respects user privacy and complies with applicable data protection laws, including the Korean Personal Information Protection Act (PIPA).
The Service is an app for recording work schedules, income, and daily records (diary and notes), and optionally sharing those calendars with others. Using it requires an account created through social login (Kakao, Google, or Apple), and the Service collects only what is needed to authenticate that account and provide these features. This policy lists only the data the Service actually collects and processes.
Service: Haru
Data Protection Officer: 오늘의 하루 Team
Contact Email: [email protected]
You can sign up only through Kakao, Google, or Apple social login. There is no email-and-password registration and no guest mode.
| Category | Data |
|---|---|
| Account (via social login) | Email, nickname, and profile image URL provided by your social login provider (Kakao, Google, or Apple) |
| Calendars & events | Calendar name, color, and visibility; shift types (name, color, default hours, default rate); events (date, shift type, start/end time, memo, private flag); shift patterns |
| Income records | Amount, unit price and quantity, unit (per day / gongsu / hourly / per job), expected payday, payment date, client name, default rate, and memo |
| Sharing & subscriptions | Subscription relationships (who subscribes to which calendar), approval status, notification preferences |
| Event RSVPs | Going / maybe / not going responses and a one-line comment |
| Team features (when using a team calendar) | Team member display names, group assignments, shift-schedule dispatch history, and team profiles (only what you enter yourself: display name, contact, memo, photo) |
| Push tokens | Device push token and platform (ios/android) needed to deliver notifications |
| Fortune details (only if you create a fortune calendar) | Name, date of birth, time of birth (not collected if unknown), gender, and solar/lunar calendar type |
| Diary entries (only if you create a diary calendar) | A per-day mood, records for the blocks you chose (selections and times for items like meals, sleep, or exercise), and a one-line note |
| Daily notes | A one-line note per day — visible to people who share that calendar |
| Profile photo (only if you set one) | One photo you choose — only a downsized copy is stored; the original never leaves your device |
| Device calendar overlay (only if you turn it on) | Titles, dates, and start/end times of your device calendar events, plus the device name — stored as private, never shown to subscribers or widgets |
Fortune details are collected only when you create a fortune calendar. Work-schedule calendars do not offer this feature, and if you never create one, none of the above is collected. The values are used solely to calculate that calendar's daily scores and readings; whether that day's events are sent along when you open a reading is your choice each time.
If you enter information about someone other than yourself — for example, when a team admin enters team members' display names — you are responsible for obtaining that person's consent to provide their information.
The following is stored only on your device and is never sent to our servers.
Widgets and the device calendar never include amounts, memos, or private events. These fields are excluded by design so that sensitive content is not exposed on a lock screen or to other apps.
The Service is free and supported by advertising. Ads are served by Google AdMob, and usage analytics are collected with Google Firebase Analytics. What each tool handles is listed below.
| Tool | Data handled | Purpose |
|---|---|---|
| Google AdMob | Advertising identifier (IDFA on iOS, Advertising ID on Android), device and app information, the country inferred from your IP address, ad impression and click records | Delivering and measuring in-app ads (app open, interstitial, in-list, and the rewarded ads that unlock a fortune reading or a new diary entry) |
| Google Firebase Analytics | Anonymous app instance ID, screen names, feature events (creating a calendar, subscribing, applying a pattern, saving income, dispatching a schedule, fortune, and similar), device and app version | Understanding which features are used so we can improve the Service |
The Service also keeps its own record of when ads appear and are tapped — only an install-scoped anonymous ID not linked to your account, the ad slot, and impression/click/revenue values. It never contains advertising identifiers or your schedules and income, and is used only to tune ad policy and for statistics.
On iOS we ask for tracking permission first. The app presents the App Tracking Transparency (ATT) prompt, and the advertising identifier (IDFA) is used for personalized ads only if you allow it. If you decline, ads still appear but are non-personalized. You can change this at any time in Settings > Privacy & Security > Tracking.
On Android, deleting the Advertising ID in your device settings has the same effect.
The Service does not request location permission and does not collect your device's location (latitude and longitude). The country noted above is inferred by the ad provider from your IP address.
The work schedules, income records, and fortune details stored on our servers are never used for advertising and are never passed to ad providers.
For more detail, see Google's policy on data use in partner sites and apps.
The Service entrusts processing to the parties below; some processing occurs outside Korea. Each transfer is limited to the minimum needed to operate the Service.
| Processor | Country / storage | Data | Purpose & retention |
|---|---|---|---|
| Supabase Inc. | Operator based in the United States Data stored in AWS Seoul (ap-northeast-2) |
All items listed in section 2 | Database, authentication, serverless functions Until account deletion |
| Expo (Expo Application Services) | United States | Push tokens, notification content | Push notification relay Until delivery is complete |
| Apple Inc. (APNs) | United States | Device push tokens, notification content | Delivery to iOS devices Until delivery is complete |
| Google LLC (FCM) | United States | Device push tokens, notification content | Delivery to Android devices Until delivery is complete |
| Kakao Corp. | Republic of Korea | Login credentials (email, nickname, profile image URL) | Social login authentication Until you disconnect the provider |
| Google LLC / Apple Inc. | United States | Login credentials (email, nickname, profile image URL) | Social login authentication Until you disconnect the provider |
| Google LLC (AdMob · Firebase Analytics) | United States | The advertising and analytics data listed in Section 4-1 | Ad delivery and measurement, feature usage analysis Per each provider's retention policy |
You may refuse international transfer, but because the Service runs on the infrastructure above, refusing may prevent you from using the Service.
Privacy policies of each processor: Supabase, Expo, Apple, Google, Kakao.
We do not provide your personal information to third parties, and we do not sell or rent it. We may disclose information only where required by law or in response to a lawful request from authorities.
The advertising and analytics tools in Section 4-1 handle advertising identifiers as a consequence of being embedded in the app (see Section 6). The work schedules, income records, and fortune details stored on our servers are never handed over for advertising purposes.
When you share a calendar or join a team, other users see the schedules you chose to share. This is a feature you control through visibility settings and the private-event option, not a transfer to a third party.
Two things remain after deletion because they are other users' data:
Widget summaries and device calendar events exist only on your device; they are removed when you delete the app or delete that dedicated calendar from your device calendar.
As a mobile app, the Service does not use web cookies, but it stores data on your device using:
All of the above is removed when you uninstall the app. Use of advertising identifiers is described in Section 4-1.
| Permission | Purpose | Required? |
|---|---|---|
| Notifications | Receiving push notifications about schedule changes, dispatched schedules, and paydays | Optional |
| Calendar | Writing events to the app's dedicated calendar, only if you enable device calendar export | Optional |
| Photos | Opening your photo library only when you pick a profile photo | Optional |
| Tracking (ATT) (iOS only) | Using the advertising identifier (IDFA) for personalized ads — declining still leaves non-personalized ads in place | Optional |
You can deny all four permissions and still use the core features — recording schedules, tracking income, and sharing calendars. Permissions can be changed at any time in your device settings.
The Service is not intended for children under the age of 14 and does not knowingly collect their personal information. If we learn that such data has been collected, we delete it without delay.
Changes will be announced in-app or by updating this page, together with the new effective date.
If you need help regarding the handling of your personal information, you may contact the Korea Internet & Security Agency Privacy Center (118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr).
For privacy inquiries and requests, please email [email protected].