Privacy Policy

Last updated: 2025-11-15

Personal Developer uzouoo ("the Developer") operates the 'Withly' service ("the Service") and is committed to protecting user privacy and complying with relevant global laws (e.g., GDPR, CCPA).

Personal Information Collected and Methods of Collection

Categories of Personal Information

• Required Information: Email address (collected via Apple/Google social login)
• Optional Information: Nickname (entered directly by the user)
• Automatically Generated During Service Use: User-generated content (e.g., bucket list items), Advertising identifiers (ADID / IDFA), Device and app information (OS version, device model, language, region), Crash logs and diagnostics

Methods of Collection

• Social Login: Email information is received through Apple or Google login.
• User Direct Input: Users may enter profile-related information (e.g., nickname).
• Automatic Collection: Device information, advertising identifiers, analytics data, and crash logs are automatically collected when using the Service.

Purposes and Legal Basis for Using Personal Information

The Developer uses personal information for the following purposes. (Legal basis applies to users in the EEA under GDPR.)

• User Identification, Account Management, and Service Provision
  Legal Basis: Performance of a contract
• Providing Personalized Advertising (Google AdMob)
  Legal Basis: User's explicit consent
  Refusing or withdrawing consent does not affect the use of the core Service.
• Service Improvement, Analytics, and Error/Crash Diagnostics
  Legal Basis: Legitimate interest in improving and stabilizing the Service

Entrustment of Personal Information Processing

For smooth service provision, personal information may be processed by the following entrusted companies. Data may be transferred outside the user's country (including to Korea and the United States).

• Google (Google Cloud Platform, Google Login): User identification, cloud server operation
• Apple (Apple Login): User identification
• Supabase: Cloud database operation and management
• Google (Google Analytics): Analysis of service usage
• Google (Google AdMob): Providing personalized advertisements
• Google (Firebase Crashlytics): App error and performance analysis

Provision of Personal Information to Third Parties

The Developer does not, in principle, "provide" users' personal information to external third parties. (Note: "Entrustment of processing" is a necessary measure for service operation and differs from "provision to third parties.")

Retention and Use Period of Personal Information

The Developer retains user personal information until the user requests account deletion. However, after an account deletion request, the information is retained for 30 days for dispute resolution and service stabilization, and then promptly destroyed.

Destruction Method: Permanently deleted from the database using technical methods that prevent recovery.

Rights of Users and How to Exercise Them

• Users may view or modify their information (e.g., nickname) at any time via the in-app Settings.
• Users may withdraw consent and request account deletion at any time through the Account Deletion menu.
• Users in specific regions (EEA under GDPR, California under CCPA) may have additional rights (Access, Erasure, Restriction, etc.).
• Users may exercise these rights by contacting the Data Protection Officer. Identity verification may be required.

Protection of Children's Personal Information

The Service is not primarily intended for children under the age of 14 (or under 13 or 16 depending on certain countries/regions). The Developer does not knowingly collect personal information from children. If discovered, such information will be immediately deleted.

Personalized Advertising and Opt-Out Rights

• The Service may provide personalized advertisements using Google AdMob, which requires collecting advertising identifiers (ADID/IDFA).
• Users can withdraw advertising consent at any time via device settings (iOS: Tracking, Android: Ads Personalization).
• California Residents (CCPA): Sharing advertising identifiers with AdMob may constitute “sharing” of personal information. You may opt-out by using device settings.

Technical and Administrative Measures

The Developer protects user data through access control, secure cloud infrastructure (Supabase, Google Cloud), and regular security reviews.

Changes to the Privacy Policy

This Privacy Policy is available at any time within the app (Info menu).

Data Protection Officer and Contact Information

• Officer: uzouoo
• Location: Republic of Korea
• Contact: uzouoo@gmail.com