D-Day Keep Privacy Policy

Effective Date: May 21, 2026

Codesand Co. Ltd. ("Company") values the privacy of users of D-Day Keep ("Service") and complies with applicable laws, including the Korean Personal Information Protection Act.

1. Personal Information Collected

a. Anonymous use (without sign-up)

An anonymous identifier issued temporarily on the device (for session management; not stored on Company servers)

For users who do not sign up, D-Day data and photos are stored only on the device and are not transmitted to Company servers.

b. Sign-up via social login

Email address (with optional consent)
Kakao, Google, or Apple user identifier
Nickname or profile name (if provided)

c. While using the Service (signed-in Members)

Registered D-Day information (title, date, icon, color, memo)
Photos uploaded as D-Day backgrounds
Notification and widget settings
Device identifier (for session management)

2. Purpose of Collection and Use

Member identification and verification
Service provision (D-Day countdown, cloud backup, multi-device sync, widgets, notifications)
Service improvement and statistical analysis
Prevention of fraudulent use and security
Customer support

3. Retention and Use Period

Upon account deletion, the following data is destroyed immediately:

Account identification data (email, nickname, user ID, social linkage tokens)
All registered D-Day entries
All uploaded photos
Notification and widget settings, session tokens

Pursuant to applicable laws or for fraud-prevention purposes, the following data may be retained separately:

Records of fraudulent use: 1 year (per the Korean E-Commerce Act, etc.)
Information whose retention is required by applicable law: the period specified by that law

For users who use the Service without signing up, all data resides only on the device and is removed when the app is uninstalled.

4. Provision of Personal Information to Third Parties

The Company does not, in principle, provide personal information to external parties. The following are exceptions:

When the User has consented in advance
When required by law, or when an investigative authority requests information in accordance with procedures and methods set by law for investigative purposes

5. Outsourcing of Personal Information Processing

The Company outsources personal information processing to the following providers for Service operation:

Processor	Outsourced Task	Processing Location
Supabase Inc.	User data storage and authentication server	United States / Singapore
Kakao Corp.	Kakao account login authentication	Republic of Korea
Google LLC	Google account login authentication, AdMob ad delivery	United States
Apple Inc.	Apple ID login authentication	United States

6. Use of Advertising Identifiers

The Service displays AdMob ads to free users. Google AdMob may use advertising identifiers (IDFA / AAID) to personalize ads. On iOS, users can choose via App Tracking Transparency (ATT) consent. For details, please refer to the Google Privacy Policy.

7. User Rights

Users may exercise the following rights:

Request access to personal information
Request correction of errors
Request deletion
Request suspension of processing
Account deletion

To exercise these rights, use the in-app "Settings → Delete Account" menu or contact the Data Protection Officer below; requests are handled promptly.

8. Security Measures

Access permission management and access control (Supabase RLS)
Per-user isolation of data and photos (accessible only by the owner)
SSL/TLS encryption in transit
Regular security audits and vulnerability assessments

9. Children under 14

The Company does not accept sign-ups from children under 14 years of age. If personal information of a child under 14 is found to have been collected, it will be destroyed immediately.

10. Data Protection Officer

Email: support@codesand.co.kr

11. Changes to This Policy

This Privacy Policy takes effect on May 21, 2026. Content may be added, removed, or modified due to changes in laws, policies, or the Service. Any changes will be announced in advance via in-app notice or email, specifying the reason for the change and the effective date.