Privacy Policy

This policy explains what ("we") handles when you buy a licence and when you activate it.

The app itself is covered separately What does with your tasks, calendars, and AI data on your own machine is described in the app's own privacy policy. Your to-do data is never sent to our server, under any circumstances.

1. What we collect

When you buy

Email address	To send your licence key, and to confirm identity if you ask us to resend it
Order identifier	The order or transaction number issued by the payment provider. Used for refunds and disputes
Amount and currency	Revenue records and refund calculation

We neither collect nor store card numbers or any other payment credentials. Payment is handled directly by the providers listed below.

When you activate

Licence key	To confirm the purchase
Device hash	A one-way hash derived from a hardware identifier, used to enforce the device limit. It cannot be reversed
Device name	The name set in your operating system, so you can tell your own devices apart when deactivating one

About the device name On macOS this often contains the owner's name — "Minseok's MacBook Pro" and the like. We use it only so that you can identify your own devices in a list. We do not use it for anything else and do not disclose it to third parties. The app tells you this before activation.

What we do not collect

Tasks, notes, calendar entries, or anything else you write in the app
Device fingerprints or identifiers for advertising or tracking
Location data
Behavioural analytics or usage telemetry

2. Why we handle it

To perform the contract — processing payment, issuing and delivering the licence key, enforcing the device limit
Legal obligation — retaining transaction records under Korean e-commerce and VAT law
Legitimate interest — preventing abuse and keeping the minimum audit record needed for refunds and disputes

3. Who else is involved

We use these processors, each only for what the service needs:

Toss Payments	Card payments in Korea (Republic of Korea)
Paddle	International card and PayPal payments. Acts as Merchant of Record, making it the legal seller for tax purposes (UK / EU)
NOWPayments	Cryptocurrency payments — only if you choose that method
Resend	Delivery of the licence-key email (United States)
Cloudflare	Server and database hosting

We do not sell personal data, and we do not share it for advertising. We disclose it only where a lawful request requires it, and then only what is required.

Transfers outside Korea

Some of the processors above run servers outside the Republic of Korea. Only the items listed in section 1 are transferred, for the purposes stated against each processor. If you would rather not have your data transferred, you can choose a different payment method.

4. How long we keep it

Licence key and email	While the licence is valid. If it is refunded and voided, until the statutory record-keeping period ends
Device hash and name	Until that device is deactivated
Transaction records	5 years, as required by Korean e-commerce law (records of payment and supply)
Audit log	As long as needed to investigate abuse and handle disputes

5. Your rights

You can ask us to:

Show you what we hold
Correct anything wrong
Delete anything we are not legally required to keep
Stop processing

Write to and we will act within .

You can deactivate a device yourself The app's settings screen deactivates the current device, which marks its hash inactive. No need to ask us.

6. How we protect it

All traffic is encrypted over HTTPS
Device identifiers are stored only as a one-way hash, never the original value
The admin interface sits behind separate authentication, and is blocked entirely when that authentication is not configured
Payment credentials never pass through our systems

7. Changes

If we change this policy we will publish the change and its effective date here. Material changes are announced 30 days in advance.

8. Contact and complaints

Privacy questions:

If you are not satisfied with how we handle your data, you can contact these Korean authorities:

Privacy Infringement Report Centre — privacy.kisa.or.kr (118)
Personal Information Dispute Mediation Committee — kopico.go.kr (+82 1833-6972)