DaylongPublished and effective: July 16, 2026
Nahyun Park (the “Operator”) operates the Daylong service (the “Service”) and complies with the Personal Information Protection Act of the Republic of Korea and other applicable law. This Policy explains the personal information we process and your rights.
| Category | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Account | Apple or Google provider, provider-specific user identifier, email if provided, nickname | Account creation, sign-in, user identification, and profile display / consent under PIPA Art. 15(1)1 | Until account deletion |
| Service records | Workout duration, measurement mode, start/end time, goals, streaks, XP, badges, leagues, crews, friends, reactions, and pokes | Record sync, statistics, rewards, and social features / performance of contract under PIPA Art. 15(1)4 | Until account deletion or deletion of an individual record |
| Notifications | FCM token, operating system, notification preferences, notification content | Sending notifications you choose / consent under PIPA Art. 15(1)1 | Until sign-out, withdrawal, or account deletion; invalid tokens are deleted when identified |
| Consent history | Terms and Policy versions; agreement and age-confirmation time | Verifying consent and handling disputes / PIPA Art. 15(1)1 and 4 | Until account deletion |
| Safety and operational logs | Error time, request path, response status, and error information | Security, abuse prevention, and incident response / legitimate interests under PIPA Art. 15(1)6 | Rotated within a maximum of 30 MB per container and retained until incident handling is complete |
| Reports | Reporter and reported-account identifiers, target, reason, description, status, and times | Harmful-content handling, user protection, and disputes / PIPA Art. 15(1)4 and 6 | Three years after submission, or longer where required for law or a dispute |
You may decline required consent, but account sync, crews, friends, and leagues will not be available. You can still use device-only mode without signing in.
| Data | How it is processed | How to delete it |
|---|---|---|
| Local workout records, goals, and settings | Stored in the app’s private storage. Workout records and goals may be synced to the server after sign-in. | Delete individual records, delete your account, or uninstall the app |
| Camera frames and pose landmarks | Analyzed in real time on-device for automatic AI timing and not sent to the Operator’s server. Release builds do not separately store diagnostic pose landmarks. | Discarded after real-time processing |
| AI measurement video (optional) | Only when “Save measurement video” is enabled, the latest video is kept in temporary private app storage. A newly completed video replaces the previous one. It is not sent to the server. | Delete from Results or Settings; replacement by a new video; app uninstall; or operating-system temporary-file cleanup |
If you share a video with another app through the operating system, that app’s policy governs subsequent processing.
We do not sell personal information and generally do not disclose it to third parties. Disclosure occurs only where specifically required by law or separately authorized by you.
| Vendor | Service | Data |
|---|---|---|
| Vultr Holdings Corporation | Korean-region server and database hosting and backup infrastructure | Account, service, and access records processed by the server |
| Google LLC (Firebase Cloud Messaging) | Optional push notification delivery | FCM token, app instance and operating-system information, and notification content |
Our vendor arrangements address purpose limitation, safeguards, subcontractor management, oversight, and responsibility for loss.
Primary server data is stored in a region in the Republic of Korea. If you enable push notifications, the following international transfer may occur.
| Recipient | Google LLC / privacy contact |
|---|---|
| Countries | The United States and other countries where Google operates global infrastructure |
| Data | FCM token, app instance and operating-system information, notification title and body, and destination route |
| Purpose | Push notification delivery |
| Time and method | Over encrypted networks when push is enabled and a notification is sent |
| Legal basis | Separate consent under PIPA Art. 28-8(1)1 |
| Retention | As needed for notification delivery and FCM. Tokens on the Operator’s server are deleted on withdrawal, sign-out, or account deletion. |
You may decline or later withdraw consent in Settings. Measurement and local reminders will remain available, but you will not receive remote friend, crew, or league pushes.
We delete personal information without undue delay when its retention period ends or its purpose is achieved. Electronic files are deleted using methods designed to prevent recovery; printed material, if any, is shredded. Live database data is deleted immediately when you delete your account. Copies in access-controlled disaster-recovery backups are not used for other purposes and are deleted on a rolling basis within seven days.
You may request access, transmission, correction, deletion, restriction, or withdrawal of consent. Nicknames and notifications can be changed in Settings; individual records and your account can be deleted in the app. Other requests may be submitted by email and will be handled within the statutory period after identity verification.
The Service does not permit account registration by children under 14. If we learn that such a child’s information was collected, we will verify and delete it without undue delay.
Measures include least-privilege access, encrypted transmission (HTTPS), secure on-device token storage, separation of secrets, access and error log management, restricted external database access, backups, and vulnerability checks.
We do not provide personalized advertising or collect behavioral data through advertising identifiers or web cookies. The Service does not use Firebase Analytics or advertising SDKs. Access logs for security and incident response may be generated as described in Section 1.
Privacy Officer: Nahyun Park
Email: nahyundev@gmail.com
In the Republic of Korea, you may also contact the Privacy Infringement Report Center (118), Personal Information Dispute Mediation Committee (1833-6972), or National Police Agency (182).
We will announce changes in the app or on the website at least seven days before they take effect. Material changes that disadvantage your rights will generally be announced 30 days in advance, and renewed consent will be obtained where required. Prior versions are available by email request.
This Policy reflects the current Service code and operational configuration. It must be updated, together with relevant consent procedures, before introducing payments, advertising, analytics, location data, or cloud video features.