1. Why We Process Data

We process personal information only for the purposes below. If a purpose changes, we will tell you first and ask for consent where required.

1. To track remaining sessions or days on prepaid memberships, record and undo check-ins, and estimate refunds
2. To look up and show the business status (active, suspended, closed) of facilities you add
3. To show on-device reminders, such as pace alerts before a membership expires
4. To create a PDF claim package you can send to your card issuer
5. To show banner ads on the free plan and confirm purchases and restores of paid products (subscriptions and the lifetime pass)
6. To prevent server abuse (rate limiting) and fix outages

2. What We Collect and How

Data falls into three groups depending on where it is stored. The only data we actually receive is in the second row of the table.

Receipt text recognition (OCR) runs on your device with Google ML Kit. Photos are never uploaded to our server or to Google.

The current version does not include server push (FCM), so it does not send any device identifier or push token. If a later version adds automatic suspension/closure alerts, turning them on will register an install ID (a random value the app creates), a push token, and the list of business numbers to watch on our server. We will update this policy and notify you before that happens.

3. Device Permissions

The app asks for each permission the first time you use the related feature. If you decline, everything else keeps working.

The app never accesses your location, microphone, contacts, or call logs.

4. How Long We Keep Data

Where another law requires us to keep data for a set period, we keep it for that period. Google Play keeps payment records. The app stores the purchase status, product ID, and expiry time it gets from Google Play on your device only and never sends them to our server.

5. Sharing with Third Parties

We do not share your personal information with third parties. The only exceptions are when a law requires it or when law enforcement makes a request through legal procedures, and even then the only data we hold is business numbers and their lookup results.

For status lookups, our server sends only the business number to the NTS business status service on the Korean government's Public Data Portal (data.go.kr). Nothing that identifies you is sent with it.

6. Service Providers and International Transfers

The app uses the services below. Google receives ad, billing, and text-recognition performance data directly, so that data is transferred outside Korea (to the United States). Our status lookup server is hosted in Korea (IWINV CLOUD), so that data stays in Korea.

You can read how Google handles data in the Google Privacy Policy. If you do not want ad and text-recognition data sent, you can turn off ads with a paid product (subscription or lifetime pass), or add memberships by typing instead of using photos. Note that the ad SDK starts when the app opens, so some device information may still reach Google while you use a paid product.

7. Behavioral Data and Advertising ID

To show banner ads on the free plan, Google AdMob processes your advertising ID and ad impression and click records. This may be used to show ads based on your interests. We never pass facility names, amounts, business numbers, or attendance records to any ad provider.

If you do not want personalized ads, go to Android Settings > Google > Ads and delete or reset your advertising ID. Ads will still appear, but they will no longer be personalized.

8. Device Backups and Exports

KeepMoney does not sync your data to our servers. The only ways data leaves the device are the two below, both started by you. In neither case can we see the contents.

OS automatic backup (such as Google Drive)

If backup is turned on in your phone settings, Android may back up app data to storage in your own Google account. The membership database is included in encrypted form, and the key that opens it stays in the device's secure storage and is not backed up. Receipt photos are stored as image files in the app's private storage and may be included in the backup. To stop this, turn off backup in your phone's Settings > Google > Backup.

PDF sharing

When you create a claim package, the PDF is saved to the device's temporary folder and handed to the app you pick (email, messenger, and so on) through the OS share sheet. You choose the recipient and the app. KeepMoney does not keep email addresses or card issuer contacts.

If you add the home screen widget, the facility name, remaining sessions, and expiry date of the selected membership appear on your home screen. Remove the widget if other people can see your screen.

9. How We Delete Data

We delete data without delay once its retention period ends or its purpose is fulfilled.

• Data on your device: Deleting data in Settings > Device Data removes the encrypted database, receipt photo folder, widget data, temporary PDFs, app settings, and the encryption key. Because the key is removed, the database cannot be reopened even if a backup copy remains. Deleting a single membership also deletes its attendance records and receipt photo. Uninstalling the app removes all on-device data as well.
• Server data: Cache entries and logs past their retention period are deleted from the database so they cannot be recovered.
• We do not create any printed copies of your information.

10. Your Rights and How to Use Them

You can ask at any time to access, correct, delete, or stop the processing of your personal information.

• You can view, edit, and delete on-device data directly in the app. We do not hold this data, so we cannot view or recover it for you.
• For business number cache entries and logs on our server, contact us using the details in Section 12. We will reply with the result within 10 days.
• A legal guardian or an authorized agent can make a request for you. In that case, please include a letter of authorization.

KeepMoney is not intended for children under 14, and we do not knowingly collect their personal information. If we learn that a child under 14 has used the app, we will guide the legal guardian to request deletion or use the app's data deletion feature.

You are responsible for entering accurate information and for managing your own device lock and backup settings.

11. Security Measures

• The membership database is encrypted with SQLCipher, and its 32-byte random key is kept in secure storage backed by the Android Keystore.
• App data is kept in the app's private storage, which other apps cannot read.
• You can hide the app's contents from the recent apps screen in Settings.
• The app talks to our server over HTTPS only, with an app key check and rate limiting.
• Server logs record only the business number, status code, and response code. IP addresses and device information are not logged.
• Server access is limited to the operator.

12. Privacy Officer

Send privacy questions, complaints, or requests for help to:

13. Where to Get Further Help

If our reply does not resolve your concern, you can report or get advice from the Korean agencies below.

14. Changes to This Policy

If we change this policy, we will post a notice in the app and on this page 7 days before the change takes effect. For changes that matter more to your rights, such as collecting new data or sending new data to a server, we will give 30 days' notice and ask for consent again where required.

If the Korean and English versions differ, the Korean version controls.

• Published: November 9, 2026
• Effective: November 9, 2026