Doneshare Privacy Policy
# Doneshare Privacy Policy
- Service: Doneshare (Korean name: 집안일 저울)
- Operator: SiU Ahn (안시우)
- Effective date: October 18, 2026
- Last updated: October 18, 2026
Doneshare ("this app") lets people who live together log household chores and see how the work is shared. This policy explains what personal information this app collects, why, and how it is stored and deleted. The operator follows the Personal Information Protection Act of the Republic of Korea and other applicable laws.
---
## 1. Information we collect
### 1a. When you sign up or sign in (required)
- Email sign-up: email address, password (stored only as a one-way hash), nickname (display name), language setting
- Google sign-in: Google account identifier, email address, nickname, language setting
- Apple sign-in: Apple account identifier, email address (an Apple relay address if you choose "Hide My Email"), nickname, language setting, and an Apple token needed to revoke the link when you delete your account (stored encrypted)
- A refresh token to keep you signed in (stored as a hash, valid for 30 days)
### 1b. Information you create while using the app
- Group data: group name, group type (couple, roommates, family, other), time zone, member list and roles (owner, member), invite codes
- Chore records: chore names, room, completion criteria and points, repeat schedules, completion logs (who, when, memo), confirmations, requests and "thanks" reactions, activity history
- Photos you attach to a completion. Photos are compressed on your device and their metadata (EXIF, including location) is removed before upload.
- Notification preferences: which notifications you want and when
### 1c. Information collected automatically
- Push notification token (Firebase Cloud Messaging registration token), operating system (Android/iOS), language, app version
- Advertising identifier (Android Advertising ID / iOS IDFA — on iOS only if you allow tracking), IP address and device information, collected by Google AdMob for ads (see section 3)
- Server logs record only the request type, response code and processing time. They do not record your IP address or request contents.
### 1d. Information stored only on your device
- Sign-in tokens, in the device's secure storage (Android Keystore / iOS Keychain via flutter_secure_storage)
- A cached copy of your data for display and your settings (theme, language, scheduled reminders), in local storage (Hive, shared_preferences)
- Photo thumbnails, in the device cache
This information is not sent to the operator and is removed when you uninstall the app.
---
## 2. How we use it
- To identify you, keep you signed in, prevent abuse, and send verification and password-reset emails
- To create, invite to and join groups, record chores, calculate points and shares, and show records and photos to the members of your group
- To send push notifications such as confirmation requests, requests and reminders
- To show ads (Google AdMob)
- To answer inquiries and investigate errors
---
## 3. Service providers and international transfers
We use the following providers to run the service. We do not sell your personal information or share it with third parties for any other purpose.
| Provider | Task | Data | Location |
|---|---|---|---|
| Vultr Holdings LLC (The Constant Company) | Server hosting (database and photo storage) | Account, group, record, photo and push-token data from 1a–1c | Seoul, Republic of Korea |
| Amazon Web Services, Inc. (Amazon SES) | Sending verification and password-reset emails | Email address, email content | Asia Pacific (Seoul) region |
| Google LLC (Firebase Cloud Messaging) | Delivering push notifications | Push token, notification content | Google data centers, including the United States |
| Google LLC (Google AdMob) | Serving ads | Advertising ID, IP address, device information | Google data centers, including the United States |
| Google LLC / Apple Inc. | Social sign-in | Account identifier, email address | Each company's data centers, including the United States |
Data sent to Google and Apple is transferred over the network, at the time you use the related feature, to the United States and other countries where they operate, and is kept according to their own privacy policies. You can avoid these transfers by using email sign-up instead of Google/Apple sign-in, by turning off notifications in your device settings (you will then not receive notifications), and by limiting ad tracking as described in section 7.
Google Privacy Policy: https://policies.google.com/privacy — How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites — Apple: https://www.apple.com/legal/privacy/
---
## 4. Who can see your content
- Chore records, memos, photos and your nickname are visible **only to members of the same group**. There is no public feed or search.
- Photos are served only to authenticated members of the group. Someone who leaves a group can no longer see that group's photos.
- Anyone who receives an invite code or link can join the group and see its records, so share invite codes only with the people you live with.
---
## 5. Retention and deletion
- Account data, groups, records and photos are kept **until you delete your account**.
- **Deleting your account (Settings → Delete account)** immediately removes: your account data (email, nickname, sign-in links), sign-in tokens, push tokens, notification preferences, the completion records, reactions and requests you created, and the photos you uploaded (photo files are queued for deletion and removed without delay). For Apple sign-in users, the Apple link is revoked as well. Any group in which you are the last member is deleted entirely. Remaining members' activity history is unlinked from your account.
- **Leaving a group** offers two options:
- Keep my records: your completion records stay in that group's statistics, and you lose access to the group.
- Delete my records: your records and photos in that group are deleted.
- When the last member leaves, the group and all of its records and photos are deleted.
- Signing out removes that device's push token from the server.
- Pending email sign-ups and password-reset requests expire after 30 minutes. Refresh tokens expire after 30 days.
- On-device data is removed when you uninstall the app.
- Database rows are deleted irreversibly and photo files are deleted from storage.
- If a law requires us to keep certain data, we keep it separately only for the period the law requires (none at present).
---
## 6. Permissions
| Permission | Purpose | If denied |
|---|---|---|
| Camera | Taking a photo to attach to a completion | Only photo capture is unavailable |
| Photo picker | Choosing a photo from your library (on Android the system photo picker is used, so no broad storage permission is requested) | Only photo attachment is unavailable |
| Notifications | Confirmation requests, requests and reminders | You will not receive notifications |
| Exact alarms / run after boot | Reminders at the time you choose, restored after a reboot | Reminders may arrive late |
| App Tracking Transparency (iOS) | Consent to use the advertising identifier for personalized ads | Only non-personalized ads are shown |
This app does not request location, microphone or contacts permissions. All permissions are optional and can be changed in your device settings at any time.
---
## 7. Your rights
- View and edit: you can view and edit your nickname and other details in the app's settings.
- Delete and stop processing: delete your account at any time from Settings → Delete account, or delete your records in a specific group by leaving it.
- For access, correction, deletion or suspension requests you cannot complete in the app, email us at the address in section 10. We will respond within 7 business days.
- Reset your advertising ID or turn off personalized ads:
- Android: Settings → Google → Ads → Reset or delete advertising ID
- iOS: Settings → Privacy & Security → Tracking → turn off Doneshare
- A legal representative or authorized agent may exercise these rights on your behalf; we may ask for proof of authorization.
---
## 8. Security
- All traffic is encrypted with HTTPS (TLS).
- Passwords and refresh tokens are stored only as hashes; Apple tokens are stored encrypted.
- Photos have no public URL and are served only to authenticated group members.
- Server access is limited to the operator, and the service runs under a separate restricted account.
---
## 9. Children
This app is not directed at children under the age of 14 (the Korean threshold) and we do not knowingly collect their personal information. In line with COPPA, it is likewise not directed at children under 13. If we learn that we have collected such information, we delete it without delay. Ads in this app are intended for a general audience.
---
## 10. Privacy officer and contact
- Name: SiU Ahn (안시우)
- Role: Operator and privacy officer
- Email: siwooeo@gmail.com
---
## 11. Changes to this policy
We will announce changes in the app or on this page at least 7 days before they take effect, and at least 30 days before for changes that materially affect your rights.
- Service: Doneshare (Korean name: 집안일 저울)
- Operator: SiU Ahn (안시우)
- Effective date: October 18, 2026
- Last updated: October 18, 2026
Doneshare ("this app") lets people who live together log household chores and see how the work is shared. This policy explains what personal information this app collects, why, and how it is stored and deleted. The operator follows the Personal Information Protection Act of the Republic of Korea and other applicable laws.
---
## 1. Information we collect
### 1a. When you sign up or sign in (required)
- Email sign-up: email address, password (stored only as a one-way hash), nickname (display name), language setting
- Google sign-in: Google account identifier, email address, nickname, language setting
- Apple sign-in: Apple account identifier, email address (an Apple relay address if you choose "Hide My Email"), nickname, language setting, and an Apple token needed to revoke the link when you delete your account (stored encrypted)
- A refresh token to keep you signed in (stored as a hash, valid for 30 days)
### 1b. Information you create while using the app
- Group data: group name, group type (couple, roommates, family, other), time zone, member list and roles (owner, member), invite codes
- Chore records: chore names, room, completion criteria and points, repeat schedules, completion logs (who, when, memo), confirmations, requests and "thanks" reactions, activity history
- Photos you attach to a completion. Photos are compressed on your device and their metadata (EXIF, including location) is removed before upload.
- Notification preferences: which notifications you want and when
### 1c. Information collected automatically
- Push notification token (Firebase Cloud Messaging registration token), operating system (Android/iOS), language, app version
- Advertising identifier (Android Advertising ID / iOS IDFA — on iOS only if you allow tracking), IP address and device information, collected by Google AdMob for ads (see section 3)
- Server logs record only the request type, response code and processing time. They do not record your IP address or request contents.
### 1d. Information stored only on your device
- Sign-in tokens, in the device's secure storage (Android Keystore / iOS Keychain via flutter_secure_storage)
- A cached copy of your data for display and your settings (theme, language, scheduled reminders), in local storage (Hive, shared_preferences)
- Photo thumbnails, in the device cache
This information is not sent to the operator and is removed when you uninstall the app.
---
## 2. How we use it
- To identify you, keep you signed in, prevent abuse, and send verification and password-reset emails
- To create, invite to and join groups, record chores, calculate points and shares, and show records and photos to the members of your group
- To send push notifications such as confirmation requests, requests and reminders
- To show ads (Google AdMob)
- To answer inquiries and investigate errors
---
## 3. Service providers and international transfers
We use the following providers to run the service. We do not sell your personal information or share it with third parties for any other purpose.
| Provider | Task | Data | Location |
|---|---|---|---|
| Vultr Holdings LLC (The Constant Company) | Server hosting (database and photo storage) | Account, group, record, photo and push-token data from 1a–1c | Seoul, Republic of Korea |
| Amazon Web Services, Inc. (Amazon SES) | Sending verification and password-reset emails | Email address, email content | Asia Pacific (Seoul) region |
| Google LLC (Firebase Cloud Messaging) | Delivering push notifications | Push token, notification content | Google data centers, including the United States |
| Google LLC (Google AdMob) | Serving ads | Advertising ID, IP address, device information | Google data centers, including the United States |
| Google LLC / Apple Inc. | Social sign-in | Account identifier, email address | Each company's data centers, including the United States |
Data sent to Google and Apple is transferred over the network, at the time you use the related feature, to the United States and other countries where they operate, and is kept according to their own privacy policies. You can avoid these transfers by using email sign-up instead of Google/Apple sign-in, by turning off notifications in your device settings (you will then not receive notifications), and by limiting ad tracking as described in section 7.
Google Privacy Policy: https://policies.google.com/privacy — How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites — Apple: https://www.apple.com/legal/privacy/
---
## 4. Who can see your content
- Chore records, memos, photos and your nickname are visible **only to members of the same group**. There is no public feed or search.
- Photos are served only to authenticated members of the group. Someone who leaves a group can no longer see that group's photos.
- Anyone who receives an invite code or link can join the group and see its records, so share invite codes only with the people you live with.
---
## 5. Retention and deletion
- Account data, groups, records and photos are kept **until you delete your account**.
- **Deleting your account (Settings → Delete account)** immediately removes: your account data (email, nickname, sign-in links), sign-in tokens, push tokens, notification preferences, the completion records, reactions and requests you created, and the photos you uploaded (photo files are queued for deletion and removed without delay). For Apple sign-in users, the Apple link is revoked as well. Any group in which you are the last member is deleted entirely. Remaining members' activity history is unlinked from your account.
- **Leaving a group** offers two options:
- Keep my records: your completion records stay in that group's statistics, and you lose access to the group.
- Delete my records: your records and photos in that group are deleted.
- When the last member leaves, the group and all of its records and photos are deleted.
- Signing out removes that device's push token from the server.
- Pending email sign-ups and password-reset requests expire after 30 minutes. Refresh tokens expire after 30 days.
- On-device data is removed when you uninstall the app.
- Database rows are deleted irreversibly and photo files are deleted from storage.
- If a law requires us to keep certain data, we keep it separately only for the period the law requires (none at present).
---
## 6. Permissions
| Permission | Purpose | If denied |
|---|---|---|
| Camera | Taking a photo to attach to a completion | Only photo capture is unavailable |
| Photo picker | Choosing a photo from your library (on Android the system photo picker is used, so no broad storage permission is requested) | Only photo attachment is unavailable |
| Notifications | Confirmation requests, requests and reminders | You will not receive notifications |
| Exact alarms / run after boot | Reminders at the time you choose, restored after a reboot | Reminders may arrive late |
| App Tracking Transparency (iOS) | Consent to use the advertising identifier for personalized ads | Only non-personalized ads are shown |
This app does not request location, microphone or contacts permissions. All permissions are optional and can be changed in your device settings at any time.
---
## 7. Your rights
- View and edit: you can view and edit your nickname and other details in the app's settings.
- Delete and stop processing: delete your account at any time from Settings → Delete account, or delete your records in a specific group by leaving it.
- For access, correction, deletion or suspension requests you cannot complete in the app, email us at the address in section 10. We will respond within 7 business days.
- Reset your advertising ID or turn off personalized ads:
- Android: Settings → Google → Ads → Reset or delete advertising ID
- iOS: Settings → Privacy & Security → Tracking → turn off Doneshare
- A legal representative or authorized agent may exercise these rights on your behalf; we may ask for proof of authorization.
---
## 8. Security
- All traffic is encrypted with HTTPS (TLS).
- Passwords and refresh tokens are stored only as hashes; Apple tokens are stored encrypted.
- Photos have no public URL and are served only to authenticated group members.
- Server access is limited to the operator, and the service runs under a separate restricted account.
---
## 9. Children
This app is not directed at children under the age of 14 (the Korean threshold) and we do not knowingly collect their personal information. In line with COPPA, it is likewise not directed at children under 13. If we learn that we have collected such information, we delete it without delay. Ads in this app are intended for a general audience.
---
## 10. Privacy officer and contact
- Name: SiU Ahn (안시우)
- Role: Operator and privacy officer
- Email: siwooeo@gmail.com
---
## 11. Changes to this policy
We will announce changes in the app or on this page at least 7 days before they take effect, and at least 30 days before for changes that materially affect your rights.