ProofDay Privacy Policy
# Privacy Policy
**Service**: ProofDay (떠벌림)
**Effective date**: October 18, 2026
**Last updated**: October 18, 2026
This policy explains how SiU Ahn (안시우, "the developer") collects, uses and keeps personal information in the ProofDay app ("this app"). In this app you declare a goal in public and post a daily proof photo, and other users send cheers. An account is required, and content you post is shown to other users.
---
## 1. Information this app collects
### 1.1 Account information (stored on our server)
The following is stored on this app's server (proofday.reactiveworks.dev):
- **Email sign-up**: email address, password (stored only as a one-way hash, never in plain text), email verification code (deleted once verified or expired)
- **Google sign-in**: the account identifier verified by Google, email address
- **Apple sign-in**: the account identifier verified by Apple, email address (may be a private relay address), and the token used to disconnect Apple when you delete your account
- **Profile**: nickname, bio, profile photo, interest categories
- **Settings**: app language, device time zone (to work out check-in dates and reminder times), default visibility, notification choices, the time you accepted the Terms
- **Staying signed in**: session tokens (kept in the device's secure storage; the server keeps only a hash)
Each sign-in method (email, Google, Apple) is treated as a separate account.
### 1.2 Content you post (stored on our server, shown according to visibility)
- Goal declarations (text, category, schedule, duration, check-in window, visibility, post language)
- **Proof photos** and captions, how the photo was taken (in-app camera or gallery), target date, server receipt time
- Cheers (four presets), pre-cheers, follows, blocks and reports
Proof photos and goals are shown to other users according to the visibility you choose (Everyone / Followers / Only me).
> ⚠️ **Location metadata (EXIF GPS and similar) is removed on the device before upload.** Faces, addresses or license plates visible in the photo itself remain visible, so do not post photos of other people or personal details.
### 1.3 Push notifications (Firebase Cloud Messaging)
To send cheer, follow, adopt and cheer-mate notifications, we store your **Google Firebase Cloud Messaging** device token, device type (Android/iOS) and notification language. The token is removed when you sign out or delete your account. Check-in window reminders are local notifications scheduled on the device and are not sent to the server.
### 1.4 Service logs
To prevent abuse and fix problems, request times, IP addresses and key actions (sign-ins, report handling) may be recorded in server logs. When a report is filed, the reason and the reported content are sent to the operator as an alert.
### 1.5 On-device storage
`Hive` (local database), `shared_preferences` and `flutter_secure_storage` keep the following on your device only:
- A cache of screens loaded from the server (separate per account, deleted on sign-out)
- Proof photo drafts whose upload failed (deleted automatically after at most 7 days)
- App settings (theme, language) and session tokens
### 1.6 Advertising (Google AdMob)
This app shows **Google AdMob** banner ads to stay free. AdMob may automatically collect and process the advertising ID, IP address, device information (model, OS version) and ad impression and click records, to serve ads and prevent invalid clicks. The developer does not collect or keep this information; Google processes it under its own policy. On iOS, the app asks for tracking permission before personalized ads.
- Google ads policy: https://policies.google.com/technologies/ads
- AdMob data processing: https://support.google.com/admob/answer/6128543
---
## 2. Permissions
| Permission | Purpose |
| --- | --- |
| Internet | Account, check-in and cheer traffic, loading ads, store update check |
| Camera | Taking proof photos in the in-app camera (only when you take one). The microphone is not used |
| Photos | Choosing a proof or profile photo from the gallery (only the photo you pick) |
| Notifications | Check-in window reminders, cheer and follow pushes |
This app does not request location, contacts or microphone permissions.
---
## 3. Retention
- Account information and content: until you delete your account
- Sign-ups that never finish email verification: deleted automatically after a set period
- Reports you filed: on account deletion the reporter is removed and only the handling record is kept for 90 days
- Server backups: kept for up to 30 days, then rotated out (information from deleted accounts leaves the backups after this period)
### What account deletion removes
You can delete your account at any time in Settings → Delete account. The following happens immediately:
- Your goals, proof photos, captions, rest-day records and the cheers on them → deleted
- Cheers and pre-cheers you sent, follow and block relationships (both directions), notifications, push tokens, sessions → deleted
- Your profile photo and every proof photo file → deleted from the server
- Email, sign-in identifier, nickname and bio → erased
- Goals other users created by adopting your declaration → stay (they belong to those users), but the source shows as "deleted declaration"
- Apple sign-in accounts → a disconnect (token revoke) request is sent to Apple
---
## 4. Processors and third parties
| Recipient | Purpose |
| --- | --- |
| Vultr (server hosting) | Running the server that stores accounts, content and photos |
| Google (Firebase Cloud Messaging) | Delivering push notifications |
| Amazon Web Services (SES) | Sending email verification codes and temporary password emails |
| Google · Apple | Confirming social sign-in (when you choose that sign-in) |
| Google (AdMob) | Advertising (section 1.6) |
We do not share or sell personal information to third parties for any other purpose, except when required by law.
---
## 5. Your rights
- **Access and correction**: change your nickname, bio and photo in Me → Edit profile
- **Visibility and deletion**: change each goal's visibility, delete check-ins and goals
- **Block and report**: block users you do not want to see and report inappropriate content
- **Account deletion**: Settings → Delete account (section 3)
- **Push opt-out**: notification toggles in Settings or device settings
- **Personalized ads opt-out**: Android Settings → Google → Ads / iOS Settings → Privacy & Security → Tracking
- For any other access or deletion request, email the address in section 7. We respond within 7 business days
---
## 6. Children's privacy
This app is not directed at children under 14 and does not knowingly collect personal information from children under 14 (or under 13, in line with the US COPPA). If you learn that a child's information was collected, email the address in section 7 and we will delete it without delay.
---
## 7. Privacy contact
| Item | Details |
| --- | --- |
| Responsible person | SiU Ahn (developer) |
| Email | siwooeo@gmail.com |
---
## 8. Changes to this policy
This policy may change with the law or the service. We will announce changes in the app or on this page in advance.
**Effective date: October 18, 2026**
**Service**: ProofDay (떠벌림)
**Effective date**: October 18, 2026
**Last updated**: October 18, 2026
This policy explains how SiU Ahn (안시우, "the developer") collects, uses and keeps personal information in the ProofDay app ("this app"). In this app you declare a goal in public and post a daily proof photo, and other users send cheers. An account is required, and content you post is shown to other users.
---
## 1. Information this app collects
### 1.1 Account information (stored on our server)
The following is stored on this app's server (proofday.reactiveworks.dev):
- **Email sign-up**: email address, password (stored only as a one-way hash, never in plain text), email verification code (deleted once verified or expired)
- **Google sign-in**: the account identifier verified by Google, email address
- **Apple sign-in**: the account identifier verified by Apple, email address (may be a private relay address), and the token used to disconnect Apple when you delete your account
- **Profile**: nickname, bio, profile photo, interest categories
- **Settings**: app language, device time zone (to work out check-in dates and reminder times), default visibility, notification choices, the time you accepted the Terms
- **Staying signed in**: session tokens (kept in the device's secure storage; the server keeps only a hash)
Each sign-in method (email, Google, Apple) is treated as a separate account.
### 1.2 Content you post (stored on our server, shown according to visibility)
- Goal declarations (text, category, schedule, duration, check-in window, visibility, post language)
- **Proof photos** and captions, how the photo was taken (in-app camera or gallery), target date, server receipt time
- Cheers (four presets), pre-cheers, follows, blocks and reports
Proof photos and goals are shown to other users according to the visibility you choose (Everyone / Followers / Only me).
> ⚠️ **Location metadata (EXIF GPS and similar) is removed on the device before upload.** Faces, addresses or license plates visible in the photo itself remain visible, so do not post photos of other people or personal details.
### 1.3 Push notifications (Firebase Cloud Messaging)
To send cheer, follow, adopt and cheer-mate notifications, we store your **Google Firebase Cloud Messaging** device token, device type (Android/iOS) and notification language. The token is removed when you sign out or delete your account. Check-in window reminders are local notifications scheduled on the device and are not sent to the server.
### 1.4 Service logs
To prevent abuse and fix problems, request times, IP addresses and key actions (sign-ins, report handling) may be recorded in server logs. When a report is filed, the reason and the reported content are sent to the operator as an alert.
### 1.5 On-device storage
`Hive` (local database), `shared_preferences` and `flutter_secure_storage` keep the following on your device only:
- A cache of screens loaded from the server (separate per account, deleted on sign-out)
- Proof photo drafts whose upload failed (deleted automatically after at most 7 days)
- App settings (theme, language) and session tokens
### 1.6 Advertising (Google AdMob)
This app shows **Google AdMob** banner ads to stay free. AdMob may automatically collect and process the advertising ID, IP address, device information (model, OS version) and ad impression and click records, to serve ads and prevent invalid clicks. The developer does not collect or keep this information; Google processes it under its own policy. On iOS, the app asks for tracking permission before personalized ads.
- Google ads policy: https://policies.google.com/technologies/ads
- AdMob data processing: https://support.google.com/admob/answer/6128543
---
## 2. Permissions
| Permission | Purpose |
| --- | --- |
| Internet | Account, check-in and cheer traffic, loading ads, store update check |
| Camera | Taking proof photos in the in-app camera (only when you take one). The microphone is not used |
| Photos | Choosing a proof or profile photo from the gallery (only the photo you pick) |
| Notifications | Check-in window reminders, cheer and follow pushes |
This app does not request location, contacts or microphone permissions.
---
## 3. Retention
- Account information and content: until you delete your account
- Sign-ups that never finish email verification: deleted automatically after a set period
- Reports you filed: on account deletion the reporter is removed and only the handling record is kept for 90 days
- Server backups: kept for up to 30 days, then rotated out (information from deleted accounts leaves the backups after this period)
### What account deletion removes
You can delete your account at any time in Settings → Delete account. The following happens immediately:
- Your goals, proof photos, captions, rest-day records and the cheers on them → deleted
- Cheers and pre-cheers you sent, follow and block relationships (both directions), notifications, push tokens, sessions → deleted
- Your profile photo and every proof photo file → deleted from the server
- Email, sign-in identifier, nickname and bio → erased
- Goals other users created by adopting your declaration → stay (they belong to those users), but the source shows as "deleted declaration"
- Apple sign-in accounts → a disconnect (token revoke) request is sent to Apple
---
## 4. Processors and third parties
| Recipient | Purpose |
| --- | --- |
| Vultr (server hosting) | Running the server that stores accounts, content and photos |
| Google (Firebase Cloud Messaging) | Delivering push notifications |
| Amazon Web Services (SES) | Sending email verification codes and temporary password emails |
| Google · Apple | Confirming social sign-in (when you choose that sign-in) |
| Google (AdMob) | Advertising (section 1.6) |
We do not share or sell personal information to third parties for any other purpose, except when required by law.
---
## 5. Your rights
- **Access and correction**: change your nickname, bio and photo in Me → Edit profile
- **Visibility and deletion**: change each goal's visibility, delete check-ins and goals
- **Block and report**: block users you do not want to see and report inappropriate content
- **Account deletion**: Settings → Delete account (section 3)
- **Push opt-out**: notification toggles in Settings or device settings
- **Personalized ads opt-out**: Android Settings → Google → Ads / iOS Settings → Privacy & Security → Tracking
- For any other access or deletion request, email the address in section 7. We respond within 7 business days
---
## 6. Children's privacy
This app is not directed at children under 14 and does not knowingly collect personal information from children under 14 (or under 13, in line with the US COPPA). If you learn that a child's information was collected, email the address in section 7 and we will delete it without delay.
---
## 7. Privacy contact
| Item | Details |
| --- | --- |
| Responsible person | SiU Ahn (developer) |
| Email | siwooeo@gmail.com |
---
## 8. Changes to this policy
This policy may change with the law or the service. We will announce changes in the app or on this page in advance.
**Effective date: October 18, 2026**