PRIVACY POLICY

DevJK ("Company" or "Developer") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how your information is collected, used, shared, and protected when you use HOME PT (the "App" or "Service").

1. Categories of Personal Information Collected

The Company collects the minimum amount of personal information necessary to provide the Service, authenticate users, and deliver a personalized experience.

• During sign-up and login: Email address, Firebase user ID, sign-in provider identifier, and social login profile information such as name and profile identifier. Login methods include Google, Apple, KakaoTalk, Facebook, and standard email authentication through Firebase Authentication.
• During service use: User-created routines, exercises, timer settings, completed workout records, session/timeline data, routine reminders, and app settings. When a signed-in user manually runs backup, this data is backed up to Firebase Firestore.
• Voice model and app operation: Firebase Remote Config and Cloud Storage for Firebase are used to check voice recognition model version, path, and size and to download model files. Cloud Storage is used to provide voice model files and is not used to upload user-created routines or workout records.
• PRO purchase processing: RevenueCat may process an app user ID (Firebase UID or anonymous ID), product ID, purchase token/receipt, purchase and restore history, and entitlement status required for purchase verification.

2. Purpose of Collection and Use

Collected information is used only for the following purposes:

• User identification, authentication, and account security.
• Manual cloud backup and restore of workout routines and history through Firebase Firestore.
• Voice recognition model download and version management through Firebase Storage.
• Verification, restore, and entitlement management for the one-time lifetime PRO purchase through RevenueCat.
• Processing account deletion requests and preventing immediate re-registration or abuse during the 30-day deletion grace period.
• Bug fixes, service improvements, and notices regarding new features or updates.

3. Third-Party Processing and Outsourcing

The Company does not use personal information beyond the purposes described above and, in principle, does not provide it to third parties. However, certain processing is entrusted to the following service providers to ensure stable and efficient operation of the Service.

• Google Firebase: Used for Authentication, Cloud Firestore backup storage, Cloud Functions account deletion processing, Remote Config, and Cloud Storage voice model delivery. If a user is signed in with Firebase Authentication, Firestore, Functions, and Storage requests may include the applicable Firebase user ID.
• RevenueCat: Used for the one-time lifetime PRO purchase, purchase restore, entitlement management, fraud prevention, and purchase analytics. RevenueCat may process app user ID, product ID, purchase token/receipt, purchase/restore history, and entitlement status. Health status, body weight, detailed workout records, and routine contents are not transmitted to RevenueCat.

Actual financial and credit card information is handled directly by the Apple App Store or Google Play Store and is not stored on the Company's servers.

4. Retention and Deletion Period

As a rule, personal information is deleted without delay once the purpose of collection and use has been fulfilled. However, information required for purchase verification, fraud prevention, legal obligations, accounting, refunds, or dispute handling may be retained for the period necessary for those purposes.

• In-app account deletion: Signed-in users can request deletion from MY INFO > Delete account. When the request is processed, the user's Firebase Firestore backup data is deleted, and the Firebase Authentication account is disabled and moved into a 30-day pending deletion state.
• Web deletion request: If you cannot access the app, you can request deletion through the account deletion request page or by email.
• 30-day deletion grace period: A minimal pending-deletion record may be retained for up to 30 days to prevent immediate re-registration with the same email or sign-in provider identifier. This record includes only minimal information such as email or provider identifier, request time, and scheduled purge time. After the grace period, the Firebase Authentication account and pending-deletion record are permanently deleted by a scheduled job.
• RevenueCat and store purchase records: Purchase receipts, purchase tokens, product IDs, entitlement status, and purchase/restore history held by Google Play, Apple App Store, and RevenueCat may be retained separately under each service's policies for purchase verification, fraud prevention, accounting, refunds, and restoring PRO access. You may request deletion of RevenueCat customer data through the contact below, and such deletion may affect purchase restore.
• However, if retention is required by applicable law, the Company may retain certain personal information for the legally mandated period.

5. Children's Privacy

HOME PT is not intended for children under the age of 13. The Company does not knowingly collect personal information from children under 13. If such information is discovered to have been provided, it will be deleted from the database without delay.

6. Security Measures

The Company takes technical and administrative measures to prevent loss, theft, leakage, alteration, or damage to personal information. Data is transmitted and stored securely through strong security frameworks provided by platforms such as Firebase and RevenueCat, together with encrypted network communication using SSL/TLS.

7. Changes to This Privacy Policy

This Policy may be revised from time to time in response to legal requirements, government guidance, or changes to the Company's internal policy. Material changes will be announced in advance through notices within the Service.

8. Contact Information

If you have any questions, complaints, or requests regarding privacy, data deletion, or processing of personal information, please contact us or use the account deletion request page.

• Developer: DevJK
• Email: devjkyang@gmail.com