Sinabro (the “Company”, “we”) publishes this Privacy Policy to explain how personal information is handled when you use the Dunit application for iOS, iPadOS, macOS, and Android (the “App”). It applies to every user of the App.
1. Overview and Who Is Responsible
Sinabro, an individual developer based in the Republic of Korea, is the controller of any personal information processed through the App. Contact details are in Section 16.
The App is a to-do and routine tracker. It has no sign-up, login, or account: the Company does not collect your name, email address, phone number, or any other information that identifies you, unless you choose to email the Company (Section 16). Everything you enter stays on your device and, on Apple platforms, in your own iCloud account. The Company operates no server and cannot read your entries. Apart from the emails you choose to send, the only information that leaves your device goes to Apple and Google, as described in Sections 7 through 9 and Section 12.
This Policy is published in English and Korean. For users residing in the Republic of Korea the Korean version prevails; for all other users the English version prevails.
2. Information We Process, Purposes, Legal Basis, and Retention
The table below lists every category of information the App handles. “Legal basis” refers to the ground under the EU/UK GDPR where it applies; under the Korean Personal Information Protection Act the same processing is necessary to provide the service you requested.
| Information | Purpose | Legal basis | Retention |
|---|---|---|---|
| To-dos and subtasks: title, due date, reminder time, completion state, and order | Keep and show your list; sync between your own devices on Apple platforms | Performance of the service you requested (GDPR Art. 6(1)(b)) | Until you delete the item or delete the App’s data |
| Routines: title, weekdays, reminder time, on/off state, and order | Same as above | Same as above | Until you delete the routine or delete the App’s data |
| Completion history: for each day, the title of the to-do or routine you completed and when | Show your history and streaks in the calendar view | Same as above | Kept after the source item is deleted, until you delete the App’s data (Section 10) |
| A reference to each calendar event the App created (only while calendar integration is on) | Keep those calendar events in sync and remove them when you delete the to-do | Your choice to enable the feature | Until the to-do is deleted or you turn the feature off |
| Settings: theme, onboarding and hint flags, calendar-integration and Live Activity toggles, and a cached record of your Dunit Pro entitlement | Apply your preferences; unlock Pro features offline | Performance of the service and of the purchase contract | Until you delete the App’s data |
| Time of the last update check (Apple platforms) | Ask the App Store at most once a day whether a newer version exists (Section 12) | Legitimate interest in keeping the App current (GDPR Art. 6(1)(f)) | Until you delete the App’s data |
| Emails you send to the Company: your email address, your message, and any attachment | Answer your inquiry | Steps you asked for (GDPR Art. 6(1)(b)) and legitimate interest in supporting the App (Art. 6(1)(f)) | 3 years after your inquiry is resolved, so that a repeat problem or a dispute can be handled; then deleted |
The Company does not process sensitive information, location, contacts, or any government identifier. Your entries are never sent to the Company.
3. Where Your Data Is Stored and Backups
On iOS, iPadOS, and macOS, your entries are stored on your device and in the iCloud private database belonging to your Apple Account (CloudKit private database). Sync is automatic while you are signed in to iCloud; if iCloud is unavailable the App works on-device only. The Company has no access to that database. Widgets, the Live Activity, and the macOS menu-bar extra read the same local data through a shared app group solely to display it. Your entries are also included in your device backup if you use iCloud Backup or a computer backup.
On Android, your entries are stored only on your device. If you have turned on Android’s system backup, the App’s database and settings are included in the backup and device-to-device transfer kept under your Google Account, which the operating system controls. Widgets read the same local data.
The Company operates no backend server of its own. For how Apple and Google handle the storage they provide, see the Apple Privacy Policy and the Google Privacy Policy.
4. App Permissions
The App asks for the following permissions. “Optional” means you can decline and keep using every other part of the App.
| Permission | Required or optional | Purpose | When you are asked | If you decline |
|---|---|---|---|---|
| Calendar (Apple platforms: full calendar access; Android: read and write calendar) | Optional | Add to-dos with a due date to your calendar and keep them in sync (Section 5) | When you turn on calendar integration in Settings | Calendar integration stays off; nothing else changes |
| Notifications (Apple platforms; Android: post notifications) | Optional | Deliver the local reminders you set on to-dos and routines (Section 6) | When you first turn on a reminder | Reminders are not shown; nothing else changes |
| Exact alarms (Android) | Optional | Fire reminders at the exact minute you chose | Opened as a system setting from the reminder screen | Reminders may arrive a few minutes late |
| Run at boot (Android) | Granted automatically at install, no prompt | Reschedule your reminders after the device restarts | Not asked | Not applicable |
The App does not request location, contacts, camera, photo, or microphone permission, and it does not ask to track you. On Android the App has no internet permission at all: purchases go through the Google Play app on your device. You can change any permission later in your device settings.
5. Calendar Integration
Calendar integration is off until you turn it on in Settings and grant calendar permission. While it is on, the App creates, updates, and deletes events in your own calendar for to-dos that have a due date. This is one-way: the events live in your calendar and in whatever calendar account you have set up on your device, and they are never sent to the Company. Deleting a to-do, or turning the feature off, removes the events the App created. You can withdraw calendar permission at any time in your device settings.
6. Reminders, Widgets, and Live Activity
Reminders are local notifications scheduled on your device by the App itself. Their content never leaves your device, and the Company does not send push notifications. On Apple platforms the App is also registered for silent background notifications that carry no content and are used only by iCloud to tell the App that your data changed on another device.
Home-screen widgets (and lock-screen widgets and the Live Activity on iOS) show your to-dos and routines by reading the App’s local data on your device. Check-offs made from a widget are written to the same local data.
7. Dunit Pro: Purchase and Subscriptions
Dunit Pro unlocks additional features and can be bought in two ways: a one-time Lifetime purchase, or a monthly or yearly auto-renewing subscription. Payment is handled entirely by the App Store (Apple) on Apple platforms and by Google Play (Google) on Android; the Company never receives your payment details.
The store tells the App only whether you hold a valid purchase or an active subscription, and when a subscription will renew or end, so that Pro features can be unlocked. The App caches that yes/no answer on your device so Pro features and widgets work offline. Subscriptions renew automatically until you cancel them; you manage or cancel them, and request refunds, in your App Store or Google Play account, under each store’s policies. Buying Lifetime while a subscription is active does not cancel the subscription; cancel it in the store yourself. “Restore purchases” in Settings re-applies purchases made with the same store account. See the Apple Privacy Policy and the Google Privacy Policy.
8. Third-Party Disclosure and Processors
The Company does not sell, rent, or disclose your entries to anyone.
Processor that acts on the Company’s behalf:
| Processor | Country | Task entrusted | Information handled |
|---|---|---|---|
| Kakao Corp. (Daum Mail) | Republic of Korea | Run the Company’s support mailbox | Emails you send to the Company: your email address, your message, and any attachment |
Platform providers that process information for their own services, under their own terms and privacy policies:
| Provider | Country | Service | Information handled |
|---|---|---|---|
| Apple Inc. | United States | iCloud sync of your entries (CloudKit private database); App Store purchases and subscriptions; the App Store version lookup (Section 12) | Your entries, inside your own Apple Account; purchase and subscription transactions; the App’s bundle identifier |
| Google LLC | United States | Google Play purchases and subscriptions; Android system backup where you have turned it on | Purchase and subscription transactions; the backup copy under your own Google Account |
If you turn on calendar integration, the events the App creates may sync through the calendar account you have configured on your device; you and your operating system control that account. For details on each provider’s processing, see the Apple Privacy Policy and the Google Privacy Policy.
9. International Transfers
Emails you send to the Company are kept by Kakao, a company in the Republic of Korea, and the Company does not transfer them abroad. The platform providers above are located in the United States, so the information below leaves the Republic of Korea (and, for users elsewhere, your own country) when the App communicates with them.
| Recipient | Country | When and how | Information transferred | Purpose | Retention | Basis | How to refuse and what happens |
|---|---|---|---|---|---|---|---|
| Apple Inc. (iCloud) | United States | Automatically while you use the App on an Apple device signed in to iCloud | Your to-dos, routines, completion history, and settings | Sync between your own devices | Until you delete them | Storage you chose under your own Apple Account | Sign out of iCloud, or turn Dunit off in iCloud settings; the App then works on-device only |
| Apple Inc. (App Store) | United States | When you buy, subscribe, or restore on an Apple device | Purchase and subscription transaction, managed by Apple | Payment | Apple’s policy | Performance of the purchase contract | Do not purchase |
| Apple Inc. (App Store version lookup) | United States | Once a day at most, over the network, on Apple platforms | The App’s bundle identifier and, as with any connection, your IP address; no user data | Show a notice when a newer version is available | Apple’s policy | Legitimate interest in keeping the App current | Cannot be turned off separately; using the App offline sends nothing |
| Google LLC (Google Play) | United States | When you buy, subscribe, or restore on Android, through the Google Play app | Purchase and subscription transaction, managed by Google | Payment | Google’s policy | Performance of the purchase contract | Do not purchase |
| Google LLC (Android backup) | United States | When Android runs its system backup, if you have turned it on | A backup copy of the App’s database and settings | Backup and device transfer under your own Google Account | Your backup settings | Your own choice of backup | Turn off backup for the App or for the device in Android settings |
For users in the European Economic Area and the United Kingdom, these transfers rely on the safeguards each provider publishes, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses; see the Apple Privacy Policy and the Google Privacy Policy.
10. Deleting Your Data
- Individual items: delete a to-do, subtask, or routine in the App. Deleting a to-do also cancels its reminder and removes the calendar event the App created for it. Routines are removed from your list while their completion history is kept.
- Completion history: the App has no control to erase history on its own. It is removed together with all other data when you delete the App’s data as described below.
- Uninstalling the App deletes all local data on your device.
- Apple platforms: entries synced to iCloud remain in your Apple Account and reappear if you reinstall under the same account. To delete them, and the completion history with them: Settings → your name → iCloud → Apps Using iCloud → Dunit → “Turn Off and Delete from iCloud” (on macOS: System Settings → your name → iCloud → Drive or Apps).
- Android: uninstalling deletes the data on your device; any copy in Android’s system backup is governed by your Google Account backup settings.
- Emails you sent: deleted from the support mailbox 3 years after your inquiry is resolved. To have them deleted sooner, write to the contact in Section 16.
Apart from emails you have sent, the Company holds no copy of your data, so there is nothing further for the Company to delete.
11. Your Rights and How to Exercise Them
You have the right to access, correct, delete, and restrict the processing of your personal information, to receive a copy in a portable format, to object to processing, and to withdraw any consent you have given, with effect for the future. Where you act on behalf of a child, the child’s legal representative may exercise these rights.
Because your entries exist only on your device and in cloud storage under your own account, you exercise these rights directly: view and edit in the App, delete as described in Section 10, and change permissions as described in Section 4. For anything that requires the Company, write to the contact in Section 16; we answer within 10 days.
You have the right to lodge a complaint with a supervisory authority: in the European Economic Area and the United Kingdom, the data protection authority of your country; in the Republic of Korea, the bodies listed in Section 16.
The Company does not sell personal information. The App does not use browser cookies and does not respond to browser “Do Not Track” signals, because it does not track you across websites.
12. Analytics, Tracking, and Update Check
The App shows no advertising and embeds no analytics, advertising, or crash-reporting SDK. It does not track you across other companies’ apps or websites and does not collect any advertising identifier (IDFA or Advertising ID). No usage statistics reach the Company. If you have enabled your operating system’s diagnostic sharing (Apple: Settings → Privacy & Security → Analytics & Improvements; Android: usage and diagnostics), Apple or Google may deliver anonymous, aggregated crash reports to the Company; they contain no personal information.
On Apple platforms, the App asks Apple’s public App Store lookup service at most once a day whether a newer version of the App exists, so it can show a non-blocking notice. The request contains only the App’s bundle identifier; as with any internet connection, Apple sees the IP address of the request. No entries, settings, or device identifiers are sent. On Android the App makes no network requests of its own.
13. Security Measures
The Company collects the minimum information necessary and keeps none of your entries on infrastructure it operates, which removes the most common way user data is exposed. On your device, your entries are protected by the operating system’s storage protection and device encryption. In iCloud, they are protected by Apple’s encryption in transit and at rest. Purchase and update-check traffic is encrypted in transit and handled on infrastructure covered by Apple’s and Google’s security programs. The support mailbox is protected by Kakao’s account security, and only the Company has access to it.
14. Children
The App is not directed at children, and the Company does not knowingly collect personal information from children under 14, or under the age at which your country requires parental consent (for example 13 in the United States and up to 16 in the European Economic Area). If you believe a child has used the App in a way that involved personal information, contact us (Section 16) and we will help remove it.
15. Changes to This Policy
When this Policy changes, the Company publishes the revised version at this address with a new “Last updated” date and the date it takes effect, and records the change below so the old and new versions can be compared. The Company holds no email address for you unless you have written to it, and therefore does not notify you individually.
- September 30, 2026: Section 15 no longer says that changes are published at least 7 days (or 30 days) before they take effect; changes are now recorded here.
- October 9, 2026: support mail now goes to support@sinabroapps.com, a mailbox run by Kakao (Daum Mail) in the Republic of Korea; added the emails you send to the Company, their 3-year retention, and Kakao as a processor. Sections 1, 2, 8, 9, 10, 13 and 15 changed accordingly.
16. Privacy Contact and Complaints
Questions about this Policy, requests to exercise your rights, and privacy complaints are handled by:
- Privacy protection and complaints: Sinabro Privacy Team
- Email: support@sinabroapps.com
If you are in the Republic of Korea and your issue is not resolved, you may also contact:
- Personal Information Infringement Report Center (KISA): 118 (no area code), privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr
- Supreme Prosecutors’ Office cybercrime: 1301, spo.go.kr
- National Police Agency cybercrime: 182, ecrm.police.go.kr
This Policy takes effect on October 9, 2026.