Sinabro (the “Company”, “we”) publishes this Privacy Policy to explain how personal information is handled when you use the KnotNote application for iOS and Android (the “App”). It applies to every user of the App.
1. Overview and Who Is Responsible
Sinabro, an individual developer based in the Republic of Korea, is the controller of any personal information processed through the App. Contact details are in Section 17.
The App is a diary for the occasions of the people in your life and the gift money you give and receive. It has no sign-up, login, or account: the Company does not collect your name, email address, phone number, or any other information that identifies you, unless you choose to email the Company (Section 17). Everything you enter stays on your device and, on iOS, in your own iCloud account. The Company operates no server and cannot read your entries. Apart from the emails you choose to send, the only information that leaves your device goes to Apple and Google, as described in Sections 7 through 10 and, for the update check, Section 13.
This Policy is published in English and Korean. For users residing in the Republic of Korea the Korean version prevails; for all other users the English version prevails.
2. Information We Process, Purposes, Legal Basis, and Retention
The table below lists every category of information the App handles. “Legal basis” refers to the ground under the EU/UK GDPR where it applies; under the Korean Personal Information Protection Act the same processing is necessary to provide the service you requested.
| Information | Purpose | Legal basis | Retention |
|---|---|---|---|
| People you add: name (typed by you or picked from your device contacts, Section 4), the relationship label you choose (family, colleague, friend, school, and so on), and any notes you write | Keep your records and show them to you; sync between your own devices on iOS | Performance of the service you requested (GDPR Art. 6(1)(b)) | Until you delete the person or uninstall the App. A deleted person is kept for 30 days so you can change your mind, then permanently removed together with that person’s occasions and gift records |
| Names in your device contacts (only while the contacts list is open, after you allow contacts access) | Show the list so you can pick several people to add at once | Your choice to use the feature | Not stored: read on your device each time you open the list and discarded when you close it. Only the names you pick are saved, as people in the first row |
| Occasions you record: type (wedding, funeral, birthday, and so on), date, status, and memo | Same as above | Same as above | Until you delete the occasion or uninstall; deletion is immediate |
| Gift records: amount in the currency you select in the App, whether given or received, and the date | Same as above | Same as above | Until you delete the record or uninstall; deletion is immediate |
| A reference to each calendar event the App created (only while calendar integration is on) | Keep those calendar events up to date and remove them when you delete the occasion | Your choice to enable the feature | Until the occasion is deleted or you turn the feature off |
| Settings: theme, currency, calendar-integration toggle | Apply your preferences | Performance of the service | Until you uninstall the App |
| Ad-frequency state (whether this is your first session, when a full-screen ad was last shown) and whether a plan is active | Limit how often ads appear; apply your purchase | Legitimate interest in running the free version (GDPR Art. 6(1)(f)); performance of the purchase contract | Until you uninstall the App |
| Advertising data collected by Google when an ad is loaded (see Section 7) | Serve and measure ads | Your consent where the law requires it (GDPR Art. 6(1)(a)); otherwise legitimate interest | Under Google’s policy |
| Emails you send to the Company: your email address, your message, and any attachment | Answer your inquiry | Steps you asked for (GDPR Art. 6(1)(b)) and legitimate interest in supporting the App (Art. 6(1)(f)) | 3 years after your inquiry is resolved, so that a repeat problem or a dispute can be handled; then deleted |
The Company does not process sensitive information, location, or any government identifier, and your contacts are read only on your device (Section 4). Your people, occasions, and gift records are never attached to an ad request and, apart from the emails you choose to send, are never sent to the Company.
3. Where Your Data Is Stored and Backups
On iOS, your entries are stored on your device and in the iCloud private database belonging to your Apple Account (CloudKit private database). Sync is automatic while you are signed in to iCloud, and the Company has no access to that database. Your entries are also included in your device backup if you use iCloud Backup or a computer backup.
On Android, your entries are stored only on your device. If you have turned on Android’s system backup, the App’s database and settings, including whether a plan is active, are included in the backup kept under your Google Account, which the operating system controls.
CSV and Excel files you export (Section 6) are written to the App’s temporary folder on your device until you share or discard them. An Excel file you pick to import (Section 6) is only read; the App does not copy or keep it.
The Company operates no backend server of its own. For how Apple and Google handle the storage they provide, see the Apple Privacy Policy and the Google Privacy Policy.
4. App Permissions
The App asks for the following permissions. “Optional” means you can decline and keep using every other part of the App.
| Permission | Required or optional | Purpose | When you are asked | If you decline |
|---|---|---|---|---|
| Calendar (iOS: full calendar access; Android: read and write calendar) | Optional | Create, update, and remove calendar events for the occasions you record (Section 5) | When you turn on calendar integration in Settings | Calendar integration stays off; nothing else changes |
| Contacts (iOS: all contacts or only the ones you select; Android: read contacts) | Optional | List the names in your contacts so you can add several people at once | The first time you open “Import from contacts” | Importing from contacts is unavailable; you can still add people by typing their names, and nothing else changes |
| Tracking (iOS App Tracking Transparency) | Optional | Let Google use the advertising identifier (IDFA) for personalized ads (Section 7) | After any ad-consent step, before the first ad, and only if ads will be shown | Ads are not personalized using the IDFA; nothing else changes |
| Internet and network state (Android) | Granted automatically at install, no prompt | Load ads and complete purchases through Google Play | Not asked | Not applicable |
Importing from contacts reads only names, on your device: on iOS the name fields and nickname of each contact, on Android the display name your contacts app shows. No other contact field, such as phone numbers, email addresses, birthdays, or photos, is read. Contacts whose name is not a person’s name or nickname (for example a company, or a contact saved only with a phone number or email address) are left out of the list. Only the names you pick are saved, as people in the App, with no link back to the contact. The App never changes your contacts and never sends them to the Company or anyone else. On iOS you can share only selected contacts and share more later from the list.
The App does not request notification, location, camera, photo, or microphone permission, and it does not send notifications (Section 13). You can change any permission later in your device settings.
5. Calendar Integration
Calendar integration is off until you turn it on in Settings and grant calendar permission. While it is on, the App creates, updates, and deletes events in your own calendar for the upcoming occasions you record. Each event carries the person’s name and the type of occasion, the date, and an alarm delivered by your calendar app. This is one-way: the events live in your calendar and in whatever calendar account you have set up on your device, and they are never sent to the Company. Deleting an occasion in the App, or turning the feature off, removes the events the App created. You can withdraw calendar permission at any time in your device settings.
6. Exporting and Importing Your Data
With a plan (Section 8), you can export everything you have entered, your people, occasions, and gift records, from Settings as CSV files or as one Excel file that also totals each person. The files are generated on your device and handed to the system share sheet, so you choose where they go. The CSV files include people deleted within the last 30 days, with their deletion date; the Excel file leaves them out. The Company is not involved and never receives the exported files.
With a plan you can also import an Excel file that the App exported. The App reads only the file you pick in the system file picker, on your device, and adds only the people and records that are not there yet. The file is not sent anywhere and is not kept after it is read, and this needs no extra permission.
Without a plan, you can still view, edit, and delete everything you have entered in the App at any time.
7. Advertising (Google AdMob)
The App is free and shows ads served by Google AdMob, a service of Google LLC. Native ads appear in the People tab, the Upcoming tab, and the Settings tab, and a full-screen ad may appear after you save a record (at most once per session and never in your first session). While you have a plan (Section 8), the App does not load the advertising SDK at all.
When the App requests an ad, the Google Mobile Ads SDK embedded in the App automatically collects and sends the following information to Google and its advertising partners. Under Korean guidance on online behavioral advertising, this is “behavioral information”:
| Item | Detail |
|---|---|
| Information collected | Advertising identifier (the IDFA on iOS, only if you allow tracking; the Advertising ID on Android), device and app information such as model, OS version, language, and app version, IP address and the approximate location inferred from it, ad impressions and clicks, and SDK performance and error diagnostics |
| How it is collected | Automatically by the Google Mobile Ads SDK each time an ad is requested; the App passes none of your entries into the request |
| Who collects and uses it | Google LLC (United States) and its advertising partners |
| Purposes | Serve ads, measure their performance, prevent fraud and abuse, and, where you have allowed it, show ads personalized to your activity across other apps and websites |
| Retention | Under Google’s policy; see the Google Privacy Policy |
| Where it is sent | Servers of Google LLC in the United States (Section 10) |
On iOS, the App asks for your permission under Apple’s App Tracking Transparency framework before Google may use the IDFA to track your activity across other companies’ apps and websites. If you decline, the IDFA is withheld and ads are not personalized using it. In regions whose law requires consent, such as the European Economic Area and the United Kingdom, a consent form appears before any ad is loaded, and ads are not requested until you have answered. Declining tracking or personalized ads never limits any feature of the App.
You can control advertising at any time:
- iOS: Settings → Privacy & Security → Tracking, to allow or withdraw tracking for the App
- Android: Settings → Google → Ads (the path varies by device), to reset or delete your Advertising ID or opt out of ad personalization
- Where a consent form applies: in the App, Settings → Info → “Ad privacy settings”, to change your choices
- Any region: get a plan (Section 8); while it is active the App loads no ads and sends no advertising data
8. Plans (In-App Purchases)
The App offers optional plans: a monthly or yearly subscription that renews automatically, or a lifetime plan paid once. Any plan removes ads and unlocks Excel export, Excel import, and CSV export. If you bought the earlier remove-ads item, you have the lifetime plan. A subscription renews at the same interval until you cancel it; you cancel or change it in the subscription settings of the App Store on iOS or Google Play on Android.
Payment is handled entirely by Apple’s App Store on iOS and by Google Play on Android; the Company never receives your payment details. The store only tells the App whether a plan is currently active (bought, renewed, expired, or refunded), and the App keeps that yes/no answer on your device so the plan applies before the network is reached. The App checks with the store again each time it starts or comes back to the screen. Use “Restore purchases” in Settings to re-apply a plan bought with the same store account. Refunds and purchase management follow each store’s policies; see the Apple Privacy Policy and the Google Privacy Policy.
9. Third-Party Disclosure and Processors
The Company does not sell, rent, or disclose your people, occasions, or gift records to anyone.
Processors that act on the Company’s behalf:
| Processor | Country | Task entrusted | Information handled |
|---|---|---|---|
| Google LLC (User Messaging Platform) | United States | Display the ad-consent and privacy-options forms and record your choices | Your consent choices, region, and device information |
| Kakao Corp. (Daum Mail) | Republic of Korea | Run the Company’s support mailbox | Emails you send to the Company: your email address, your message, and any attachment |
Platform providers that process information for their own services, under their own terms and privacy policies:
| Provider | Country | Service | Information handled |
|---|---|---|---|
| Apple Inc. | United States | iCloud sync of your entries (CloudKit private database); App Store payment and purchase restoration; the App Store version lookup (iOS, Section 13) | Your entries, inside your own Apple Account; purchase transactions; for the version lookup, the App’s bundle identifier and the IP address of the request |
| Google LLC | United States | AdMob advertising; Google Play payment and purchase restoration; the Google Play update check (Android, Section 13) | The advertising data in Section 7; purchase transactions; for the update check, the App’s package name, passed to the Google Play Store app on your device |
If you turn on calendar integration, the events the App creates may sync through the calendar account you have configured on your device; you and your operating system control that account. For details on each provider’s processing, see the Apple Privacy Policy and the Google Privacy Policy.
10. International Transfers
Emails you send to the Company are kept by Kakao, a company in the Republic of Korea, and the Company does not transfer them abroad. The other providers above are located in the United States, so the information below leaves the Republic of Korea (and, for users elsewhere, your own country) when the App communicates with them.
| Recipient | Country | When and how | Information transferred | Purpose | Retention | Basis | How to refuse and what happens |
|---|---|---|---|---|---|---|---|
| Google LLC (AdMob) | United States | Over the network each time the App loads an ad | The advertising data in Section 7 | Advertising | Google’s policy | Needed to run the free version; personalized ads only with your consent or tracking permission | While you have a plan (Section 8), no advertising data is sent; decline tracking or consent to withhold the identifier |
| Google LLC (User Messaging Platform) | United States | At launch, where a consent form applies | Consent choices, region, device information | Consent management | Google’s policy | Processing entrusted to a processor to provide the service | Cannot be refused separately while ads are shown; a plan stops it |
| Google LLC (Google Play) | United States | When you buy or restore on Android | Purchase transaction, managed by Google | Payment | Google’s policy | Performance of the purchase contract | Do not purchase |
| Apple Inc. (iCloud) | United States | Automatically while you use the iOS App signed in to iCloud | Your people, occasions, and gift records | Sync between your own devices | Until you delete them | Storage you chose under your own Apple Account | Sign out of iCloud, or turn KnotNote off in iCloud settings; the App then works on-device only |
| Apple Inc. (App Store) | United States | When you buy or restore on iOS | Purchase transaction, managed by Apple | Payment | Apple’s policy | Performance of the purchase contract | Do not purchase |
| Apple Inc. (App Store version lookup) | United States | Over the network each time you open or return to the App on iOS | The App’s bundle identifier and, as with any connection, your IP address; no user data | Require an update when a newer version is available | Apple’s policy | Legitimate interest in keeping the App current | Cannot be turned off separately; using the App offline sends nothing |
For users in the European Economic Area and the United Kingdom, these transfers rely on the safeguards each provider publishes, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses; see the Apple Privacy Policy and the Google Privacy Policy.
11. Deleting Your Data
- Individual items: delete a person, occasion, or gift record in the App. Occasions and gift records are removed immediately. A deleted person is kept for 30 days and then permanently removed, together with that person’s occasions and gift records.
- Everything at once: Settings → “Delete all data” removes every entry and every calendar event the App created.
- Calendar events: deleting an occasion, or turning calendar integration off, removes the events the App created.
- Uninstalling the App deletes all local data on your device.
- iOS: entries synced to iCloud remain in your Apple Account and reappear if you reinstall under the same account. To delete them: Settings → your name → iCloud → Apps Using iCloud → KnotNote → “Turn Off and Delete from iCloud”.
- Android: any copy in Android’s system backup is governed by your Google Account backup settings.
- Advertising identifier: reset or delete it as described in Section 7.
- Emails you sent: deleted from the support mailbox 3 years after your inquiry is resolved. To have them deleted sooner, write to the contact in Section 17.
Apart from emails you have sent, the Company holds no copy of your data, so there is nothing further for the Company to delete.
12. Your Rights and How to Exercise Them
You have the right to access, correct, delete, and restrict the processing of your personal information, to receive a copy in a portable format, to object to processing, and to withdraw any consent you have given, with effect for the future. Where you act on behalf of a child, the child’s legal representative may exercise these rights.
Because your entries exist only on your device and in cloud storage under your own account, you exercise these rights directly: view and edit in the App, export CSV or Excel files with a plan (Section 6), delete as described in Section 11, and change permissions and advertising settings as described in Sections 4 and 7. For the information Google processes to serve ads, you can also exercise your rights with Google as described in the Google Privacy Policy. For emails you have sent to the Company, or anything else that requires the Company, write to the contact in Section 17; we answer within 10 days.
You have the right to lodge a complaint with a supervisory authority: in the European Economic Area and the United Kingdom, the data protection authority of your country; in the Republic of Korea, the bodies listed in Section 17.
The Company does not sell personal information. The App does not use browser cookies and does not respond to browser “Do Not Track” signals, because it does not track you across websites.
13. Analytics, Tracking, Notifications, and Update Check
The Company embeds no analytics or crash-reporting SDK in the App. The only third-party SDKs are the Google Mobile Ads SDK described in Section 7 and, on Android, Google’s Play In-App Updates library, used for the update check below. The advertising identifier is the only identifier used for tracking, subject to your choices. No usage statistics reach the Company. If you have enabled your operating system’s diagnostic sharing (iOS: Settings → Privacy & Security → Analytics & Improvements; Android: usage and diagnostics), Apple or Google may deliver anonymous, aggregated crash reports to the Company; they contain no personal information.
To keep you on the current version, the App checks for a newer version each time you open it or return to it. On iOS it asks Apple’s public App Store lookup service; the request contains only the App’s bundle identifier, and, as with any internet connection, Apple sees the IP address of the request. On Android it asks the Google Play Store app on your device through Google’s Play In-App Updates library, and the App makes no network request of its own for this. No people, occasions, gift records, settings, or device identifiers are sent, and the result is not stored. If a newer version exists that your device can install, the App shows a notice that cannot be dismissed, and the App cannot be used until you update; “Update” opens the App’s store page. A failed check, or using the App offline, never blocks the App.
The App does not send notifications and does not ask for notification permission. The reminder you may see before an occasion is the alarm on the calendar event the App created (Section 5), delivered by your calendar app. The update notice above appears only inside the App.
14. Security Measures
The Company collects the minimum information necessary and keeps none of your entries on infrastructure it operates, which removes the most common way user data is exposed. On your device, your entries are protected by the operating system’s storage protection and device encryption. In iCloud, they are protected by Apple’s encryption in transit and at rest. Advertising, payment, and update-check traffic is encrypted in transit and handled on infrastructure covered by Google’s and Apple’s security programs. The support mailbox is protected by Kakao’s account security, and only the Company has access to it.
15. Children
The App is not directed at children, and the Company does not knowingly collect personal information from children under 14, or under the age at which your country requires parental consent (for example 13 in the United States and up to 16 in the European Economic Area). Ad requests are not tagged for child-directed treatment. If you believe a child has used the App in a way that involved personal information, contact us (Section 17) and we will help remove it.
16. Changes to This Policy
When this Policy changes, the Company publishes the revised version at this address with a new “Last updated” date and the date it takes effect, and records the change below so the old and new versions can be compared. The Company holds no email address for you unless you have written to it, and therefore does not notify you individually.
- September 30, 2026: Section 16 no longer says that changes are published at least 7 days (or 30 days) before they take effect; changes are now recorded here.
- October 7, 2026: Sections 2 and 4 describe the optional contacts permission and how the App reads names when you add people from your contacts.
- October 7, 2026: added the update check (Apple’s App Store lookup on iOS, the Google Play update check on Android); Sections 1, 9, 10, 13 and 14 changed accordingly.
- October 8, 2026: the remove-ads item became plans, a monthly or yearly subscription or a lifetime plan (Section 8); CSV export now comes with a plan, and Excel export and Excel import were added (Section 6). Sections 2, 3, 7, 10 and 12 changed accordingly.
- October 9, 2026: support mail now goes to support@sinabroapps.com, a mailbox run by Kakao (Daum Mail) in the Republic of Korea; added the emails you send to the Company, their 3-year retention, and Kakao as a processor. Sections 1, 2, 9, 10, 11, 12, 14 and 16 changed accordingly.
17. Privacy Contact and Complaints
Questions about this Policy, requests to exercise your rights, and privacy complaints are handled by:
- Privacy protection and complaints: Sinabro Privacy Team
- Email: support@sinabroapps.com
If you are in the Republic of Korea and your issue is not resolved, you may also contact:
- Personal Information Infringement Report Center (KISA): 118 (no area code), privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, kopico.go.kr
- Supreme Prosecutors’ Office cybercrime: 1301, spo.go.kr
- National Police Agency cybercrime: 182, ecrm.police.go.kr
This Policy takes effect on October 9, 2026.