Privacy Policy — ScheduleWork
Effective date: 28 May 2026
This Privacy Policy describes how personal data is processed in the mobile application “ScheduleWork” (the “App”), developed by Jitae Kim (“we”, “us”). ScheduleWork is a tool for managing shift/work schedules and tasks. This policy is written to satisfy the requirements of the EU General Data Protection Regulation (GDPR) as a global baseline, with a dedicated section for California residents (CCPA/CPRA).
1. Data Controller
Jitae Kim Email: wlxo0401@gmail.com
(No Data Protection Officer is appointed; the controller may be contacted directly at the email above.)
2. Categories of Personal Data
The App does not require an account.
2-1. Data you enter into the App (stored on-device only)
- Work schedules, work/shift types
- Task items, daily memos, mood entries
- Workspace and display configuration you set up
This data is stored only in on-device SwiftData. It is never transmitted to any server we operate. iCloud (CloudKit) synchronization is not used, so the schedule and memo data you enter never leaves your device. Some of this data is shared into an on-device App Group container so the widget can display it; this likewise never leaves your device.
2-2. Data collected automatically
| Category | Examples | Collected by |
|---|---|---|
| Device identifiers | IDFV; IDFA (only when you consent via App Tracking Transparency) | Firebase Analytics, Google AdMob |
| Device & environment | OS version, device model, app version, locale | Firebase Analytics, Firebase Crashlytics |
| Approximate location | Country/region derived from IP address | Firebase Analytics |
| Usage data | In-app events, screens viewed, feature interactions | Firebase Analytics |
| Advertising data | Ad impressions, clicks, SKAdNetwork attribution | Google AdMob, Apple SKAdNetwork |
| Diagnostic / crash data | Crash logs, error stack traces, device state and performance metrics | Firebase Crashlytics |
2-3. Data transmitted when you send feedback
When you send feedback through the in-app feedback feature, the following is transmitted to and stored on Google Firestore (Google Cloud). Because there is no account or login, no name, email or other identifying information is included unless you type it yourself.
| Category | Examples |
|---|---|
| Feedback content | The free-text message you write |
| Device & app environment | Device model, iOS version, app version, submission time (server timestamp) |
3. Purposes and Legal Bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Providing core features (managing schedules, work types, tasks, memos) | Art. 6(1)(b) — performance of a contract |
| Displaying schedules via the widget (on-device data only) | Art. 6(1)(b) — performance of a contract |
| Analytics & service improvement (Firebase Analytics) | Art. 6(1)(f) — legitimate interest |
| Crash/diagnostic reporting (Firebase Crashlytics) | Art. 6(1)(f) — legitimate interest |
| Receiving and acting on your feedback (Google Firestore) | Art. 6(1)(f) — legitimate interest |
| Personalized advertising (AdMob, IDFA) | Art. 6(1)(a) — consent (via ATT and Google UMP) |
| Non-personalized advertising | Art. 6(1)(f) — legitimate interest |
| Consent management for advertising (Google UMP) | Art. 6(1)(c) — legal obligation |
| Legal compliance | Art. 6(1)(c) — legal obligation |
4. Recipients / Processors
We do not share the schedule and memo data you enter into the App with any third party. Only the automatically collected data and the feedback data above are processed by the following providers:
| Processor | Purpose | Country |
|---|---|---|
| Google LLC (Firebase Analytics) | Analytics | United States |
| Google LLC (Firebase Crashlytics) | Crash / diagnostic reporting | United States |
| Google LLC (Firebase Firestore) | Storing user feedback | United States |
| Google LLC (AdMob) | Advertising | United States |
| Google LLC (User Messaging Platform) | Advertising consent management (EU/EEA, UK and similar regions) | United States |
| Apple Inc. | App distribution, SKAdNetwork attribution | United States |
Provider privacy practices:
- Google / Firebase: https://policies.google.com/privacy · https://firebase.google.com/support/privacy
- Google Ads: https://policies.google.com/technologies/ads
- Apple: https://www.apple.com/legal/privacy/
5. International Transfers
Personal data may be transferred to the United States via our processors. Such transfers rely on the EU-US Data Privacy Framework where applicable, and/or Standard Contractual Clauses (SCCs).
6. Retention
| Item | Retention |
|---|---|
| Data you entered into the App | On-device only — retained until you delete it in the App or uninstall the App |
| Feedback content and attached environment info | Retained while still needed for service improvement; deleted on request (see §7) |
| Analytics data | up to 14 months |
| Advertising identifiers / data | per Google AdMob and Apple SKAdNetwork policies |
| Crash / diagnostic data | per Firebase Crashlytics policy (typically 90 days) |
7. Your Rights under GDPR (Arts. 15–22)
You have the right to:
- Access (Art. 15)
- Rectification (Art. 16) — you can directly edit or delete entries within the App
- Erasure (Art. 17) — deleting the App removes all on-device data; for feedback, tell us the submission time and content and we will delete it
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time (without affecting prior lawful processing) — for advertising consent, you can re-open the Google UMP dialog from within the App’s settings, or change tracking permission in iOS Settings
- Lodge a complaint with your local supervisory authority
Because feedback is submitted without any account or identifier, we cannot single out an individual submission unless you provide its content and submission time. To exercise any right, contact wlxo0401@gmail.com.
Scope of erasure. The schedule, task, memo and mood data you enter into the App is stored only on your device — we do not hold a copy. The right of erasure as applied to us therefore covers: (a) feedback content stored on Firestore, which we will delete on request (please provide the submission timestamp and content so we can locate it), and (b) analytics data, which expires automatically per the retention schedule in §6.
Supervisory authorities. If you reside in the United Kingdom, your supervisory authority is the Information Commissioner’s Office (ICO) — https://ico.org.uk/. If you reside in the EU or EEA, you may contact the data protection authority of your country of residence; the European Data Protection Board lists the national authorities at https://edpb.europa.eu/.
8. California Residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information is collected and how it is used
- Delete personal information collected from you
- Correct inaccurate personal information
- Opt out of “sharing” of personal information for cross-context behavioral advertising (under CPRA, advertising identifiers passed to AdMob may qualify as “sharing”)
- Limit the use of sensitive personal information (we do not collect sensitive PI as defined by CPRA)
- Non-discrimination for exercising your rights
We do not “sell” personal information for monetary consideration. To opt out of tracking-based advertising, decline the ATT prompt or disable tracking in iOS Settings.
To submit a CCPA/CPRA request, email wlxo0401@gmail.com.
Other US states. Residents of other US states with comparable consumer-privacy laws — including, without limitation, Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA) and Texas (TDPSA) — may have similar rights of access, deletion, correction and opt-out from targeted advertising. To exercise any such right, email wlxo0401@gmail.com.
9. Withdrawing Tracking / Advertising Consent
- iOS Settings → Privacy & Security → Tracking → ScheduleWork (toggle off)
- iOS Settings → Privacy & Security → Apple Advertising → reset advertising identifier
- Re-open the Google UMP consent dialog from within the App’s settings to change advertising consent
10. In-App Feedback
The App includes a feedback feature that lets you send a message to the developer. When you submit feedback, your message together with your device model, iOS version, app version and submission time is stored on Google Firestore, where the developer reads it to improve the service. The content of the feedback is determined entirely by you; please include identifying information (name, contact details) only if necessary.
11. Automated Decision-Making
The App does not perform automated decision-making or profiling that produces legal or similarly significant effects under Art. 22 GDPR.
12. Children
The App is not directed to children under 16, and we do not knowingly collect personal data from children under 16 (under 13 in jurisdictions where COPPA applies). If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in-app or at the published URL. All prior versions are retained in the same repository, organized by effective date.
14. Contact
Jitae Kim — wlxo0401@gmail.com